FlushRuleset flushes the entire ruleset. See also https://wiki.nftables.org/wiki-nftables/index.php/Operations_at_ruleset_level

Flush sends all buffered commands in a single batch to nftables.

AddTable adds the specified Table, just like `nft add table ...`. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_tables

nfdump returns a hexdump of 4 bytes per line (like nft --debug=all), allowing users to make sense of large byte literals more easily.

AddChain adds the specified Chain. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains#Adding_base_chains

OpenSystemConn returns a netlink connection that tests against the running kernel in a separate network namespace. nftest.CleanupSystemConn() must be

New returns a netlink connection for querying and modifying nftables. Some aspects of the new netlink connection can be configured using the options W

WithTestDial sets the specified nltest.Func when creating a new netlink connection.

linediff returns a side-by-side diff of two nfdump() return values, flagging lines which are not equal with an exclamation point prefix.

GetRules returns the rules in the specified table and chain.

AddObj adds the specified Obj. See also https://wiki.nftables.org/wiki-nftables/index.php/Stateful_objects

AddSet adds the specified Set.

String unmarshals a null terminated string

Uint8 unmarshals an uint8 in native endianess and alignment. It returns ErrEOF when trying to read beyond the payload.

ChainPriorityRef returns a pointer to a ChainPriority value.

NewWithData returns a new AlignedBuff for unmarshalling the passed data in native endianess.

New returns a new AlignedBuff for marshalling aligned data in native endianess.

PutUint8 marshals an uint8 in native endianess and alignment.

Data returns the properly padded info payload data written before by calling the various Uint8, Uint16, ... marshalling functions.

GetObject gets the specified Object This function returns the same concrete type as passed, e.g. QuotaObj, CounterObj or NamedObj. Prefer using the mo

netlinkConn returns a netlink connection together with a netlinkCloser that later must be called by the caller when it doesn't need the returned netli

GetObj is a legacy method that return all Obj that belongs to the same table as the given one This function returns the same concrete type as passed,

SetAddElements applies data points to an nftables set.

ChainHookRef returns a pointer to a ChainHookRef value.

GetSetElements returns the elements in the specified set.

GetSets returns the sets in the specified table.

alignWrite aligns the (write) position if necessary and suitable according to the specified alignment mask. It doubles as final payload padding helpma

alignCheckedRead aligns the (read) position if necessary and suitable according to the specified alignment mask. alignCheckedRead returns an error if

PutUint16BE marshals an uint16 in "network" (=big endian) endianess and native uint16 alignment.

Uint16BE unmarshals an uint16 in "network" (=big endian) endianess and native uint16 alignment. It returns ErrEOF when trying to read beyond the paylo

AddRule adds the specified Rule

ConcatSetType constructs a new SetDatatype which consists of a concatenation of the passed types. It returns ErrTooManyTypes, if nftMagic would overfl

GetObjects get all the Obj that belongs to the given table This function will always return legacy QuotaObj/CounterObj types for backwards compatibili

PutBytesAligned32 marshals the given bytes starting with the native alignment for uint32 data types. It additionaly adds padding to reach the specifie

PutUint marshals an uint in native endianess and alignment for the C "unsigned int" type. Please note that on 64bit platforms, the size and alignment

ResetObject reset the given Obj This function returns the same concrete type as passed, e.g. QuotaObj, CounterObj or NamedObj. Prefer using the more g

Uint unmarshals an uint in native endianess and alignment for the C "unsigned int" type. It returns ErrEOF when trying to read beyond the payload. Ple

WithNetNSFd sets the network namespace to create a new netlink connection to: the fd must reference a network namespace.

AsLasting creates the new netlink connection as a lasting connection that is reused across multiple netlink operations, instead of opening and closing

BytesAligned32 unmarshals the given amount of bytes starting with the native alignment for uint32 data types. It returns ErrEOF when trying to read be

DeleteObject deletes the specified Obj

GetNamedObjects get all the Obj that belongs to the given table This function always return NamedObj types

ListTable returns table found for the specified name. Searches for the table under IPv4 family. As per nft man page: "When no address family is specif

ListTableOfFamily returns table found for the specified name and table family

ListTables returns currently configured tables in the kernel

Marshal serializes the specified expression into a byte slice.

Unmarshal fills an expression from the specified byte slice.

CloseLasting closes the lasting netlink connection that has been opened using AsLasting option when creating this connection. If either no lasting net

ConcatSetTypeElements uses the ConcatSetType name to calculate and return a list of base types which were used to construct the concatenated type

GetNFTMagic returns a custom datatype based on user's parameters

GetObjReset is a legacy method that reset all Obj that belongs the same table as the given one This function returns the same concrete type as passed,