💡 Feature: Native Support for nftables (migration from wrapper)

[danielcrabtree]

Control Panel › Name

All

Category

💡 Other

Feature Description

AlmaLinux 10 / RHEL 10 have dropped support for iptables-legacy, which is currently required for CSF. So presumably CSF does not work on any control panel using the latest OS?

I'm aware you've just taken over the project, but any plans for supporting or moving fully to nftables?

Screenshots

No response

[mhos]

iptables-nft is mainly under the hood today. So iptables are translated to nftables already. But very valid question. Things to think about. 🤔

[Aetherinox]

The script no longer relies solely on iptables-legacy, a wrapper is used to convert between normal iptables and nftables, so you should have no issue running CSF on AlmaLinux 10, I'm actually running CSF on Alma 10.1 at this moment, no iptables-legacy package, with webmin CP.

However, full native support for nftables is planned, which will remove the need to use a wrapper. But also maintaining iptables support for older distros.

[danielcrabtree]

That's great to hear. Perhaps this documentation requires an update: https://docs.configserver.dev/install/tests/?h=nftable#unknown-option-dport-csf-requires-legacy-iptables

[Aetherinox]

Ah, yes. This was worded poorly and only certain older versions are affected. I'll write some changes to it tonight.