<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Flowtable - Bug on devices deinition"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1700#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Flowtable - Bug on devices deinition"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1700">bug 1700</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to nicolasfort1988 from <a href="show_bug.cgi?id=1700#c5">comment #5</a>)
<span class="quote">> Yes, I do agree that config should be as you remarked: consistence
> information between 'devices' in flowtable declaration, and 'iifname' in
> rule-set
>
> What I'm trying to say is that in the end, for offloading, it seems it
> doesn't matter what interfaces I used in the flowtable definition. I could
> declare no 'devices' at al while defining the flowtable, and then in ruleset
> just use iffnames for flows I want to offload.</span >
No devices in the flowtable declaration mean that no flowtable lookups occur
from the ingress path, hence, fast path is exercised.
If you specify no devices in the flowtable declaration, you add entries to the
flowtable, but they are never used because no flowtable lookup ever happens.
<span class="quote">> If that's the case, then info in
> <a href="https://wiki.nftables.org/wiki-nftables/index.php/Flowtables">https://wiki.nftables.org/wiki-nftables/index.php/Flowtables</a> is not clear.
> Since only relevant interface configuration seems to be needed in the
> ruleset, and not in the flowtable definition.</span >
Both interface configurations are relevant.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>