Kmod-nft-offload ^hot^ Jun 2026

Demystifying kmod-nft-offload: Maximizing Network Throughput in OpenWrt

Trade-offs / limitations:

: Leverages specific chips (like those from MediaTek or Marvell) to handle packets entirely in the network switch hardware, resulting in nearly 0% CPU usage. 🔍 Troubleshooting Common Issues Compatibility

kmod-nft-offload is not always installed by default, although it is available in modern OpenWrt builds (21.02 and later, which use firewall4 and nftables ). Installation on OpenWrt You can install it via the terminal using opkg : opkg update opkg install kmod-nft-offload Use code with caution. kmod-nft-offload

Routers that might top out at 400-500 Mbps in software-only mode can often reach full Gigabit speeds (1000 Mbps) with hardware offloading enabled. Reduced CPU Load:

Imagine your Linux firewall processing — not by burning CPU cores, but by handing them off to hardware as if by magic. That’s exactly what kmod-nft-offload enables.

If you’ve ever used nftables , you know it’s powerful and flexible. But software filtering still consumes CPU. What if your network card could do the heavy lifting? Enter — and the kernel module that makes it work. Routers that might top out at 400-500 Mbps

References and further reading

kmod-nft-offload translates this flow table entry into instructions that the underlying hardware switch chip or NIC network processor understands.

In simple terms:

This module enables hardware or software flow offloading within the

Are you trying to hit gigabit speeds on a specific router model?