Skip to content

Conversation

@natali-rs1985
Copy link
Contributor

Change Summary

Related Task(s)

Related PR(s)

vyos/vyos-1x#4880

Backport

Checklist:

@natali-rs1985 natali-rs1985 requested a review from zdc November 28, 2025 16:27
@natali-rs1985 natali-rs1985 changed the title vpp: T7972: Improve nat44 no-forwarding feature name and description in CLI vpp: T7972: Delete option nat44 no-forwarding from CLI Dec 3, 2025
Comment on lines +35 to +41
How NAT Rules are Applied
-------------------------

1. **Dynamic Rules only**: The router will try to apply those rules to all incoming traffic, and everything else passes normally
2. **Static + Dynamic Rules**: The router uses static rules first, and uses dynamic ones only when no static rule applies.
3. **Static Rules only**: Only the traffic you explicitly define in a static rule gets translated. Everything else passes untouched.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
How NAT Rules are Applied
-------------------------
1. **Dynamic Rules only**: The router will try to apply those rules to all incoming traffic, and everything else passes normally
2. **Static + Dynamic Rules**: The router uses static rules first, and uses dynamic ones only when no static rule applies.
3. **Static Rules only**: Only the traffic you explicitly define in a static rule gets translated. Everything else passes untouched.
NAT Rule Processing and Traffic Flow
------------------------------------
This section explains how different combinations of NAT rules affect traffic handling on a router. There are three possible combinations of NAT rules configurations:
1. **Dynamic NAT Only**
* **All** traffic received on the "in" interface is processed by dynamic NAT rules without exceptions.
2. **Dynamic + Static NAT**
* **All** traffic received on the "in" interface is first matched against static NAT rules.
* If no match is found, it is then processed by dynamic NAT rules.
3. **Static NAT Only**
* **All** traffic on the "in" interface is checked against static NAT rules.
* If no match is found, the traffic is routed **without NAT**.
.. important::
* If **dynamic NAT rules** are present, **all** traffic received on "in" interfaces is subject to NAT processing.
* If **only static NAT rules** are configured, traffic that does not match any static rule is routed unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants