Kmod-nft-offload May 2026

Turn on the hardware offload feature for your interface.

sudo ethtool -K eth0 hw-tc-offload on
sudo ethtool -K eth1 hw-tc-offload on

You cannot offload ct state established easily because the hardware would need to maintain stateful timers. For true offload, use stateless rules or ensure tc can offload the connection tracking (requires advanced hardware with full conntrack offload, like Mellanox ASAP²). kmod-nft-offload

References and further reading

Related search suggestions (If you want additional search terms I can generate for deeper research, tell me and I’ll provide them.) Turn on the hardware offload feature for your interface

nft add rule ip filter forward offload ip protocol tcp counter accept You cannot offload ct state established easily because