Iptables vs nftables

Overview

Iptables vs nftables에 대한 기술 문서입니다.

Summary

• 무엇인가? - Iptables vs nftables
• 왜 필요한가? - HPC 및 서버 환경에서 필수 개념
• 언제 사용하는가? - 서버 구성, 성능 튜닝, 문제 해결 시

---

Purpose

이 문서가 존재하는 이유

• Goal: Iptables vs nftables에 대한 기술 정보 제공
• Scope: Iptables vs nftables의 개념, 사용법, 설정
• Non-goals: 다른 주제로의 확장

---

Key Concepts

Concept	Description	Related
Iptables vs nftables	HPC/서버 환경에서 중요한 기술 개념	Linux, Server

---

Detailed Explanation

iptables is a generic firewalling software that allows you to define rulesets. Each rule within an IP table consists of a number of classifiers (iptables matches) and one connected action (iptables target). iptables has been a core component of Linux firewall solutions, offering flexibility and robust control over network traffic. However, its complex syntax can be intimidating. nftables is the successor of iptables, it designed to address some of the limitations seen in iptables with Linux kernel 3.13 in 2014, it allows for much more flexible, scalable and performance packet classification. This is where all the fancy new features are developed.

	iptables	nftables
allows incoming SSH traffic on port 22	iptables -A INPUT -p tcp --dport 22 -j ACCEPT	nft add rule ip filter input tcp dport 22 accept
Allow incomming traffics on port 80 and 443	iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT iptables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -p tcp --dport 443 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i lo -j ACCEPT --- Best Practices 최신 버전 사용 권장 공식 문서 참고 테스트 환경에서 먼저 검증 --- References Iptables vs nftables --- Related Pages Linux Server Hardware Network ---