vyos-1x.git/src/conf_mode/nat_cgnat.py, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2025-06-28T21:16:52+00:00T7591: remove copyright years from source files2025-06-28T21:16:52+00:00Christian Breunigchristian@breunig.cc2025-06-28T18:51:21+00:00urn:sha1:1478516ae437f19ebeb7d6ff9b83dd74f8e76758
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
T6497: CGNAT refactoring delete conntrack entries (#3699)2024-06-27T19:09:19+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-06-27T19:09:19+00:00urn:sha1:804efa2ef6bfee84d13f633d863f6f22f9eec273T6497: CGNAT delete conntrack entries if a pool is modified2024-06-19T09:24:42+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-06-18T14:47:57+00:00urn:sha1:93cac8a6fdc0a7da50c193e4afcbfe9dec124581Merge pull request #3621 from sever-sever/T64422024-06-10T17:35:21+00:00Christian Breunigchristian@breunig.cc2024-06-10T17:35:21+00:00urn:sha1:f118452e4e14628cfacec147ae2192a5de9cb970
T6442: CGNAT add log for address allocationT6442: CGNAT add log for address allocation2024-06-10T11:11:02+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-06-10T11:11:02+00:00urn:sha1:d6108d6e0a14f32d7ee28df01b5a4fcd678acada
Add the configuration command to log current CGNAT allocation
set nat cgnat log-allocation
T6412: CGNAT fix allocation calcluation for verify (#3585)2024-06-06T15:24:01+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-06-06T15:24:01+00:00urn:sha1:7a0d80e11326622021e1b282df0d3aac0b233ba1
Fix external address/port allocation for CGN.
It fixes some cases where external address/ports can be allocated again
to another user.T6411: CGNAT fix sequences for external address ranges2024-05-28T13:06:51+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-05-28T13:06:51+00:00urn:sha1:55e02bef4f3aeff5e33cddc79f22b93fc671e491
Fix the bug where address external alocation was not rely on sequences
of the external IP addresses (if set)
T5169: Allow to set CGNAT multiple internal pools2024-05-18T15:13:44+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-05-18T15:13:44+00:00urn:sha1:2371c26b55db133b3864e54f460a046898e55abf
Allow to set multiple CGNAT internal pools
```
set nat cgnat pool internal int-01 range '100.64.0.0/28'
set nat cgnat pool internal int-01 range '100.64.222.11-100.64.222.14'
```
T6364: CGNAT drop hard limit that allows only one translation rule2024-05-18T14:38:03+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-05-18T14:38:03+00:00urn:sha1:a9e461edfc645f07ddfdad7b0d6ab9c9548c73a7
As PoC for CGNAT had a hard limit of using only one translation
rule for one internal pool.
Drop this limit and extend the usage number of the rules.
```
set nat cgnat rule 100 source pool 'int-01'
set nat cgnat rule 100 translation pool 'ext-01'
set nat cgnat rule 120 source pool 'vyos-int-02'
set nat cgnat rule 120 translation pool 'vyos-ext-02'
```
Merge pull request #3464 from sever-sever/T63512024-05-17T08:14:45+00:00Daniil Baturindaniil@vyos.io2024-05-17T08:14:45+00:00urn:sha1:f438fc3cd360f05cdc80e86c61c447d5d04857d7
T6351: CGNAT add verification if the pool exists