# icmpv6 type nd-router-advert [ { "match": { "left": { "payload": { "field": "type", "protocol": "icmpv6" } }, "op": "==", "right": "nd-router-advert" } } ] # meta l4proto ipv6-icmp icmpv6 type nd-router-advert [ { "match": { "left": { "meta": { "key": "l4proto" } }, "op": "==", "right": "ipv6-icmp" } }, { "match": { "left": { "payload": { "field": "type", "protocol": "icmpv6" } }, "op": "==", "right": "nd-router-advert" } } ] # meta l4proto icmp icmp type echo-request [ { "match": { "left": { "meta": { "key": "l4proto" } }, "op": "==", "right": "icmp" } }, { "match": { "left": { "payload": { "field": "type", "protocol": "icmp" } }, "op": "==", "right": "echo-request" } } ] # meta l4proto 1 icmp type echo-request [ { "match": { "left": { "meta": { "key": "l4proto" } }, "op": "==", "right": 1 } }, { "match": { "left": { "payload": { "field": "type", "protocol": "icmp" } }, "op": "==", "right": "echo-request" } } ] # icmp type echo-request [ { "match": { "left": { "payload": { "field": "type", "protocol": "icmp" } }, "op": "==", "right": "echo-request" } } ] # meta sdif "lo" accept [ { "match": { "left": { "meta": { "key": "sdif" } }, "op": "==", "right": "lo" } }, { "accept": null } ] # meta sdifname != "vrf1" accept [ { "match": { "left": { "meta": { "key": "sdifname" } }, "op": "!=", "right": "vrf1" } }, { "accept": null } ] # meta protocol ip udp dport 67 [ { "match": { "left": { "meta": { "key": "protocol" } }, "op": "==", "right": "ip" } }, { "match": { "left": { "payload": { "field": "dport", "protocol": "udp" } }, "op": "==", "right": 67 } } ] # meta protocol ip6 udp dport 67 [ { "match": { "left": { "meta": { "key": "protocol" } }, "op": "==", "right": "ip6" } }, { "match": { "left": { "payload": { "field": "dport", "protocol": "udp" } }, "op": "==", "right": 67 } } ] # meta mark set ip6 dscp lshift 2 or 0x10 [ { "mangle": { "key": { "meta": { "key": "mark" } }, "value": { "|": [ { "<<": [ { "payload": { "field": "dscp", "protocol": "ip6" } }, 2 ] }, 16 ] } } } ] # meta mark set ip6 dscp lshift 26 or 0x10 [ { "mangle": { "key": { "meta": { "key": "mark" } }, "value": { "|": [ { "<<": [ { "payload": { "field": "dscp", "protocol": "ip6" } }, 26 ] }, 16 ] } } } ] # meta mark set ip6 dscp << 2 | 0x10 [ { "mangle": { "key": { "meta": { "key": "mark" } }, "value": { "|": [ { "<<": [ { "payload": { "field": "dscp", "protocol": "ip6" } }, 2 ] }, 16 ] } } } ] # meta mark set ip6 dscp << 26 | 0x10 [ { "mangle": { "key": { "meta": { "key": "mark" } }, "value": { "|": [ { "<<": [ { "payload": { "field": "dscp", "protocol": "ip6" } }, 26 ] }, 16 ] } } } ]