ENUM NFT_CONNLIMIT_ATTRIBUTES(9)
π enum nft_connlimit_attributes(9) π
okay so this is a page straight out of the Kernel API Manual (yes, that's the manual name, we're fancy now β¨) and it's all about enum nft_connlimit_attributes β the nf_tables connlimit expression netlink attributes. Netlink attributes, bestie. The little labelled boxes the kernel and userspace pass back and forth. It's giving "unboxing video but make it kernel" π
β¨ NAME β¨
enum nft_connlimit_attributes β nf_tables connlimit expression netlink attributes π¦
πΈ SYNOPSIS πΈ
Here's the whole enum, verbatim, treat it like a sacred text:
enum nft_connlimit_attributes {
NFTA_CONNLIMIT_UNSPEC ,
NFTA_CONNLIMIT_COUNT ,
NFTA_CONNLIMIT_FLAGS ,
__NFTA_CONNLIMIT_MAX
};
That's it. Four entries. Iconic, minimal, ate. π
π Constants π
Let's meet the actual members, one by one, no skips:
NFTA_CONNLIMIT_UNSPECβ literally no description in the source π-- undescribed --. It's the mystery member. The unspec one. We respect its privacy.NFTA_CONNLIMIT_COUNTβ the number of connections, carried asNLA_U32. That's the whole vibe: how many conns are we capping at π₯NFTA_CONNLIMIT_FLAGSβ the flags, carried asNLA_U32: enum nft_connlimit_flags. Yeah, it points at a whole other enum, we love a crossover episode π«Ά__NFTA_CONNLIMIT_MAXβ also-- undescribed --π so I'm not gonna invent lore for it. It's the max sentinel, it's mysterious, it's doing main character energy in silence.
π SEE ALSO π
First up, the source of truth: Kernel file ./include/uapi/linux/netfilter/nf_tables.h π β that's where this enum actually lives, go look, iykyk.
And then the friend group. The whole friend group. All 78 of them, alphabetically-adjacent, completely untouched, no cap:
enum nft_registers(9)enum nft_verdicts(9)enum nf_tables_msg_types(9)enum nft_list_attributes(9)enum nft_hook_attributes(9)enum nft_table_flags(9)enum nft_table_attributes(9)enum nft_chain_attributes(9)enum nft_rule_attributes(9)enum nft_rule_compat_flags(9)enum nft_rule_compat_attributes(9)enum nft_set_flags(9)enum nft_set_policies(9)enum nft_set_desc_attributes(9)enum nft_set_field_attributes(9)enum nft_set_attributes(9)enum nft_set_elem_flags(9)enum nft_set_elem_attributes(9)enum nft_set_elem_list_attributes(9)enum nft_data_types(9)enum nft_data_attributes(9)enum nft_verdict_attributes(9)enum nft_expr_attributes(9)enum nft_immediate_attributes(9)enum nft_bitwise_ops(9)enum nft_bitwise_attributes(9)enum nft_byteorder_ops(9)enum nft_byteorder_attributes(9)enum nft_cmp_ops(9)enum nft_cmp_attributes(9)enum nft_range_ops(9)enum nft_range_attributes(9)enum nft_lookup_attributes(9)enum nft_dynset_attributes(9)enum nft_payload_bases(9)enum nft_payload_csum_types(9)enum nft_payload_attributes(9)enum nft_exthdr_op(9)enum nft_exthdr_attributes(9)enum nft_meta_keys(9)enum nft_rt_keys(9)enum nft_hash_types(9)enum nft_hash_attributes(9)enum nft_meta_attributes(9)enum nft_rt_attributes(9)enum nft_socket_attributes(9)enum nft_ct_keys(9)enum nft_ct_attributes(9)enum nft_offload_attributes(9)enum nft_limit_attributes(9)enum nft_counter_attributes(9)enum nft_last_attributes(9)enum nft_log_attributes(9)enum nft_log_level(9)enum nft_queue_attributes(9)enum nft_quota_attributes(9)enum nft_secmark_attributes(9)enum nft_reject_types(9)enum nft_reject_inet_code(9)enum nft_reject_attributes(9)enum nft_nat_types(9)enum nft_nat_attributes(9)enum nft_tproxy_attributes(9)enum nft_masq_attributes(9)enum nft_redir_attributes(9)enum nft_dup_attributes(9)enum nft_fwd_attributes(9)enum nft_objref_attributes(9)enum nft_gen_attributes(9)enum nft_object_attributes(9)enum nft_flowtable_flags(9)enum nft_flowtable_attributes(9)enum nft_flowtable_hook_attributes(9)enum nft_osf_attributes(9)enum nft_synproxy_attributes(9)enum nft_devices_attributes(9)enum nft_trace_attributes(9)enum nft_ng_attributes(9)
Like I said. The whole group chat. Go read them all, I'll wait π
ngl bestie, two of these members have no description at all in the source βNFTA_CONNLIMIT_UNSPECand__NFTA_CONNLIMIT_MAX. That's not me being lazy, that's genuinely what the page says. Don't @ me π
okay and that's the whole page, mwah π sign-off time: this came from the source tree at ./include/uapi/linux/netfilter, dated October 2026. Slay, see you in the next (9) page π§ββοΈπ
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms