U mnie jest tak:
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option flow_offloading '1'
option fullcone '1'
option fullcone6 '0'
option synflood_protect '1'
option flow_offloading_hw '1' działa tylko na mediateku, nss offload realizuje inaczej. jakie masz moduły załadowane?
lsmod | grep nss
# lsmod | grep nss
bonding 126976 5 ecm,qca_nss_pppoe,qca_nss_lag_mgr,qca_nss_bridge_mgr,qca_nss_vlan
ip6_tunnel 32768 2 qca_nss_tunipip6,ip6_gre
nat46 40960 2 ecm,qca_nss_map_t
nss_ifb 16384 0
ppp_generic 40960 9 ecm,ppp_async,l2tp_ppp,qca_nss_pptp,pptp,qca_nss_pppoe,pppoe,pppox,qca_nss_l2tpv2
pppoe 24576 2 ecm,qca_nss_pppoe
pptp 28672 2 ecm,qca_nss_pptp
qca_nss_bridge_mgr 20480 0
qca_nss_cfi_cryptoapi 53248 0
qca_nss_crypto 40960 1 qca_nss_cfi_cryptoapi
qca_nss_dp 45056 1 qca_nss_drv
qca_nss_drv 1060864 15 nss_ifb,ecm,qca_nss_tunipip6,qca_nss_tun6rd,qca_nss_crypto,qca_nss_qdisc,qca_nss_vxlanmgr,qca_nss_pptp,qca_nss_pppoe,qca_nss_map_t,qca_nss_lag_mgr,qca_nss_l2tpv2,qca_nss_gre,qca_nss_bridge_mgr,qca_nss_vlan
qca_nss_gre 24576 0
qca_nss_l2tpv2 20480 0
qca_nss_lag_mgr 16384 0
qca_nss_map_t 16384 0
qca_nss_pppoe 16384 0
qca_nss_pptp 16384 0
qca_nss_qdisc 94208 5
qca_nss_tun6rd 16384 0
qca_nss_tunipip6 20480 0
qca_nss_vlan 28672 1 qca_nss_bridge_mgr
qca_nss_vxlanmgr 28672 0
qca_ssdk 1425408 5 qca_nss_qdisc,qca_nss_bridge_mgr,qca_nss_vlan,qca_nss_drv,qca_nss_dp
sit 28672 1 qca_nss_tun6rd
vxlan 73728 2 ecm,qca_nss_vxlanmgr
lsmod | grep nft
nf_conntrack 90112 28 ecm,nft_redir,nft_nat,nft_masq,nft_fullcone,nft_flow_offload,nft_ct,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_nat,nf_flow_table,nf_conntrack_tftp,nf_conntrack_snmp,nf_conntrack_sip,nf_conntrack_pptp,nf_conntrack_netlink,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,nf_conntrack_broadcast,nf_conntrack_bridge,nf_conntrack_amanda
nf_dup_netdev 16384 2 nft_fwd_netdev,nft_dup_netdev
nf_flow_table 32768 2 nf_flow_table_inet,nft_flow_offload
nf_nat 36864 12 nft_redir,nft_nat,nft_masq,nft_fullcone,nft_chain_nat,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda
nf_reject_ipv4 16384 3 nft_reject_ipv4,nft_reject_inet,nft_reject_bridge
nf_reject_ipv6 16384 3 nft_reject_ipv6,nft_reject_inet,nft_reject_bridge
nf_tables 176128431 nft_fib_inet,nf_flow_table_inet,nft_reject_ipv6,nft_reject_ipv4,nft_reject_inet,nft_reject_bridge,nft_reject,nft_redir,nft_quota,nft_objref,nft_numgen,nft_nat,nft_meta_bridge,nft_masq,nft_log,nft_limit,nft_hash,nft_fwd_netdev,nft_fullcone,nft_flow_offload,nft_fib_ipv6,nft_fib_ipv4,nft_fib,nft_dup_netdev,nft_ct,nft_chain_nat
nft_chain_nat 16384 2
nft_ct 20480 17
nft_dup_netdev 16384 0
nft_fib 16384 3 nft_fib_inet,nft_fib_ipv6,nft_fib_ipv4
nft_fib_inet 16384 0
nft_fib_ipv4 16384 1 nft_fib_inet
nft_fib_ipv6 16384 1 nft_fib_inet
nft_flow_offload 16384 1
nft_fullcone 57344 2
nft_fwd_netdev 16384 0
nft_hash 16384 0
nft_limit 16384 5
nft_log 16384 0
nft_masq 16384 0
nft_meta_bridge 16384 0
nft_nat 16384 0
nft_numgen 16384 0
nft_objref 16384 0
nft_quota 16384 0
nft_redir 16384 2
nft_reject 16384 4 nft_reject_ipv6,nft_reject_ipv4,nft_reject_inet,nft_reject_bridge
nft_reject_bridge 16384 0
nft_reject_inet 16384 2
nft_reject_ipv4 16384 0
nft_reject_ipv6 16384 0
cat /etc/config/nss
config nss_firmware 'qca_nss_0'
config nss_firmware 'qca_nss_1'
config general
option enable_rps '1'
# cat /etc/config/ecm
config ecm 'global'
option acceleration_engine 'auto'
config general
option enable_bridge_filtering '1'
option disable_offloads '0'
option disable_flow_control '0'
option disable_interrupt_moderation '0'
(swoją drogą co za marnotrastwo...)
