Struct NatManager 

pub struct NatManager { /* private fields */ }

NAT rule manager using nftables via rustables netlink API.

Rebuilds the entire nftables table atomically on every change to avoid relying on kernel rule handle tracking (which rustables doesn’t expose). The table is small (one masquerade + two rules per mapping) so this is cheap.

Implementations

impl NatManager

pub fn new(lan_interface: String) -> Result<Self, NatError>

Create the nftables table and NAT chains.

Installs a masquerade rule for traffic exiting via fips0 so that LAN client source addresses are rewritten to the gateway’s mesh address, allowing return traffic to route back through the mesh.

lan_interface is the gateway’s LAN-facing interface name, needed by the port-forward LAN-side masquerade rule.

pub fn set_port_forwards( &mut self, forwards: &[PortForward], ) -> Result<(), NatError>

Replace the current inbound port-forward rule set and rebuild the nftables table atomically. Pass an empty slice to clear.

pub fn add_mapping( &mut self, virtual_ip: Ipv6Addr, mesh_addr: Ipv6Addr, ) -> Result<(), NatError>

Add DNAT and SNAT rules for a virtual IP ↔ mesh address mapping.

pub fn remove_mapping(&mut self, virtual_ip: Ipv6Addr) -> Result<(), NatError>

Remove DNAT and SNAT rules for a virtual IP mapping.

pub fn cleanup(self) -> Result<(), NatError>

Flush all rules and delete the nftables table.

pub fn mapping_count(&self) -> usize

Number of active NAT mappings.