From b0282c3013b6880e85d8c74ffff4b7189be8442e Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Tue, 28 Nov 2023 16:54:08 +0100
Subject: [PATCH] disable flow offload

---
 hosts/fw.cloonar.com/modules/firewall.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/fw.cloonar.com/modules/firewall.nix b/hosts/fw.cloonar.com/modules/firewall.nix
index e7bdce5..0e59e01 100644
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -38,7 +38,7 @@
             type filter hook forward priority filter; policy drop;
 
             # enable flow offloading for better throughput
-            ip protocol { tcp, udp } flow offload @f
+            # ip protocol { tcp, udp } flow offload @f
 
             # multimedia airplay
             iifname "multimedia" oifname { "lan" } counter accept