IPFire also skip many things at processing of approved connections. (It’s a statefull firewall.)
- OpenWRT, Mikrotik and others skip the connection entirely. It gets offloaded to hardware. CPU isn’t bothered at all. Obviously, it prevents much traffic processing from being applied (QoS, IPS).
In my case, the device is getting flooded with interrupts. Ksoftirqd processes overwhelm the CPU. Can someone share about reducing the IRQ load. I’ve tried Intel “interrupt moderation” with little luck.
Also irq and cpu-core pinning should done by IPFire since core160
- Maybe, yet it isn’t working for my hardware. Can you refer myself to the relevant documentation?