Ukulandela ΠΈ Ubuntu developers shintshela kusihlungi sephakethe esizenzakalelayo .
Ukuze ulondoloze ukuhambisana okubuyela emuva, kuphakanyiswa ukusebenzisa iphakheji , ehlinzeka ngezinsiza ezine-syntax yomugqa womyalo ofanayo njengama-iptables, kodwa ihumusha imithetho ewumphumela ibe yi-nf_tables bytecode. Ushintsho luhlelelwe ukufakwa ekukhishweni kokuwa kwe-Ubuntu 20.10.
Lona umzamo wesibili wokuthuthela Ubuntu kuma-nftables. Umzamo wokuqala wenziwe ngonyaka odlule, kodwa wenqatshwa ngenxa yokungahambisani nekhithi yamathuluzi . Manje seku-LXD kakade ukwesekwa komdabu kwama-nftables futhi kungasebenza ne-backend yokuhlunga iphakethe elisha. Kubasebenzisi abangenaso isendlalelo esanele sokuhambisana, ikhono lokufaka ama-iptable wezinsiza zakudala, ama-ip6tables, ama-arptable nama-ebtable ane-backend yakudala.
Khumbula lokho kusihlungi sephakethe Izixhumanisi zokuhlunga iphakethe ze-IPv4, IPv6, ARP kanye namabhuloho enethiwekhi ahlanganisiwe. Iphakheji ye-nftables ihlanganisa izingxenye zokuhlunga zephakethe ezisebenza endaweni yomsebenzisi, kuyilapho umsebenzi wezinga le-kernel unikezwa i-nf_tables subsystem, ebiyingxenye ye-Linux kernel kusukela ekukhululweni okungu-3.13. Izinga le-kernel linikeza kuphela isixhumi esibonakalayo esizimele esijwayelekile esihlinzeka ngemisebenzi eyisisekelo yokukhipha idatha emaphaketheni, ukwenza imisebenzi yedatha, nokulawula ukugeleza.
Imithetho yokuhlunga nezibambi eziqondene nephrothokholi kuhlanganiswa ku-bytecode esikhaleni somsebenzisi, ngemva kwalokho le-bytecode ilayishwa ku-kernel kusetshenziswa isixhumi esibonakalayo se-Netlink futhi isetshenziswe ku-kernel emshinini okhethekile osikhumbuza i-BPF (Izihlungi Zephakethe Le-Berkeley). Le ndlela ikuvumela ukuthi unciphise ngokuphawulekayo usayizi wekhodi yokuhlunga egijima ezingeni le-kernel futhi uhambise yonke imisebenzi yemithetho yokuhlukanisa kanye nengqondo yokusebenza ngamaphrothokholi endaweni yomsebenzisi.
Source: opennet.ru