Arch Linux

sweet_potato_0419

Member

Registered: 2019-10-09

Posts: 19

Any plans to switch to nftables as the default firewall?

Hi, it seems systemd still depends on iptables in Arch Linux. Is it necessary for systemd to function? Are there any plans to remove dependency on iptables for a core installation?

seth

Member

Registered: 2012-09-03

Posts: 60,793

Re: Any plans to switch to nftables as the default firewall?

https://archlinux.org/packages/core/x86 … ables-nft/ - also everything just remote-controls netfilter.
It's probably only relevant for networkd/resolved and the forum is the wrong location for this kind of discussion, you could file a bug against the package to build it w/ nftables dependency, but there's quite some stuff depending on iptables in the repos.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

nl6720

The Evil Wiki Admin

Registered: 2016-07-02

Posts: 667

Re: Any plans to switch to nftables as the default firewall?

Related: FS#70252.

amish

Member

Registered: 2014-05-10

Posts: 475

Re: Any plans to switch to nftables as the default firewall?

https://bugs.archlinux.org/task/70252

There is a bug report to make iptables-nft the default iptables.

Unfortunately for unknown reasons, Arch still uses Legacy (deprecated) iptables by default.

Most popular distros have moved on to iptables with nft backend.

Last edited by amish (2023-06-06 09:00:36)