Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

Scenario 1b: DNAT—Packets destined for the vRouter

In this scenario, packets are destined for a process within the vRouter. When firewall rule sets are applied to locally bound packets on an interface, the firewall rules are applied before DNAT (that is, on the translated destination address); refer to the following figure.

Figure 1. vRouter-destined DNAT firewall decisions