Re: [PATCH RFC 0/4] net: add bpfilter

On 19 February 2018 at 16:31, David Miller [off-list ref] wrote:

This is how cloud hosting environments work.

BTW, to give a bit more context since it has been mentioned several
times already, find attached 2 rulesets from real-life cloud
deployments: openstack and kubernetes.

These rules were generated for iptables by means of either iptables or
iptables-save.
Both of these rulesets can be easily (automagically) translated to
nftables with code which is already released.