root@haproxy:/home/tharyrok# cat /etc/nftables.conf #!/usr/sbin/nft -f flush ruleset table inet my_table { chain my_input { type filter hook input priority 0 policy drop include "/etc/nftables.d/input/*.nft" ip protocol tcp limit rate 10/minute counter log prefix "tcp.in.dropped: " ip protocol udp limit rate 10/minute counter log prefix "udp.in.dropped: " } }