I see that there are parameters to addmodule/removemodule, but they're ignored. Why ? --addmodule=<module> Ignored option, was used to enable an iptables module --removemodule=<module> Ignored option, was used to disable an iptables module Will firewalld continue to finish the function ? Or is there any problem to finish it ? I ask because I find that more iptable modules, .ko files, insmoded in kernel, worse TCP/UDP traffic throughput can be achieved. Removing iptable module is one solution.