Re: nftables controlling IPv6 and iptables controlling IPv4 (possible?)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Amish <anon.amish@xxxxxxxxx> wrote:
> We have existing code which uses iptables. (legacy binaries)
> 
> This code is IPv4 only.
> 
> Now we are preparing to add support for IPv6 too.
> 
> But we also have plans to migrate to nftables in future.
> 
> So we are thinking if we can start with IPv6 controlled by nftables and IPv4
> controlled by iptables?

Yes, that works.

> It looks possible but we just want to make sure if there can be any chance
> that tables will interfere or conflict with each other? OR something
> unpredictable will occur?

No, if you only use nft ip6 family and iptables then nothing surprising
should happen.  Mixing nft ip and iptables (or nft ip6 and ip6tables)
should work as well, but it will have implications wrt. table /base
chain ordering.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux