Iptables to nftables?

Hello,

I’m use pfsense some years and want to switch to ipfire. I try now to enter all the rules from pfsense in ipfire 2.29. Now I have a question, I read always iptables - but on debian, nftables is standard a long time. I have found this thread from 2022:

I’m a little apprehensive about setting everything up again now, only to have to do it all over again in a few months when ipfire with nftables comes out.

Is there any news about nftables in ipfire?

Hello Bernd,

yes, IPFire is using iptables to push firewall rules into the kernel. That is however only the interface. Inside the kernel, packets will be handled by the same code and therefore it does not matter how the rules have been created.

Throughput will be the same, features are almost the same (we are at least not missing anything right now).

3 Likes

OK, I’d like to give Ipfire a chance (and support a German company rather than a somewhat strange American one). Thank you!

6 Likes