Endpoint configuration · GraphQL enum

CTKey enum

Connection tracking key for nftables ct expressions. Specifies which connection tracking metadata field to match or set in a rule. Reference: nftables — Conntrack metadata

Values

Enum Value Description

STATE

 Connection tracking state (new, established, related, invalid).

DIRECTION

 Direction of the packet within the connection (original/reply).

STATUS

 Connection tracking status flags (e.g. SNAT, DNAT, confirmed).

MARK

 Connection tracking mark.

SECMARK

 SELinux security mark.

EXPIRATION

 Remaining timeout before connection expires.

HELPER

 Name of the connection tracking helper (e.g. ftp, sip).

L3PROTOCOL

 Layer 3 protocol (IPv4/IPv6).

SRC

 Source address.

DST

 Destination address.

PROTOCOL

 Layer 4 protocol (TCP/UDP/etc.).

PROTOSRC

 Source port.

PROTODST

 Destination port.

LABELS

 Connection tracking label bitmask.

PKTS

 Total packet count for the connection.

BYTES

 Total byte count for the connection.

AVGPKT

 Average packet size.

ZONE

 Connection tracking zone.

EVENTMASK

 Event mask for conntrack events.

SRCIP

 Source IPv4 address.

DSTIP

 Destination IPv4 address.

SRCIP6

 Source IPv6 address.

DSTIP6

 Destination IPv6 address.

ID

 Unique connection ID.

Used by

  • CtExpression type: Inspect or modify connection tracking (conntrack) state, such as connection state, marks, labels, addresses, or counters.

Example

Example

"STATE"