I decided to dig into this a little more and try to trace this out:
sudo nft add chain inet vrf_zones trace_chain { type filter hook prerouting priority -301\; }
sudo nft add rule inet vrf_zones trace_chain meta nftrace set 1I decided to dig into this a little more and try to trace this out:
sudo nft add chain inet vrf_zones trace_chain { type filter hook prerouting priority -301\; }
sudo nft add rule inet vrf_zones trace_chain meta nftrace set 1side note, if you flush ruleset, and only add:
Something I just figured out is that the minute I do:
yeah I had this problem too, also @Viacheslav I think you are right:
much appreciated, thank you!
table inet vrf_zones {
map ct_iface_map {
typeof iifname : ct zone
elements = { "HE" : 132,
"WAN" : 128,
"eth0" : 128,
"tun0" : 132,
"eth1" : 256,
"eth2" : 384,
"veth0" : 132,
"veth1" : 256,
"VMNET" : 256,
"FASTNETMON" : 384 }
}