From e54b37d835624059d005bdb771442bb3f1dd4605 Mon Sep 17 00:00:00 2001
From: Matthias Schiffer <mschiffer@universe-factory.net>
Date: Wed, 24 Jan 2018 20:14:26 +0100
Subject: [PATCH] gluon-core: firewall: move VXLAN rules to the top
Evaluating these rules before all the ICMPv6 rules improves wired mesh
throughput measurably.
---
package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
index 5345c1a74..ae374e331 100755
--- a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
+++ b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
@@ -95,6 +95,7 @@ for _, zone in ipairs({'wired_mesh', 'wan'}) do
dest_port = '4789',
target = 'ACCEPT',
})
+ uci:reorder('firewall', zone .. '_vxlan', 0)
end
--
GitLab