{ "nftables": [ { "metainfo": { "version": "VERSION", "release_name": "RELEASE_NAME", "json_schema_version": 1 } }, { "table": { "family": "ip", "name": "x", "handle": 0 } }, { "chain": { "family": "ip", "table": "x", "name": "z", "handle": 0, "type": "filter", "hook": "output", "prio": 0, "policy": "accept" } }, { "set": { "family": "ip", "name": "y", "table": "x", "type": "ipv4_addr", "handle": 0, "size": 65535, "flags": [ "timeout", "dynamic" ], "timeout": 3600 } }, { "rule": { "family": "ip", "table": "x", "chain": "z", "handle": 0, "expr": [ { "set": { "op": "update", "elem": { "payload": { "protocol": "ip", "field": "daddr" } }, "set": "@y", "stmt": [ { "limit": { "rate": 1, "burst": 5, "per": "second" } }, { "counter": null } ] } } ] } } ] }