From 321a553c8fc312e6e6280fa6069c1eda6080fd48 Mon Sep 17 00:00:00 2001
From: bol-van <none@none.none>
Date: Tue, 1 Nov 2022 10:39:09 +0300
Subject: [PATCH] fix hardware offload if not all bridge members support it

---
 common/nft.sh | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/common/nft.sh b/common/nft.sh
index 152b3b6..9cde7b5 100644
--- a/common/nft.sh
+++ b/common/nft.sh
@@ -231,6 +231,17 @@ nft_hw_offload_supported()
 	return $res
 }
 
+nft_hw_offload_find_supported()
+{
+	# $1,$2,... - interface names
+	local supported_list
+	while [ -n "$1" ]; do
+		nft_hw_offload_supported "$1" && append_separator_list supported_list ' ' '' "$1"
+		shift
+	done
+	echo $supported_list
+}
+
 nft_apply_flow_offloading()
 {
 	# ft can be absent
@@ -330,8 +341,11 @@ flush set inet $ZAPRET_NFT_TABLE lanif"
 					nft_create_or_update_flowtable 'offload' $i
 				else
 					# bridge members must be added instead of the bridge itself
+					# some members may not support hw offload. example : lan1 lan2 lan3 support, wlan0 wlan1 - not
 					devs=$(resolve_lower_devices $i)
-					[ -n "$devs" ] && nft_hw_offload_supported $devs && {
+					[ -n "$devs" ] && {
+						# select devices that support offload
+						devs=$(nft_hw_offload_find_supported $devs)
 						for j in $devs; do
 							nft_create_or_update_flowtable 'offload' $j
 						done