tree d4829766a1844f761187c70a44b5101363d8637c
parent eca5af965b6d95d953066a298ee896791ee00796
author Lorenz Brun <lorenz@monogon.tech> 1687362032 +0200
committer Lorenz Brun <lorenz@monogon.tech> 1687363452 +0000

m/n/c/network: make SNAT generic

This changes the SNAT/Masquerade rule from being a thing set up per
interface which was only implemented by the dynamic network runnable to
a generic rule set up by the general network service part shared between
the static and dynamic implementations. It also tries to avoid NATing
host-originated traffic. Matching on interface names is argubly ugly but
the alternative is patching CNI plugins, which is also ugly.

Change-Id: I7ec40fc244ae4689b6f96ab87dbebe9a6c43dd70
Reviewed-on: https://review.monogon.dev/c/monogon/+/1844
Reviewed-by: Serge Bazanski <serge@monogon.tech>
Tested-by: Jenkins CI