nftables related

nft-cheat-sheet.sh

# rate limit, max 20KB/s from 192.168.1.1
nft -f - <<EOF
table ip test {
        chain inbound {
                type filter hook input priority filter; policy accept;
                ip saddr 192.168.1.1 limit rate over 20 kbytes/second drop
        }
}
EOF

# commands:
nft add table test
nft add nft add chain test inbound { type filter hook input priority 0 \; }
nft add rule test inbound ip saddr 192.168.1.1 limit rate over 20 kbytes/second drop