Merge branch 'nat-nftables' of github.com:c-po/vyos-1x into current

* 'nat-nftables' of github.com:c-po/vyos-1x: (27 commits)
  nat: T2198: remove "tcp_udp" from "show nat dest stat"x
  Debian: add required dependency on systemd
  nat: T2198: add common ip-protocol validator
  nat: T2198: use Jinja2 macro for common ruleset for SNAT and DNAT
  nat: T2198: restructure DNAT template part for less duplicated code
  nat: T2198: add support for SNAT based on source addresses
  nat: T2198: set default protocol to all to be backwards compatible
  nat: T2198: sync generated SNAT rules with VyOS 1.2
  nat: T2198: sync generated DNAT rules with VyOS 1.2
  nat: T2198: do not run DNAT rule if rule is disabled
  nat: T2198: restructure DNAT template
  nat: T2198: verify translation address for SNAT and DNAT
  nat: T2198: extend verify() for destination ports
  nat: T2198: migrate "log enable" node to only "log"
  nat: T2198: add protocol completion helper and regex constraint
  nat: T2198: migrate "show nat" commands to XML and Python
  nat: T2198: add some basic verify() rules
  nat: T2198: split nat-address-port include into individual files
  nat: T2198: add ipv4-{address,prefix,rage}-exclude validators
  nat: T2198: add new ipv4-range validator
  ...

1 files changed, 98 insertions, 0 deletions

diff --git a/op-mode-definitions/nat.xml b/op-mode-definitions/nat.xml
new file mode 100644
index 000000000..ffaa2cba3
--- /dev/null
+++ b/op-mode-definitions/nat.xml
@@ -0,0 +1,98 @@
+<?xml version="1.0" encoding="UTF-8"?>

+<interfaceDefinition>

+  <node name="show">

+    <children>

+      <node name="nat">

+        <properties>

+          <help>Show Network Address Translation (NAT) information</help>

+        </properties>

+        <children>

+          <node name="source">

+            <properties>

+              <help>Show source Network Address Translation (NAT) information</help>

+            </properties>

+            <children>

+              <node name="rules">

+                <properties>

+                  <help>Show configured source NAT rules</help>

+                </properties>

+                <command>echo To be migrated to Python - https://phabricator.vyos.net/T2459</command>

+              </node>

+              <node name="statistics">

+                <properties>

+                  <help>Show statistics for configured source NAT rules</help>

+                </properties>

+                <command>${vyos_op_scripts_dir}/show_nat_statistics.py --source</command>

+              </node>

+              <node name="translations">

+                <properties>

+                  <help>Show active source NAT translations</help>

+                </properties>

+                <children>

+                  <tagNode name="address">

+                    <properties>

+                      <help>Show active source NAT translations for an IP address</help>

+                      <completionHelp>

+                        <list>&lt;x.x.x.x&gt;</list>

+                      </completionHelp>

+                    </properties>

+                    <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=source --verbose --ipaddr="$6"</command>

+                  </tagNode>

+                  <node name="detail">

+                    <properties>

+                      <help>Show active source NAT translations detail</help>

+                    </properties>

+                    <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=source --verbose</command>

+                  </node>

+                </children>

+                <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=source</command>

+              </node>

+            </children>

+          </node>

+          <node name="destination">

+            <properties>

+              <help>Show destination Network Address Translation (NAT) information</help>

+            </properties>

+            <children>

+              <node name="rules">

+                <properties>

+                  <help>Show configured destination NAT rules</help>

+                </properties>

+                <command>echo To be migrated to Python - https://phabricator.vyos.net/T2459</command>

+              </node>

+              <node name="statistics">

+                <properties>

+                  <help>Show statistics for configured destination NAT rules</help>

+                </properties>

+                <command>${vyos_op_scripts_dir}/show_nat_statistics.py --destination</command>

+              </node>

+              <node name="translations">

+                <properties>

+                  <help>Show active destination NAT translations</help>

+                </properties>

+                <children>

+                  <tagNode name="address">

+                    <properties>

+                      <help>Show active NAT destination translations for an IP address</help>

+                      <completionHelp>

+                        <list>&lt;x.x.x.x&gt;</list>

+                      </completionHelp>

+                    </properties>

+                    <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=destination --verbose --ipaddr="$6"</command>

+                  </tagNode>

+                  <node name="detail">

+                    <properties>

+                      <help>Show active destination NAT translations detail</help>

+                    </properties>

+                    <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=destination --verbose</command>

+                  </node>

+                </children>

+                <command>${vyos_op_scripts_dir}/to_be_migrated/vyatta-nat-translations.pl --type=destination</command>

+              </node>

+            </children>

+          </node>

+        </children>

+      </node>

+    </children>

+  </node>

+</interfaceDefinition>