On 2025-03-13 00:16:03 [+0100], Pablo Neira Ayuso wrote: > Hi Sebastian, Hi Pablo, > Kconfig !PREEMPT_RT for this is not an option, right? That bad? I though it would make you happy ;) Making it !PREEMPT_RT would essentially disable the whole nf-legacy interface. Given that it is intended to get rid of it eventually it might be an option. I mean there is nothing you can do with iptables-legacy that you can't do with iptables-nft? I mean if this is not going to happen because of $reasons then that would be the next best thing. > Thanks. Sebastian