nftables - #Debian Wiki
▻https://wiki.debian.org/nftables
NOTE: Debian #Buster uses the #nftables framework by default.
Starting with Debian Buster, nf_tables is the default backend when using #iptables, by means of the iptables-nft layer (i.e, using iptables syntax with the nf_tables kernel subsystem). This also affects ip6tables, arptables and ebtables.
netfilter/iptables project homepage - The #netfilter.org “nftables” project
▻https://www.netfilter.org/projects/nftables/index.html
Unified and consistent #syntax for every support protocol family, contrary to #xtables utilities, that are well-known to be full of #inconsistencies
nftables - nft command line tool
▻http://git.netfilter.org/nftables
nft command line tool
Moving from iptables to nftables - nftables wiki
▻https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables
This page gives information on moving/migrating from the old iptables/xtables (legacy) world to the new nftables framework.
A common situation is the #need_to_move from an existing iptables ruleset to nftables. The Netfilter team has created some tools and mechanisms to ease in this move.
Some insight into the politics of #nftables vs. #iptables : ▻http://linux.slashdot.org/comments.pl?sid=4356053&cid=45184693 #Linux #networking