macOS
brew install nftableslocal Homebrew formula metadata
brew
nftables のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
brew install nftableslocal Homebrew formula metadata
sudo apk add nftablesAlpine Linux edge package indexes · nftables · ソース: dl-cdn.alpinelinux.org
sudo apt install nftablesDebian stable package indexes · nftables · ソース: deb.debian.org
sudo dnf install nftablesFedora Rawhide package metadata · nftables · ソース: dl.fedoraproject.org
nix profile install nixpkgs#nftablesnixpkgs package indexes · nftables · ソース: raw.githubusercontent.com
sudo pacman -S nftablesArch Linux sync databases · nftables · ソース: geo.mirror.pkgbuild.com
sudo zypper install nftablesopenSUSE Tumbleweed package metadata · nftables · ソース: download.opensuse.org
概要
Netfilter tables userspace tools
履歴
nftables is the Netfilter project's replacement for the older iptables, ip6tables, arptables, and ebtables command families. It combines a new in-kernel packet classification framework with the `nft` userspace command and libnftables library, while reusing Netfilter pieces such as hooks, connection tracking, NAT, queueing, and logging.
The nftables design was publicly presented at Netfilter Workshop 2008 and released publicly in March 2009 by Patrick McHardy. It was developed to reduce duplicated packet-filtering code and make extension easier than the separate xtables-era tools.
nftables was selected for Linux 3.13 in 2013 and became available upstream with the Linux 3.13 kernel line in January 2014. The official project page describes the replacement target, the new VM-based ruleset model, and the separate userspace command-line tool.
The migration was intentionally gradual because firewall rules are operational infrastructure. The project provides an iptables/ip6tables compatibility layer over the nftables infrastructure, and distributions have used that bridge to move old command syntaxes onto the newer kernel backend.
By the Debian 10 and RHEL 8 era, nftables had moved from future replacement to default low-level packet-filtering framework in major Linux distributions. Red Hat documents nftables as the successor to iptables, ip6tables, arptables, ebtables, and ipset, and recommends it when administrators need direct control beyond high-level firewalld scenarios.
Admins use `nft` to create tables, chains, sets, maps, NAT rules, and packet filters in a single syntax across address families. The package is most useful when you need explicit rulesets, performance-friendly sets/maps, atomic ruleset replacement, or a firewall that is easier to reason about than layered iptables invocations.
Package nerds care about which backend their distro's `iptables` command actually targets. On newer systems, `iptables-nft` compatibility may be present even when scripts still look old, while serious new rulesets are usually written as `/etc/nftables.conf` and loaded by the nftables service or by distribution firewall tooling.
nftables is one of the big Linux plumbing migrations: not a flashy app, but a shift in how packet filtering, NAT, and firewall state are represented. Its packaging matters because kernel version, libmnl, libnftnl, the `nft` tool, and distribution compatibility alternatives all have to line up.
セキュリティ状態
narrow executable package without higher-risk signals.
リスク グリーン · 信頼度 低 · appliance
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
nft | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
https://netfilter.org/projects/nftables/
インストールメタデータ
| パッケージキー | brew:nftables |
|---|---|
| バージョン | 1.1.6 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/nftables |
| ホームページ | https://netfilter.org/projects/nftables/ |
| リポジトリ | https://git.netfilter.org/nftables |
| 上流ドキュメント | https://wiki.nftables.org/wiki-nftables/index.php/Main_Page |
| ライセンス | GPL-2.0-or-later |
| ソースアーカイブ | https://www.netfilter.org/pub/nftables/nftables-1.1.6.tar.xz |
| 依存関係 | gmp, jansson, libedit, libmnl, libnftnl, ncurses, readline |
| ビルド依存関係 | pkgconf, python@3.14 |
| Bottle | 利用可能 (対象 arm64_linux, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nftables |
| Version Scheme | 0 |
| Revision | 0 |
| Requirements |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
libnftables-dev 1.1.3-1
Development files for libnftables
sudo apt install libnftables-devlibnftables1 1.1.3-1
Netfilter nftables high level userspace API library
sudo apt install libnftables1nftables 1.1.3-1
Program to control packet filtering rules by Netfilter project
sudo apt install nftablespython3-nftables 1.1.3-1
nftables/libnftables python3 module
sudo apt install python3-nftablesnftables
nix profile install nixpkgs#nftableslibnftables-dev 1.0.9-1build1
Development files for libnftables
sudo apt install libnftables-devlibnftables1 1.0.9-1build1
Netfilter nftables high level userspace API library
sudo apt install libnftables1nftables 1.0.9-1build1
Program to control packet filtering rules by Netfilter project
sudo apt install nftablespython3-nftables 1.0.9-1build1
nftables/libnftables python3 module
sudo apt install python3-nftablesnftables 1.1.6-r1
Netfilter tables userspace tools
https://netfilter.org/projects/nftables
sudo apk add nftablesnftables-dev 1.1.6-r1
Netfilter tables userspace tools (development files)
https://netfilter.org/projects/nftables
sudo apk add nftables-devnftables-doc 1.1.6-r1
Netfilter tables userspace tools (documentation)
https://netfilter.org/projects/nftables
sudo apk add nftables-docnftables-openrc 1.1.6-r1
Netfilter tables userspace tools (OpenRC init scripts)
https://netfilter.org/projects/nftables
sudo apk add nftables-openrcnftables-rulesets 1.1.6-r1
Meta package for pulling in all nftables rulesets
https://netfilter.org/projects/nftables
sudo apk add nftables-rulesetsnftables-static 1.1.6-r1
Netfilter tables userspace tools (static library)
https://netfilter.org/projects/nftables
sudo apk add nftables-staticnftables-systemd 1.1.6-r1
Netfilter tables userspace tools (systemd files)
https://netfilter.org/projects/nftables
sudo apk add nftables-systemdソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.