I'd hope not, and that the nftables (nft) language can be implemented in top of this new infra. It is much easier to use and audit than iptables. EDIT: me, par

I'd hope not, and that the nftables (nft) language can be implemented in top of this new infra. It is much easier to use and audit than iptables. EDIT: me, parent and grandparent should've read the article. There's already two projects underway to make userspace nft work with bpfilter as a backend. Sweet!