| Age | Commit message (Collapse) | Author |
|---|
|
T7181: VPP Static and dynamic NAT
|
|
New CLI for static and dynamic NAT:
```
set vpp nat44 interface outside <interface> # multi
set vpp nat44 interface inside <interface> # multi
set vpp nat44 address-pool translation interface <interface> # multi
set vpp nat44 address-pool translation address <address> # multi
set vpp nat44 address-pool twice-nat interface <interface> # multi
set vpp nat44 address-pool twice-nat address <address> # multi
set vpp nat44 static rule <rule> external address <address>
set vpp nat44 static rule <rule> external port <port>
set vpp nat44 static rule <rule> local address <address>
set vpp nat44 static rule <rule> local port <port>
set vpp nat44 static rule <rule> protocol <protocol>
set vpp nat44 static rule <rule> options twice-nat
set vpp nat44 static rule <rule> options self-twice-nat
set vpp nat44 static rule <rule> options out-to-in-only
set vpp nat44 static rule <rule> options twice-nat-address <address>
set vpp nat44 exclude rule <rule> protocol <protocol>
set vpp nat44 exclude rule <rule> local-port <port>
set vpp nat44 exclude rule <rule> local-address <address>
set vpp nat44 exclude rule <rule> external-interface <interface>
```
Settings:
```
set vpp settings nat44 session-limit <limit> # default 64512
set vpp settings nat44 timeout udp <sec> # default 300
set vpp settings nat44 timeout tcp-established <sec> # default 7440
set vpp settings nat44 timeout tcp-transitory <sec> # default 240
set vpp settings nat44 timeout icmp <sec> # default 60
set vpp settings nat44 workers <list>
set vpp settings nat44 no-forwarding
```
|
|
New CLI
```
set vpp nat44 static rule 10 outside-interface 'eth0'
set vpp nat44 static rule 10 inside-interface 'eth1'
set vpp nat44 static rule 10 external address 192.168.122.10
set vpp nat44 static rule 10 external port 6545 # optional
set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all"
set vpp nat44 static rule 10 local address 100.64.0.10
set vpp nat44 static rule 10 local port 64010 # optional
```
|
|
* T7283: VPP add static NAT support
Add static mapping NAT implementation
```
set vpp nat44 static rule 10 outbound-interface 'eth0'
set vpp nat44 static rule 10 inbound-interface 'eth1'
set vpp nat44 static rule 10 destination address 192.168.122.10 # optional, if not set outbound interface ip address is used
set vpp nat44 static rule 10 destination port 6545 # optional
set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all"
set vpp nat44 static rule 10 translation address 100.64.0.10
set vpp nat44 static rule 10 translation port 64010 # optional
```
* Improve help strings (Daniil Baturin)
---------
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
T7189: VPP source of the tunnel interface should be checked and configured
|
|
T7181: VPP add initial source NAT implentation
|
|
Changed priority for VPP interfaces: all VPP interfaces must be configured after Ethernet interfaces
|
|
T7200: Reduce memory size usage for vpp smoke tests
|
|
T7202: VPP allow to bridge bonding interfaces
|
|
Allow to bridge bonding interfaces:
```
set vpp interfaces bonding bond0 member interface 'eth1'
set vpp interfaces bridge br10 member interface bond0
```
|
|
vd-275: Add loopback bvi interface for a bridge member
|
|
add more memory validation
|
|
Allow to configure VPP loopback interface as BVI interface
In the VPP a bridge-domain is the L2 bridge and does not have
its own interface
Loopback is required if we want to ping from/to the bridge.
```
set vpp interfaces bridge br10 member interface lo23 bvi
```
|
|
VD-279: Use common IPv6 naming for CLI
|
|
Rename node `ip6` to common `ipv6` for vpp settings
|
|
Skip the bonding test as CI stucks on it
But this test works fine in the local VM
|
|
|
|
Add required IP addresses on the interface eth1 which is a source
of a tunnel
|
|
T7073: Verify VPP buffers page size
|
|
T7077: Verify VPP memory default-hugepage-size
T7079: Verify VPP memory main-heap-page-size
T7080: Verify VPP statseg page-size
get available hugepage sizes
align memory main-heap-size by page size
validate host_resources max_map_count
|
|
T7074: VPP add check for interface RX mode changes
|
|
Add initial source NAT implementation
```
set vpp nat44 source inbound-interface 'eth2'
set vpp nat44 source outbound-interface 'eth1'
set vpp nat44 source translation address '192.0.2.1-192.0.2.2'
```
Add initial simple implementation of the source NAT
In the future, we'll extend it to the rules if it is possible to do
via VPP API
|
|
T7168: Add IPsec XFRM netlink plugin and CLI
|
|
vpp: T7068: Add range validation for unix poll-sleep-usec
|
|
|
|
T7067: VPP CPU corelist-workers should be calculated and verified
|
|
Add linux-xfrm-nl plugin
Add configuration commands for VPP IPsec
```
set vpp settings ipsec interface-type 'ipsec'
set vpp settings ipsec netlink batch-delay-ms '250'
set vpp settings ipsec netlink batch-size '150'
set vpp settings ipsec netlink rx-buffer-size '1024'
```
|
|
|
|
|
|
T7071: VPP CPU inverted range of corelist-workers has to be verified and not applied
|
|
T7072: VPP CPU skip-cores should be verified
|
|
applied
|
|
|
|
T7069: VPP check for CPU main core
|
|
|
|
|
|
T7075: VPP check driver's options before apply
|
|
|
|
|
|
T7066: VPP CPU workers verification
|
|
T7076: VPP check ethernet interface exist
|
|
|
|
|
|
Skip bonding test to check the building, from time to time
tests (bond) got recursion as in https://vyos.dev/T7117
|
|
|
|
|
|
|
|
|
|
This reverts commit 405d3ee7ac909bbf458f522e6539a1f4eacdf7e6.
|
|
Use lcp_nl_resync (available with patch 04)
0004-Improved-lcp-resync.patch
It improves sync speed and should fix or smoketest issues related to connecting to VPP API speed
|
