I stumbled across this after finding out that OpenWrt has a new nftables-based firewall and didn't recognize the language it was written in: https://git.openwrt.org/?p=project/firewall4.git;a=summary