[ADSSDA]

I'm a big fan of nftables, but anyone using iptables with a large ruleset is (or should be) using ipset, which is just as fast.

[kkirsche]

That hasn’t been my experience with large enterprises, but my experience is simply anecdotal so you may be right.