google/nftables

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1354 stars · 181 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A pure Go library for programmatically interacting with Linux nftables, the iptables successor, without wrapping libnftnl. It provides data types and functions to install and manage nftables rules via the kernel's netlink interface.

Use cases

• manage nftables firewall rules from a Go program
• programmatically install packet filtering rules on Linux
• replace shelling out to the nft CLI with a native Go API
• build a network policy agent that configures nftables
• dynamically add and remove firewall rules at runtime

When to choose

• you need to manipulate nftables from Go without external dependencies like libnftnl or the nft binary
• you are building a daemon or controller that manages Linux firewall rules programmatically

When to avoid

• you need full nftables feature coverage - the library only supports basic rules
• you need a stable, mature API - the package is in early stages with likely breaking changes
• you are not working on Linux

Facets

library · maturity active

security networking configuration-management networking security operating-systems developer-tools go nftables firewall netlink iptables-successor pure-go linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/nftables")