The `nftables` framework supports name-based `netdev` hooks with wildcards:: + This enhancement introduces name-based `netdev` hooks with wildcard support to the `nftables` kernel component. This ensures defined rule sets remain stable regardless of interface presence. Previously, `nftables` would bind to each specified interface immediately upon adding a `flowtable` or `netdev`-family chain. Consequently, the transaction failed due to a non-existing interface, and removing an interface deleted the matching interface specifications or entire bound chains. + With this update, hooks for non-existing interfaces are accepted in an inactive state and bind to matching interfaces at the time they appear in the system. This dynamic registration also provides the possibility to accept simple interface (suffix) wildcards to bind a `flowtable` or `netdev`-family chain to any matching interface. You can inspect currently active hooks by using the `nft list hooks` command.