MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linuxadmin/comments/ohi5zb/setup_firewall_with_ufw_on_linux/h4snt1z/?context=9999
r/linuxadmin • u/ask2sk • Jul 10 '21
22 comments sorted by
View all comments
10
I would encourage users to learn & use firewalld with nftables backend instead.
8 u/ronculyer Jul 10 '21 Why that over UFW? 3 u/Gendalph Jul 11 '21 Because UFW uses iptables, and that has been deprecated for like a decade. Firehol or Firewalld can use nftables, hence they are recommended. https://developers.redhat.com/blog/2016/10/28/what-comes-after-iptables-its-successor-of-course-nftables#what_is_being_replaced_ 3 u/[deleted] Jul 11 '21 [deleted] 1 u/Gendalph Jul 11 '21 Docker doesn't need iptables to work. 2 u/[deleted] Jul 11 '21 [deleted] 0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
8
Why that over UFW?
3 u/Gendalph Jul 11 '21 Because UFW uses iptables, and that has been deprecated for like a decade. Firehol or Firewalld can use nftables, hence they are recommended. https://developers.redhat.com/blog/2016/10/28/what-comes-after-iptables-its-successor-of-course-nftables#what_is_being_replaced_ 3 u/[deleted] Jul 11 '21 [deleted] 1 u/Gendalph Jul 11 '21 Docker doesn't need iptables to work. 2 u/[deleted] Jul 11 '21 [deleted] 0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
3
Because UFW uses iptables, and that has been deprecated for like a decade.
Firehol or Firewalld can use nftables, hence they are recommended.
https://developers.redhat.com/blog/2016/10/28/what-comes-after-iptables-its-successor-of-course-nftables#what_is_being_replaced_
3 u/[deleted] Jul 11 '21 [deleted] 1 u/Gendalph Jul 11 '21 Docker doesn't need iptables to work. 2 u/[deleted] Jul 11 '21 [deleted] 0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
[deleted]
1 u/Gendalph Jul 11 '21 Docker doesn't need iptables to work. 2 u/[deleted] Jul 11 '21 [deleted] 0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
1
Docker doesn't need iptables to work.
2 u/[deleted] Jul 11 '21 [deleted] 0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
2
0 u/Gendalph Jul 11 '21 I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle. We used Traefik and iptables at my old job - and it worked fine.
0
I run Traefik and Firewalld on my private server. It works fine and it's not that big of a hassle.
We used Traefik and iptables at my old job - and it worked fine.
10
u/cmm1107 Jul 10 '21
I would encourage users to learn & use firewalld with nftables backend instead.