Re: [j-nsp] Doing SNAT only for destinations learned from a specific BGP peering
Martin Tonusoo via juniper-nsp <[email protected]> Mon, 20 Apr 2026 14:04:02 +0300
| Newsgroups | gmane.network.nsp.juniper |
|---|---|
| Message-ID | <CADJxXUKJbmFEwu6XsXfD62xM6b_w_XEUR3c-Wd+x4nKjcGLC6g@mail.gmail.com> |
SGkuCgpZb3UgbmVlZCBQb3J0IEFkZHJlc3MgVHJhbnNsYXRpb24oUEFUKSBhbmQgdGhpcyBpcyBu b3QgcG9zc2libGUgb24KTVgyMDQuIE9uIE1YODAgaXQncyBwb3NzaWJsZSB0byB1c2UgTVMtTUlD LTE2RyBtdWx0aXNlcnZpY2VzIE1JQyB3aGljaApzZWVtcyB0byBzdXBwb3J0IFBBVDoKaHR0cHM6 Ly93d3cuanVuaXBlci5uZXQvZG9jdW1lbnRhdGlvbi91cy9lbi9oYXJkd2FyZS9teC1tb2R1bGUt cmVmZXJlbmNlL3RvcGljcy9jb25jZXB0L21pYy1teC1zZXJpZXMtbXMuaHRtbAoKQXMgQWxleCBh bmQgVG9tIGFscmVhZHkgbWVudGlvbmVkLCBwZXJoYXBzIHlvdSBjb3VsZCB1c2UgZmlsdGVyLWJh c2VkCmZvcndhcmRpbmcoRkJGKSwgcm91dGluZy1pbnN0YW5jZXMgYW5kIGFuIGV4dGVybmFsIHJv dXRlciBwZXJmb3JtaW5nCnRoZSBQQVQgZnVuY3Rpb25hbGl0eSBhcyBhIHdvcmthcm91bmQuIElu IHByaW5jaXBsZSwgc29tZXRoaW5nIGxpa2UKdGhpczoKClJlc2VhcmNoIG5ldHdvcmsgLT4gZ292 ZXJubWVudCBuZXR3b3JrOgoKMS4gUmV3cml0ZSB0aGUgQkdQIG5leHQtaG9wIGxlYXJuZWQgb24g cHJlZml4ZXMgb24gTDNWUE4gcGVlcmluZyB0byBhbgphZGRyZXNzIG9mIGFuIExpbnV4IHJvdXRl cjoKCnJvb3RAbXg+IHNob3cgY29uZmlndXJhdGlvbiBwcm90b2NvbHMgYmdwIGdyb3VwIGFzNjAK YWNjZXB0LXJlbW90ZS1uZXh0aG9wOwppbXBvcnQgcmV3cml0ZS1uaDsKLyogYXMgdHJhZmZpYyB0 byBMM1ZQTiBpcyBTTkFUZWQsIHRoZW4gdGhlcmUgaXMgbm8gbmVlZCB0byBleHBvcnQgcm91dGVz ICovCmV4cG9ydCByZWplY3QtYWxsOwovKiBMM1ZQTiBjb25uZWN0aW9uICovCm5laWdoYm9yIDEw LjEuMS4wIHsKICAgIHBlZXItYXMgNjA7Cn0KCnJvb3RAbXg+Cgpyb290QG14PiBzaG93IGNvbmZp Z3VyYXRpb24gcG9saWN5LW9wdGlvbnMgcG9saWN5LXN0YXRlbWVudCByZXdyaXRlLW5oCnRoZW4g ewogICAgbmV4dC1ob3AgMTAuMi4yLjA7CiAgICBhY2NlcHQ7Cn0KCnJvb3RAbXg+CgoKMi4gTGlu dXggcm91dGVyIHJlY2VpdmVzIHBhY2tldHMgb24gVkxBTiBpbnRlcmZhY2Ugd2l0aCAxMC4yLjIu MC8zMQpjb25maWd1cmVkLCBwZXJmb3JtcyB0aGUgUEFUIGFuZCBzZW5kcyBwYWNrZXRzIGJhY2sg dG8gSnVuaXBlciByb3V0ZXI6CgojIGlwIC00IHIKZGVmYXVsdCB2aWEgMTAuNy43LjEgZGV2IGVu cDdzMC40MCBwcm90byBzdGF0aWMKMTAuMi4yLjAvMzEgZGV2IGVucDdzMC4yMCBwcm90byBrZXJu ZWwgc2NvcGUgbGluayBzcmMgMTAuMi4yLjAKMTAuNy43LjAvMzEgZGV2IGVucDdzMC40MCBwcm90 byBrZXJuZWwgc2NvcGUgbGluayBzcmMgMTAuNy43LjAKMTAuOC44LjAvMzEgZGV2IGVucDdzMC41 MCBwcm90byBrZXJuZWwgc2NvcGUgbGluayBzcmMgMTAuOC44LjAKIwojIG5mdCBsaXN0IHRhYmxl IGlwIG5hdAp0YWJsZSBpcCBuYXQgewogICAgICAgIGNoYWluIHBvc3Ryb3V0aW5nIHsKICAgICAg ICAgICAgICAgIHR5cGUgbmF0IGhvb2sgcG9zdHJvdXRpbmcgcHJpb3JpdHkgc3JjbmF0OyBwb2xp Y3kgYWNjZXB0OwogICAgICAgICAgICAgICAgb2lmbmFtZSAiZW5wN3MwLjQwIiBzbmF0IHRvIDEw LjEuMS4xCiAgICAgICAgfQp9CiMKCgozLiBKdW5pcGVyIHJvdXRlciByZWNlaXZlcyBQQVRlZCBw YWNrZXRzIG9uIGludGVyZmFjZSB3aXRoIDEwLjcuNy4xLzMxCmNvbmZpZ3VyZWQgYW5kIHRoaXMg aW50ZXJmYWNlIGlzIGluIHJvdXRpbmcgaW5zdGFuY2UgbmFtZWQKImZyb20tbGludXgtcm91dGVy IjoKCnJvb3RAbXg+IHNob3cgY29uZmlndXJhdGlvbiByb3V0aW5nLWluc3RhbmNlcyBmcm9tLWxp bnV4LXJvdXRlcgppbnN0YW5jZS10eXBlIHZpcnR1YWwtcm91dGVyOwpyb3V0aW5nLW9wdGlvbnMg ewogICAgc3RhdGljIHsKICAgICAgICByb3V0ZSAwLjAuMC4wLzAgbmV4dC1ob3AgMTAuMS4xLjA7 CiAgICB9Cn0KaW50ZXJmYWNlIGdlLTAvMC8xLjQwOwoKcm9vdEBteD4KCgo0LiBCZXNpZGVzIHRo ZSBkZWZhdWx0IHJvdXRlIHBvaW50aW5nIHRvIEwzVlBOIG5laWdoYm9yIDEwLjEuMS4wLCB0aGUK UklCIGFzc29jaWF0ZWQgd2l0aCAiZnJvbS1saW51eC1yb3V0ZXIiIGFsc28gY29udGFpbnMgc2Vs ZWN0ZWQgZGlyZWN0CmFuZCBsb2NhbCByb3V0ZXM6Cgpyb290QG14PiBzaG93IGNvbmZpZ3VyYXRp b24gcm91dGluZy1vcHRpb25zCmludGVyZmFjZS1yb3V0ZXMgewogICAgcmliLWdyb3VwIGluZXQg ZGlyZWN0LXJvdXRlczsKfQphdXRvbm9tb3VzLXN5c3RlbSA0MDsKcmliLWdyb3VwcyB7CiAgICBk aXJlY3Qtcm91dGVzIHsKICAgICAgICBpbXBvcnQtcmliIFsgaW5ldC4wIGZyb20tbGludXgtcm91 dGVyLmluZXQuMCBdOwogICAgICAgIGltcG9ydC1wb2xpY3kgWyBsM3Zwbi1wMnAtbmV0d29yayBs YW4tbmV0d29yayByZWplY3QtYWxsIF07CiAgICB9Cn0KCnJvb3RAbXg+Cgpyb290QG14PiBzaG93 IHJvdXRlIHRhYmxlIGZyb20tbGludXgtcm91dGVyLmluZXQuMAoKZnJvbS1saW51eC1yb3V0ZXIu aW5ldC4wOiA3IGRlc3RpbmF0aW9ucywgNyByb3V0ZXMgKDcgYWN0aXZlLCAwCmhvbGRkb3duLCAw IGhpZGRlbikKKyA9IEFjdGl2ZSBSb3V0ZSwgLSA9IExhc3QgQWN0aXZlLCAqID0gQm90aAoKMC4w LjAuMC8wICAgICAgICAgICpbU3RhdGljLzVdIDAxOjUzOjAxCiAgICAgICAgICAgICAgICAgICAg PiAgdG8gMTAuMS4xLjAgdmlhIGdlLTAvMC8xLjEwCjEwLjEuMS4wLzMxICAgICAgICAqW0RpcmVj dC8wXSAwMTo1MzowMQogICAgICAgICAgICAgICAgICAgID4gIHZpYSBnZS0wLzAvMS4xMAoxMC4x LjEuMS8zMiAgICAgICAgKltMb2NhbC8wXSAwMDowMToyMQogICAgICAgICAgICAgICAgICAgICAg IExvY2FsIHZpYSBnZS0wLzAvMS4xMAoxMC40LjQuMC8yNCAgICAgICAgKltEaXJlY3QvMF0gMDE6 NTA6MzcKICAgICAgICAgICAgICAgICAgICA+ICB2aWEgZ2UtMC8wLzAuMAoxMC40LjQuMS8zMiAg ICAgICAgKltMb2NhbC8wXSAwMDowMDoxOQogICAgICAgICAgICAgICAgICAgICAgIExvY2FsIHZp YSBnZS0wLzAvMC4wCjEwLjcuNy4wLzMxICAgICAgICAqW0RpcmVjdC8wXSAwMTo1MzowMQogICAg ICAgICAgICAgICAgICAgID4gIHZpYSBnZS0wLzAvMS40MAoxMC43LjcuMS8zMiAgICAgICAgKltM b2NhbC8wXSAwMTo1MzowMQogICAgICAgICAgICAgICAgICAgICAgIExvY2FsIHZpYSBnZS0wLzAv MS40MAoKcm9vdEBteD4KCkFzIHNlZW4gYWJvdmUsIHBhY2tldHMgd2l0aCBzcmMgSVAgMTAuMS4x LjEgYXJlIHNlbnQgdG8gTDNWUE4gbmVpZ2hib3IKYWRkcmVzcyAxMC4xLjEuMC4KCgpHb3Zlcm5t ZW50IG5ldHdvcmsgLT4gcmVzZWFyY2ggbmV0d29yazoKCjEuIFJldHVybiB0cmFmZmljIGZyb20g Z292ZXJubWVudCBuZXR3b3JrIGlzIHBsYWNlZCB0byByb3V0aW5nCmluc3RhbmNlIG5hbWVkICJ0 by1saW51eC1yb3V0ZXIiIHVzaW5nIGEgZmlyZXdhbGw6Cgpyb290QG14PiBzaG93IGNvbmZpZ3Vy YXRpb24gaW50ZXJmYWNlcyBnZS0wLzAvMSB1bml0IDEwCnZsYW4taWQgMTA7CmZhbWlseSBpbmV0 IHsKICAgIGZpbHRlciB7CiAgICAgICAgaW5wdXQgbDN2cG4tdG8tbGludXgtcm91dGVyOwogICAg fQogICAgYWRkcmVzcyAxMC4xLjEuMS8zMTsKfQoKcm9vdEBteD4KCnJvb3RAbXg+IHNob3cgY29u ZmlndXJhdGlvbiBmaXJld2FsbCBmYW1pbHkgaW5ldCBmaWx0ZXIgbDN2cG4tdG8tbGludXgtcm91 dGVyCnRlcm0gYWNjZXB0LWJncCB7CiAgICBmcm9tIHsKICAgICAgICBzb3VyY2UtYWRkcmVzcyB7 CiAgICAgICAgICAgIDEwLjEuMS4wLzMyOwogICAgICAgIH0KICAgICAgICBkZXN0aW5hdGlvbi1h ZGRyZXNzIHsKICAgICAgICAgICAgMTAuMS4xLjEvMzI7CiAgICAgICAgfQogICAgICAgIHByb3Rv Y29sIHRjcDsKICAgICAgICBkZXN0aW5hdGlvbi1wb3J0IDE3OTsKICAgIH0KICAgIHRoZW4gewog ICAgICAgIGNvdW50IGFjY2VwdC1iZ3A7CiAgICAgICAgYWNjZXB0OwogICAgfQp9CnRlcm0gYWNj ZXB0LWVzdGFibGlzaGVkLWJncCB7CiAgICBmcm9tIHsKICAgICAgICBzb3VyY2UtYWRkcmVzcyB7 CiAgICAgICAgICAgIDEwLjEuMS4wLzMyOwogICAgICAgIH0KICAgICAgICBkZXN0aW5hdGlvbi1h ZGRyZXNzIHsKICAgICAgICAgICAgMTAuMS4xLjEvMzI7CiAgICAgICAgfQogICAgICAgIHByb3Rv Y29sIHRjcDsKICAgICAgICBzb3VyY2UtcG9ydCBiZ3A7CiAgICAgICAgZGVzdGluYXRpb24tcG9y dCA0OTE2MC02NTUzNTsKICAgICAgICB0Y3AtZXN0YWJsaXNoZWQ7CiAgICB9CiAgICB0aGVuIHsK ICAgICAgICBjb3VudCBhY2NlcHQtZXN0YWJsaXNoZWQtYmdwOwogICAgICAgIGFjY2VwdDsKICAg IH0KfQp0ZXJtIGZvcndhcmQtdG8tbGludXgtcm91dGVyIHsKICAgIGZyb20gewogICAgICAgIGRl c3RpbmF0aW9uLWFkZHJlc3MgewogICAgICAgICAgICAxMC4xLjEuMS8zMjsKICAgICAgICB9CiAg ICB9CiAgICB0aGVuIHsKICAgICAgICBjb3VudCBmb3J3YXJkLXRvLWxpbnV4LXJvdXRlcjsKICAg ICAgICByb3V0aW5nLWluc3RhbmNlIHRvLWxpbnV4LXJvdXRlcjsKICAgIH0KfQoKcm9vdEBteD4K CgoyLiBUaGUgUklCIGZvciAidG8tbGludXgtcm91dGVyIiByb3V0aW5nIGluc3RhbmNlIGhhcyBh IGRlZmF1bHQgcm91dGUKcG9pbnRpbmcgdG8gYW5vdGhlciBWTEFOIGludGVyZmFjZSBvZiB0aGUg TGludXggcm91dGVyOgoKcm9vdEBteD4gc2hvdyBjb25maWd1cmF0aW9uIHJvdXRpbmctaW5zdGFu Y2VzIHRvLWxpbnV4LXJvdXRlcgppbnN0YW5jZS10eXBlIHZpcnR1YWwtcm91dGVyOwpyb3V0aW5n LW9wdGlvbnMgewogICAgc3RhdGljIHsKICAgICAgICByb3V0ZSAwLjAuMC4wLzAgbmV4dC1ob3Ag MTAuOC44LjA7CiAgICB9Cn0KaW50ZXJmYWNlIGdlLTAvMC8xLjUwOwoKcm9vdEBteD4KCnJvb3RA bXg+IHNob3cgcm91dGUgdGFibGUgdG8tbGludXgtcm91dGVyLmluZXQuMAoKdG8tbGludXgtcm91 dGVyLmluZXQuMDogMyBkZXN0aW5hdGlvbnMsIDMgcm91dGVzICgzIGFjdGl2ZSwgMApob2xkZG93 biwgMCBoaWRkZW4pCisgPSBBY3RpdmUgUm91dGUsIC0gPSBMYXN0IEFjdGl2ZSwgKiA9IEJvdGgK CjAuMC4wLjAvMCAgICAgICAgICAqW1N0YXRpYy81XSAwMTowMTo0MwogICAgICAgICAgICAgICAg ICAgID4gIHRvIDEwLjguOC4wIHZpYSBnZS0wLzAvMS41MAoxMC44LjguMC8zMSAgICAgICAgKltE aXJlY3QvMF0gMDE6MDE6NDMKICAgICAgICAgICAgICAgICAgICA+ICB2aWEgZ2UtMC8wLzEuNTAK MTAuOC44LjEvMzIgICAgICAgICpbTG9jYWwvMF0gMDE6MDE6NDMKICAgICAgICAgICAgICAgICAg ICAgICBMb2NhbCB2aWEgZ2UtMC8wLzEuNTAKCnJvb3RAbXg+CgoKMy4gVGhlIExpbnV4IHJvdXRl ciwgd2l0aCBzdHJpY3QgUlBGIGRpc2FibGVkLCByZWNlaXZlcyB0cmFmZmljIG9uCjEwLjguOC4w LCBtYXRjaGVzIHRoZSBwYWNrZXRzIGFnYWluc3QgaXRzIGFjdGl2ZSBOQVQgc3RhdGUgdGFibGUg dG8KcmV2ZXJzZSB0aGUgdHJhbnNsYXRpb24sIGFuZCBzZW5kcyBwYWNrZXRzIGJhc2VkIG9uIGRl ZmF1bHQgcm91dGUgYmFjawp0byBKdW5pcGVyIHdoZXJlIGl0IGxhbmRzIG9uICJmcm9tLWxpbnV4 LXJvdXRlciIgcm91dGluZyBpbnN0YW5jZS4KCgo0LiBBcyB0aGUgZGlyZWN0IG5ldHdvcmsgb2Yg dGhlIHJlc2VhcmNoIG5ldHdvcmsgd2FzIGxlYWtlZCBpbnRvCiJmcm9tLWxpbnV4LXJvdXRlci5p bmV0LjAiIHRhYmxlLCB0aGVuIHRoZSBKdW5pcGVyIHJvdXRlciBmb3J3YXJkcwpwYWNrZXRzIGJh c2VkIG9uIHRoaXMgZGlyZWN0IHJvdXRlLiBGb3IgZXhhbXBsZToKCnJvb3RAbXg+IHNob3cgcm91 dGUgdGFibGUgZnJvbS1saW51eC1yb3V0ZXIuaW5ldC4wIDEwLjQuNC4xMAoKZnJvbS1saW51eC1y b3V0ZXIuaW5ldC4wOiA3IGRlc3RpbmF0aW9ucywgNyByb3V0ZXMgKDcgYWN0aXZlLCAwCmhvbGRk b3duLCAwIGhpZGRlbikKKyA9IEFjdGl2ZSBSb3V0ZSwgLSA9IExhc3QgQWN0aXZlLCAqID0gQm90 aAoKMTAuNC40LjAvMjQgICAgICAgICpbRGlyZWN0LzBdIDAyOjAxOjMxCiAgICAgICAgICAgICAg ICAgICAgPiAgdmlhIGdlLTAvMC8wLjAKCnJvb3RAbXg+CgoKTWFydGluCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmp1bmlwZXItbnNwIG1haWxpbmcgbGlz dCBqdW5pcGVyLW5zcEBwdWNrLm5ldGhlci5uZXQKaHR0cHM6Ly9wdWNrLm5ldGhlci5uZXQvbWFp bG1hbi9saXN0aW5mby9qdW5pcGVyLW5zcAo=