Now we have bpf too, which is supposed to be a higher performance firewall that will support the nftables API.