I'm not sure how many people have made the transition from iptables to nftables.

I have just done so on one VPS, had a couple of minor hiccups on the way but am very pleased with the result. Easy to do and the much more human-readable and simplified syntax make it easy to read and maintain. I particularly like the way that you just write one set of rules for ipv4 and ipv6 and that as sets are built in it avoids all the problems involved in making a table with sets reboot safe.

I was toying with doing a wiki page to share the experience and tips that I picked up, but wiki syntax seems harder to fathom than nftables syntax. I did a lot of googling on the issue but many of the How-To sites were either contradictory, totally missing the new features (iptables rules translated line by line and not taking advantage of new features), downright wrong or rip-off copies of official documentation.

Keith