git.99rst.org / openwrt-packages.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9093379)
BCP38: don't slow down established connections (#2838)
authorTörök Edwin <redacted>
Sun, 12 Jun 2016 13:09:05 +0000 (16:09 +0300)
committerToke Høiland-Jørgensen <redacted>
Sun, 12 Jun 2016 13:09:05 +0000 (15:09 +0200)
commit0b2b462ae0ff78b25704eb06f5a36f5105082e0f
treee6c2482fbc827d20466f9c4a14f73b669c1dc3c8tree | snapshot
parent9093379603f97d08fbf55434d4468e1f947c5651commit | diff
BCP38: don't slow down established connections (#2838)

Enabling BCP38 causes an iptables rule to be inserted before this rule:
ACCEPT     all  --  anywhere             anywhere             ID:66773300 ctstate RELATED,ESTABLISHED

This makes all forwarded packets go through the BCP38 ipset match, which slows
down download speed from 440 Mbit/s to 340 Mbit/s.

Only apply BCP38 match rules if state is NEW.

Bump package version.

Signed-off-by: Török Edwin <redacted>
net/bcp38/Makefile diff | blob | history
net/bcp38/files/run.sh diff | blob | history
git clone https://git.99rst.org/PROJECT