{# We force everything into the "inet" family so that we cover both
   ip and ip6. This also ensures proper compat with iptables-nft.
#}
 inet