Enhancement request: Add luci ui to selectively disable flow offloading for specific interfaces

Feature Requests
1

Hi, i was experimenting with bandwidth limiting a guest vap with sqm-scripts with flow offloading enabled and obviously it didn't limit the guest zone. I looked into how flowtables work and i managed to modify the file in /usr/share/ucode/fw4.uc
to remove the 2 vaps belonging to the guest network zone from the flowtable ft.
I just added these lines:

devices = filter(devices, function(item) {
                        return item != "phy0-ap1" && item != "phy1-ap1";
                });

I just ran some speedtests and can confirm that in this way sqm on the guest zone does correct bandwidth limiting while the other zones get the benefit of flow offloading.
I was wondering if it would be possible to integrate this selectivity into luci, uci.
Edit: Since the usefulness of this is just to be able to use nft rate limiting rules or sqm on specific interfaces, i think it could be integrated into the ui of those packages rather than in the firewall settings menu.

2

Apply

and

Aka last 2 commits in fw4 master

software offload will end in LAN bridge

In short

wget -O /usr/share/ucode/fw4.uc https://github.com/openwrt/firewall4/raw/refs/heads/master/root/usr/share/ucode/fw4.uc
3

Alright, i applied the above and it works as intended. So, after all it should have always worked like this. I guess there's no need for my request then. Thank you.

1 Like
4

Code is not yet in openwrt main branch. Patience, and read release notes. You can add file name to /etc/sysupgrade.conf , so far 23.05.X all firewall4 files are completely interreplacable (all 3 changed of them to be accurate)

1 Like