Do not iptables-translate
Many users, including some large projects, migrate to nftables by running their existing iptables rules through iptables-translate and leaving it at that. It works, sure, but it only changes the syntax, and the syntax was never the point. nftables can keep data in the ruleset, and rules can look things up in it and change it as needed, so a lot of what used to need a daemon/script next to the firewall can now be done by the firewall itself. ...