nftables? iptables?

gctwnl

Active Member
Aug 24, 2022
116
20
38
I want to do a decent setup of the firewall on a PVE host. Is nftables still experimental? I'd rather move forward then first setup iptables and migrate later. Secondly, is there a decent documentation of setting this up while protecting yourself against a lockout?
 
Well, this is PVE. If I would want to have a firewall/packet filter mechanism in this context, I would start reading and evaluating https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html

Only if that does not fulfill my requirements I would create an independent one. And then it would be a PVE-external router...

Just my two €¢!