Anapaya appliance configuration (nat only)
nat object
Top-level configuration and state for NAT.
dnats object[]
Top-level configuration and state for the destination NAT.
The IP address that needs to be translated. This is an exact match on the destination IP of packets received from the IP-in-SCION tunnel.
An optional textual description of the destination NAT configuration.
The mapped destination IP address. The destination IP of matched packets is replaced by this IP.
port_mappings object[]
The list of port mappings for the destination NAT. Mandatory when ingress source NAT is enabled as well.
An optional textual description of the port mapping configuration.
The mapped destination port. The destination port of matched packets is replaced by this port.
The destination port that needs to be translated. This is an exact match on the destination port of packets received from the IP-in-SCION tunnel.
Transmission layer protocol. Supported protocols are (tcp, udp).
snat object
Top-level configuration and state for the source NAT.
The list of IP prefixes to use as the source NAT pool.
The list of IP prefixes to exclude from the NAT. The number of IP addresses that can be excluded is limited.
The list of interfaces to do the NAT. These are typically interfaces connected to the local network
{
"nat": {
"dnats": [
{
"address": "string",
"description": "string",
"destination_address": "string",
"port_mappings": [
{
"description": "string",
"destination_port": 0,
"port": 0,
"protocol": "string"
}
]
}
],
"snat": {
"address_pool": [
"string"
],
"exclude": [
"string"
],
"interfaces": [
"string"
]
}
}
}