ufw

Comment 1 for bug 1880453

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Please note that ufw today can use the iptables-nft backend (and does on, for example, Debian testing/sid today). This doesn't address your comment about ruleset complexity of course but does mean that if your system is using the nft iptables wrappers, it is compatible with other software on the system using nftables.

ufw is written with the concept of backends and it would be possible to port backend_iptables.py to a new backend_nftables.py. This is doable and planned in the medium to long term. I suspect there would be a need for some cleanups (especially in the testsuite) for this to be a reality though since there has only ever been one ufw backend.