vyos-1x.git/src/conf_mode/nat66.py, branch rolling

nat66: T8139: add support for NAT66 source groups

2026-01-01T21:42:10+00:00

Copy the support for NAT66 destination groups (commit f96733dd and commit 43554efc) over to NAT66 source groups as well. Change the existing smoketest for NAT66 groups to also cover a source group use-case example.

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

nat66: T7051: add group config node

2025-04-29T23:31:09+00:00

Add CLI config node for "group" when configuring NAT66 source Ensure there is only one group in NAT66 source rule config Add smoketest to cover new group usage in source NAT66 rules

T6679: add destination groups

2024-09-02T11:41:15+00:00

T6629: call check_kmod within a standard config function

2024-08-02T13:59:41+00:00

Move the remaining calls to check_kmod within a standard function, with placement determined by the needs of the config script.

nat66: T6365: remove warnings for negated interface selections by name

2024-05-22T18:09:40+00:00

nat: T2199: always use full nft command name (e.g. --file over -f)

2024-04-01T19:53:44+00:00

nat: T5681: relax wording on non existing interface Warning message

2023-12-29T12:34:45+00:00

Remove the word "error" from a Warning only message to not irritate the user.

T2898: add ndp-proxy service

2023-12-20T22:21:07+00:00

VyOS CLI command set service ndp-proxy interface eth0 prefix 2001:db8::/64 mode 'static' Will generate the following NDP proxy configuration $ cat /run/ndppd/ndppd.conf # autogenerated by service_ndp-proxy.py # This tells 'ndppd' how often to reload the route file /proc/net/ipv6_route route-ttl 30000 # This sets up a listener, that will listen for any Neighbor Solicitation # messages, and respond to them according to a set of rules proxy eth0 { # Turn on or off the router flag for Neighbor Advertisements router no # Control how long to wait for a Neighbor Advertisment message before invalidating the entry (milliseconds) timeout 500 # Control how long a valid or invalid entry remains in the cache (milliseconds) ttl 30000 # This is a rule that the target address is to match against. If no netmask # is provided, /128 is assumed. You may have several rule sections, and the # addresses may or may not overlap. rule 2001:db8::/64 { static } }

T5681: Firewall,Nat and Nat66: simplified and standarize interface matcher (valid for interfaces and groups) in firewal, nat and nat66.

2023-10-25T11:59:01+00:00