Post #1129095
2026-03-25 13:47 UTC
@ptesarik oh actually more vaguely remembering time - there's iptables the original and iptables-via-nftables shim
I have no idea which of these is better, but fairly certain the behaviour is different in surprising ways.
(also libvirt does something similar but I think they support nftables already?)
Replies (1)
-
@ptesarik@infosec.exchange 2026-03-25 13:55
@liskin@genserver.social It's complicated. Short answer: Yes, libvirt can work just fine with nft. Long answer: Read this: https://libvirt.org/firewall.html