Nftables reaches 1.0

"The nftables project to replace the kernel's packet-filtering subsystem has its origins in 2008, but is still not being used by most (or perhaps even many) production firewalls. "

Glad to see a substantive article on nftables and iptables. Do you have any numbers on the use in production firewalls?

In Rusty's words:

When your Linux box is the only thing between the chaos of the Internet and your nice, orderly network, it's nice to know you can restrict what comes tromping in your door.

Rusty Russel, Linux IPCHAINS-HOWTO, v1.0.8 (2000-07-04)