Description
The masqAll configuration option is completely ignored when using the nftables backend in the portmap plugin. This results in incorrect masquerading rules that only match traffic from the container's own IP, rather than matching traffic from all source IPs as intended.
Expected Behavior
When masqAll: true is configured, the portmap plugin should create masquerading rules that match traffic from any source IP (0.0.0.0/0 for IPv4, ::/0 for IPv6) destined to the container, similar to the iptables backend implementation.
Description
The
masqAllconfiguration option is completely ignored when using the nftables backend in the portmap plugin. This results in incorrect masquerading rules that only match traffic from the container's own IP, rather than matching traffic from all source IPs as intended.Expected Behavior
When
masqAll: trueis configured, the portmap plugin should create masquerading rules that match traffic from any source IP (0.0.0.0/0for IPv4,::/0for IPv6) destined to the container, similar to the iptables backend implementation.