[PATCH] wg-quick: linux: add support for nft and prefer it

[Jordan Glover]

On Tuesday, December 10, 2019 3:48 PM, Jason A. Donenfeld <Jason at zx2c4.com> wrote:

> If nft(8) is installed, use it. These rules should be identical to the
> iptables-restore(8) ones, with the advantage that cleanup is easy
> because we use custom table names.
>

I wonder if nft should be used only if iptables isn't installed instead.
Nowadays iptables has nft backend which I believe is default and will
translate iptables rules to nft automatically. On my system iptables rules
from wg-quck are already shown in "nft list ruleset".

I'm not sure if this work in reverse - are nft rules automatically translated
to iptables and shown in iptables-save? If not then using iptables of available
seems more versatile for the job.

Jordan