FastTrack • FastTrack accelerates packet processing for specific connection tracking entries (connections) • FastTrack • More have full NAT support than 5x performance improvement compared to regular connection tracking and NAT FastTrack Connection • Firewall filter/mangle - “fasttrack-connection” • Works with IPv4/TCP and IPv4/UDP connection tracking entries since 6.29 • Works similar to “mark-connection” - adds a flag in connection tracking and allows packets to be FastTracked • Fasttracked packets are not be visible in firewall rule counters • Not all packets from connection will be fasttracked, some packets will use regular conntrack. FastTrack Connection Rule FastTrack Statistics FastPath Improvements • FastPath support for bridge interfaces • for bridge input and output traffic • previously only bridge forward had support • “Half-FastPath” support added • if input interface supports fastpath, packets will use fastpath until the moment they need to go slow-path;