FastTrack

• FastTrack accelerates packet processing for

specific connection tracking entries (connections)
• FastTrack have full NAT support
• More than 5x performance improvement
compared to regular connection tracking and
NAT
 FastTrack Connection
• Firewall filter/mangle - “fasttrack-connection”
• Works with IPv4/TCP and IPv4/UDP connection
tracking entries since 6.29
• Works similar to “mark-connection” - adds a flag
in connection tracking and allows packets to be
FastTracked
• Fasttracked packets are not be visible in firewall
rule counters
• Not all packets from connection will be
fasttracked, some packets will use regular
conntrack.
FastTrack Connection Rule
FastTrack Statistics
FastPath Improvements
• FastPath support for bridge interfaces
• for bridge input and output traffic
• previously only bridge forward had support
• “Half-FastPath” support added
• if input interface supports fastpath, packets
will use fastpath until the moment they need
to go slow-path;