Skip to content

RDKB-63098: [ONESTACK]-Handle IPv6 delegation for business vs residential#270

Open
rirfha948 wants to merge 1 commit intodevelopfrom
topic/onestack_wan2lan
Open

RDKB-63098: [ONESTACK]-Handle IPv6 delegation for business vs residential#270
rirfha948 wants to merge 1 commit intodevelopfrom
topic/onestack_wan2lan

Conversation

@rirfha948
Copy link
Contributor

Reason for change: WAN to LAN Firewall rules
Test Procedure:

  • Build OneStack Image

  • In Business-mode, Check dibbler server is started and server.conf has prefix-delegation class

  • In Residential-mode, check whether device behaves as a non-CBR device Risks: None
    Priority: P1

  • Is this a User Story (US)?

  • Have all dependent PRs from other components been listed ?

  • Does the commit message include both the User Story ticket and the Subtask ticket?

  • Will be all changes related to the User Story squashed and merged in a single commit?

  • Has the PR been raised only after completing all changes for the User Story (no partial changes)?

  • Has code development for the User Story been completed?

  • If yes, has the Gerrit topic or list of all dependent PRs across components (including meta-layer changes) been shared?
    https://gerrit.teamccp.com/#/c/946157/

  • Is there a validation log available in the Jira ticket for verifying builds with the updated generic-srcrev.inc across all platforms?

@rirfha948 rirfha948 requested review from a team as code owners March 19, 2026 05:36
Copilot AI review requested due to automatic review settings March 19, 2026 05:36
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates IPv6 firewall rule generation to better handle prefix delegation behavior differences between OneStack business vs residential modes, focusing on WAN→LAN forwarding behavior for delegated prefixes.

Changes:

  • Gates prefix-delegation forward rules on FEATURE_IPV6_DELEGATION support in the current mode.
  • Removes unconditional WAN→LAN ACCEPT behavior for delegated prefixes when IPv6 firewall level isn’t Custom, relying instead on the standard wan2lan policy path.
  • Adds a conditional wan2lan rule to accept established WAN→LAN traffic when IPv6 delegation is enabled.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants