Hi, If we enable dynamic NAT, then TCP packets are no longer punted or even seen on tap interfaces, as they are simply dropped if there's no matching translation. This isn't ideal since we still want to be able to process packets that are meant for us, for example if our interface address is not used in the NAT pool. We could enable "nat44 forwarding", but that essentially breaks dynamic NAT as it only works with endpoint dependent NAT and static mappings.
I suspect we should fiddle with the order of the graph nodes but I'd love a pointer. John
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12714): https://lists.fd.io/g/vpp-dev/message/12714 Mute This Topic: https://lists.fd.io/mt/30923501/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
