> Otherwise, what I came up with was to split the install of routing (for example on a Debian + FRR) and the firewalling stack. FRRouting + nftables? -- Chriztoffer