Re: Merging iptables-nftables into iptables

[Bart De Schuymer <bdschuym@pandora.be>]

Pablo Neira Ayuso schreef op 5/12/2013 9:24:
> On Wed, Dec 04, 2013 at 04:11:18PM +0100, Arturo Borrero Gonzalez wrote:
>> On 4 December 2013 12:48, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
>>> Hi,
>>>
>>> The iptables-nftables tree [1] currently stores the iptables over
>>> nftables compatibility support. This allows you to run iptables
>>> commands using the nftables kernel infrastructure.
>>>
>>> JFYI, my plan is to merge the iptables-nftables into iptables at some
>>> point of this week given that it contains stuff that is scheduled for
>>> 3.13.  After that merge, the iptables-nftables will be disabled.
>>>
>>> [1] http://git.netfilter.org/iptables-nftables/
>> Could you give some hints about releases of userspace stuff?
>> (libnftables, nft, new iptables...)
>>
>> Is 3.13 a deadline for releases?
> The initial release of the userspace libraries and tools will happen
> by when the Linux kernel 3.13 is released, that should happen by the
> beginning of 2014.
>
> The nftables compatibility layer (the so-called iptables-nftables)
> will be included in regular iptables releases, since it will be part
> of that package.

Nice to see this progress. What are the plans/obstacles (if any?) for 
migrating ebtables/arptables to nftables?

cheers,
Bart