4 ms·

This is huge. The hash based approach makes speed improvements over complex iptables usage very impressive, in its most common implementations

• ADSSDA 5y ago
  I'm a big fan of nftables, but anyone using iptables with a large ruleset is (or should be) using ipset, which is just as fast.
  • kkirsche 5y ago
    That hasn’t been my experience with large enterprises, but my experience is simply anecdotal so you may be right.