These construct nftables matching and payload mangling expressions, and dscp supports both ip and ip6.