nftables

Linux's firewall and NAT system. Rules live in chains, chains hang on hooks and sit inside tables, and you set them up with the nft command.