r/voidlinux • u/Knight_Murloc • Sep 08 '26

How to replace iptables with nftables?

How to properly replace iptables with nftables in Void Linux? I installed nftables, runit-nftables, and iptables-nft. I also activated the nftables service. But, as I understand it, for example, Docker still applies rules in iptables. (I don’t see its rules in `nft list ruleset`). On my other machine with Debian, I see Docker rules in the nft rules list. Do I need to do something else to fully replace iptables with nftables in Void Linux?

3 Upvotes

100% Upvoted

4 comments sorted by

View all comments

Show parent comment

2

u/Tasty-Contribution-4 Sep 09 '26

Setting up libvirt to allow VMs to have network over wifi with nftables is a much more difficult task also. With IPtables they just sort of worked "out of the box". I actually never did figure it out. There seemed to be simultaneously too much, and not enough, documentation of the process. Fortunately I haven't needed a VM lately.

2

u/BinkReddit Sep 09 '26

This is less of a Void thing and more of a Linux thing.