Nftables

nftables are the Linux kernel's successor to iptables and the xtables family. The primary tool used to interact with nftables is nft. The most important difference between the two is that nftables introduces a multidimensional tree and generic set infrastructure; the combination of IPv4 and IPv6 into the inet family is most welcome.

See also

• "Moving from iptables to nftables" from the nftables wiki