{"id":92493,"date":"2020-08-27T19:42:43","date_gmt":"2020-08-27T17:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ubuntu-20-10-planiruyut-perejti-s-iptables-na-nftables"},"modified":"2020-08-27T19:42:43","modified_gmt":"2020-08-27T17:42:43","slug":"v-ubuntu-20-10-planiruyut-perejti-s-iptables-na-nftables","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-ubuntu-20-10-planiruyut-perejti-s-iptables-na-nftables","title":{"rendered":"I Ubuntu 20.10 planl\u00e6gger man at skifte fra iptables til nftables","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Efter Fedora<\/a><\/noindex> og Debian<\/a><\/noindex> Ubuntu-udviklere overvejer muligheden<\/a><\/noindex> for at skifte til standard brug af en pakkefilter nftables<\/a><\/noindex>.
\nFor at opretholde bagudkompatibilitet foresl\u00e5s det at bruge pakken iptables-nft<\/a><\/noindex>, som giver v\u00e6rkt\u00f8jer med samme kommandosyntaks som i iptables, men som overs\u00e6tter de modtagne regler til bytekode for nf_tables. \u00c6ndringen planl\u00e6gges inkluderet i den kommende efter\u00e5rsudgave af Ubuntu 20.10.<\/p>\n

Dette er det andet fors\u00f8g p\u00e5 at overg\u00e5 til nftables i Ubuntu. Det f\u00f8rste fors\u00f8g blev gjort sidste \u00e5r, men blev afvist p\u00e5 grund af inkompatibiliteter med v\u00e6rkt\u00f8jet. LXD<\/a><\/noindex>. Nu har LXD allerede er der<\/a><\/noindex> indbygget st\u00f8tte til nftables, og det kan arbejde med den nye backend til pakkefiltrering. For brugere, der ikke har nok af kompatibilitetslaget, forbliver<\/a><\/noindex> er der mulighed for at installere de klassiske v\u00e6rkt\u00f8jer iptables, ip6tables, arptables og ebtables med den gamle backend.<\/p>\n

Lad os minde om, at i pakkefilteret nftables<\/a><\/noindex> er gr\u00e6nsefladerne til pakkefiltrering for IPv4, IPv6, ARP og netv\u00e6rksbroer forenet. Pakket nftables indeholder komponenter af pakkefilter, der arbejder i brugerrummet, mens nf_tables subsystemet, som er en del af Linux-kernen siden version 3.13, s\u00f8rger for arbejdet p\u00e5 kernens niveau. P\u00e5 kernens niveau tilbydes der kun en generel gr\u00e6nseflade, der ikke afh\u00e6nger af det specifikke protokol og giver grundl\u00e6ggende funktioner til at udtr\u00e6kke data fra pakker, udf\u00f8re datamanipulationer og styre str\u00f8mmen. <\/p>\n

S\u00e6rlige filtreringsregler og protokol-specifikke handler kompileres til bytekode i brugerrummet, hvorefter denne bytekode indl\u00e6ses i kernen ved hj\u00e6lp af Netlink-gr\u00e6nsefladen og udf\u00f8res i kernen i en speciel virtuel maskine, der minder om BPF (Berkeley Packet Filters). Denne tilgang muligg\u00f8r en betydelig reduktion i st\u00f8rrelsen p\u00e5 den filtreringskode, der k\u00f8rer p\u00e5 kernens niveau, og tr\u00e6kker alle funktioner til parsing af regler og logikken til behandling af protokoller ind i brugerrummet.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Fedora \u0438 Debian \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Ubuntu \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables. \u0414\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043a\u0435\u0442 iptables-nft, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0441 \u0442\u0435\u043c \u0436\u0435 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043a\u0430\u043a \u0438 \u0432 iptables, \u043d\u043e \u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0431\u0430\u0439\u0442\u043a\u043e\u0434 nf_tables. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043e\u0441\u0435\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Ubuntu 20.10. \u042d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92493","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47I Ubuntu 20.10 planl\u00e6gger man at skifte fra iptables til nftables | ProHoster","description":"Efter Fedora og","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-ubuntu-20-10-planiruyut-perejti-s-iptables-na-nftables","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Ubuntu 20.10 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0441 iptables \u043d\u0430 nftables | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Fedora \u0438","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-ubuntu-20-10-planiruyut-perejti-s-iptables-na-nftables","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:43+00:00","article:modified_time":"2020-08-27T17:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92493","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-30 05:58:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=92493"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92493\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=92493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=92493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=92493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}