CentOS 8 firewalld vs nftables

[harrywangca]

Hello Team,

I am trying to configure firewalld in CentOS 8. From security aspect, if I configure to use firewalld, then it means I don't need to configure nftable?

I see nftable is a successor to iptables. I remember I used to configure firewalld and I could ignore iptables.
But I found: firewalld gained support for using nftables as a firewall back-end. In Red Hat Enterprise Linux 8 firewalld utilizes nftables by default, does it mean we can configure nftable for firewalld?

I am so confused.

Regards,

[jlehtone]

Read Chapter 5 first: https://access.redhat.com/documentation ... g-networks

[gerry666uk]

I posted the same question on the Red Hat forums a while back

https://access.redhat.com/discussions/4727501

[harrywangca]

Thank you jlehtone and gerry666uk for replying. I will have a look in details what your post. Very appreciate!