Configuring tables - Revision history

Fmyhr: Update flowtables link.

2021-04-16T22:53:18Z

Update flowtables link.

← Older revision		Revision as of 22:53, 16 April 2021
Line 1:		Line 1:
	Tables are the top-level containers within an nftables ruleset; they hold [[Configuring_chains\|chains]], [[Sets\|sets]], [[Maps\|maps]], [[~~Flowtable~~\|flowtables]], and [[Stateful_objects\|stateful objects]].		Tables are the top-level containers within an nftables ruleset; they hold [[Configuring_chains\|chains]], [[Sets\|sets]], [[Maps\|maps]], [[Flowtables\|flowtables]], and [[Stateful_objects\|stateful objects]].

	Each table belongs to exactly one [[Nftables_families\|family]]. So your ruleset requires at least one table for each family you want to filter.		Each table belongs to exactly one [[Nftables_families\|family]]. So your ruleset requires at least one table for each family you want to filter.

Fmyhr: Edited intro for clarity.

2021-02-23T11:14:38Z

Edited intro for clarity.

← Older revision		Revision as of 11:14, 23 February 2021
Line 1:		Line 1:
	~~Some~~ basic operations and commands ~~that you will use to configure~~ tables ~~in the nftables framework.~~		Tables are the top-level containers within an nftables ruleset; they hold [[Configuring_chains\|chains]], [[Sets\|sets]], [[Maps\|maps]], [[Flowtable\|flowtables]], and [[Stateful_objects\|stateful objects]].

			Each table belongs to exactly one [[Nftables_families\|family]]. So your ruleset requires at least one table for each family you want to filter.

			Following are some basic operations and commands for configuring tables:

	= Adding tables =		= Adding tables =

Fmyhr: /* Deleting tables */ clarity

2021-02-13T15:21:58Z

Deleting tables: clarity

← Older revision		Revision as of 15:21, 13 February 2021
Line 19:		Line 19:
	</source>		</source>

	'''Troubleshooting''': Since Linux kernel 3.18, you can delete ~~tables~~ and its ~~content~~ with this command. ~~However, before that version,~~ you ~~need~~ to ~~delete its content~~ first, otherwise you hit an error ~~that look like this~~:		'''Troubleshooting''': Since Linux kernel 3.18, you can delete a table and its contents with this command. Earlier kernels require you to flush the table's contents first, otherwise you hit an error:

	<source lang="bash">		<source lang="bash">

Arturo: add page description

2018-02-01T10:53:45Z

add page description

← Older revision		Revision as of 10:53, 1 February 2018
Line 1:		Line 1:
			Some basic operations and commands that you will use to configure tables in the nftables framework.

	= Adding tables =		= Adding tables =

Arturo: add see also section, deleting duplicated information which can be found in other pages

2018-02-01T10:53:04Z

add see also section, deleting duplicated information which can be found in other pages

← Older revision		Revision as of 10:53, 1 February 2018
Line 38:		Line 38:
	'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, and will cause an error if the table to be flushed does not exist and you're using Linux <4.9.0, which you can overcome by flushing the ruleset.		'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, and will cause an error if the table to be flushed does not exist and you're using Linux <4.9.0, which you can overcome by flushing the ruleset.

	=~~=== Flush Ruleset ===~~=		= See also =

	~~Flush your whole configuration, tables sets and all~~:		More valuable information:

	~~<source lang="bash">~~		* [[Configuring chains]]
	~~% nft flush~~ ruleset		* [[Operations at ruleset level]]
	~~</source>~~

Jeff.welling: Note about flush ruleset vs flush table

2018-01-27T06:53:37Z

Note about flush ruleset vs flush table

← Older revision		Revision as of 06:53, 27 January 2018
Line 36:		Line 36:
	This removes the rules ''for every chain'' that you register in that table.		This removes the rules ''for every chain'' that you register in that table.

	'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, to ~~do that~~ you ~~must explicitly delete the set or~~ you can ~~use ''~~nft flush ruleset~~''.~~		'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, and will cause an error if the table to be flushed does not exist and you're using Linux <4.9.0, which you can overcome by flushing the ruleset.

			==== Flush Ruleset ====

			Flush your whole configuration, tables sets and all:

			<source lang="bash">
			% nft flush ruleset
			</source>

Jeff.welling: Mention the gotcha re flushing tables doesn't flush sets within that table

2018-01-27T00:01:25Z

Mention the gotcha re flushing tables doesn't flush sets within that table

← Older revision		Revision as of 00:01, 27 January 2018
Line 35:		Line 35:

	This removes the rules ''for every chain'' that you register in that table.		This removes the rules ''for every chain'' that you register in that table.

			'''Note:''' ''nft flush table ip filter'' will not flush '''Sets''' defined within that table, to do that you must explicitly delete the set or you can use ''nft flush ruleset''.

Jeff.welling: Note 'nft list tables'

2017-12-12T07:57:03Z

Note 'nft list tables'

← Older revision		Revision as of 07:57, 12 December 2017
Line 5:		Line 5:
	</source>		</source>

	~~You can also delete~~ tables ~~with the following command:~~		= Show/List tables =

			<source lang="bash">
			% nft list tables
			</source>

	= Deleting tables =		= Deleting tables =

Jeff.welling: Added 'Adding tables' section

2017-03-01T02:22:53Z

Added 'Adding tables' section

← Older revision		Revision as of 02:22, 1 March 2017
Line 1:		Line 1:
			= Adding tables =

			<source lang="bash">
			% nft add table ip filter
			</source>

	You can also delete tables with the following command:		You can also delete tables with the following command:

			= Deleting tables =

	<source lang="bash">		<source lang="bash">

Pablo: Created page with "You can also delete tables with the following command: % nft delete table ip foo '''Troubleshooting''': Since Linux kernel 3.18, you can delet..."

2016-07-13T17:51:38Z

Created page with "You can also delete tables with the following command: <source lang="bash"> % nft delete table ip foo </source> '''Troubleshooting''': Since Linux kernel 3.18, you can delet..."

New page

You can also delete tables with the following command:

<source lang="bash">
% nft delete table ip foo
</source>

'''Troubleshooting''': Since Linux kernel 3.18, you can delete tables and its content with this command. However, before that version, you need to delete its content first, otherwise you hit an error that look like this:

<source lang="bash">
% nft delete table filter
<cmdline>:1:1-19: Error: Could not delete table: Device or resource busy
delete table filter
^^^^^^^^^^^^^^^^^^^
</source>

= Flushing tables =

You can delete all the rules that belong to this table with the following command:

<source lang="bash">
% nft flush table ip filter
</source>

This removes the rules ''for every chain'' that you register in that table.