Vyos uses nft to do the firewall, but I checked that nft does not seem to support L7.
I want to filter for an IM account.
Maybe I’m a bit offtopic but in VyOS 1.2.0 there’s a iptables command but there no nft command. So I infer nftables isn’t implemented (yet).
@toadzhou @q2dg: To my knowledge nft is still not in general use in most of the FW system’s around the OS communities.
I have tried it couple times and it works and has couple advantages in the sense of speed or CPU but… I believe that it’s more stable to use iptables rather nftables.
(just my opinion for now, until proven otherwise)