nftables didn't work well with docker last time I tried using it.

And iptables is more common and still works well. And at least on Arch Linux, it's not deprecated, just legacy:

Note: iptables is a legacy framework, nftables aims to provide a modern replacement including a compatibility layer.

-- https://wiki.archlinux.org/title/iptables