Skip to content

User ACLs documentation - #338

Draft
qmonnet wants to merge 3 commits into
masterfrom
pr/qmonnet/user-acls
Draft

User ACLs documentation#338
qmonnet wants to merge 3 commits into
masterfrom
pr/qmonnet/user-acls

Conversation

@qmonnet

@qmonnet qmonnet commented Jul 30, 2026

Copy link
Copy Markdown
Member
  • gateway: Split gateway peering doc out of gateway overview
  • gateway: Update NAT restrictions on peering ends
  • gateway: Add docs for user ACLs

Closes: #331

@qmonnet
qmonnet requested a review from mvachhar July 30, 2026 12:34
@qmonnet qmonnet self-assigned this Jul 30, 2026
qmonnet and others added 3 commits July 30, 2026 13:35
The gateway "overview" has grown to the point it's no longer an
overview, but mostly a reference guide for the GatewayPeering
configuration.

Move the peering material into a new gateway-peering.md. The text is
carried over unchanged, apart from heading levels (and this commit is
best reviewed with some tool that shows lines moved rather than just
additions/deletions).

Section "Flow Table and Stateful Processing" gets split in two parts,
because it mixed two concerns: the flow table capacity, and observations
on the non-shared nature of flow states, are properties of the gateway
node, whereas timeout-based eviction is a per-peering NAT field. The
former stay in gateway.md, the latter (along with the keepalive tip)
move to the new gateway-peering.md in a dedicated "Flow Table"
subsection.

Minor introduction paragraphs are added to replace the section that
moved, or as introduction to the new page and subsection. We also update
relevant links, and .pages navigation.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Signed-off-by: Quentin Monnet <qmo@qmon.net>
When one side of a gateway peering uses stateful NAT (masquerade or port
forwarding), the other side cannot also use stateful NAT, but we added
support for using stateful NAT and static NAT on opposing ends of a
peering. Update the relevant limitation in the docs.

Signed-off-by: Quentin Monnet <qmo@qmon.net>
Signed-off-by: Quentin Monnet <qmo@qmon.net>
@github-actions

Copy link
Copy Markdown

🚀 Deployed on https://preview-338--hedgehog-docs.netlify.app

@qmonnet
qmonnet force-pushed the pr/qmonnet/user-acls branch from 714aec5 to 8fa6f10 Compare July 30, 2026 12:35
@qmonnet

qmonnet commented Jul 30, 2026

Copy link
Copy Markdown
Member Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Docs for user ACLs

1 participant