Linux Lite Forums

.

Simple answer using nftables rather than iptables. Other reason newer kernels now more fully able to deploy more nftables tuning options. Other reason, better processing access control in some cases, fully exposing process hooks and chains in a more humanly readable way than iptables. Mostly unnecessary for Linux Lite users, but an example of a conscientious developer choosing to move toward the future.

https://manpages.debian.org/buster/nftab....8.en.html

TC   

.