Running my firewall on nixos these days and honestly I havent felt the need to have to make many decisions. You dont have to pick a firewall on linux, nftables

Running my firewall on nixos these days and honestly I havent felt the need to have to make many decisions. You dont have to pick a firewall on linux, nftables is standard pretty much everywhere. Most the software outside of that is the same you'd be using there, but dare I argue often far more optimized on the linux side of things. Drivers especially so. Far easier to have declaratively configured and services all meaningfully isolated. Miss me with dozens of root scripts integrated in some web ui or updates that can break the system the moment you step outside their basic expected workflows.