search

coreos / go-iptables

Go wrapper around iptables utility
Apache License 2.0
1.12k stars 256 forks source link

Add support for iptables in nftables mode. #51

Closed squeed closed 6 years ago

squeed commented 6 years ago

Iptables also has the ability to work in nftables mode, where it is supposed to act like iptables but use the nftables subsystem. Unfortunately, it isn't exactly the same.

The biggest difference is that counter output is iptables-save style, rather than with "-c N N".

Also, improve some tests.

Fixes: #49

squeed commented 6 years ago

@lucab would you mind taking a look?

squeed commented 6 years ago

Updated, and added another fix for a failing testcase; PTAL