diff options
author | Florian Klink <flokli@flokli.de> | 2022-02-22 23:14:17 +0100 |
---|---|---|
committer | Florian Klink <flokli@flokli.de> | 2022-02-22 23:17:29 +0100 |
commit | 753a43caf07790a923d8f6394744f1c5b0eb8ee4 (patch) | |
tree | 2ee09bae1238cea518b91b75a479cdccbd534a3b /nixos/doc/manual/release-notes/rl-2111.section.md | |
parent | 99c18ca44d654ac35cb3aed429848b847aa3191a (diff) | |
download | nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar.gz nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar.bz2 nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar.lz nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar.xz nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.tar.zst nixpkgs-753a43caf07790a923d8f6394744f1c5b0eb8ee4.zip |
nixos/doc: improve release notes for iptables-nft and systemd with nftables backend
This change probably wasn't documented sufficiently in the release notes, neither the fact systemd stopped using iptables on its own in case of nf_tables support. Fixes #156041.
Diffstat (limited to 'nixos/doc/manual/release-notes/rl-2111.section.md')
-rw-r--r-- | nixos/doc/manual/release-notes/rl-2111.section.md | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2111.section.md b/nixos/doc/manual/release-notes/rl-2111.section.md index 1b59842e020..2f667a7eb56 100644 --- a/nixos/doc/manual/release-notes/rl-2111.section.md +++ b/nixos/doc/manual/release-notes/rl-2111.section.md @@ -8,7 +8,15 @@ In addition to numerous new and upgraded packages, this release has the followin - Nix has been updated to version 2.4, reference its [release notes](https://discourse.nixos.org/t/nix-2-4-released/15822) for more information on what has changed. The previous version of Nix, 2.3.16, remains available for the time being in the `nix_2_3` package. -- `iptables` now uses `nf_tables` backend. +- `iptables` is now using `nf_tables` under the hood, by using `iptables-nft`, + similar to [Debian](https://wiki.debian.org/nftables#Current_status) and + [Fedora](https://fedoraproject.org/wiki/Changes/iptables-nft-default). + This means, `ip[6]tables`, `arptables` and `ebtables` commands will actually + show rules from some specific tables in the `nf_tables` kernel subsystem. + +- systemd got an `nftables` backend, and configures (networkd) rules in their + own `io.systemd.*` tables. Check `nft list ruleset` to see these rules, not + `iptables-save` (which only shows `iptables`-created rules. - PHP now defaults to PHP 8.0, updated from 7.4. |