5 ms·
Just going to put this here to save some clicks for people thinking nftables may have anything to do with NFTs: > nftables is a subsystem of the Linux kernel p
by phoronixrly 5y ago
Just going to put this here to save some clicks for people thinking nftables may have anything to do with NFTs:
> nftables is a subsystem of the Linux kernel providing filtering and classification of network packets/datagrams/frames
- AceJohnny2 5y agoand I believe it is a meant to be a replacement of iptables. But because the Linux kernel is developed separately from user-space, and never breaks user-space, iptables (at least the API) will never go away
- adontz 5y agoI believe no. As far as I understand RedHat already provides user space "iptables" utility which simply converts any input/output to/from nftables, so there is no kernel iptables in latest RedHat.
- champtar 5y agoMany distro default to iptables-nft, RHEL 8 went further and is not providing iptables-legacy binary at all. RHEL 8 still has iptables in the kernel, I think to allow container sidecars to still work with iptables-legacy.
- nsajko 5y agoAre you sure? As far as I understand, it may happen that everybody stops using the old interface (the distros choose what they compile into their kernels, I guess), and after a few years of that the kernel maintainers may decide to remove the old code, assuming it wouldn't be too much work. Don't know how likely it for this to happen in the near future, though.
- bbarnett 5y agoThis scenario isn't impossible, but 'a few years' would be more like 'decades'.
- jlokier 5y agoBefore iptables there was ipchains, and before ipchains there was ipfwadm. I don't think you can still use all of them.
- geofft 5y agoAPIs get removed from Linux all the time. Off the top of my head, here's one: https://man7.org/linux/man-pages/man2/sysctl.2.html https://man7.org/linux/man-pages/man2/sysctl.2.html > This system call no longer exists on current kernels! See NOTES.