A new RFC for Netfilter/nftables arrived recently in the netfilter-devel mailing list [1], introducing flexible math operation support for network packet fields. This could solve some migration problems from iptables to nftables and in addition empower other use-cases.

This demo will quickly show how it works with simple real-world scenarios.

[1] https://lore.kernel.org/netfilter-devel/[email protected]/

speakers: 'Fernando Fernandez Mancera'

link: 'https://fosdem.org/2026/schedule/event/QBDBLC-nft-math-expression/'