the network_filter
the flags
the config. The returned object should be unreffed with unref when no longer needed.