diff options
| author | Ruben Herold <ruben@puettmann.net> | 2026-09-25 15:37:27 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-09-25 14:37:27 +0100 |
| commit | 75d44591ed7cd7b6246f5d5f48722d70d11f7b98 (patch) | |
| tree | 8962445cbf1362c88c831fbf53711789b8d6775a /docs/contributing/debugging.md | |
| parent | 93f84b050c90cb2d21d5216fc9d54fbcd118f407 (diff) | |
| download | vyos-documentation-75d44591ed7cd7b6246f5d5f48722d70d11f7b98.tar.gz vyos-documentation-75d44591ed7cd7b6246f5d5f48722d70d11f7b98.zip | |
docs: T9157: document firewall fib-type match (#2186)
* docs: T9157: document firewall fib-type match
Companion doc entry for vyos/vyos-1x#5372, which adds
"fib-type" as a source/destination match option
(nftables' fib daddr/saddr type expression) for
forward/input/output/name rule sets, ipv4 and ipv6.
* docs: T9157: update fib match docs for fib-type -> fib type rename
Companion vyos-1x PR #5372 restructured the "fib-type" leaf into a
"fib" node with a "type" child (following feedback from l0crian1 and
sarthurdev to reserve the "fib" namespace for a possible future
lookup/match concatenation feature, tracked separately under T5119).
Update the CLI paths and examples here to match, and fix "prohibited"
to "prohibit" to match nftables' actual fib_addrtype token.
* docs: T9157: add prerouting raw fib type reference, fix backtick style
CodeRabbit feedback on #2186:
- the prose showed a "prerouting raw" example but the command
reference only listed forward/input/output/name filter forms, even
though fib.xml.i is also included from common-rule-ipv{4,6}-raw.xml.i
for that hook. Add the missing source/destination cfgcmd entries.
- MyST pages use single backticks for inline code, not double
(that's for embedded RST); fix the fib type prose accordingly.
* docs: T9157: update fib docs for rule-level lookup/match split
Companion vyos-1x PR #5372 moved "fib" from a leaf nested under
destination/source to a rule-level node with separate "lookup"
(source-address/destination-address) and "match route-type" children,
per l0crian1's review feedback - reserving room for mark/iif/oif
lookup keys and oif/oifname match results later (tracked under T5119)
without ever renaming what ships now. Update the CLI paths and
examples here to match.
Diffstat (limited to 'docs/contributing/debugging.md')
0 files changed, 0 insertions, 0 deletions
