3 ms·
Nftables [0] comes to replace iptables, ip6tables, arptables and ebtables. It will introduce new common syntax for IPv4, IPv6 and ARP, and it has smaller kernel
by conductor 13y ago
Nftables [0] comes to replace iptables, ip6tables, arptables and ebtables. It will introduce new common syntax for IPv4, IPv6 and ARP, and it has smaller kernel-mode code.
Its working process is somewhat similar to BPF (Berkeley Packet Filters): the rules are being compiled into byte-code at user-level and passed to the kernel (using the Netlink API) where it is being processed by a state machine.
[0] - http://netfilter.org/projects/nftables/ http://netfilter.org/projects/nftables/