4 ms·
I understand what you mean. I was strictly referring to the user interaction with the firewall. Nftables seems easier than iptables, but not as easy as UFW or V
by chrisper 9y ago
I understand what you mean. I was strictly referring to the user interaction with the firewall. Nftables seems easier than iptables, but not as easy as UFW or VyOS.
- perfectlyoerf 9y agoDoesn't VyOS run an EOL operating system with core packages that are years out of date? I spun up a test server to check it out. I don't see anything on their website about updating it and running "apt-get update/upgrade" just throws errors. Why would I want an edge security device running something like that?
- broknbottle 9y agoyou can add debian repos but be careful you may break something updating packages. They are currently working on an update to the current version 1.1.7 to 1.2.0. Development was pretty active but as of the last year it's been slower.
- chrisper 9y agoDo you think running 1.1.7 is a bad idea security wise?
- chrisper 9y agoYeah. They are working on transitioning to Jessie. But not sure when this will happen. I am open for switching to something else. Do you know anything good?
- jeltz 9y agoIt seems to me like it would be easier to build a good UI on top of nftables than it would be to build the same thing on top of iptables. For example support for atomic rule replacement is something which should benefit higher level UIs.