Comment 1 for bug 1761591

Revision history for this message
Swaminathan Vasudevan (swaminathan-vasudevan) wrote :

Yes your understanding is right. Today there is a tight dependency on the SNAT namespace when a gateway is attached.

The _create_snat_interfaces_after_change creates SNAT interface ports. This is basically required for the compute node traffic to reach the gateway.( Basically required now for the 'dvr_no_external' agents.

Basically the 'enable_snat' or 'disable_snat' should be only targeting the SNAT rules in the SNAT namespace. Otherwise this should be intact.