# google/nftables

This repository contains a Go module to interact with Linux nftables (the iptables successor).

Repository: https://github.com/google/nftables
Canonical: https://ross.abutalabs.com/products/nftables
Language: Go
License: Apache-2.0
License Family: permissive
Topics: go, golang, linux, nftables
Last push: 2026-07-03T07:16:10+00:00

## Health v2 (maintenance only)
Score: 73/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 90, release rhythm 35, longevity 100
- inputs: {"age_days": 3011, "days_push": 61, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1354, forks 181 (observed 2026-08-28T04:04:29.152643+00:00)

## What it is
A pure Go library for programmatically interacting with Linux nftables, the iptables successor, without wrapping libnftnl. It provides data types and functions to install and manage nftables rules via the kernel's netlink interface.

## Use cases
- manage nftables firewall rules from a Go program
- programmatically install packet filtering rules on Linux
- replace shelling out to the nft CLI with a native Go API
- build a network policy agent that configures nftables
- dynamically add and remove firewall rules at runtime

## When to choose
- you need to manipulate nftables from Go without external dependencies like libnftnl or the nft binary
- you are building a daemon or controller that manages Linux firewall rules programmatically

## When to avoid
- you need full nftables feature coverage - the library only supports basic rules
- you need a stable, mature API - the package is in early stages with likely breaking changes
- you are not working on Linux

## Facets
- artifact type: library
- maturity: active
- function: security, networking, configuration-management
- domain: networking, security, operating-systems, developer-tools
- platform: go
- tags: nftables, firewall, netlink, iptables-successor, pure-go, linux

## Member repositories
- google/nftables (main) score 73

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:29.152643+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:42:01.548072+00:00, confidence not recorded.
  - readme: https://github.com/google/nftables (fetched 2026-08-28T04:04:29.152643+00:00, sha 65ca42dfaf6f)
- Data as of 2026-08-30T08:39:29.467469+00:00.