Freedom251 › Firewall Software
nftables
Facts from nftables's own pages
- Application rules
- Yes · netfilter.org, 22 Sept 2026
- Compatibility
- A backward compatibility layer lets users run iptables and ip6tables with the same syntax over the nftables infrastructure. · netfilter.org, 8 Oct 2026
- Connection alerts
- No · netfilter.org, 22 Sept 2026
- Dependencies
- The nft command-line tool requires libmnl, libnftnl, and the nft tool itself to run. · netfilter.org, 8 Oct 2026
- Documentation and support
- The project points users to the nftables HOWTO, a man page, and Netfilter mailing lists. · netfilter.org, 8 Oct 2026
- Founded
- 1999 · netfilter.org, 28 Sept 2026
- Free plan
- Yes · netfilter.org, 22 Sept 2026
- Kernel requirement
- nftables is available upstream since Linux kernel 3.13, and the project recommends newer kernel versions. · netfilter.org, 8 Oct 2026
- Library
- libnftables is a high-level userspace library that includes JSON support. · netfilter.org, 8 Oct 2026
- License
- The Netfilter licensing page describes netfilter/iptables as free software distributed under GNU GPLv2 only, with possible exceptions stated in individual source-file headers. · netfilter.org, 8 Oct 2026
- License and verification
- The Netfilter project describes its software as free software under GNU GPLv2 or later and says its core team signs project releases with a PGP key. · netfilter.org, 8 Oct 2026
- Maintainers
- The Netfilter Core Team makes project decisions, has commit access to the master source control tree, and can make releases. · netfilter.org, 8 Oct 2026
- Netfilter integration
- nftables reuses Netfilter’s hook infrastructure, connection tracking system, NAT, userspace queueing, and logging subsystem. · netfilter.org, 8 Oct 2026
- Network functions
- The project documentation lists packet matching, rate limiting, counters, logging, NAT, load balancing and userspace queueing among its capabilities. · wiki.nftables.org, 8 Oct 2026
- Outbound control
- advanced · netfilter.org, 22 Sept 2026
- Performance
- Maps and concatenations can reduce the number of rule inspections needed to determine a packet's action. · netfilter.org, 8 Oct 2026
- Performance feature
- Maps and concatenations can structure rulesets to reduce the number of rule inspections needed to determine a packet’s action. · netfilter.org, 8 Oct 2026
- Supported platforms
- Linux · netfilter.org, 22 Sept 2026
- Purpose
- nftables replaces iptables, ip6tables, arptables, and ebtables with an in-kernel packet classification framework and the nft command-line tool. · netfilter.org, 8 Oct 2026
- Release downloads
- The releases page offers source tarballs with GPG signatures and SHA-256 checksums; it lists nftables 1.1.7 dated 2026-Sep-01. · netfilter.org, 8 Oct 2026
- Release security
- The Netfilter Core Team says it uses a PGP key to sign all software released by the project; the listed key is valid until October 12, 2028. · netfilter.org, 8 Oct 2026
- Rule direction
- both · netfilter.org, 22 Sept 2026
- Rule processing
- The nft tool compiles rulesets into VM bytecode for the kernel and decompiles retrieved bytecode back into ruleset form. · netfilter.org, 8 Oct 2026
- Ruleset processing
- The nft command-line tool compiles rulesets into VM bytecode for the kernel and decompiles retrieved bytecode back into ruleset form. · netfilter.org, 8 Oct 2026
Where nftables stands on Freedom251
- Firewall Software#52 of 81