Fix bridged subnet collision and clean up global NAT#283

Merged

ejc3 merged 7 commits intomainfrom

review-networking

Feb 8, 2026

Commits on Feb 7, 2026

Fix subnet collision and clean up global NAT on last VM exit

EJ Campbell
authored and
ejc3
committed
Fix non-atomic snapshot directory replacement

EJ Campbell
authored and
ejc3
committed
Fix security issues: set_var unsoundness, unbounded read, shell injection

EJ Campbell
authored and
ejc3
committed
fix: precise IP matching, safe NAT cleanup, atomic full snapshot replace

authored and
ejc3
committed
Check ip_forward instead of setting it system-wide
ejc3
committed
fix: update stale docstring for cleanup_global_nat_if_unused

authored and
ejc3
committed
retrigger CI after retarget to main
ejc3
committed