Re: iptables to nftables?

[Stanislav Vlasov <stanislav.v.v@gmail.com>]

вт, 6 авг. 2024 г. в 16:05, Wesley <wesley@mxcloud.eu.org>:

> We have several debian servers, all running iptables. On average each has 200 rules, mostly deny rules. From a best practice perspective, do we need to upgrade to nftables?

Upgrade right now? No.
Check and test? Yes.

If your configuration works and can be easily extended and you are
happy with it — use iptables.
If your configuration is generated by something — check the new
version of something. Perhaps it can into nftables.

-- 
Stanislav