Kernel nftables support

Users here in the community have asked for nftables support and here it is:

Fly Machine kernels now support nftables. If you’re running Docker or Tailscale on Fly.io, you should no longer need to use iptables-legacy as a workaround on newer containers.

For existing Machines, running fly deploy or fly m update is required to pick up the new kernel. New Machines will automatically use the new kernel.

Please let us know what problems you run into! A few forum posts lead to this being added:

8 Likes

Beautiful, thank you! :smiley: :smiley: Had zero issues adopting this update; works swimmingly. :raised_hands:

2 Likes

Demo:

fly console --image cruizba/ubuntu-dind -C 'entrypoint.sh docker run docker/whalesay cowsay boo'
1 Like