Kmod-nft-offload

CONFIG_NFT_FLOW_OFFLOAD=y CONFIG_NF_FLOW_TABLE=y CONFIG_NET_FLOW_LIMIT=y # Optional, mitigates DoS on flowtable

and the raw speed of your router's hardware. If you find your CPU hitting 100% during a speed test, this module is likely the missing piece of your performance puzzle. kmod-nft-offload

nft add rule ip filter forward offload ip protocol tcp counter accept kmod-nft-offload

: If supported by the router's SoC (System on Chip), it can hand off packet processing directly to the hardware network switch/acceleration engine. Technical Details kmod-nft-offload

: Uses kernel optimizations to speed up the packet flow for established connections.

have been built directly into the kernel, which can occasionally cause dependency conflicts for older third-party packages. PPPoE Performance