set of sets

set of sets

[Matt Zagrabelny]

Greetings netfilter,

I'm running nftables 1.0.2.

I have some timeout sets:

table inet filter {
        set timed_web_allow_set_0_ipv4 {
                type ipv4_addr
                timeout 30m
        }

        set timed_web_allow_set_1_ipv4 {
                type ipv4_addr
                timeout 4h
        }
[...]

I'd like to be able to reference the sets in one rule:

        chain timed_web_allow_ipv4 {
                ip saddr { @timed_web_allow_set_0_ipv4,
@timed_web_allow_set_1_ipv4 } accept
        }

...but this doesn't seem possible.

Any suggestions on how to achieve sets of sets in nftables?

Thanks for the help!

-m