Not sure if Jool supports it.
As I understand, it is better to have a separate address for translations, otherwise, you should define ports for 64 translations. If you set 1-65535 for the "main" address, you will lose connections and can't use those ports for the system (they will be available only for translations)
Jool uses its own bib table instead of conntrack to manage nat mappings.
So you should add a separate pool only for translations.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Dec 21 2023
Dec 20 2023
Is it possible to add a feature of setting the translation pool address to follow an interface IP address similar to nat44's source masquerade for those with dynamic public IPv4 addresses?
PR for 1.5: https://github.com/vyos/vyos-build/pull/476
Also while at it, the smoketests regarding UPnP should probably be updated by this task aswell since they claim everything is OK:
configuration for dhcp reservation with just mac address doesn't give configuration exception, but cause an error to kea directly as ERROR [kea-dhcp4.dhcp4/49022.140176366361024] DHCP4_PARSER_FAIL failed to create or run parser for configuration element shared-networks: specified reservation for DUID: hwtype=1 xx:xx:xx:xx:xx:xx must include at least one resource, i.e. hostname, IPv4 address, IPv6 address/prefix, options (/run/kea/kea-dhcp4.conf:59:5)
Dec 19 2023
Thanks for that heads-up @Viacheslav - My bigger concern with this task was the failure-mode of the configuration problem being so unexpected and hard to troubleshoot.
@Viacheslav I upgraded to the latest rolling release and this seems to work perfectly.
So, I tested the version 1.5-rolling-202312191154
Firstly, this bug should be fixed T5837
Dec 18 2023
In T5775#168092, @marvin wrote:Excellent; thanks @GurliGebis! I built 1.4 today and confirmed it's working as expected.
As far as I'm concerned, this issue is now resolved and the ticket can now be closed.
Excellent; thanks @GurliGebis! I built 1.4 today and confirmed it's working as expected.
Yes it should trigger to recreate container but it doesn’t get a dictionary key for recreating
In my case, the container is created and running using IPv4 only. The network it is in has a defined prefix for IPv4 and IPv6. Then, the only thing I try to do is add an IPv6 address to the container. The network it is connected to already has the IPv6 prefix defined. That is when it dies.
The mentioned file that missing is located upstream in https://github.com/miniupnp/miniupnp/tree/miniupnpd_2_3_1/miniupnpd/netfilter_nft/scripts
and the upstream configuration options that we think are missing to match vyos chains is https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1/miniupnpd/miniupnpd.conf#L77
Could you point out some documentation/examples on which scripts are missing?
It seems it has never been tested since @jack9603301 implemented it in task T3420. It seems he also didn't test it.
Adding a new container with both addresses and networks in one commit works fine.
set container name alp01 image 'alpine' set container name alp01 network NET01 address '10.0.0.12' set container name alp01 network NET01 address '2001:db8::12' set container network NET01 prefix '10.0.0.0/24' set container network NET01 prefix '2001:db8::/64'
/config/dhcp4.leases ownership seem to change when migrating to latest 1.5-rolling-202312171632