DevOpsInterviewPrep logo
← Linux, Networking & Scripting / 41
mediumNewRed HatGitLabAtlassian

Our firewall rules are iptables scripts from 2015. What changes moving to nftables and what actually breaks?

Sets instead of thousand-rule chains, one engine for both IP families, atomic ruleset swaps, and a compatibility shim with sharp edges. Migration risk lives in coexistence and tooling assumptions, not syntax.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Sets instead of thousand-rule chains, one engine for both IP families, atomic ruleset swaps, and a compatibility shim with sharp edges. Migration risk lives in coexistence and tooling assumptions, not syntax.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25
UP NEXT ON YOUR JOURNEY
Next in this trackAfter a reboot the journal is empty. How does journald decide what to keep, and how do you fix retention?Next in this trackBackup window is five minutes on a busy database volume. How do LVM snapshots give you a safe image?Next in this trackOne service saturates the shared disk every night. How do you contain it with the cgroup v2 io controller?
DISCUSSION · 0

Nothing here yet. Say how you would answer it.