From fa293316e679645e6397697428cee96e32e346fc Mon Sep 17 00:00:00 2001
From: Nataliia Solomko <natalirs1985@gmail.com>
Date: Wed, 23 Apr 2025 15:11:16 +0300
Subject: T7181: VPP Static and dynamic NAT

New CLI for static and dynamic NAT:
```
set vpp nat44 interface outside <interface>                     # multi
set vpp nat44 interface inside <interface>                      # multi
set vpp nat44 address-pool translation interface <interface>    # multi
set vpp nat44 address-pool translation address <address>        # multi
set vpp nat44 address-pool twice-nat interface <interface>      # multi
set vpp nat44 address-pool twice-nat address <address>                  # multi

set vpp nat44 static rule <rule> external address <address>
set vpp nat44 static rule <rule> external port <port>
set vpp nat44 static rule <rule> local address <address>
set vpp nat44 static rule <rule> local port <port>
set vpp nat44 static rule <rule> protocol <protocol>
set vpp nat44 static rule <rule> options twice-nat
set vpp nat44 static rule <rule> options self-twice-nat
set vpp nat44 static rule <rule> options out-to-in-only
set vpp nat44 static rule <rule> options twice-nat-address <address>

set vpp nat44 exclude rule <rule> protocol <protocol>
set vpp nat44 exclude rule <rule> local-port <port>
set vpp nat44 exclude rule <rule> local-address <address>
set vpp nat44 exclude rule <rule> external-interface <interface>
```
Settings:
```
set vpp settings nat44 session-limit <limit>            # default 64512
set vpp settings nat44 timeout udp <sec>                # default 300
set vpp settings nat44 timeout tcp-established <sec>    # default 7440
set vpp settings nat44 timeout tcp-transitory <sec>     # default 240
set vpp settings nat44 timeout icmp <sec>               # default 60
set vpp settings nat44 workers <list>
set vpp settings nat44 no-forwarding
```
---
 .../include/vpp/nat_address_range.xml.i            | 20 +++++++++++++++
 .../include/vpp/nat_interface.xml.i                | 11 ++++++++
 .../include/vpp/nat_protocol.xml.i                 | 30 ++++++++++++++++++++++
 3 files changed, 61 insertions(+)
 create mode 100644 interface-definitions/include/vpp/nat_address_range.xml.i
 create mode 100644 interface-definitions/include/vpp/nat_interface.xml.i
 create mode 100644 interface-definitions/include/vpp/nat_protocol.xml.i

(limited to 'interface-definitions/include')

diff --git a/interface-definitions/include/vpp/nat_address_range.xml.i b/interface-definitions/include/vpp/nat_address_range.xml.i
new file mode 100644
index 000000000..48648f91a
--- /dev/null
+++ b/interface-definitions/include/vpp/nat_address_range.xml.i
@@ -0,0 +1,20 @@
+<!-- include start from vpp/nat_address_range.xml.i -->
+<leafNode name="address">
+  <properties>
+    <help>IP address or range</help>
+    <valueHelp>
+      <format>ipv4</format>
+      <description>IPv4 address</description>
+    </valueHelp>
+    <valueHelp>
+      <format>ipv4range</format>
+      <description>IPv4 address range</description>
+    </valueHelp>
+    <constraint>
+      <validator name="ipv4-address"/>
+      <validator name="ipv4-range"/>
+    </constraint>
+    <multi/>
+  </properties>
+</leafNode>
+<!-- include end -->
diff --git a/interface-definitions/include/vpp/nat_interface.xml.i b/interface-definitions/include/vpp/nat_interface.xml.i
new file mode 100644
index 000000000..20a7356bf
--- /dev/null
+++ b/interface-definitions/include/vpp/nat_interface.xml.i
@@ -0,0 +1,11 @@
+<!-- include start from vpp/nat_interface.xml.i -->
+<leafNode name="interface">
+  <properties>
+    <help>Add IP address from an interface</help>
+    <completionHelp>
+      <script>${vyos_completion_dir}/list_interfaces</script>
+    </completionHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<!-- include end -->
diff --git a/interface-definitions/include/vpp/nat_protocol.xml.i b/interface-definitions/include/vpp/nat_protocol.xml.i
new file mode 100644
index 000000000..b88fd2b62
--- /dev/null
+++ b/interface-definitions/include/vpp/nat_protocol.xml.i
@@ -0,0 +1,30 @@
+<!-- include start from vpp/nat_protocol.xml.i -->
+<leafNode name="protocol">
+  <properties>
+    <help>Protocol</help>
+    <completionHelp>
+      <list>tcp udp icmp all</list>
+    </completionHelp>
+    <valueHelp>
+      <format>all</format>
+      <description>All protocols (TCP, UDP, and ICMP)</description>
+    </valueHelp>
+    <valueHelp>
+      <format>icmp</format>
+      <description>Internet Control Message Protocol (ICMP)</description>
+    </valueHelp>
+    <valueHelp>
+      <format>tcp</format>
+      <description>Transmission Control Protocol (TCP)</description>
+    </valueHelp>
+    <valueHelp>
+      <format>udp</format>
+      <description>User Datagram Protocol (UDP)</description>
+    </valueHelp>
+    <constraint>
+      <regex>(tcp|udp|icmp|all)</regex>
+    </constraint>
+  </properties>
+  <defaultValue>all</defaultValue>
+</leafNode>
+<!-- include end -->
-- 
cgit v1.2.3