I've been on CentOS 7 for a long time and was used to building my custom
iptables configurations on a variety of both personal and business boxes.
I've recently started working with CentOS 8 and learned of the move from
nftables and so I was able to rewrite my rulesets and got everything up and running. The problem was that my custom nft rulesets were not persisting after a reboot, I had to manually
systemctl restart nftables to get my rules back into force.
I learned that the culprit was
firewalld, which from my understanding (because I never used it in CentOS 7), is a front end management tool for both
nftables... correct? Once I
systemctl disable firewalld and tried a reboot, my
nftables rulesets were in place as expected. Problem solved.
My question is, what are the repercussions of not using
nftables is still running and active, so I'm assuming that my actual firewall is still in place, is there any reason why I should leave
firewalld running and instead adjust a setting to ensure it's using my
nftables ruleset instead. Any clarity on it's use would be greatly appreciated!