BPI R3 PPE not work

Banana Pi Router design BPI-R3/R3 Mini(MT7986)
1

hello, i have a BPI-R3 borad. When i use img(open wrt 21.02) from this forum。the routing is deal with HW.but the NAT/PAT is not work .i want chage the PORT/src IP through UI.but it can not work. and the hnat info like bellow. image

then i move to open wrt 23.05.5 and 25.12.3 come from openWRT offical website. the same operation as before. the routing is not deal with PPE but CPU,and NAT/PAT not work too! the PPE info like bellow

root@OpenWrt:~# cat /sys/kernel/debug/ppe0/entries | grep “112” 01bd8 UNB IPv4 5T orig=192.168.1.20:32330->192.169.12.112:2321 new=0.0.0.0:0->0.0.0.0:0 eth=00:00:00:00:00:00->00:00:00:00:00:00 etype=0000 vlan=0,0 ib1=1001e11d ib2=00000000 packets=0 bytes=0 all the entry is UNB. so how can i make the fastpath work with routing,NAT/PAT and so on?

2

Use “conntrack -L” to check if flows offloaded to HW aka PPE.

3

Now ，i am in open wrt 25.12.3; there is no conntrack command. and i use another command get the bellow result :cat /proc/net/nf_conntrack | grep ‘112’ ipv4 2 udp 17 src=192.168.1.20 dst=192.169.12.112 sport=5555 dport=6666 packets=31362507 bytes=8844226974 [UNREPLIED] src=192.169.12.112 dst=192.169.12.12 sport=6666 dport=5555 packets=0 bytes=0 [OFFLOAD] mark=0 zone=0 use=36 cat /sys/kernel/debug/ppe0/entries | grep “112” 03c54 UNB IPv4 5T orig=192.168.1.20:5555->192.169.12.112:6666 new=255.2.0.0:0->0.0.0.0:0 eth=00:00:00:00:00:00->00:00:00:00:00:00 etype=0000 vlan=0,0 ib1=5001e173 ib2=24a901db packets=0 bytes=0

4

Do you have HW offload enabled ?

/etc/config/firewall: option flow_offloading_hw ‘1’

5

YES，I think it is enabled!

root@OpenWrt:~# cat /etc/config/firewall

config defaults option input ‘ACCEPT’ option output ‘ACCEPT’ option forward ‘ACCEPT’ option synflood_protect ‘1’ option flow_offloading ‘1’ option flow_offloading_hw ‘1’

config zone option name ‘lan’ option input ‘ACCEPT’ option output ‘ACCEPT’ option forward ‘ACCEPT’ list network ‘lan’

config zone option name ‘wan’ option input ‘ACCEPT’ option output ‘ACCEPT’ option forward ‘ACCEPT’ option mtu_fix ‘1’ list network ‘wan’ list network ‘wan6’

config forwarding option src ‘lan’ option dest ‘wan’

config forwarding option src ‘wan’ option dest ‘lan’

config rule option src ‘’ option dest '’ list proto ‘all’ option target ‘ACCEPT’

6

this indicates 192.169.12.112 was not responding.

this one is offloaded but not yet to HW. Perhaps you should test your flow (whatever it’s) over NAT works without any offload enabled in firewall first.

That’s all on top of my head. Cheers

7

yes,I use a test meter to generate the traffic,so the flow is only one direction.When i disable the OFFLOAD function. The masquerading works good.

8

you perhaps should also try with tcp flow test for hw offload.

PPE works very well on my R4. I can’t vouch for R3 since I don’t own it but I think it’s been working well for as long as R4.