Netfilter Hardware Offloads

Explore hardware offloading techniques for Netfilter in this 34-minute conference talk from the Linux Plumbers Conference. Dive into the flow rule and flow block API, which allows ethtool_rx, netfilter, and tc to share the same infrastructure for hardware offloads. Learn about the flow rule API's components, including matches, actions, helpers, and summary. Examine the flow block API and its applications. Discover how Netfilter utilizes the flow offload API and handles payload mangling. Investigate the connection tracking (ct) flowtable bypass, including its hardware offload capabilities. Gain insights from speaker Mr. Pablo Neira on optimizing network performance through efficient hardware offloading techniques.

Intro
Flow rule API: match
actions
helpers
summary
Flow block API (2)
Netfilter through flow offload API
Netfilter offload: Payload mangling
Ct flowtable bypass (3)
Ct flowtable bypass (4): HW offload