<html>
<head>
<base href="https://bugzilla.netfilter.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - No hw offload for flowtables with intel x710"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1776">1776</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>No hw offload for flowtables with intel x710
</td>
</tr>
<tr>
<th>Product</th>
<td>nftables
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>other
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>kernel
</td>
</tr>
<tr>
<th>Assignee</th>
<td>pablo@netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>aljutor@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>Hi.
I would like to report an issue,
For some reason I am unable to use hw offload in flowtables with intel x710.
I have VyOS 1.5-rolling-202410010007 in a Proxmox VM, with Intel X710 SFP+
controller.
nftables v1.0.9 (Old Doc Yak #3)
kernel 6.6.52-vyos
Configuration:
Port 1 is in direct pass through to the VM it serves as WAN port
Port 2 is splitted in several VF, and one of them is passed to the VyOS, others
are used by the host system and other VM.
vyos@vyos:~$ lspci | grep -E -i --color 'network|ethernet'
01:00.0 Ethernet controller: Intel Corporation Ethernet Controller X710 for
10GbE SFP+ (rev 02)
02:00.0 Ethernet controller: Intel Corporation Ethernet Virtual Function 700
Series (rev 02)
ethtool reports that both nics supports hw offload
vyos@vyos:~$ ethtool -k eth0 | grep hw-tc-offload
hw-tc-offload: on
vyos@vyos:~$ ethtool -k eth1 | grep hw-tc-offload
hw-tc-offload: on
Also, eth1 contains vlan with pppoe session in it schema:
Interface Description
-------- ------------
eth0 LAN
eth1 XGSPON Module
eth1.20 PPPoE VLAN
pppoe0 PPPoE ISP
Software based offloading works fine, I can see offload in conntrack -L
Also flowtable in vyos_filter table looks like this (hw offload disabled):
flowtable VYOS_FLOWTABLE_forward-table {
hook ingress priority filter
devices = { eth0, eth1 }
counter
}
But I am unable to enable hardware offloading:
vyos@vyos# set firewall flowtable forward-table offload hardware
[edit]
vyos@vyos# commit
[ firewall ]
Fail to apply firewall Error found on: firewall ipv4 forward filter rule
5 Error message: Could not process rule: Operation not supported
Error found on: firewall ipv6 forward filter rule 5 Error
message: Could not process rule: No such file or directory
[[firewall]] failed
Commit failed
[edit]
vyos@vyos#
There is bug already opened at VyOS bug tracker with some additional info
<a href="https://vyos.dev/T6526">https://vyos.dev/T6526</a> but looks like it's a problem with nftables</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>