Managing firewalls has become fun again: nftables, the future of IPtables

> When we did some changes to our iptables, we had to recompile the kernel, because every match or target was requiring a kernel module.

What?