Bug 11476

Summary: Nftables firewall support
Product: [Yocto Project Subprojects] IoT Reference OS Kit Reporter: Ismo Puustinen <ismo.puustinen>
Component: intel-iot-refkit-securityAssignee: Ismo Puustinen <ismo.puustinen>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: Medium CC: matti-pekka.sivosuo
Version: 2.4   
Target Milestone: 2.4 M1   
Hardware: MinnowBoard Max   
OS: x86_64   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: Yes (doc changes required)

Description Ismo Puustinen 2017-05-08 12:44:18 UTC
Replace iptables with nftables. Add new features provided by nftables, like modular file-based firewall configuration. Support multiple network interfaces classified to different logical networks (LAN, WAN, VPN, ...). Make performance comparisons between the firewalls.