Hi, I was reading difference between iptables and nftables and why nftables are better. I came across this statement "The user space tools simply generate the bytecode and pass it to the kernel for execution allowing new protocols to be supported without kernel changes.". I wanted to know, example of any protocol (which would have to be compiled as separate kernel module in case of iptables) that nftables solves without compiling kernel modules. Thanks N Gadre
