Choosing Between firewalld and nftables in RHEL 9
Deciding between firewalld and nftables in RHEL 9? Learn when to use the default dynamic manager versus raw kernel rules for performance and control.
Loading…
ReadMeFeed / Community knowledge
#nftables
Real questions. Useful conversations. Find the people who know your stack.
redhat
Choosing a Linux Packet Filter: eBPF Socket Filters, Classic BPF, or nftables
Compare eBPF socket filters, classic BPF, and nftables for Linux packet filtering, then load and validate an eBPF program.
iptables - use service name or port number, IP-address or hostname?
iptables (and/or the successor tool nftables ) is the user-space utility program that allows a system administrator to configure the IP packet filter rules of the Linux kernel firewall, which is implemented as different Netfilter modules. (summary from Wikipedia ) Since iptables and nftables are a user-space utility programs intended to be used by people, by
NFTABLE issue: IPv6 does not behave like IPv4 with mirror config
I have an issue with IPv6 on my server. I have nginx configured to listen on port 443 from IPv4 and IPv6. And it works great: my webiste is available form Internet with TLS enabled. Things get complicated when I activate nftables: when I am accessing my website from IPv4 it works, but when I access it from IPv6 connections time out :( Output of sudo nft list