OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • What does this 'really' mean ...
« previous next »
  • Print
Pages: [1]

Author Topic: What does this 'really' mean ...  (Read 1983 times)

BenKenobi

  • Newbie
  • *
  • Posts: 23
  • Karma: 4
    • View Profile
What does this 'really' mean ...
« on: April 12, 2018, 05:49:52 pm »
In the latest 'update' notice I see this phrase

"Three mentionable changes are included: We are switching back to single-source NAT on the primary IP instead of using all additional VIPs on the interface. "

This means what to me exactly - since I DO use VIP's (well Alias's) - I have an allocation of IP's and I use 4 of them for NAT onto internal servers - I don't use the 'primary' IP for any of this which I am taking to mean the root IP of the allocation.

If I read this correctly it is 'cannot use VIP for NAT any more' - which is a show stopper for me.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13699
  • Karma: 1178
    • View Profile
Re: What does this 'really' mean ...
« Reply #1 on: April 12, 2018, 06:10:56 pm »
Hi there,

18.1.6 restores the pre-18.1 automatic outbound NAT behaviour for VIPs: ignore instead of use. This isn't perfectly clear from the notes, I agree..

We've gone through this due to a larger rework and then early 18.1 indicated that this was a suboptimal solution.

A way was found to keep the rework and still limit the automatic outbound NAT usage to non-VIP like it was in 17.7 and earlier.

This shouldn't be a show stopper in any way. :)


Cheers,
Franco
Logged

BenKenobi

  • Newbie
  • *
  • Posts: 23
  • Karma: 4
    • View Profile
Re: What does this 'really' mean ...
« Reply #2 on: April 12, 2018, 06:15:18 pm »
Got it - just checking, nothing worse than spending 4 hours rebuilding after not paying heed to such things.

Appreciate the speed of response.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13699
  • Karma: 1178
    • View Profile
Re: What does this 'really' mean ...
« Reply #3 on: April 12, 2018, 06:16:18 pm »
https://github.com/opnsense/changelog/commit/6d02ad3c3a9

The changelogs were pushed to the mirrors to reflect that correction. It may take a few hours for all mirrors to sync up with this change.


Cheers,
Franco
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • What does this 'really' mean ...
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2