Hi Andreas, On Fri, Dec 14, 2012 at 10:41:41AM +0100, Andreas Herz wrote: > On 13/12/12 at 12:00, Pablo Neira Ayuso wrote: > > On Thu, Dec 13, 2012 at 07:00:07AM +0100, Jan Engelhardt wrote: > > [...] > > > Please consider for merging. > > > > nftables and its compatibility layer already provide this and we will > > not have to maintain two different netlink interfaces, which is too > > much overhead. > > Apart of your discussion (i think it's quite interesting although > you might not agree), is there a summary of the status of nftables? > The last time i read about it, while i was at the university, i > thought it was dead. I read that Patrick McHardy was the one > pushing the project but never heard any news after 2010. Now i read > that Pablo is taking care of it. It's true that nftables suffered an hiatus in its development, but we're back on it and there has been quite a lot of activity on it recently. This is the kernel branch, you can check the changelog here: http://1984.lsi.us.es/git/nf-next/log/?h=nf_tables8 And there's an iptables compatibility layer that is ready for IPv4, you can find details here: http://www.spinics.net/lists/netfilter-devel/msg23831.html > So i would love to hear more details on the roadmap for nftables, might > be interesting for me and my work here. I understand you want to know more on the future of nftables, but because the way I am, I prefer to skip "hot air" wording by now and talk on code done anytime soon. So I have to request some patience from you. We promise to deliver as much information as possible once we are done with the core features. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html