Iptables can support L7 through extension, but the upstream of vyos is nftables, I checked and did not seem to find the answer. Nftables performance improvements have not been found in related tests (http://www.diva-portal.org/smash/get/diva2:1212650/FULLTEXT01.pdf)
Do we have to actively use nftables?