title: Alternatives for iptables?
body: <p>I'm developing an application in which i rely heavily on <code>iptables</code> for routing traffic. 
  I'm setting the tables just by calling <code>iptables</code> as an external process from my application.</p>
  
  <p>I would like to know if there is a way to directly talk to the kernel modules (Netfilter) on which iptables relies and avoid the overhead of running a new process just for that?</p>
  
  <p>Recommendations for other routing solutions are welcome.</p>