Goodbye iptables, Hello nftables!

Speaker: Pablo Neira Ayuso

Abstract

In this talk, we plan to introduce the attendees the main differences between iptables and nftables. This includes (but not strictly limited to) changes in the semantics of tables and chains, our generic expression representation for matching packet headers and metainformation, the generic set infrastructure, concatenations, event monitoring among many other features.

Biography

Pablo Neira Ayuso is the current Netfilter maintainer and head of the Netfilter coreteam. By now, he is involved in the Linux networking community for about ten years.