I trying to secure my home network with OpenWRT routers. In this context I started to customize my iptables rules to my needs and found some iptables concepts hard to understand.

I've discovered that nftables is the NEXT big change in firewall software for Linux based systems (as of ~3.18), replacing iptables which is hard to use or inefficient. More recently, I've learnt bpfilter is being merged into Linux 4.18 and it is a "Better Firewall / Packet Filtering" also meant to replace iptables.

Now, I'm quite confused: could you give me a one sentence description of each technology, nftables/netfilter vs bpfilter? Are they both trying to solve the same problem / do they overlap? Is there any relationship between the two? I am looking for a short description of each to understand when to use one or the other.

closed as off-topic by Rui F Ribeiro, Thomas Dickey, mosvy, G-Man, Romeo Ninov Nov 5 '18 at 11:44

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Requests for learning materials (tutorials, how-tos etc.) are off topic. The only exception is questions about where to find official documentation (e.g. POSIX specifications). See the Help Center and our Community Meta for more information." – Rui F Ribeiro, Thomas Dickey, mosvy, G-Man, Romeo Ninov
If this question can be reworded to fit the rules in the help center, please edit the question.