The user interface is literally 1000x better. That's all Linux is enormously higher performance but it is a huge pain in the ass to squeeze the performance ou

The user interface is literally 1000x better. That's all Linux is enormously higher performance but it is a huge pain in the ass to squeeze the performance out AND retain any level of readability which is why there are like a dozen vendors selling various solutions that quietly compile their proprietary filter definitions to bpf for use natively in the kernel netfilter code...