On 7/29/2019 4:16 AM, Jakub Kicinski wrote: > . > The TC default block is there because the indirect registration may > happen _after_ the block is installed and populated. It's the device > driver that usually does the indirect registration, the tunnel device > and its rules may already be set when device driver is loaded or > reloaded. Yes, I know this scenario. > I don't know the nft code, but it seems unlikely it wouldn't have the > same problem/need.. nft don't have the same problem. The offload rule can only attached to offload base chain. Th offload base chain is created after the device driver loaded (the device exist). >