vyos-1x.git/interface-definitions/include/nat-translation-options.xml.i, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2024-05-22T19:33:06+00:00nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel >=5.02024-05-22T19:33:06+00:00Christian Breunigchristian@breunig.cc2024-05-22T19:31:32+00:00urn:sha1:7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070
random - In kernel 5.0 and newer this is the same as fully-random. In earlier
kernels the port mapping will be randomized using a seeded MD5 hash mix using
source and destination address and destination port.
https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454
xml: T4047: use full string match in the regex validator2022-04-29T17:51:50+00:00Christian Poessingerchristian@poessinger.com2022-04-29T17:51:50+00:00urn:sha1:80ecb1b7aaab47edeb355c3b74a763e940d88179nat: T1083: use defaultValue from XML when handling translations2022-02-25T21:33:16+00:00Christian Poessingerchristian@poessinger.com2022-02-25T21:33:16+00:00urn:sha1:e1c5f629fa310251e0516ac59fb5429b9e83d7fascripts: T4269: node.def generator should automatically add default values2022-02-24T21:47:12+00:00Christian Poessingerchristian@poessinger.com2022-02-24T21:47:12+00:00urn:sha1:a68c9238111c6caee78bb28f8054b8f0cfa0e374
Since introducing the XML <defaultValue> node it was common, but redundant,
practice to also add a help string indicating which value would be used as
default if the node is unset.
This makes no sense b/c it's duplicated code/value/characters and prone to
error. The node.def scripts should be extended to automatically render the
appropriate default value into the CLI help string.
For e.g. SSH the current PoC renders:
$ cat templates-cfg/service/ssh/port/node.def
multi:
type: txt
help: Port for SSH service (default: 22)
val_help: u32:1-65535; Numeric IP port
...
Not all subsystems are already migrated to get_config_dict() and make use of
the defaults() call - those subsystems need to be migrated, first before the new
default is added to the CLI help.
conf-mode: NAT interface definition typo fix2021-11-24T11:30:28+00:00erkine.altunbas@vyos.io2021-11-24T11:30:28+00:00urn:sha1:0040795fc4a23a30eafadc13f8e982e8d0be180anat: T1083: add translation options for persistent/random mapping of address and port2021-06-26T07:48:54+00:00Igor Melnykigor_melnyk@ukr.net2021-06-26T07:48:54+00:00urn:sha1:166d44b32813c9dd64c3857beaf5eac8382b2d6d
Tested using:
set destination rule 100 inbound-interface 'eth0'
set destination rule 100 translation address '19.13.23.42'
set destination rule 100 translation options address-mapping 'random'
set destination rule 100 translation options port-mapping 'none'
set source rule 1000 outbound-interface 'eth0'
set source rule 1000 translation address '122.233.231.12'
set source rule 1000 translation options address-mapping 'persistent'
set source rule 1000 translation options port-mapping 'fully-random'