FastTrack

FastTrack accelerates packet processing for

specic connection tracking entries (connections)

FastTrack have full NAT support

More than 5x performance improvement

compared to regular connection tracking and

NAT

FastTrack Connection Firewall lter/mangle - fasttrack-connection Works with IPv4/TCP and IPv4/UDP connection

tracking entries since 6.29 Works similar to mark-connection - adds a ag

in connection tracking and allows packets to be

FastTracked Fasttracked packets are not be visible in rewall

rule counters Not all packets from connection will be

fasttracked, some packets will use regular

conntrack.

FastTrack Connection Rule

FastTrack Statistics

FastPath Improvements FastPath support for bridge interfaces

for bridge input and output trafc

previously only bridge forward had support

Half-FastPath support added

if input interface supports fastpath, packets will use fastpath until the moment they need to go slow-path;