abrown38andClaude Opus 5.5 ebec2cfcca Import nftables maps: one port forward or rule per element ...

A DNAT map (named or anonymous) becomes one port forward per element,
named after the map; a verdict map becomes one rule per element, in
place, with jumps inlined. A lookup matches one element at most, so the
expanded rules do the same. A named map that can't be expanded (keyed by
several fields) is left out with a note instead of a raw rule naming it,
which nftables would refuse. Test fixture made with nft 1.1.3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-19 10:24:28 +01:00

..

testdata

Import nftables maps: one port forward or rule per element

2026-10-19 10:24:28 +01:00

importer_test.go

Import nftables maps: one port forward or rule per element

2026-10-19 10:24:28 +01:00

importer.go

Import nftables maps: one port forward or rule per element

2026-10-19 10:24:28 +01:00