table ip x { flowtable y { hook ingress priority filter devices = { lo } } chain x { flow add @y } }