nftables in production

[tug]

I'm currently creating a complete new prod cluster. I'm strongly considering to already use nftables.
I know that nftables is still in tech-preview, but from the forum posts I've seen most issues are in relation when switching from pve-firewall to proxmox-firewall.

Just wanted to ask if in the case of a new cluster it's still not a good idea to use and what everyone's experience was so far with nftables.

 

[encryptedserver]

It does not work for me. Pretty common firewall rules are not working, so I just disabled the firewall for now.

 

[spirit]

it's experimental curently, some bugs are already spotted, so don't use it in production yet.

it should be in better shape for pve 8.3