5

I read that Libnftnl is a userspace library providing a low-level netlink programming interface to the in-kernel nf_tables subsystem and it uses NFTables.

Since it's a kernel related topic, at the very first time of hearing it the only thing sprang to my mind was SELinux whilst we can use it to manage our networking security solutions such as Labeled Networking (Labeling Packets passing between machines over the Network) amongst all other options it provides.

So is it something same as what we can do via SELinux or it is different? If not so, does anyone know why we may be in need of using NFTables and Libnftnl? Do we need it at all?

Improve this question

1 Answer 1

Reset to default
1

Any form of network labeling for remote connections requires a robust Authentication system: SELinux uses IPSEC to achieve this; though you can apply IPSEC without SELinux and local port labeling without IPSEC.... what are you trying to achieve?

Improve this answer
1
  • I'm trying to achieve Port Labeling with or without IPSec.
    – Parsa Samet
    Commented Jan 1, 2018 at 6:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .