Starting with recent DPDK versions KNI interfaces are created with "no carrier" state. This is a link with discussion about introducing this change https://mails.dpdk.org/archives/dev/2018-August/110551.html. NAT should be able to do something like echo 1 > /sys/devices/virtual/net/myKNI/carrier when an interface appears in the system.