Page MenuHomeVyOS Platform

Add ability to create raw nftables rule
Open, NormalPublicFEATURE REQUEST

Description

It could be useful to allow an nft rule to be created from raw nftables syntax.. This would allow for complex configurations for users while they await native implementation of nftables syntax.

Configuration could look something like:

set firewall ipv4 forward filter rule 10 action nft-rule
set firewall ipv4 forward filter rule 10 nft-rule "ct state vmap { established : accept, related : accept, invalid : drop }"

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

Unknown Object (User) triaged this task as Normal priority.Jun 24 2025, 9:55 AM