Added support for iptables IPVS match

[stephan2012]

SUMMARY

Added support for the missing IPVS match target in the iptables module

ISSUE TYPE

• Feature Pull Request

COMPONENT NAME

iptables

ADDITIONAL INFORMATION

Setting up Source NAT for, e.g. one-armed IPVS-based loadbalancers lacked support for the VIP address and VPort arguments. This PR implements these arguments and allows issueing

- name: "Setup SNAT for LVS"
  iptables:
    table: nat
    chain: POSTROUTING
    match: ipvs
    vaddr: '192.168.1.11/24'
    vport: 443
    jump: SNAT
    to_source: '192.168.1.21'
    comment: "SNAT the VIP"

which is the equivalent of

iptables -t nat -A POSTROUTING -m ipvs --vaddr 192.168.1.11 --vport 443 -j SNAT --to-source 192.168.1.21

Like other matches it requires a kernel module to be loaded first (xt_ipvs in this case).

[ansibot]

cc @LinusU @sebastiendarocha
click here for bot help

[relrod]

Can you rebase this to resolve the conflict, and add a changelog and (if possible) tests?

[stephan2012]

@relrod, at the moment I am too busy. Either please take over or wait until I can do it.

[ophum]

@stephan2012 Thank you for your feature!. I fixed conflict of your pull request, because I need this, too.

[stephan2012]

@stephan2012 Thank you for your feature!. I fixed conflict of your pull request, because I need this, too.

@ophum Big thanks for taking care of this issue!

[stephan2012]

Closing in favor of PR #76219.