配置示例
配置示例
nft add table inet fast
nft 'add flowtable inet fast f { hook ingress priority 0; devices = { eth0, eth1 }; }'
nft 'add chain inet fast fwd { type filter hook forward priority 0; policy accept; }'
nft 'add rule inet fast fwd ip protocol { tcp, udp } flow add @f'适合网关/转发角色; 仅在本文档列出的转发路径生效, 设备名与拓扑必须匹配。