Page MenuHomeVyOS Platform

Commit errors on removing VPP NAT44 rules
Closed, ResolvedPublicBUG

Description

Commit fails on static rule removal:

vyos@vyos# run sh conf comm|grep vpp
set vpp nat44 address-pool translation interface 'eth4'
set vpp nat44 interface inside 'eth7'
set vpp nat44 interface outside 'eth4'
set vpp nat44 static rule 100 external address '192.0.0.2'
set vpp nat44 static rule 100 local address '192.168.102.1'
set vpp settings interface eth4 driver 'dpdk'
set vpp settings interface eth7 driver 'dpdk'
[edit]

vyos@vyos# del vpp nat44 static rule 100
[edit]

vyos@vyos# commit
[ vpp nat44 ]
Traceback (most recent call last):
  File "/usr/libexec/vyos/services/vyos-configd", line 146, in run_script
    script.verify(c)
  File "/usr/libexec/vyos/conf_mode/vpp_nat.py", line 243, in verify
    for rule, rule_config in config['static']['rule'].items():
                             ~~~~~~~~~~~~~~~~^^^^^^^^
KeyError: 'rule'

[[vpp nat44]] failed
Commit failed

If use 'del vpp nat44 static' commit works:

vyos@vyos# del vpp nat44 static
[edit]
vyos@vyos# comp
[vpp nat44]
- static {
-     rule 100 {
-         external {
-             address "192.0.0.2"
-         }
-         local {
-             address "192.168.102.1"
-         }
-     }
- }
vyos@vyos# commit
[edit]
vyos@vyos#

Details

Version
2025.11.25-0019-rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

Viacheslav triaged this task as Normal priority.Tue, Nov 25, 5:25 AM
natali-rs1985 changed the task status from Open to In progress.Tue, Nov 25, 11:23 AM
natali-rs1985 claimed this task.
natali-rs1985 changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
natali-rs1985 moved this task from Need Triage to Completed on the VyOS Rolling board.
dmbaturin renamed this task from VPP: Commit fails removing nat44 static rule to Commit errors on removing VPP NAT44 rules.Thu, Dec 4, 8:59 PM
dmbaturin removed a project: VyOS Rolling.