Damus
Petr Tesařík · 26w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwnvxtpmwg22jwerx3ztla8m9s6cqm75qzqy83rd53cjxy0uj45hq07z8u4 By now, docker has left my system and will never make a comeback. But why did nobody w...
Tomáš Janoušek profile picture
@nprofile1q... oh actually more vaguely remembering time - there's iptables the original and iptables-via-nftables shim

I have no idea which of these is better, but fairly certain the behaviour is different in surprising ways.

(also libvirt does something similar but I think they support nftables already?)
1
Petr Tesařík · 26w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwnvxtpmwg22jwerx3ztla8m9s6cqm75qzqy83rd53cjxy0uj45hq07z8u4 It's complicated. Short answer: Yes, libvirt can work just fine with nft. Long answer: Read this: https://libvirt.org/firewall.html