[$] Accelerating netfilter with hardware offload, part 2

As network interfaces get faster, the amount of CPU time available toprocess each packet becomes correspondingly smaller. The good news is thatmany tasks, including packet filtering, can be offloaded to the hardwareitself. The bad news is that the Linux kernel required quite a bit of work to beable to take advantage of that capability. The first article in this series provided anoverview of how hardware-based packet filtering can work and the supportfor this feature that already existedin the kernel. This series now concludes with a detailed look at howoffloaded packet filtering works in the netfilter subsystem and howadministrators can make use of it.