General Agenda

• Start at 9h.
• Coffee break: 10h15-10h30.
• Lunch: 11h45-12h30.
• Coffee break: 13h45
• Coffee break: 15h
• Back to hotel: 16h.

Friday

Netfilter updates since last workshop

• Timeslot: 1 hour
• What: A summary of updates that went upstream since the last NFWS.
• Who: Pablo

libnftables

• Timeslot: 30 minutes
• What: A summary of libnftables updates.
• Who: Phil

libnftables JSON support

• Topic: Describe libnftables JSON support.
• Who: Phil Sutter

netfilter/nft performance issues, ebpf

• Who: Florian Westphal

Saturday

iptables and xtables interoperatibility

• Who: Florian Westphal

Netfilter @ Debian

• Who: Arturo
• Slides: File:Netfilter software at debian pdf.pdf

nftables set and ipset compatibility questions

• Who: Jozsef Kadlecsik

firewalld

• Who: Eric Garver
• Description: Talking points; how it uses netfilter, nftables backend, nftables/iptables(direct) coexistence, libnftables backend, recent developments, future development and missing features.

Abusing TPROXY

• Who: Marek
• Description: https://docs.google.com/presentation/d/1kg_LFITTOLTENlgg0soF8JnjiUqzCCheIemMehNqPVs/edit?usp=sharing

nftlb

• Who: Laura Garcia
• Description: nftables load balancer
• Slides: File:NFWS2018 - nftlb intro.pdf

Sunday

bridge netfilter

• Who: Florian Westphal
• Topic: skb->nf_bridge removal

nft connlimit

• Who: Pablo
• Description: connlimit support available in the upcoming 4.18-rc.
• Slides: File:Connlimit.pdf

Legal

• Topic: Updates from legal.

Flowtable offload

• Topic: Introduction to the flowtable offload infrastructure. Recent updates to enable new fast forwarding paths.
• Who: Pablo

TC and Netfilter Flow Offload

• Who: Yossi and Guy.

Monday

ct timeout support

• Who: Harsha Sharma

nft ipsec matching

• Who: Florian and Pablo

nft icmp on bridge/inet/netdev

• Who: Phil Sutter

outreach contributions

• Who: Varsha Rao