Description
Container networking setups can use nftables-compatible plugin replacements instead of iptables-based implementations. It is useful for administrators standardizing container networking on nftables while keeping CNI-style integration.
This changes low-level container network behavior. Test on noncritical workloads first because firewall rules, NAT, and policy interactions may differ from iptables-based plugins.