NAT: Investigate stateless + stateful NAT

[qmonnet]

We should be able to support stateless (destination NAT) + stateful (source NAT) for traffic. This needs some investigation and testing; configuration validation; documentation.

[qmonnet]

Depends on #1273

[qmonnet]

Closing in favour of #1273