From iptables to nftables: Enterprise Firewall on OpenWrt
Sahil Dhiman
GNU/Linux Network Engineer
OpenWrt moved to nftables. So did we — across 900+ devices. Here’s the migration path, the gotchas, and why nftables is genuinely better for enterprise firewall rules.