What is the best practice for a firewall for Debian Buster: iptables or nftables?

[Tom Browder <tom.browder@gmail.com>]

I see it's recommended that Buster users use nftables, but the default
installation still uses iptables!

I need to change ports on my new remote server to allow http and https
traffic, but should I keep using iptables? Or should I remove iptables
and install nftables first?

If I keep iptables, should I add a firewall management program like
ufw or something else?  Is there something like ufw for nftables?

Thanks.

Best regards,

-Tom