nftables - Florian Westphal

nftables is the project that aims to replace the existing {ip,ip6,arp,eb}tables tools. nftables provides a new packet filtering framework and a new userspace utility. nftables is built upon the building blocks of the Netfilter infrastructure such as the existing hooks, the connection tracking system, the userspace queueing component and the logging subsystem. The talk will explain some of the shortcomings of the existing iptables infrastructure, how these were addressed in nftables, and highlight some of the nftables features over iptables for administrators. I will also briefly cover advantages for deverlopers that wish to interact with packet filtering/nat setup in a programmatic fashion. Presentation: http://bit.ly/1Qchoyg