vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1486 from snovak7/patch-1

Browse Source 
Fix typos & firewall ip protocol in flowtables.rst
This commit is contained in:
Robert Göhler 2024-06-20 16:16:40 +02:00 committed by GitHub
commit ea35f9d664
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/configuration/firewall/flowtables.rst
View File

@ -1,4 +1,4 @@
:lastproofread: 2023-12-26 :lastproofread: 2024-06-20
.. _firewall-flowtables-configuration: .. _firewall-flowtables-configuration:
@ -85,12 +85,12 @@ Provide a description to the flow table.
Creating rules for using flow tables: Creating rules for using flow tables:
.. cfgcmd:: set firewall [ipv4 | ipv4] forward filter rule <1-999999> .. cfgcmd:: set firewall [ipv4 | ipv6] forward filter rule <1-999999>
action offload action offload
Create firewall rule in forward chain, and set action to ``offload``. Create firewall rule in forward chain, and set action to ``offload``.
.. cfgcmd:: set firewall [ipv4 | ipv4] forward filter rule <1-999999> .. cfgcmd:: set firewall [ipv4 | ipv6] forward filter rule <1-999999>
offload-target <flowtable> offload-target <flowtable>
Create firewall rule in forward chain, and define which flowtbale Create firewall rule in forward chain, and define which flowtbale
@ -142,7 +142,7 @@ Explanation
Analysis on what happens for desired connection: Analysis on what happens for desired connection:
1. First packet is received on eht0, with destination address 192.0.2.100, 1. First packet is received on eth0, with destination address 192.0.2.100,
protocol tcp and destination port 1122. Assume such destination address is protocol tcp and destination port 1122. Assume such destination address is
reachable through interface eth1. reachable through interface eth1.
@ -159,7 +159,7 @@ Analysis on what happens for desired connection:
connection state is **established**, then rule 10 is hit, and a new entry connection state is **established**, then rule 10 is hit, and a new entry
in the flowtable FT01 is added for this connection. in the flowtable FT01 is added for this connection.
6. All subsecuent packets will skip traditional path, and will be offloaded 6. All the following packets will skip traditional path, and will be offloaded
and will use the **Fast Path**. and will use the **Fast Path**.
Checks Checks