It's curious that RHEL/CentOS 8 is using nftables instead of iptables by default and yet the next release of Fedora will continue to use iptables.