OpenWRT 的 IPv6 是不是不需要硬件加速呢

zbinlin

2023-09-03 23:00:08 +08:00

有没有可能是 bug ，没成功开启 ipv6 的 HW_OFFLOAD ？

wuruxu

2023-09-03 23:00:45 +08:00

```
root@hgy.OpenWrt:~# cat /proc/net/nf_conntrack|grep -nw HW_OFFLOAD
6:ipv4 2 tcp 6 src=192.168.163.129 dst=34.68.0.55 sport=41706 dport=443 packets=54 bytes=7655 src=34.68.0.55 dst=10.81.41.219 sport=443 dport=41706 packets=55 bytes=9198 [HW_OFFLOAD] mark=0 zone=0 use=3
13:ipv4 2 tcp 6 7398 ESTABLISHED src=192.168.163.129 dst=20.76.68.7 sport=47446 dport=443 packets=94 bytes=13378 src=20.76.68.7 dst=10.81.41.219 sport=443 dport=47446 packets=86 bytes=39442 [HW_OFFLOAD] mark=0 zone=0 use=4
14:ipv4 2 udp 17 src=192.168.163.129 dst=58.254.149.162 sport=45763 dport=443 packets=4 bytes=5112 src=58.254.149.162 dst=10.81.41.219 sport=443 dport=45763 packets=1 bytes=51 [HW_OFFLOAD] mark=0 zone=0 use=3
16:ipv4 2 tcp 6 src=192.168.163.209 dst=121.43.59.44 sport=56347 dport=28443 packets=7419 bytes=694736 src=121.43.59.44 dst=10.81.41.219 sport=28443 dport=56347 packets=3811 bytes=510746 [HW_OFFLOAD] mark=0 zone=0 use=3
23:ipv6 10 udp 17 src=2408:826a:0023:2bbd:facc:d94a:627c:2506 dst=2401:3800:4001:0808:0000:0000:0000:1002 sport=52260 dport=443 packets=6 bytes=2161 src=2401:3800:4001:0808:0000:0000:0000:1002 dst=2408:826a:0023:2bbd:facc:d94a:627c:2506 sport=443 dport=52260 packets=12 bytes=9735 [HW_OFFLOAD] mark=0 zone=0 use=3
26:ipv4 2 tcp 6 src=192.168.163.129 dst=203.208.39.194 sport=38302 dport=443 packets=20 bytes=3216 src=203.208.39.194 dst=10.81.41.219 sport=443 dport=38302 packets=24 bytes=3802 [HW_OFFLOAD] mark=0 zone=0 use=3
33:ipv6 10 tcp 6 src=2408:826a:0023:2bbd:facc:d94a:627c:2506 dst=2401:3800:4001:0808:0000:0000:0000:1002 sport=40416 dport=443 packets=15 bytes=5126 src=2401:3800:4001:0808:0000:0000:0000:1002 dst=2408:826a:0023:2bbd:facc:d94a:627c:2506 sport=443 dport=40416 packets=19 bytes=7830 [HW_OFFLOAD] mark=0 zone=0 use=3
36:ipv4 2 tcp 6 src=192.168.163.129 dst=58.254.149.162 sport=48948 dport=443 packets=13 bytes=2106 src=58.254.149.162 dst=10.81.41.219 sport=443 dport=48948 packets=15 bytes=7243 [HW_OFFLOAD] mark=0 zone=0 use=3
57:ipv4 2 tcp 6 src=192.168.163.139 dst=123.125.103.143 sport=47194 dport=443 packets=230 bytes=17977 src=123.125.103.143 dst=10.81.41.219 sport=443 dport=47194 packets=120 bytes=13098 [HW_OFFLOAD] mark=0 zone=0 use=3
60:ipv4 2 tcp 6 src=192.168.163.129 dst=35.190.23.19 sport=42542 dport=443 packets=33 bytes=4742 src=35.190.23.19 dst=10.81.41.219 sport=443 dport=42542 packets=33 bytes=8083 [HW_OFFLOAD] mark=0 zone=0 use=3
82:ipv4 2 tcp 6 src=192.168.163.110 dst=123.125.102.179 sport=54127 dport=80 packets=17644 bytes=1127156 src=123.125.102.179 dst=10.81.41.219 sport=80 dport=54127 packets=9120 bytes=813860 [HW_OFFLOAD] mark=0 zone=0 use=3
94:ipv4 2 tcp 6 src=192.168.163.129 dst=203.208.49.66 sport=40872 dport=443 packets=19 bytes=2998 src=203.208.49.66 dst=10.81.41.219 sport=443 dport=40872 packets=21 bytes=3525 [HW_OFFLOAD] mark=0 zone=0 use=3
95:ipv6 10 tcp 6 src=2408:826a:0023:2bbd:facc:d94a:627c:2506 dst=2401:3800:4001:0802:0000:0000:0000:1002 sport=49856 dport=443 packets=15 bytes=2347 src=2401:3800:4001:0802:0000:0000:0000:1002 dst=2408:826a:0023:2bbd:facc:d94a:627c:2506 sport=443 dport=49856 packets=22 bytes=15829 [HW_OFFLOAD] mark=0 zone=0 use=3
111:ipv6 10 tcp 6 src=2408:826a:0023:2bbd:facc:d94a:627c:2506 dst=2401:3800:4001:0808:0000:0000:0000:1002 sport=54354 dport=443 packets=12 bytes=2592 src=2401:3800:4001:0808:0000:0000:0000:1002 dst=2408:826a:0023:2bbd:facc:d94a:627c:2506 sport=443 dport=54354 packets=14 bytes=4414 [HW_OFFLOAD] mark=0 zone=0 use=3
```

我的 openwrt , ipv4/ipv6 都有 HW_OFFLOAD

hahasong

2023-09-04 00:24:12 +08:00

kmod-nft-offload 不一定是 HW offload 。在网络-防火墙里看一下硬件流量分载勾上没

nomagick

2023-09-04 00:34:52 +08:00

ipv6 是直接转发的，一般来讲没有 NAT6 ，没什么好 offload 的，只有你手动对 ipv6 进行 NAT 的时候才有意义

huangya

2023-09-04 10:13:17 +08:00

我知道的 qca 和 mtk 的 soc 芯片都支持 ipv6 routing hw offload 。op 说一下自己的芯片型号和 openwrt 版本。

zhng920823

2023-09-04 21:24:52 +08:00

多谢各位，破案了，仔细 grep 了下 /proc/net/nf_conntrack ，发现里面也有 ipv6 的 HW_OFFLOAD
一开始用 HW_OFFLOAD 作为关键词去 grep 的时候，因为 ipv4 的记录很多，一大片，偶尔只有几个 ipv6 的链接，就没发现。

@huangya #5 用 git clone 下来的最新版本的，硬件是 mt7621 的
@wuruxu
@zbinlin
@hahasong
@nomagick