TableFamily specifies the address family of the table Match or Target Info data is contained in. On purpose, we don't import the expr package here in

Unknown represents the bytes Info payload for unknown Info types where no dedicated match/target info type has (yet) been defined.

TableFamily specifies the address family for this table.

Comment gets marshalled and unmarshalled as a fixed-sized char array, filled with zeros as necessary, see: https://elixir.bootlin.com/linux/v6.8.7/sou

CmpOp specifies which type of comparison should be performed.

ChainHook specifies at which step in packet processing the Chain should be executed. See also https://wiki.nftables.org/wiki-nftables/index.php/Config

ChainPolicy defines what this chain default policy will be.

ChainPriority orders the chain relative to Netfilter internal operations. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chain

ChainType defines what this chain will be used for. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains#Base_chain_types

CtKey specifies which piece of conntrack information should be loaded. See also https://wiki.nftables.org/wiki-nftables/index.php/Matching_connection_

LimitTime represents the limit unit.

LimitType represents the type of the limit expression.

MetaKey specifies which piece of meta information should be loaded. See also https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainf

Rev. 0, see https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_addrtype.h#L38

See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_addrtype.h#L31

AlignedBuff implements marshalling and unmarshalling information in platform/architecture native endianess and data type alignment. It additionally co

Any is an interface implemented by any expression type.

ByteOrder is like binary.ByteOrder, but allocates memory and returns byte slices, for convenience.

A Chain contains Rules. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains

Cmp compares a register with the specified data.

A Conn represents a netlink connection of the nftables family. All methods return their input, so that variables can be defined from string literals

ConnOption is an option to change the behavior of the nftables Conn returned by Open.

Per https://git.netfilter.org/libnftnl/tree/src/expr/connlimit.c?id=84d12cfacf8ddd857a09435f3d982ab6250d250c

See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L38

See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L51

See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/xt_conntrack.h#L64

Ct defines type for NFT connection tracking

Dynset represent a rule dynamically adding or updating a set or a map based on an incoming packet.

Fib defines fib expression structure

Hash defines type for nftables internal hashing functions

InfoAny is a (un)marshaling implemented by any info type.

Limit represents a rate limit expression.

Log defines type for NFT logging See https://git.netfilter.org/libnftnl/tree/src/expr/log.c?id=09456c720e9c00eecc08e41ac6b7c291b3821ee5#n25

Lookup represents a match against the contents of a set.

Masq (Masquerade) is a special case of SNAT, where the source address is automagically set to the address of the output interface. See also https://wi

See https://git.netfilter.org/libnftnl/tree/src/expr/match.c?id=09456c720e9c00eecc08e41ac6b7c291b3821ee5#n30

Meta loads packet meta information for later comparisons. See also https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation

A Monitor is an event-based nftables monitor that will receive one event per new (or deleted) table, chain, rule, set, etc., depending on the monitor

A MonitorEvent represents a single change received via a [Monitor]. Depending on the Type, the Data field can be type-asserted to the specific data t

General form of address family dependent message, see https://git.netfilter.org/libnftnl/tree/include/linux/netfilter/nfnetlink.h#29

NamedObj represents nftables stateful object attributes Corresponds to netfilter nft_object_attributes as per https://git.netfilter.org/libnftnl/tree/

NatIPv4MultiRangeCompat despite being a slice of NAT IPv4 ranges is currently allowed to only hold exactly one element. See https://elixir.bootlin.co

See https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L25

see: https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L38

see: https://elixir.bootlin.com/linux/v5.17.7/source/include/uapi/linux/netfilter/nf_nat.h#L46

Numgen defines Numgen expression structure

Obj represents a netfilter stateful object. See also https://wiki.nftables.org/wiki-nftables/index.php/Stateful_objects

Quota defines a threshold against a number of bytes.

Range implements range expression

Recorder provides an nftables connection that does not send to the Linux kernel but instead records netlink messages into the recorder. The recorded r