Yes your understanding is right. Today there is a tight dependency on the SNAT namespace when a gateway is attached.
The _create_snat_interfaces_after_change creates SNAT interface ports. This is basically required for the compute node traffic to reach the gateway.( Basically required now for the 'dvr_no_external' agents.
Basically the 'enable_snat' or 'disable_snat' should be only targeting the SNAT rules in the SNAT namespace. Otherwise this should be intact.
Yes your understanding is right. Today there is a tight dependency on the SNAT namespace when a gateway is attached.
The _create_ snat_interfaces _after_ change creates SNAT interface ports. This is basically required for the compute node traffic to reach the gateway.( Basically required now for the 'dvr_no_external' agents.
Basically the 'enable_snat' or 'disable_snat' should be only targeting the SNAT rules in the SNAT namespace. Otherwise this should be intact.