STRUCT NFT_CHAIN_VALIDATE_STATE(9)

okay bestie, welcome to the Kernel API Manual page for struct nft_chain_validate_state 💖 the header is being extra with struct nft_...lidate_state(9), but the real main character is the chain validation state. No cap, this is the little struct that remembers enough context to dodge unnecessary revalidation.

✨ NAME ✨

struct nft_chain_validate_state — validation state 🎀

🫶 SYNOPSIS 🫶

       struct nft_chain_validate_state {
           u8 hook_mask[NFT_CHAIN_T_MAX];
           u8 depth;
        };

💅 Members 💅

• hook_mask — u8 hook_mask[NFT_CHAIN_T_MAX]; is the array holding the hook numbers and locations the chain is linked to. It’s giving “where does this chain hang out” energy.
• depth — u8 depth; is the deepest call-chain level the chain is linked to. The depth, the drama, the recursion lore.

🌸 DESCRIPTION 🌸

okay so picture this: during table validation, if a chain is encountered again, you can avoid revalidation as long as the calling context is compatible. This structure is the little memory box that stores the relevant calling context from previous validations. Lowkey iconic, highkey useful. 🦋

🔥 SEE ALSO 🔥

Kernel file: ./include/net/netfilter/nf_tables.h — go say hi to the whole nf_tables extended family:

• struct nft_verdict(9)
• struct nft_regs(9)
• struct nft_ctx(9)
• struct nft_userdata(9)
• struct nft_set_elem(9)
• enum nft_iter_type(9)
• struct nft_set_desc(9)
• enum nft_set_class(9)
• struct nft_set_estimate(9)
• struct nft_expr(9)
• struct nft_set_ops(9)
• struct nft_set_type(9)
• struct nft_set(9)
• struct nft_set_binding(9)
• enum nft_set_extensions(9)
• struct nft_set_ext_type(9)
• struct nft_set_ext_tmpl(9)
• struct nft_set_ext(9)
• struct nft_expr_type(9)
• struct nft_expr_ops(9)
• struct nft_rule(9)
• struct nft_chain(9)
• struct nft_chain_type(9)
• struct nft_base_chain(9)
• struct nft_table(9)
• struct nft_object_hash_key(9)
• struct nft_object(9)
• struct nft_object_type(9)
• struct nft_object_ops(9)
• struct nft_flowtable(9)
• struct nft_traceinfo(9)
• struct nft_trans(9)
• struct nft_trans_hook(9)
• struct nft_trans_binding(9)

mwah 💋 this cutie is signed off by source ./include/net/netfilter, date October 2026, and the footer’s own dramatic nickname struct nft_...lidate_state(9). periodt. 🫶