One of the nicest things about nftables is the way most distros has packaged it: with a service named "nftables" that runs a base config file from a standard lo

One of the nicest things about nftables is the way most distros has packaged it: with a service named "nftables" that runs a base config file from a standard location (usually /etc/nftables.conf or /etc/sysconfig/nftables.conf). With iptables, it seemed like every distro had a different "standard" way of configuring the base ruleset (through various services and init scripts) -- and changed it up every few years.