AddressFamily sets the AddrFamily for the rule.

Any is a convenience function for adding any number of raw expr.Any types to the rule.

Build requires Verdict, AddrFamily, and TransportProto to build a minimal rule for nftables.

ConnectionTrackingState adds the state mask to the rule to match what the state the connection should be in to match.

DestinationAddress adds a single destination IP address to the rule to match on.

DestinationAddressSet adds an nftables named set of destination IP addresses to match on.

DestinationPort adds a single destination port to the rule to match on.

DestinationPortSet adds an nftables named set of destination ports to match on.

LoadConnectionTrackingState loads the key in which the connection tracking information should be loaded into the rule.

Create a new RuleData from an ID and list of nftables expressions.

Create a new location to manipulate nftables rules.

SourceAddress adds a single source IP address to the rule to match on.

SourceAddressSet adds an nftables named set of source IP addresses to match on.

SourcePort adds a single source port to the rule to match on.

SourcePortSet adds an nftables named set of source ports to match on.

TransportProtocol sets the TransportProto for the rule.

Represents a table/chain ruleset managed by the manager goroutine.

RuleData is a struct that is used to create rules in a given table and chain.

RuleTarget represents a location to manipulate nftables rules.

Defines a Match signature for supply matches to rules to it can modify the underlying builder and return any errors it encounter when attempting to build a rule.