View source for Operations at ruleset level

== Using native nft syntax ==

Linux Kernel 3.18 includes some improvements regarding the available operations to manage your ruleset as a whole.

=== listing ===

Listing the complete ruleset:
<source lang="bash">
 % nft list ruleset
</source>

Listing the ruleset per family:
<source lang="bash">
 % nft list ruleset arp
 % nft list ruleset ip
 % nft list ruleset ip6
 % nft list ruleset bridge
 % nft list ruleset inet
</source>
These commands will print all tables/chains/sets/rules of the given family.

=== flushing ===

In addition, you can also flush (erase, delete, wipe) the complete ruleset:
<source lang="bash">
 % nft flush ruleset
</source>
Also per family:
<source lang="bash">
 % nft flush ruleset arp
 % nft flush ruleset ip
 % nft flush ruleset ip6
 % nft flush ruleset bridge
 % nft flush ruleset inet
</source>
=== backup/restore ===

You can combine these two commands above to backup your ruleset:
<source lang="bash">
 % echo "nft flush ruleset" > backup.nft
 % nft list ruleset >> backup.nft
</source>
And load it [[Atomic_rule_replacement|atomically]]:
<source lang="bash">
 % nft -f backup.nft
</source>
== Listing in JSON format ==

You can also export your ruleset in JSON format, just pass the
'--json' option:

<source lang="bash">
 % nft --json list ruleset > ruleset.json
</source>

== See also ==

Some related information you may want to read:

* [[Atomic rule replacement]]
* [[Scripting]]