chain proxy_prerouting {
    type filter hook prerouting priority filter - 50; policy accept;

    fib daddr type local accept

    include "/etc/nftables.d/90-proxy.nft"
}

chain proxy_output {
    type route hook output priority mangle; policy accept;

    #meta mark 0x000000ff return

    #meta l4proto { tcp, udp } ip daddr @cloudflare_ip meta mark set 0x00000001 accept
}