nat: VRF routing & FIB improvements