Currently, nftables is available in the Community repo () and on the AUR in package AUR.
nftables consists of three main components: a kernel implementation, the libnl netlink communication and the nftables userspace frontend. The kernel provides a netlink configuration interface, as well as runtime ruleset evaluation using a small classification language interpreter. libnl contains the low-level functions for communicating with the kernel, the nftables frontend is what the user interacts with.
Drop output to a destination:
# nft add rule ip filter output ip daddr 18.104.22.168 drop
Drop packet to port 80:
# nft add rule ip filter input tcp dport 80 drop
Delete all rules in a chain:
# nft delete rule filter output