It's also a bit depressing that everyone is still using the slower iptables, when nftables has been in the kernel for over a decade.