22.03.0-rc1 nftables/fw4 migration guide?

That would be nice. Maybe there is one?
Anyway a few important points:

  • fw4 is not nftables. fw4 uses nftables (whereas fw3 uses iptables)
  • 22.03.0 onwards does not have the iptables package installed by default.
  • The package iptables-nft is fully compatible with nftables and actually uses nftables underneath. It provides the command "iptables" so old iptables scripts can still be used.
  • 22.03 has a bug. If you install "iptables", you would think you would get the nftables compatible version, but instead you get the old version - iptables-legacy. this will work, sort of, but can cause all sorts of problems as it does not talk to nftables so you can get conflicts. You have to manually install iptables-nft, but be aware it is possible (incorrectly) to have both iptables-legacy and iptables-nft - very bad.
  • If you make sure only iptables-nft is installed (and/or ip6tables-nft if needed), then any of your iptables scripts should run without having to make any changes. If fw4 just executes custom scripts like fw3 did then it should be ok. You can install kmod-ipt-nat6 etc as required.