A practical guide to nftables architecture, firewall rules, IPv6 protection, connection tracking, logging, and Linux server hardening.