Hi, What's more, ipset's add command would also reset the timeout of the target set entry. However, nftables' set's add command does not reset the timeout, and nftables does not provide a direct way to modify timeout value using commands, it could only be reset on packet path according to its wiki. Cheers, Qi-An Fu