Kmod-nft-offload Free

The CPU identifies a flow and sends it to the hardware switch/NIC . The hardware then takes over handling the packets entirely, freeing up the CPU for other tasks. Benefits of kmod-nft-offload

: Users have reported that adding the physical WAN interface instead of the virtual PPPoE interface to the flowtable can lead to speed drops (e.g., from 1Gb/s to 200Mb/s). Ensure your configuration targets the correct interface. Enabling the Feature

This configuration effectively excludes other traffic types (like ICMP) from the hardware offload process, which can be useful in specific network scenarios.

The CPU remains free for other tasks like handling VPN traffic, running network services (like Samba or Docker), or processing complex firewall rules for new connections.

Adding OpenWrt support for Xiaomi AX3600 (Part 1) - Page 325 kmod-nft-offload

The configuration of hardware offload is done through the nft command-line tool. The key is to add the offload flag when creating a flowtable. It's worth remembering that hardware offload was originally enabled with the flags offload; directive.

Reduces CPU load by 30% to 50% compared to standard routing. 2. Hardware Flow Offloading

kmod-nft-offload is not always installed by default, although it is available in modern OpenWrt builds (21.02 and later, which use firewall4 and nftables ). Installation on OpenWrt You can install it via the terminal using opkg : opkg update opkg install kmod-nft-offload Use code with caution.

Without kmod-nft-offload active, a classic multi-core ARM or legacy MIPS router may struggle to route data speeds exceeding 200–300 Mbps, completely maxing out the CPU to 100% utilization. The CPU identifies a flow and sends it

In the world of high-performance networking, the CPU is often the bottleneck. As multi-gigabit internet speeds become more common, even powerful consumer routers struggle to keep up with the sheer volume of packets. This is where kmod-nft-offload comes into play.

As networking demands continue to scale, the role of hardware acceleration becomes more vital. kmod-nft-offload provides a stable, enterprise-ready way to leverage the power of modern NICs, ensuring that your Linux infrastructure remains fast, responsive, and efficient under even the heaviest traffic loads. Kmod-nft-offload Apr 2026

flowtable f hook ingress priority 0; flags offload;

: If you experience lower speeds with it enabled, ensure your kernel version matches the package version, as mismatched packages are a common cause of instability in OpenWrt. If you're trying to optimize your router, let me know: What is your router model internet speed are you paying for? Are you using any VPNs or SQM/QoS [MT7530/MT7621] RX speed progressively gets worse with time Ensure your configuration targets the correct interface

kmod-nft-offload is an essential package for anyone looking to squeeze maximum performance out of an OpenWrt router. By shifting the heavy lifting of packet forwarding away from the main firewall logic, it transforms modest hardware into a high-throughput routing powerhouse. If you have a high-speed internet connection and do not rely on complex per-packet QoS queuing, keeping this module active is highly recommended. To help tailor further performance tips, tell me: What or CPU are you using? What is your total internet download speed ? Do you run any bandwidth-heavy services like SQM or a VPN? Share public link

References and further reading

kmod-nft-offload is an OpenWrt kernel module ( kmod ) that enables Netfilter ( nftables ) to offload routing and Network Address Translation (NAT) operations to the hardware.

First, let's decode the name:

In simple terms:

sudo modprobe kmod-nft-offload