Felix Fietkau <nbd@xxxxxxxx> writes: > Depending on the source, a hardware calculated hash may not provide the > same level of collision resistance. This seems like it would have performance implications? Also, this can potentially discard information from tunnels that preserve the hash before encapsulation (we added support for this to Wireguard which had some nice effects on queueing of encapsulated traffic). Could you elaborate a bit on the kind of bad hardware hashes you were seeing? -Toke