diff options
| author | Marius Lindvall <marius@varden.info> | 2026-01-01 22:08:54 +0100 |
|---|---|---|
| committer | Marius Lindvall <marius@varden.info> | 2026-01-01 22:08:54 +0100 |
| commit | 5cf24b4fe790597a78d6061fe4822addbcf5f6bd (patch) | |
| tree | b766fbf387c7b95fae618eba181578e7095c3b18 /data | |
| parent | 76830afc8703a3f9f6be7500cb92aa9b6e255425 (diff) | |
| download | vyos-1x-5cf24b4fe790597a78d6061fe4822addbcf5f6bd.tar.gz vyos-1x-5cf24b4fe790597a78d6061fe4822addbcf5f6bd.zip | |
T8138: add nat66 as dependent of firewall groups
Add nat66 as a dependency of firewall groups, because nat66 may
reference firewall groups via source-destination-group-ipv6.xml.i. The
dependency is necessary to ensure a fresh nft ruleset is built when
dependent groups are updated, so that the changes actually take effect
in nat66 on commit.
Add a smoketest to cover nft rulesets failing to update as a result of
changes to dependent firewall groups.
Original commit adding support for groups in nat66 is commit f96733dd.
Diffstat (limited to 'data')
| -rw-r--r-- | data/config-mode-dependencies/vyos-1x.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/config-mode-dependencies/vyos-1x.json b/data/config-mode-dependencies/vyos-1x.json index eb2cb2a04..47a83ca0a 100644 --- a/data/config-mode-dependencies/vyos-1x.json +++ b/data/config-mode-dependencies/vyos-1x.json @@ -5,7 +5,7 @@ }, "firewall": { "conntrack": ["system_conntrack"], - "group_resync": ["system_conntrack", "nat", "policy_route", "load-balancing_wan"] + "group_resync": ["system_conntrack", "nat", "nat66", "policy_route", "load-balancing_wan"] }, "interfaces_bonding": { "ethernet": ["interfaces_ethernet"], |