Hello Proxmox team,
Question if I may on nftables vs iptables. I've had nftables configured for a while now on my nodes in preference to iptables, I think it was introduced maybe v8.3 as "tech preview" - still listed as such on 9.2.
I get repeatedly asked why various vuln scanning tools flag up that iptables is installed but with no ruleset. Apparently that's a "finding". Yes, I know, auditors who dont understand their subject matter... meh.
Would it be possible for dev team to consider removing package dependencies on iptables from other proxmox system packages, thus allowing the package to be purged completely. I wouldn't know the ramifications under the hood of doing this but fairly sure that iptables is now formally deprecated on Debian, has been for a while. I have a feeling this would contribute to a surge forward in moving entirely to nftables. Grateful for thoughts.
Thank you for Proxmox!
Question if I may on nftables vs iptables. I've had nftables configured for a while now on my nodes in preference to iptables, I think it was introduced maybe v8.3 as "tech preview" - still listed as such on 9.2.
I get repeatedly asked why various vuln scanning tools flag up that iptables is installed but with no ruleset. Apparently that's a "finding". Yes, I know, auditors who dont understand their subject matter... meh.
Would it be possible for dev team to consider removing package dependencies on iptables from other proxmox system packages, thus allowing the package to be purged completely. I wouldn't know the ramifications under the hood of doing this but fairly sure that iptables is now formally deprecated on Debian, has been for a while. I have a feeling this would contribute to a surge forward in moving entirely to nftables. Grateful for thoughts.
Thank you for Proxmox!
Last edited: