feat(nft): add source IP filtering for DNAT rules and expose table existence checks

2026-03-30 14:19:44 +00:00
parent e4bb314b5f
commit 46a492443e
5 changed files with 28 additions and 2 deletions
--- a/ts/nft.types.ts
+++ b/ts/nft.types.ts
@@ -14,6 +14,8 @@ export interface INftDnatRule {
  targetPort: number;
  protocol?: TNftProtocol;
  preserveSourceIP?: boolean;
+  /** Filter by source IP/subnet (e.g. '10.8.0.0/24'). Only matching traffic gets DNAT'd. */
+  sourceIP?: string;
 }

 export interface INftSnatRule {