#!/bin/bash set -e EXPECTED="table inet x { map z { type ipv4_addr . inet_proto . inet_service : ipv4_addr . inet_service elements = { 1.1.1.1 . tcp . 20 : 2.2.2.2 . 30 } } chain y { type nat hook prerouting priority dstnat; dnat ip addr . port to ip saddr . ip protocol . tcp dport map @z } }" $NFT -f - <<< "$EXPECTED"