import type { TNftFamily, INftRateLimitRule, INftConnectionRateRule } from './nft.types.js';
/**
 * Build a rate limit rule.
 * Packets exceeding the rate are subjected to the specified action (default: drop).
 */
export declare function buildRateLimitRule(tableName: string, family: TNftFamily, rule: INftRateLimitRule): string[];
/**
 * Build a per-IP rate limit rule using nft meters.
 * Convenience wrapper around buildRateLimitRule with perSourceIP=true.
 */
export declare function buildPerIpRateLimitRule(tableName: string, family: TNftFamily, rule: Omit<INftRateLimitRule, 'perSourceIP'>): string[];
/**
 * Build a new-connection rate limit rule.
 * Limits the rate of new connections (ct state new) on the given port.
 */
export declare function buildConnectionRateRule(tableName: string, family: TNftFamily, rule: INftConnectionRateRule): string[];