Hacker News Reader

This is huge. The hash based approach makes speed improvements over complex iptables usage very impressive, in its most common implementations

I'm a big fan of nftables, but anyone using iptables with a large ruleset is (or should be) using ipset, which is just as fast.

That hasn’t been my experience with large enterprises, but my experience is simply anecdotal so you may be right.