ufw vs raw nftables

ufw vs raw nftables
ufw is iptables training wheels — ufw allow 443 and you're done. Great until you need a complex ruleset and ufw's ordering fights you.
nftables is the modern kernel firewall: one ruleset, atomic reloads, faster sets for big IP blocklists.
— New to firewalls / 2 ports open: ufw
— Big blocklists, port-knocking, want one clean config: nftables
Don't run both. They both poke iptables and the rules collide. Pick one tonight.