Kmod-nft-offload May 2026

Unlocking Network Performance: The Power of kmod-nft-offload

To use kmod-nft-offload , three things are required:

Primary Function:

It allows the kernel to bypass the expensive task of re-evaluating every packet in a high-speed data stream against the full set of firewall rules once a connection is established. kmod-nft-offload

opkg install kmod-nft-offload

• Only supports ** IPv4/IPv6 forwarding** paths (no local input offload yet)
• Does not offload log, queue, dup to, or stateful expressions like ct with limit
• Hardware table size limits apply

kmod-nft-offload is useless without supported hardware. You cannot offload to a standard Realtek or Intel PRO/1000. Only supports ** IPv4/IPv6 forwarding** paths (no local

9. Conclusion & Recommendations

How kmod-nft-offload Works: The Architecture

: Purely code-based optimization. Works on almost any hardware but still uses some CPU cycles. Hardware Offloading kmod-nft-offload is useless without supported hardware