#nftables

i want to try doing #OpenWRT #extroot kind of thing but with #nfs . since my #router doesn't have usb slot and its flash is 8mb. I am thinking about putting NFS mounting after core services are up and network is somewhat operational to not have cascading network failures stemming from vps being down or chiken and egg problem with local nfs share not being able to connect to it. like i currently want it for running #tailscale subnet router directly on router instead of running it on another device with static route on the router. also i kinda want to try running actual #mulvadvpn cli client instead of wireguard profies to be able to use #DAITA and anti censorship features. tho i am not sure how mulvads #nftables rules would interact with openwrt firewall which uses nftables under the hood.

🧱 BSD PF versus Linux nftables for firewalls for us // cks https://utcc.utoronto.ca/~cks/space/blog/sysadmin/PFvsNftablesForUs #nftables #pffirewall #bsd #freebsd #linux

@mathew@universeodon.com we switched most of our #Debian virtual machines to #nftables a few years ago. So now we have exemptions for several applications like virtual machines that use #docker since that uses #iptables and screws over our nftables config when you restart a container or the docker daemon. I think it will take years before nftables works with everything just like it is with ipv6.

iptables now defaults to the nft backend https://archlinux.org/news/iptables-now-defaults-to-the-nft-backend/ #linux #ArchLinux #iptables #nftables #opensource