Receive: netlink receive: numerical result out of range about nftables HOT 5 OPEN

Further, it is somehow related to chainName. If it is short, e.g. cnins-3-4026535195-dummy0, things work and it gets added. However, if it is longer, e.g. cnins-3-4026535425-dummy0-dummy-9714e150-b953-9224-a988-185420908de0, then it fails.

The max len for the name is 31 characters ...

from nftables.

Version info:

nftables v0.8 (Joe Btfsplk)

from nftables.

Once a chain gets created, I am running into the issue #109 . These are connected somehow.

from nftables.

Linux 3.10 is pretty old.

There may well be kernel bugs or changes that you’re running into.

Is CentOS one of the distributions that ships a heavily modified kernel? Might be another thing to check/consider.

You could try using the nft command line tool before translating your expressions/code to the nftables Go package, just to narrow down what’s related to the kernel vs. the Go implementation.

from nftables.

Is CentOS one of the distributions that ships a heavily modified kernel? Might be another thing to check/consider.

@stapelberg , yes. Those are RHEL kernels. The number is a bit misleading.

You could try using the nft command line tool before translating your expressions/code to the nftables Go package, just to narrow down what’s related to the kernel vs. the Go implementation.

Will do.

from nftables.