{ "nftables": [ { "metainfo": { "version": "VERSION", "release_name": "RELEASE_NAME", "json_schema_version": 1 } }, { "table": { "family": "inet", "name": "x", "handle": 0 } }, { "chain": { "family": "inet", "table": "x", "name": "y", "handle": 0, "type": "nat", "hook": "prerouting", "prio": -100, "policy": "accept" } }, { "map": { "family": "inet", "name": "z", "table": "x", "type": [ "ipv4_addr", "inet_proto", "inet_service" ], "handle": 0, "map": [ "ipv4_addr", "inet_service" ], "elem": [ [ { "concat": [ "1.1.1.1", "tcp", 20 ] }, { "concat": [ "2.2.2.2", 30 ] } ] ] } }, { "rule": { "family": "inet", "table": "x", "chain": "y", "handle": 0, "expr": [ { "dnat": { "family": "ip", "addr": { "map": { "key": { "concat": [ { "payload": { "protocol": "ip", "field": "saddr" } }, { "payload": { "protocol": "ip", "field": "protocol" } }, { "payload": { "protocol": "tcp", "field": "dport" } } ] }, "data": "@z" } } } } ] } } ] }