Hi, folks

 

Netfilter added a shifted port range mapping function in Linux kernel 4.19,  it 
looks like this:

 

iptables -t nat -A zone_wan_prerouting -p tcp -m tcp --dport 5000:5100 -j DNAT 
--to-destination '192.168.1.2:2000-2100/5000'

 

5000-51000 is mapped to 2000-2100

 

Can ovs ct action do this? If not, can it do the below case?

 

iptables -t nat -A zone_wan_prerouting -p tcp -m tcp --dport 5000:5100 -j DNAT 
--to-destination '192.168.1.2:5000-5100'

 

I’m wondering how we can use openflow to express this precisely, tcp dport 
range expression is also a big problem.

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to