Tagged

Nftables guides

Hands-on guides that cover Nftables. Every command is run and verified on a live server before it is published.

Guide

The nftables Model: Families, Tables and Chains

Learn the nftables model on Ubuntu 24.04: families, tables, base chains with hooks and priorities, rule handles, and the atomic ruleset load.

9 min read
Guide

Sets, Maps and Rate Limiting

Use nftables sets, maps and rate limiting on Ubuntu 24.04 to keep a ruleset short: a named allowlist, a verdict map, counters and a limit rate.

7 min read
Guide

NAT, Port Forwarding and Logging

Configure nftables NAT on Ubuntu 24.04: redirect a port to a local service, understand dnat and masquerade, and log a labelled drop to the kernel.

7 min read
Guide

Persistence and Testing Without Lock-Out

Master nftables persistence on Ubuntu 24.04: the config file and service, the nft -c -f dry-run check, and a dead-man revert that prevents lock-out.

7 min read