Software Policy Router for nftables
π© - Global Lock Idle
π΄ - Process Dead
π‘ - Process Busying
π© - Process Idle > 30s
π’ - Process Idle
β« for Line
β¬ for Proxy
β« - N/A
π΄ - Failed
π’ - <= 100ms
π΅ - <= 200ms
π£ - <= 400ms
π‘ - <= 600ms
π - <= 800ms
π€ - > 800ms
ipdb_v4
- Path for IPDB IPv4ipdb_v6
- Path for IPDB IPv6nat_interfaces
- Interface for internal network (from this interfaces will be nat)tunnel_ip
- Tunnel IP, would be ignore to software routerallow_ecmp
- Allow Equal Cost multi-path CIDR (TODO)allow_ecmp_port
- Allow Equal Cost multi-path Ports (TODO)ignore_print_domain
- No output for Print domainignore_list
- Ignore source CIDR for software router (such as internal router)proxy
- Line Listrules
- Rules array for process (array for priority)from
- match by source ip (highest priority)any
- match any trafficresolve
- match by resolved domain namecidr
- match by target ip CIDRcountry_name
- match by country nameregion_name
- match by region name (such asALIDNS.COM
)city_name
- match by cityowner_domain
- match by owner domain (such asgithub.com
,twitter.com
)isp_domain
- match by ISP (such asιΏιδΊ
,ιΏιδΊ/η΅δΏ‘/θι/移ε¨/ζθ²η½
)country_code
- match by 2 char country code (such asCN
)anycast
- match by is anycast ip (onlyANYCAST
)idc
- match by is idc ip (onlyIDC
)base_station
- match by is base_station ip (onlyεΊη«
)