Difference between revisions of "Main Page"

From nftables wiki
Jump to: navigation, search
(Development: re-introduce back the sentence about development progress)
(Advanced data structures for performance packet classification: add flowtable link)
Line 76: Line 76:
 
* [[Math operations]]
 
* [[Math operations]]
 
* [[Stateful objects]]
 
* [[Stateful objects]]
 +
* [[Flowtable]] (the fastpath network stack bypass)
  
 
If you are already using [[ipset]] in your ''iptables'' rule-set, that transition may be a bit more simple to you.
 
If you are already using [[ipset]] in your ''iptables'' rule-set, that transition may be a bit more simple to you.

Revision as of 18:14, 17 July 2019

Welcome to the nftables HOWTO documentation page. Here you will find documentation on how to build, install, configure and use nftables.

If you have any suggestion to improve it, please send your comments to Netfilter users mailing list <netfilter@vger.kernel.org>.

Introduction

Getting started

Basic operation

Supported selectors for packet matching

Possible actions on packets

Note that, unlike iptables, you can perform several actions in one single rule.

Advanced data structures for performance packet classification

You will have to redesign your rule-set to benefit from these new nice features:

If you are already using ipset in your iptables rule-set, that transition may be a bit more simple to you.

Examples

Development

Check Portal:DeveloperDocs - documentation for netfilter developers.

Some hints on the general development progress:

External links

Watch some videos:

Additional documentations and articles:

Thanks

To the NLnet foundation for initial sponsorship of this HOWTO:

logo.gif

To Eric Leblond, for boostrapping the Nftables quick howto in 2013.