vyos-1x.git/src/conf_mode/vpp_nat_cgnat.py, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2026-04-02T11:27:22+00:00vpp: T8438: Add bidirectional interface-in-use validation2026-04-02T11:27:22+00:00Nataliia Solomkonatalirs1985@gmail.com2026-04-02T10:57:19+00:00urn:sha1:3139ba759c21800386bc1aa127dd95bc63229362
Add bidirectional VPP interface reference validation: prevent assigning an interface used by a VPP feature (NAT/ACL/IPFIX/sFlow, etc.)
as a VPP member (bond/bridge/xconnect) and prevent using a VPP member interface in VPP features.
Block interface deletion when it is still referenced by any VPP feature/member.
Fix VLAN subinterface removal checks broken by the recent VPP config tree restructuring.
vpp: T8368: Features nat44 and cgnat should not use the same interfaces2026-03-13T12:26:42+00:00Nataliia Solomkonatalirs1985@gmail.com2026-03-13T12:13:37+00:00urn:sha1:87d9d1e801f7306439dcd79d3c9876225f983111T7513: vyos-1x: CGNAT Exclude Rule CLI support2026-02-26T09:16:15+00:00Ritika Choprar.chopra@vyos.io2026-02-06T21:25:52+00:00urn:sha1:80727823e8ac309959a06f8aaeb0e12f2f7a1f43T7949: VPP add the ability to configure bond subinterfaces for NAT2025-10-23T10:22:57+00:00Nataliia Solomkonatalirs1985@gmail.com2025-10-23T10:21:57+00:00urn:sha1:3b6f7ea3406a22dcc6fd4bb50b1febfac7eab907T7750: VPP: CGNAT commit failure with vpptunX interface2025-10-14T12:41:37+00:00Nataliia Solomkonatalirs1985@gmail.com2025-10-07T15:21:06+00:00urn:sha1:888eec975ff765216e4c65ba15ed9176d7dee7ea
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely
on VPP API queries, as VPP config changes may modify interface indexes
T7697: Remove year from copyright2025-08-07T15:43:25+00:00Viacheslavv.gletenko@vyos.io2025-08-07T15:43:25+00:00urn:sha1:6801f0ef7365556d1c8eb60aeed01789a7620cb7T7488: Make VPP restartable2025-05-28T11:48:07+00:00Nataliia Solomkonatalirs1985@gmail.com2025-05-27T11:27:50+00:00urn:sha1:31beaf550786502f5b62034c6e4b2e0e52508f8cT7390: VPP CGNAT implementation (#30)2025-05-01T17:15:32+00:00Nataliia S.81954790+natali-rs1985@users.noreply.github.com2025-05-01T17:15:32+00:00urn:sha1:528248af9628c3170b4eac399f0bb339072d8eae
CLI:
```
set vpp nat cgnat interface outside <interface> # multi
set vpp nat cgnat interface inside <interface> # multi
set vpp nat cgnat rule <rule> outside-prefix <prefix>
set vpp nat cgnat rule <rule> inside-prefix <prefix>
set vpp nat cgnat timeout udp <sec> # default 300
set vpp nat cgnat timeout tcp-established <sec> # default 7440
set vpp nat cgnat timeout tcp-transitory <sec> # default 240
set vpp nat cgnat timeout icmp <sec> # default 60
```
OP mode:
```
show vpp nat cgnat interfaces
show vpp nat cgnat mappings
show vpp nat cgnat sessions
clear vpp cgnat inside-address <address> port <port> external-address <address> port <port>
```