I wonder whether nftables can be used to implement a significantly higher-performance software switching implementation (á la Open vSwitch). OVS (which is now the default switching implementation in XenServer) has terrible performance with short-lived flows, which has raised our latency significantly when running HTTP proxies on Xen-hosted VMs compared to bare-metal implementations.