Debian 11 To Further Deprecate IPTables In Favor Of Nftables Plus Promoting Firewalld

[aorth]

Been using firewalld for years on CentOS 7, Debian 9+, and Ubuntu 16.04+. I deploy one public.xml zone on ALL my systems. I recently integrated an ipset of the top 10,000 abusive IP addresses from abuseipdb.com. Dropping tons of packets from any host on that blacklist. Love it.

[Hi-Angel]

/me too migrated ufw→firewalld some weeks ago. Everything is smooth so far.

[Britoid]

firewalld is awesome and I've found is a bit of a pita to setup on Debian so it's going to be great to see it work out the box, I'm already using it with RHEL.

[phoronix]

Phoronix: Debian 11 To Further Deprecate IPTables In Favor Of Nftables Plus Promoting Firewalld

Debian 10 "Buster" already is making use of IPTables' Netfilter back-end by default in their path to deprecate IPTables while for Debian 11 the deprecation will continue further...

http://www.phoronix.com/scan.php?page=news_item&px=Debian-11-Nftables-Firewalld