NFQUEUE Mode

NFQUEUE mode processes packets through Linux netfilter queueing. It is designed for network-layer rewriting scenarios and compatibility with UA2F-style packet processing.

When to use it

Use NFQUEUE when traffic should be inspected and modified at the packet layer instead of through a proxy socket.

Configuration

server-mode: NFQUEUE
rewrite-mode: GLOBAL

Behavior

• Netfilter sends selected TCP packets into an NFQUEUE worker.
• UA3F detects HTTP payloads and rewrites User-Agent data in packet payloads.
• Non-HTTP or unsupported packets are accepted without modification.

Notes

NFQUEUE mode is Linux-only and has a larger compatibility surface than socket proxy modes. Prefer HTTP, SOCKS5, TPROXY, or REDIRECT unless packet-level handling is required.