: In storage-constrained devices, adding this and related offloading modules can lead to "storage full" errors during sysupgrades. Verdict Pros Cons Can more than double throughput on compatible hardware. Performance is highly hardware-dependent. Essential for modern nftables (fw4) offloading. Known issues on some older or specific chipsets. Reduces CPU overhead for high-speed traffic. Adds complexity and storage footprint to the image.
The legacy framework that processed packets through sequential rules, which strained the CPU at high speeds. kmod-nft-offload