summaryrefslogtreecommitdiffstats
path: root/doc/nft.xml
diff options
context:
space:
mode:
Diffstat (limited to 'doc/nft.xml')
-rw-r--r--doc/nft.xml84
1 files changed, 84 insertions, 0 deletions
diff --git a/doc/nft.xml b/doc/nft.xml
index 3b215f8c..e6b98ae7 100644
--- a/doc/nft.xml
+++ b/doc/nft.xml
@@ -1222,6 +1222,90 @@ filter output oif eth0
</example>
</para>
</refsect2>
+
+ <refsect2>
+ <title>Routing expressions</title>
+ <para>
+ <cmdsynopsis>
+ <command>rt</command>
+ <group choice="req">
+ <arg>classid</arg>
+ <arg>nexthop</arg>
+ </group>
+ </cmdsynopsis>
+ </para>
+ <para>
+ A routing expression refers to routing data associated with a packet.
+ </para>
+ <para>
+ <table frame="all">
+ <title>Routing expression types</title>
+ <tgroup cols='4' align='left' colsep='1' rowsep='1'>
+ <colspec colname='c1'/>
+ <colspec colname='c2'/>
+ <colspec colname='c3'/>
+ <thead>
+ <row>
+ <entry>Keyword</entry>
+ <entry>Description</entry>
+ <entry>Type</entry>
+ </row>
+ </thead>
+ <tbody>
+ <row>
+ <entry>classid</entry>
+ <entry>Routing realm</entry>
+ <entry>realm</entry>
+ </row>
+ <row>
+ <entry>nexthop</entry>
+ <entry>Routing nexthop</entry>
+ <entry>ipv4_addr/ipv6_addr</entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </table>
+ </para>
+ <para>
+ <table frame="all">
+ <title>Routing expression specific types</title>
+ <tgroup cols='2' align='left' colsep='1' rowsep='1'>
+ <colspec colname='c1'/>
+ <colspec colname='c2'/>
+ <thead>
+ <row>
+ <entry>Type</entry>
+ <entry>Description</entry>
+ </row>
+ </thead>
+ <tbody>
+ <row>
+ <entry>realm</entry>
+ <entry>
+ Routing Realm (32 bit number). Can be specified numerically
+ or as symbolic name defined in /etc/iproute2/rt_realms.
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </table>
+ </para>
+ <para>
+ <example>
+ <title>Using routing expressions</title>
+ <programlisting>
+# IP family independent rt expression
+filter output rt classid 10
+
+# IP family dependent rt expressions
+ip filter output rt nexthop 192.168.0.1
+ip6 filter output rt nexthop fd00::1
+inet filter ether type ip output rt nexthop 192.168.0.1
+inet filter ether type ip6 output rt nexthop fd00::1
+ </programlisting>
+ </example>
+ </para>
+ </refsect2>
</refsect1>
<refsect1>