Nftables

nftables is a subsystem of the Linux kernel providing filtering and classification of network packets/datagrams/frames. It has been available since Linux kernel 3. 13 released on 19 January 2014. nftables is supposed to replace certain parts of Netfilter, while keeping and reusing most of it.