4 ms·
As a debian boomer who fears change I'm still confused about whether nftables is the new firewall to use or bpf is now shiny new thing. Been putting off learni
by Grimburger 4y ago
As a debian boomer who fears change I'm still confused about whether nftables is the new firewall to use or bpf is now shiny new thing.
Been putting off learning either but I guess if it's in Ubuntu 22 I should probably jump in and give it a try.
The demise of iptables is long overdue, such terrible UX and non-intuitive cli options.
- mbakke 4y agoCompared to working with iptables, nftables is like this haiku: Multiple IP protocols Service names for ports Chains happy Sacred connection tracking Automatically available for me Configuration bliss BPF may be future But time is only now lo accept That is to say, I don't think bpfilter is ready yet, but nftables is already great compared to most firewalls short of PF. (With apologies to Jason Dixon and his PF haiku: https://marc.info/?l=openbsd-pf&m=108507584013046&w=2 https://marc.info/?l=openbsd-pf&m=108507584013046&w=2 )
- akvadrako 4y agonftables is the current choice. bpfilter may be the future, but it isn't moving fast.