2.2. When to use firewalld or nftables
RHEL provides the nftables framework and the firewalld service to configure a firewall.
On Red Hat Enterprise Linux, you can use the following packet-filtering utilities depending on your scenario:
-
firewalld: Thefirewalldutility simplifies firewall configuration for common use cases. -
nftables: Use thenftablesutility to set up complex and performance-critical firewalls, such as for a whole network.
重要
To prevent the different firewall-related services (firewalld or nftables) from influencing each other, run only one of them on a RHEL host, and disable the other service.