Goodbye Iptables; Hello Nftables
Linux kernel 3.13 is now in the wild, and with it, the new nftables firewall system that will eventually replace the venerable iptables firewall.
Nftables was created by the authors of netfilter system that operates in the background of iptables, and like iptables, nftables will depend on netfilter.
The new firewall has been in development for years and is expected to provide improved reporting, reduced code duplication, better performance, and other benefits. Nftables is designed for backwards compatibility with iptables firewall rules.
For those who favor a more gradual transition, iptables will still be available in Linux 3.13, although netfilter community probably won't be supporting both versions indefinitely. The announcement applies to the official kernel version provided by the Linux kernel development community. If you get your Linux through a mainstream distribution like Fedora, Ubuntu, Suse, etc., you'll need to wait for your distro to implement Linux 3.13 or a later version that includes the new nftables firewall.
Related content
-
Linux nftables packet filter
The latest nftables packet filter implementation, now available in the Linux kernel, promises better performance and simpler syntax and operation. -
Red Hat Enterprise Linux 8 pre-series test
Red Hat Enterprise Linux is the flagship Red Hat operating system and the basis for many other company products; therefore, much is at stake with version 8. - Known Linux Kernel Bug Being Actively Exploited
-
IPv6 Tables
We design a basic set of ip6tables rules for an IPv6 firewall. -
A script for strict packet filter updates
Automatically create restrictive rules in Linux iptables packet filters.