summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2024-02-27 21:38:24 +0100
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2024-02-28 19:36:10 +0000
commit88dfa47ded706ea53a7b10ed058ddd5023226896 (patch)
tree90f70d19c3c44f3671c1d77417308356fcbfd7f7 /data
parente1f34b0c019b9771ace1d6c723d4d84658be5cd8 (diff)
downloadvyos-1x-88dfa47ded706ea53a7b10ed058ddd5023226896.tar.gz
vyos-1x-88dfa47ded706ea53a7b10ed058ddd5023226896.zip
vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required
(cherry picked from commit 6f7d1e15665655e37e8ca830e28d9650445c1217)
Diffstat (limited to 'data')
-rw-r--r--data/config-mode-dependencies/vyos-1x.json3
-rw-r--r--data/vyos-firewall-init.conf2
2 files changed, 2 insertions, 3 deletions
diff --git a/data/config-mode-dependencies/vyos-1x.json b/data/config-mode-dependencies/vyos-1x.json
index b0586e0bb..6ab36005b 100644
--- a/data/config-mode-dependencies/vyos-1x.json
+++ b/data/config-mode-dependencies/vyos-1x.json
@@ -1,6 +1,7 @@
{
"system_conntrack": {
- "conntrack_sync": ["service_conntrack-sync"]
+ "conntrack_sync": ["service_conntrack-sync"],
+ "vrf": ["vrf"]
},
"firewall": {
"conntrack": ["system_conntrack"],
diff --git a/data/vyos-firewall-init.conf b/data/vyos-firewall-init.conf
index 5a4e03015..3929edf0b 100644
--- a/data/vyos-firewall-init.conf
+++ b/data/vyos-firewall-init.conf
@@ -65,11 +65,9 @@ table inet vrf_zones {
# Chain for inbound traffic
chain vrf_zones_ct_in {
type filter hook prerouting priority raw; policy accept;
- counter ct original zone set iifname map @ct_iface_map
}
# Chain for locally-generated traffic
chain vrf_zones_ct_out {
type filter hook output priority raw; policy accept;
- counter ct original zone set oifname map @ct_iface_map
}
}