FastTrack

FastTrack

accelerates packet processing for

specic connection tracking entries (connections)

FastTrack
More

have full NAT support

than 5x performance improvement

compared to regular connection tracking and

NAT

FastTrack Connection
Firewall

lter/mangle - fasttrack-connection
Works with IPv4/TCP and IPv4/UDP connection
tracking entries since 6.29
Works similar to mark-connection - adds a ag
in connection tracking and allows packets to be
FastTracked
Fasttracked packets are not be visible in rewall
rule counters
Not all packets from connection will be
fasttracked, some packets will use regular
conntrack.

FastTrack Connection Rule

FastTrack Statistics

FastPath Improvements
FastPath support for bridge interfaces
for bridge input and output trafc
previously only bridge forward had support
Half-FastPath support added
if input interface supports fastpath, packets

will use fastpath until the moment they need

to go slow-path;