fast path changes the packet flow so it doesn't get processed by all firewall rules.
just explaining the use case for OPs question.
Reply on news.ycombinator.com