Your use of Stack Overflow’s Products and Services, including the Stack Overflow Network, is subject to these policies and terms.
In local machine (Ubuntu 18.04), I test a DNAT rule by using nft command and lxc.
The machine has eth0 interface and in0test/out0test peer tap-interface.
eth0 is mapped to public Ip (such as 222.123.x....
As far as I understand the kernel facility nftables exists in the kernel that comes with Ubuntu 14.04. As is proven by the following two commands:
# grep -E '(NF_TABLES|NFT_)' /boot/config-$(uname -r)...