VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.3.5 2023-08-28T19:21:14+00:00 2023-08-28T19:21:14+00:00 Christian Breunig christian@breunig.cc 2023-08-28T19:21:14+00:00 urn:sha1:47d9c8067135b97bc1fbc5450dc5fa9b8e65e345 2023-08-25T12:12:29+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-08-25T12:12:29+00:00 urn:sha1:9763154d99f7852e3fd8a50f8ecaf10b27b4ad0f Add interface type veth (Virtual ethernet) One of the usecases it's interconnect different vrf's and default vrf via bridge set interfaces virtual-ethernet veth0 peer-name 'veth1010' set interfaces virtual-ethernet veth1010 address '10.0.0.10/24' set interfaces virtual-ethernet veth1010 peer-name 'veth0' set interfaces virtual-ethernet veth1010 vrf 'foo' set interfaces bridge br0 address '10.0.0.1/24' set interfaces bridge br0 member interface veth0 vyos@r1:~$ ping 10.0.0.10 count 1 PING 10.0.0.10 (10.0.0.10) 56(84) bytes of data. 64 bytes from 10.0.0.10: icmp_seq=1 ttl=64 time=0.082 ms 2023-05-05T04:14:44+00:00 Christian Breunig christian@breunig.cc 2023-04-15T13:29:53+00:00 urn:sha1:c71a97fc13357fcc34b48aa254ad727939a24957 VLANIf('eth0.10').remove() will create and remove the VLAN in one command. Thus one can ensure when calling remove() on a VLAN it will always succeed. (cherry picked from commit 7700da10b8d1d1b3d0db914ab48aebf8ff536da1) 2023-02-23T11:42:39+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-02-20T11:54:36+00:00 urn:sha1:05d0f593bbfe9c85c690f6e4cddfb257a835906e Multicast has not been implemented for the tunnel interfaces. We have only configuration CLI commands that do anything. Fix it. ip link set dev <tag> multicast on ip link set dev <tag> multicast off (cherry picked from commit ac821d0d1764e9623015e04c5158a06c00ab370b) 2023-02-12T20:00:53+00:00 Christian Breunig christian@breunig.cc 2023-02-12T20:00:53+00:00 urn:sha1:b6290329f2d6f5d05a8ff577f0be8a7e0f0ebdee Replace links to the phabricator site from https://phabricator.vyos.net to https://vyos.dev (cherry-picked form commit bd9416a6aa9d5d0a746dc2cebc8d0330fd27d1a2) 2022-10-03T12:00:29+00:00 Christian Poessinger christian@poessinger.com 2022-10-03T12:00:29+00:00 urn:sha1:8560c1cc38f9104fe0d12fe72e0312c52afa9c08 wireguard: T4702: actively revoke peer if it gets disabled 2022-09-24T17:56:53+00:00 Christian Poessinger christian@poessinger.com 2022-09-24T17:27:16+00:00 urn:sha1:23e92590334ad179befdffd3e181e1b48a6d07f7 The initial implementation in commit 9fb9e5cade ("ethernet: T3171: add CLI option to enable RPS (Receive Packet Steering)" only changed the CPU affinity for RX queue 0. This commit takes all RX queues into account. (cherry picked from commit 13645bc2cfd31f1525078469f23e89491987e0ea) 2022-09-17T19:10:04+00:00 Christian Poessinger christian@poessinger.com 2022-09-17T18:36:22+00:00 urn:sha1:99b63a1eb5a4441aba4bd0c8908007450ceb7d1c When any configured peer is set to `disable` while the Wireguard tunnel is up and running it does not get actively revoked and removed. This poses a security risk as connections keep beeing alive. Whenever any parameter of a peer changes we actively remove the peer and fully recreate it on the fly. (cherry picked from commit a4feb96af9ac45aff41ded1744cf302b5c5a9e7e) 2022-09-02T11:36:45+00:00 initramfs initramfs@initramfs.io 2022-09-01T12:51:21+00:00 urn:sha1:0f1d29ac0480dc202595b96357789e6d15d49f2c Fixes several bugs around bonding member interface states not matching the committed configuration, including: - Disabled removed interfaces coming back up - Newly added disabled interfaces not staying down - Newly added interfaces not showing up in the bond 2022-08-29T18:40:24+00:00 Christian Poessinger christian@poessinger.com 2022-08-29T18:36:20+00:00 urn:sha1:27b94505582fb4f4c0c9188e8cc2026700a5a3bd Commit 31169fa8a763e ("vyos.ifconfig: T3619: only set offloading options if supported by NIC") added the new implementation which handles NIC offloading. Unfortunately every single implementation was copied from "gro" which resulted in a change to gro for each offloading option - thus options like lro, sg, tso had no effect at all. It all comes down to copy/paste errors ... one way or another. (cherry picked from commit b01f27b3bb3f4cbc6096011856d83009d0440313)