Endpoint configuration · GraphQL enum

ChainExpressionType enum

ChainExpressionType defines the specific operation or data type for an nftables expression. Each type corresponds to a different kind of packet processing logic or value.

Values

Enum Value Description

COUNTER

Packet/byte counter expression.

META

Metadata access expression (interface, mark, etc.).

MATCH

Xtables match expression (legacy iptables match).

PAYLOAD

Payload (packet header field) access expression.

CMP

Comparison expression (register vs constant).

BITWISE

Bitwise operation expression.

LOOKUP

Set lookup expression.

IMMEDIATE

Load a constant value into a register.

VERDICT

Verdict expression (accept, drop, continue, return).

CT

Connection tracking expression.

NAT

NAT (network address translation) expression.

EXTHDR

IPv6 extension header expression.

DYNSET

Dynamic set update expression.

LIMIT

Rate limiting expression.

NUMGEN

Number generator expression (round-robin / random).

QUEUE

Packet queueing to userspace expression.

REJECT

Packet rejection expression.

DUP

Packet duplication expression.

RANGE

Range matching expression.

OBJREF

Stateful object reference expression.

REDIR

Port redirect expression.

QUOTA

Traffic quota expression.

TARGET

Xtables target expression (legacy iptables target).

CONNLIMIT

Connection count limiting expression.

FLOWOFFLOAD

Hardware flow offload expression.

MASQ

Masquerade (dynamic SNAT) expression.

HASH

Hash expression (for load balancing).

SYNPROXY

SYN proxy expression.

CTEXPECT

Connection tracking expectation expression.

SECMARK

Security mark expression.

FIB

Forwarding information base (FIB) lookup expression.

BYTEORDER

Byte order conversion expression.

LOG

Packet logging expression.

RT

Routing information expression.

SOCKET

Socket information expression.

TRANSPARENTPROXY

Transparent proxy expression.

NOTRACK

Disable connection tracking for the packet.

CTTIMEOUT

Connection tracking timeout policy expression.

CTHELPER

Connection tracking helper expression.

Used by

  • Expression type: An nftables expression representing a single operation or condition within a chain rule.

Example

Example

"COUNTER"