3 ms·
@secure: Are you using netfilter or nftables for the firewall / NAT services?
by voidmain0001 8y ago
@secure: Are you using netfilter or nftables for the firewall / NAT services?
- blattimwind 8y agonftables https://github.com/rtr7/router7/blob/master/cmd/netconfigd/netconfigd.go https://github.com/rtr7/router7/blob/master/cmd/netconfigd/n...
- arminiusreturns 8y agoSo can you tell me what you think of nft? Details if you feel like it please. I'm a sysadmin type who has stared at way too much iptables and decided to start going full nftables. I haven't hit any showstopper yet but I figure it would be worth asking someone who has dealt with its complexities. I've been putting off Bpf because it feels like actual programming in yet another language. Did you try that? One last comment, you might check out Dragonfly BSDs network stack if you haven't yet for ideas, the last benchmarks I ran were surprising. To anyone listening, does Bpf enable us to get past the 10gbs dma issues on a Linux router?