Linux kernel (3.13+) firewall, NAT and packet mangling tools
https://netfilter.org/projects/nftables/