- Home
- Firewall Software
- nftables
On the recordRead 8 Oct 202626 facts
nftables
On the record
- Application rules
- Yesnetfilter.org · read 22 Sep 2026
- Compatibility
- A backward compatibility layer lets users run iptables and ip6tables with the same syntax over the nftables infrastructure.netfilter.org · read 8 Oct 2026
- Connection alerts
- Nonetfilter.org · read 22 Sep 2026
- Dependencies
- The nft command-line tool requires libmnl, libnftnl, and the nft tool itself to run.netfilter.org · read 8 Oct 2026
- Documentation and support
- The project points users to the nftables HOWTO, a man page, and Netfilter mailing lists.netfilter.org · read 8 Oct 2026
- Kernel requirement
- nftables is available upstream since Linux kernel 3.13, and the project recommends newer kernel versions.netfilter.org · read 8 Oct 2026
- Library
- libnftables is a high-level userspace library that includes JSON support.netfilter.org · read 8 Oct 2026
- License
- The Netfilter licensing page describes netfilter/iptables as free software distributed under GNU GPLv2 only, with possible exceptions stated in individual source-file headers.netfilter.org · read 8 Oct 2026
- License and verification
- The Netfilter project describes its software as free software under GNU GPLv2 or later and says its core team signs project releases with a PGP key.netfilter.org · read 8 Oct 2026
- Maintainers
- The Netfilter Core Team makes project decisions, has commit access to the master source control tree, and can make releases.netfilter.org · read 8 Oct 2026
- Netfilter integration
- nftables reuses Netfilter’s hook infrastructure, connection tracking system, NAT, userspace queueing, and logging subsystem.netfilter.org · read 8 Oct 2026
- Network functions
- The project documentation lists packet matching, rate limiting, counters, logging, NAT, load balancing and userspace queueing among its capabilities.wiki.nftables.org · read 8 Oct 2026
- Outbound control
- advancednetfilter.org · read 22 Sep 2026
- Performance
- Maps and concatenations can reduce the number of rule inspections needed to determine a packet's action.netfilter.org · read 8 Oct 2026
- Performance feature
- Maps and concatenations can structure rulesets to reduce the number of rule inspections needed to determine a packet’s action.netfilter.org · read 8 Oct 2026
- Purpose
- nftables replaces iptables, ip6tables, arptables, and ebtables with an in-kernel packet classification framework and the nft command-line tool.netfilter.org · read 8 Oct 2026
- Release downloads
- The releases page offers source tarballs with GPG signatures and SHA-256 checksums; it lists nftables 1.1.7 dated 2026-Sep-01.netfilter.org · read 8 Oct 2026
- Release security
- The Netfilter Core Team says it uses a PGP key to sign all software released by the project; the listed key is valid until October 12, 2028.netfilter.org · read 8 Oct 2026
