Page MenuHomeVyOS Platform

Revert the NAT implementation in 1.3 back to iptables
Closed, ResolvedPublicBUG

Description

NETMAP support in nftables requires kernel 5.10, and backporting it to 5.4 is far from trivial—likely not even possible.

The problem is that as of August 2021, Intel QAT doesn't work with the kernel 5.10, so we can't upgrade to it. Thus, for now at least, we have no way to support NETMAP in 1.3, other than to revert the NAT implementation back to the old Perl scripts that configure NAT with iptables.

Let's do it in a minimally intrusive way so that it's easy to rever back when the QAT issue is fixed.

Details

Difficulty level
Normal (likely a few hours)
Version
1.3.0-rc6
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

dmbaturin renamed this task from Revert the NAT implementation in 1.3 back iptables-based to Revert the NAT implementation in 1.3 back to iptables.Aug 26 2021, 2:35 PM