Page MenuHomeVyOS Platform

Increase maximum number of NAT rules
Closed, ResolvedPublicENHANCEMENT


The current maximum of 9999 can be very limiting when having a custom numbering system (I use a 2-digit prefix that identifies all rules for a single destination IP and a 2-digit suffix for the rule number for that IP). I'm running into a situation where I need to configure more than 100 sub-rules for a single destination IP, this means I'd need to break my numbering system.

An easy fix would be to increase the maximum to 99999 or even 999999.


Difficulty level
Easy (less than an hour)
Why the issue appeared?
Design mistake
Is it a breaking change?
Perfectly compatible
Issue type
Improvement (missing useful functionality)

Related Objects

Mentioned In

Event Timeline

jjakob triaged this task as Normal priority.Aug 6 2020, 11:35 AM
jjakob created this task.
jjakob created this object in space S1 VyOS Public.

This will be a oneliner in the new XML implementation. Just send PR

jjakob changed the task status from Open to In progress.Aug 6 2020, 3:37 PM
jjakob claimed this task.
jjakob moved this task from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
jjakob changed the subtype of this task from "Task" to "Enhancement".
erkin set Issue type to Improvement (missing useful functionality).Aug 29 2021, 1:33 PM
erkin removed a subscriber: Active contributors.
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
syncer moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Unknown Object (User) reopened this task as Confirmed.Dec 25 2021, 6:07 AM
Unknown Object (User) added a subscriber: Unknown Object (User).

In 1.3.0 the limitation remains

This happened because the rule numbers only got increased in the XML implementation but not in the old Perl backend. This has been fixed.

c-po changed Difficulty level from Unknown (require assessment) to Easy (less than an hour).
c-po changed Why the issue appeared? from Will be filled on close to Design mistake.
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.