Adoption - Revision history

Danw at 12:24, 24 March 2025

2025-03-24T12:24:57Z

← Older revision		Revision as of 12:24, 24 March 2025
Line 31:		Line 31:
	* https://github.com/relianoid/nftlb -- nftlb by [https://www.relianoid.com Relianoid ADC] is a nftables-based loadbalancer		* https://github.com/relianoid/nftlb -- nftlb by [https://www.relianoid.com Relianoid ADC] is a nftables-based loadbalancer
	* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])		* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])
	* https://kubernetes.io/ -- As of v1.33, kube-proxy has a fully-supported nftables mode ([https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/])		* https://kubernetes.io/ -- As of v1.33, kube-proxy has a fully-supported nftables mode ([https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/ blog post])
	* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.		* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.
	* https://libvirt.org/ -- there are reports of people running libvirt with nftables for bridge filtering for virtual machines		* https://libvirt.org/ -- there are reports of people running libvirt with nftables for bridge filtering for virtual machines

Danw: update kubernetes status

2025-03-24T12:24:18Z

update kubernetes status

← Older revision		Revision as of 12:24, 24 March 2025
Line 31:		Line 31:
	* https://github.com/relianoid/nftlb -- nftlb by [https://www.relianoid.com Relianoid ADC] is a nftables-based loadbalancer		* https://github.com/relianoid/nftlb -- nftlb by [https://www.relianoid.com Relianoid ADC] is a nftables-based loadbalancer
	* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])		* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])
	* https://kubernetes.io/ -- ~~Kubernetes does not support~~ nftables ~~yes, but some discussion happened already~~ ([https://~~github~~.~~com~~/~~kubernetes~~/~~kubernetes~~/~~issues~~/~~45385 link~~])~~. Compat tools may be used to trick kubernetes into using nftables transparently.~~		* https://kubernetes.io/ -- As of v1.33, kube-proxy has a fully-supported nftables mode ([https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/])
	* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.		* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.
	* https://libvirt.org/ -- there are reports of people running libvirt with nftables for bridge filtering for virtual machines		* https://libvirt.org/ -- there are reports of people running libvirt with nftables for bridge filtering for virtual machines

Nevola: zevenet repository is obsolete

2024-12-03T15:47:29Z

zevenet repository is obsolete

← Older revision		Revision as of 15:47, 3 December 2024
Line 29:		Line 29:
	== virtualization / cloud / infrastructure ==		== virtualization / cloud / infrastructure ==

	* https://github.com/~~zevenet~~/nftlb -- nftlb by ~~Zevenet~~ is a nftables-based loadbalancer ~~which can outperform LVS by 10x~~		* https://github.com/relianoid/nftlb -- nftlb by [https://www.relianoid.com Relianoid ADC] is a nftables-based loadbalancer
	* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])		* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])
	* https://kubernetes.io/ -- Kubernetes does not support nftables yes, but some discussion happened already ([https://github.com/kubernetes/kubernetes/issues/45385 link]). Compat tools may be used to trick kubernetes into using nftables transparently.		* https://kubernetes.io/ -- Kubernetes does not support nftables yes, but some discussion happened already ([https://github.com/kubernetes/kubernetes/issues/45385 link]). Compat tools may be used to trick kubernetes into using nftables transparently.

Fmyhr: Edited page intro for clarity.

2021-02-17T18:07:13Z

Edited page intro for clarity.

← Older revision		Revision as of 18:07, 17 February 2021
Line 1:		Line 1:
	~~This page offers some light and data about current '''nftables adoption''' in the wider community.~~		The Netfilter project and community is focused on replacing the iptables framework with nftables, adding new features and refreshing some workflows along the way.
	~~As you probably know, the focus of the~~ Netfilter project and community is in replacing the iptables framework with nftables, adding ~~brand~~ new features and refreshing some workflows along the way.

	~~Lots of~~ upstream projects use iptables to handle NAT~~, filtering~~, mangling or other networking ~~stuff~~.		Many upstream projects use iptables to handle filtering, NAT, mangling and other networking tasks. This page tracks '''nftables adoption''' in the wider community.
	~~Here, the info we know about them, their relationship with~~ nftables ~~and~~ the ~~possibilities for them to migrate to nftables~~.

	= Cases =		= Cases =

Rmartin: /* Supporting nftables */ add keepalive

2020-12-02T22:56:28Z

Supporting nftables: add keepalive

← Older revision		Revision as of 22:56, 2 December 2020
Line 20:		Line 20:
	* https://firewalld.org/ -- firewalld by RedHat is currently developing a native integration with nftables.		* https://firewalld.org/ -- firewalld by RedHat is currently developing a native integration with nftables.
	* https://suricata-ids.org/ -- suricata can work natively with nftables ([https://home.regit.org/2014/02/suricata-and-nftables/ link])		* https://suricata-ids.org/ -- suricata can work natively with nftables ([https://home.regit.org/2014/02/suricata-and-nftables/ link])
			* https://keepalived.org/ -- keepalived works natively with nftables ([https://github.com/acassen/keepalived/issues/924])

	=== Supporting iptables only ===		=== Supporting iptables only ===

Plushkava: /* system / firewalling / management */ Mention projects with no plans to support nftables, at the suggestion of anarcat

2020-12-02T21:55:03Z

system / firewalling / management: Mention projects with no plans to support nftables, at the suggestion of anarcat

← Older revision		Revision as of 21:55, 2 December 2020
Line 13:		Line 13:
	== system / firewalling / management ==		== system / firewalling / management ==

	* ~~http~~://www.fail2ban.org/ -- the fail2ban tool already includes native support for nftables.		=== Supporting nftables ===
	* ~~http~~://~~www.~~firewalld.org/ -- firewalld by RedHat is currently developing a native integration with nftables.
			The following projects are known to either directly support nftables or have authors actively working on nftables integration.

			* https://www.fail2ban.org/ -- the fail2ban tool already includes native support for nftables.
			* https://firewalld.org/ -- firewalld by RedHat is currently developing a native integration with nftables.
	* https://suricata-ids.org/ -- suricata can work natively with nftables ([https://home.regit.org/2014/02/suricata-and-nftables/ link])		* https://suricata-ids.org/ -- suricata can work natively with nftables ([https://home.regit.org/2014/02/suricata-and-nftables/ link])

			=== Supporting iptables only ===

			The following projects are known to only support iptables/iptables-nft, with no plans to support nftables in the future.

			* http://ferm.foo-projects.org/ -- [https://github.com/MaxKellermann/ferm/issues/35#issuecomment-386091563 citation]
			* https://shorewall.org/ -- [https://sourceforge.net/p/shorewall/mailman/message/35458915/ citation]

	== virtualization / cloud / infrastructure ==		== virtualization / cloud / infrastructure ==

Arturo: /* virtualization / cloud / infrastructure */ add link to docker and IPv6 with nftables

2018-12-17T12:25:19Z

virtualization / cloud / infrastructure: add link to docker and IPv6 with nftables

← Older revision		Revision as of 12:25, 17 December 2018
Line 20:		Line 20:

	* https://github.com/zevenet/nftlb -- nftlb by Zevenet is a nftables-based loadbalancer which can outperform LVS by 10x		* https://github.com/zevenet/nftlb -- nftlb by Zevenet is a nftables-based loadbalancer which can outperform LVS by 10x
	* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link])		* https://www.docker.com/ -- Some discussion happened in the Docker community regarding a native integration with nftables, which could ease some of their use cases ([https://github.com/moby/moby/issues/26824 link]) ([https://github.com/robbertkl/docker-ipv6nat/issues/17 link]) ([https://stephank.nl/p/2017-06-05-ipv6-on-production-docker.html running docker with IPv6 using nftables])
	* https://kubernetes.io/ -- Kubernetes does not support nftables yes, but some discussion happened already ([https://github.com/kubernetes/kubernetes/issues/45385 link]). Compat tools may be used to trick kubernetes into using nftables transparently.		* https://kubernetes.io/ -- Kubernetes does not support nftables yes, but some discussion happened already ([https://github.com/kubernetes/kubernetes/issues/45385 link]). Compat tools may be used to trick kubernetes into using nftables transparently.
	* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.		* http://openstack.org/ -- Openstack does not support nftables yet. Compat tools may be used to trick neutron and other components into using nftables transparently.

Arturo: /* others */ add nftables golang library by google

2018-06-09T13:16:20Z

others: add nftables golang library by google

← Older revision		Revision as of 13:16, 9 June 2018
Line 37:		Line 37:
	* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])		* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])
	* [https://github.com/mdlayher/netlink netlink golang package] -- the Golang Netlink package got batching support to be able to work with nftables ([https://github.com/mdlayher/netlink/issues/81 link])		* [https://github.com/mdlayher/netlink netlink golang package] -- the Golang Netlink package got batching support to be able to work with nftables ([https://github.com/mdlayher/netlink/issues/81 link])
			* [https://github.com/google/nftables nftables golang library] -- This nftables golang integration library was made by Google

	= See also =		= See also =

Arturo: add backlink to nftables from distributions

2018-06-01T11:47:31Z

add backlink to nftables from distributions

← Older revision		Revision as of 11:47, 1 June 2018
Line 8:		Line 8:

	Known cases and examples we could heard of. '''TODO: extend with more current data'''.		Known cases and examples we could heard of. '''TODO: extend with more current data'''.

			All major Linux distributions contains the nftables framework ready to use. Check [[Nftables from distributions]].

	== system / firewalling / management ==		== system / firewalling / management ==
Line 35:		Line 37:
	* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])		* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])
	* [https://github.com/mdlayher/netlink netlink golang package] -- the Golang Netlink package got batching support to be able to work with nftables ([https://github.com/mdlayher/netlink/issues/81 link])		* [https://github.com/mdlayher/netlink netlink golang package] -- the Golang Netlink package got batching support to be able to work with nftables ([https://github.com/mdlayher/netlink/issues/81 link])


	= See also =		= See also =

Arturo: add more examples

2018-05-23T16:41:41Z

add more examples

← Older revision		Revision as of 16:41, 23 May 2018
Line 31:		Line 31:
	* [[Nftables from distributions]] -- all major Linux distribution already include nftables ready to use		* [[Nftables from distributions]] -- all major Linux distribution already include nftables ready to use
	* https://www.nano-editor.org/ -- The nano editor includes syntax highlighting for nftables in files with .nft name extension or nft shebang		* https://www.nano-editor.org/ -- The nano editor includes syntax highlighting for nftables in files with .nft name extension or nft shebang
			* https://github.com/nfnty/vim-nftables -- the VIM editor includes syntax highlighting for nftables
	* [https://github.com/ipr-cnrs Institut de Physique de Rennes] -- this french research entity seems to be using nftables with ansible ([https://github.com/ipr-cnrs/nftables link])		* [https://github.com/ipr-cnrs Institut de Physique de Rennes] -- this french research entity seems to be using nftables with ansible ([https://github.com/ipr-cnrs/nftables link])
	* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])		* VPN -- nftables can be combined with other software packages like OpenVPN to build great VPN solutions ([http://ral-arturo.org/2017/04/07/openvpn-debian-stretch.html link])
			* [https://github.com/mdlayher/netlink netlink golang package] -- the Golang Netlink package got batching support to be able to work with nftables ([https://github.com/mdlayher/netlink/issues/81 link])


	= See also =		= See also =