Netfilter News

Netfilter, iptables, and #Linux developers settle lawsuit against a former contributor who had been unilaterally enforcing GPL for monetary gain. Any enforcement will now require a decision by the then-current community. hubs.la/Q012LD1Z0

#nftables 1.0.0 is out! marc.info/?l=netfilter&m… the #linux #firewall by #netfilter team, already included in most major distributions, is reaching a new milestone!

#nftables 0.9.9 has been released with new hardware offload support, QinQ matching and more! marc.info/?l=netfilter-d…

Highlights from the big #network merge(¹) for #Linux #kernel 5.12: * threaded NAPI polling patches, which can improve the performance(²) * netfilter allows "ownership" of specific tables(³) * various improvements for multipath TCP (MPTCP), like priorities for subflows(⁴) 1/

#ipset 7.11 has been released fixing a buffer overflow in the argument parsing of the ipset userspace utility. #netfilter #firewall #security #linux marc.info/?l=netfilter-d…

#Netfilter project proudly presents #iptables 1.8.7 featuring performance and usability improvements in iptables-nft marc.info/?l=netfilter-d… #linux #firewall #networking

#netfilter project proudly presents @nftables 0.9.8 with improved protocol support and support for several statements per set element marc.info/?l=netfilter-d… #firewall #linux #nftables #networking

#nftables 0.9.7 is out with support of implicit chains and sync with latest kernel features spinics.net/lists/netfilte… #firewall #linux

Nftables 0.9.6 is out with a fix on vmap support marc.info/?l=netfilter&m… #firewall #linux #security

Nftables 0.9.4 includes range support in concatenation: multi dimension sets can be composed with range of objects:

Happy to announce the release of nftables 0.9.4 lists.netfilter.org/pipermail/netf… #notajoke

#nftables 0.9.3 has been released with time matching, synproxy, ... marc.info/?l=netfilter-d…

Fedora 32 Looking At Switching Firewalld From Iptables To Nftables phoronix.com/scan.php?page=… via @phoronix

More about #Netfilter HW offload: lwn.net/Articles/79308…

Using nftables in Red Hat Enterprise Linux 8 dlvr.it/R8XGyw

We are happy to announce that Phil Sutter (developers.redhat.com/blog/author/9b…) is joining the #netfilter core team. This is a natural recognition after years of great contributions.

Summary of #netfilter workshop by @ArturoBorrero ral-arturo.org/2019/07/11/nfw… #firewall #security

Great presentation on advanced #netfilter based load balancing by Laura Garcia from @zevenet. They have a lot on github: github.com/zevenet/ #nfws19

#netfilter hardware offload infrastructure will be part of next #linux kernel. #firewall #performance lwn.net/Articles/79308…

Really productive 2nd day of #netfilter workshop with interesting discussion on infrastructure workshop.netfilter.org/2019/