The question is pretty much already in the title:
Can nftables and iptables/ip6tables rules be applied at the same time? If so: what's the order of precedence?
The reason I ask is this: plenty of tools - especially from the realm of containerization - still rely on
ip6tables to add rules and make containerized services available or unavailable to other entities on the network. So if I want to express my standard firewall rules with
nft this has to work in parallel with
Or is this catered by using
update-alternatives or similar? I.e. all those containerization tools continue to use what they assume is
ip6tables, but in reality it's the compatibility "layer" provided by nftables?
As for the order of precedence I'd appreciate a diagram of sorts, if available to show where rules have which precedence.