Check if the nftables crate can be replaced with something simpler
mbuesch opened this issue · comments
Michael Büsch commented
The things that we do with the firewall are not very complex.
Can we have a simpler crate than nftables to reduce the dependency tree complexity?
Michael Büsch commented
Restriction: Linking to the nftables C library would not be acceptable. Especially as long as #6 is not implemented.
Spawning the external nft
binary is Ok-ish.