moby / libnetwork

networking for containers
Apache License 2.0
2.14k stars 879 forks source link

nftables support ? #1998

Open Zenithar opened 6 years ago

Zenithar commented 6 years ago

Currently docker/moby support iptables / firewalld. Is nftables going to be supported one day ?

senden9 commented 6 years ago

Duplicate of moby/moby#26824.

aboe76 commented 5 years ago

firewalld now support nftables with 0.6.0 release: https://firewalld.org/2018/07/firewalld-0-6-0-release

To get docker working is switching back the backend to iptables instead of nftables.

m-barthelemy commented 3 years ago

What would be a good way to implement nftables support? Would adding a new "backend", using github.com/google/nftables for example, along with the existing iptables and firewalld ones, be a good solution?

aboe76 commented 3 years ago

I think there are two issues here, firewalls with nftables should be possible, if rocket could check back with firewalld commands instead of iptables.

Second native nftables support via iets python library.