On how to match based on a portion of an IPv6 address other than strictly the prefix in Linux nftables; useful, for example, for matching on the local portion only, irrespective of the subnet it's on.

mkj

On how to match based on a portion of an IPv6 address other than strictly the prefix in Linux nftables; useful, for example, for matching on the local portion only, irrespective of the subnet it's on. Saw the technique mentioned somewhere but couldn't find it again so decided to write it down for myself at least before I forget, because I have a feeling that this will come in handy some day.

Prefix-agnostic IPv6 address filtering in Linux nftables – Michael Kjörling

(michael.kjorling.se)

#IPv6 #nftables #Linux #BlogPost

goetz 🚲

@mkj
Thanks for the write up.
On #openwrt very easy to use with :1/-64 in the UI.