Bug 11476 - Nftables firewall support
Summary: Nftables firewall support
Status: RESOLVED FIXED
Alias: None
Product: IoT Reference OS Kit
Classification: Yocto Project Subprojects
Component: intel-iot-refkit-security (show other bugs)
Version: 2.4
Hardware: MinnowBoard Max x86_64
: Medium enhancement
Target Milestone: 2.4 M1
Assignee: Ismo Puustinen
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2017-05-08 12:44 UTC by Ismo Puustinen
Modified: 2017-06-19 14:05 UTC (History)
1 user (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: Yes (doc changes required)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ismo Puustinen 2017-05-08 12:44:18 UTC 
Replace iptables with nftables. Add new features provided by nftables, like modular file-based firewall configuration. Support multiple network interfaces classified to different logical networks (LAN, WAN, VPN, ...). Make performance comparisons between the firewalls.