Install nftables and move the default conifuration in ebtables.filter…

[Minkang-Tsai]

What I did
Replace the ebtables with nftables.

Why I did it
Nftables can configure the more detailed rule to filter packets.

How I verified it
Execute "nft list ruleset bridge" command

table bridge filter {
        chain INPUT {
                type filter hook input priority filter; policy accept;
        }

        chain FORWARD {
                type filter hook forward priority filter; policy accept;
                ether daddr 01:80:c2:00:00:00 counter packets 0 bytes 0 drop
                ether type arp counter packets 0 bytes 0 drop
                ether type vlan vlan type arp counter packets 0 bytes 0 drop
                icmpv6 type 135-136 icmpv6 code no-route counter packets 0 bytes 0 drop
                ether type vlan icmpv6 type 135-136 icmpv6 code no-route counter packets 0 bytes 0 drop
        }

        chain OUTPUT {
                type filter hook output priority filter; policy accept;
        }

        chain MCLAG_PORT_ISOLATION {
        }

        chain ND_LIST {
        }

        chain VLAN_ARP_LIST {
        }

        chain ARP_LIST {
        }
}

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: Minkang-Tsai (d8e13e4)
• ✅ login: lguohan / name: Guohan Lu (cadc631)

[Minkang-Tsai]

/easycla

[prsunny]

lgtm, @yxieca for viz

[lguohan]

/azp run Azure.sonic-buildimage

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[puffc]

@Minkang-Tsai How about the ebtables rules in MCLAG? Are you going to raise a separated PR to replace ebtables with nftables?

[idle-meerkat]

@Minkang-Tsai How about the ebtables rules in MCLAG? Are you going to raise a separated PR to replace ebtables with nftables?

what issues do you expect?
debian already uses ebtables-nft backend by default.

[gord1306]

Hi @prsunny could you help to review this PR?

[prsunny]

Could you resolve conflicts?

[mssonicbld]

/azp run Azure.sonic-buildimage