Arch Linux

new2arch

Member

Registered: 2008-02-25

Posts: 235

Nftables to Succeed Netfilter

http://tinyurl.com/cxk74r

Does this suggest netfilter will not longer be incorporated in the kernel?
If so, dang. I have a perfectly well working firewall configured with quicktables...
I doubt there will be firewall scripts available as soon as the nftables replaces netfilter?

byte

Member

From: Düsseldorf (DE)

Registered: 2006-05-01

Posts: 2,046

Re: Nftables to Succeed Netfilter

I expect them to live side-by-side for quite a while, so don't panic. Kernel devs are a weird bunch for sure, but they won't throw out time-proven frameworks overnight.

---

1000

new2arch

Member

Registered: 2008-02-25

Posts: 235

Re: Nftables to Succeed Netfilter

Sounds reasonable. Thanks.

test1000

Member

Registered: 2005-04-03

Posts: 834

Re: Nftables to Succeed Netfilter

"Kernel devs are a weird bunch for sure" hehehe

/me picturing fat looking UNIX admins with suspenders and a big beard.

Last edited by test1000 (2009-03-22 19:23:04)

---

KISS = "It can scarcely be denied that the supreme goal of all theory is to make the irreducible basic elements as simple and as few as possible without having to surrender the adequate representation of a single datum of experience." - Albert Einstein

jack

Member

From: /usr/arg

Registered: 2005-11-17

Posts: 66

Re: Nftables to Succeed Netfilter

First release of nftables
Finally, with a lot of delay, I've just released the first full public
version of my nftables code (including userspace), which is intended to
become a successor to iptables. Its written from scratch and there are
numerous differences to iptables in both features and design, so I'll
start with a brief overview.

There are three main components:

- the kernel implementation
- libnl netlink communication
- nftables userspace frontend

The kernel provides a netlink configuration interface, as well as
runtime ruleset evaluation using a small classification language
interpreter. libnl contains the low-level functions for communicating
with the kernel, the nftables frontend is what the user interacts with.

http://lwn.net/Articles/324251/

Nice.:)