vyos-1x.git/src/conf_mode/nat64.py, branch rolling

T8534: refactor sysctl_(read|write) to accept key parts

2026-04-21T04:13:21+00:00

Interface names can contain dots (e.g. VLAN subinterfaces like eth0.10), which conflicts with sysctl's dot-separated key syntax. Change sysctl_read() and sysctl_write() to take key components as a list and normalize each component by replacing . with / before invoking sysctl. This fixes sysctl lookups/updates for VLAN subinterfaces. Extend the SR-TE smoketest to cover a VLAN subinterface. Previous error raising this issue: vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/10/seg6_enabled: No such file or directory vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/201/seg6_enabled: No such file or directory

nat64: T8456: add constraint for translation port range

2026-04-03T11:32:48+00:00

NAT64 requires dedicated transport address space for translation, similar to exclusive port ownership during socket binding. If a local process and Jool translation both use the same transport tuple (for example, 192.0.2.1:5000), traffic conflicts can occur. Jool does not prevent pool4 from overlapping with other port allocations, so avoiding conflicts is an operator responsibility. In addition to service ports already in use, account for Linux ephemeral range (net.ipv4.ip_local_port_range), which defaults to 32768-60999. This default is why, when pool4 is empty, Jool uses 61001-65535 on the node's primary global addresses. One can adjust the ephemeral range via sysctl, and Jools translation range via pool4 add/remove. vyos@vyos:~$ sysctl net.ipv4.ip_local_port_range net.ipv4.ip_local_port_range = 32768 60999 VyOS now uses verify() in NAT64 to check that the supplied tranlation port range does not overlap with the Kernels ephemeral port range.

nat64: T8456: rename CLI path variables for a better fit

2026-04-03T11:13:39+00:00

nat64: T8456: remove no longer needed pylint control statements

2026-04-03T11:13:32+00:00

T7645: formatting

2025-07-20T23:58:26+00:00

T7645: fix missing import and incorrect check of is_node_changed

2025-07-20T20:20:45+00:00

Fix errors introduced by refactoring for modprobe/rmmod jool module.

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

nat64: T6627: call check_kmod within standard config function

2024-08-02T13:13:51+00:00

Functions called from config scripts outside of the standard functions get_config/verify/generate/apply will not be called when run under configd. Move as appropriate for the general config script structure and the specific script requirements.

nat64: T6403: validate source prefix for RFC compliance

2024-06-01T10:42:36+00:00

Simplest fix is to comply with RFC6052. The code change is just masking out the relevant bits and ensuring they're zeroed.

T6199: drop unused Python imports

2024-04-02T22:15:43+00:00

found using "git ls-files *.py | xargs pylint | grep W0611"