Wow, I heard about nftables replacing iptables in Debian Stretch. I went to read more about it.

It's so fucking complicated. Linux developers can't fucking design a simple system, can they?

Best part of the documentation?
"the syntax is much better than in iptables". Well well well.