gluon-core: firewall: move VXLAN rules to the top
Evaluating these rules before all the ICMPv6 rules improves wired mesh throughput measurably.
This commit is contained in:
parent
a9edd43693
commit
e54b37d835
@ -95,6 +95,7 @@ for _, zone in ipairs({'wired_mesh', 'wan'}) do
|
||||
dest_port = '4789',
|
||||
target = 'ACCEPT',
|
||||
})
|
||||
uci:reorder('firewall', zone .. '_vxlan', 0)
|
||||
end
|
||||
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user