Ttttabcd <ttttabcd@xxxxxxxxxxxxxx> wrote: > In ebtables, I can pull the direct Layer 2 forwarding traffic to the network layer through the "broute" table, but I can't find the "broute" table in nftables. Its not yet implemented, but this will be supported in nft as well at some point. > Later, I want to perform target MAC address redirection in PREROUTING, and change the target MAC to the bridge itself or the MAC of the slave interface, so that the data frame can reach the network layer. > > But nftables doesn't seem to be able to perform MAC address redirection in bridge families, so there is no way to use it. > > Finally, I searched the Internet for a long time, found br_netfilter, can open bridge-nf-call-iptables to pass the bridge frame to the iptables hook processing, but nftables does not support this feature. > > Now I have tried all the methods that I can think of and can search. All of them are not working. I can only come here for help. > > Can someone tell me how to run transparent proxy in the bridge with nftables, and the transparent proxy uses the tproxy module. > > Does anyone know how to do it? You can try this example from nft man page, you need to replace the mac address of course. bridge prerouting meta pkttype set unicast ether daddr set 00:11:22:33:44:55
