VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) https://git.amelek.net/marekm72/vyos-1x.git/atom?h=equuleus 2024-04-04T19:24:54+00:00 2024-04-04T19:24:54+00:00 Christian Breunig christian@breunig.cc 2024-04-01T12:04:50+00:00 urn:sha1:acb01526bedfb0aa96aa59cad5dec092769bd676 After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which was present to update /etc/resolv.conf with the DHCP specified nameservers and also the search domain list was no longer present. This commit adds a per interface rendered script to inform vyos-hostsd about the received IPv6 nameservers and search domains. (cherry picked from commit ece425f0191762638b7c967097accd8739e9103d) 2024-01-21T19:05:23+00:00 Christian Breunig christian@breunig.cc 2024-01-18T16:11:23+00:00 urn:sha1:31ba9f00628da7da4339b4cdc2d208e06d686092 (cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b) 2023-08-28T19:21:14+00:00 Christian Breunig christian@breunig.cc 2023-08-28T19:21:14+00:00 urn:sha1:47d9c8067135b97bc1fbc5450dc5fa9b8e65e345 2023-08-25T12:12:29+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-08-25T12:12:29+00:00 urn:sha1:9763154d99f7852e3fd8a50f8ecaf10b27b4ad0f Add interface type veth (Virtual ethernet) One of the usecases it's interconnect different vrf's and default vrf via bridge set interfaces virtual-ethernet veth0 peer-name 'veth1010' set interfaces virtual-ethernet veth1010 address '10.0.0.10/24' set interfaces virtual-ethernet veth1010 peer-name 'veth0' set interfaces virtual-ethernet veth1010 vrf 'foo' set interfaces bridge br0 address '10.0.0.1/24' set interfaces bridge br0 member interface veth0 vyos@r1:~$ ping 10.0.0.10 count 1 PING 10.0.0.10 (10.0.0.10) 56(84) bytes of data. 64 bytes from 10.0.0.10: icmp_seq=1 ttl=64 time=0.082 ms 2023-05-05T04:14:44+00:00 Christian Breunig christian@breunig.cc 2023-04-15T13:29:53+00:00 urn:sha1:c71a97fc13357fcc34b48aa254ad727939a24957 VLANIf('eth0.10').remove() will create and remove the VLAN in one command. Thus one can ensure when calling remove() on a VLAN it will always succeed. (cherry picked from commit 7700da10b8d1d1b3d0db914ab48aebf8ff536da1) 2023-02-23T11:42:39+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-02-20T11:54:36+00:00 urn:sha1:05d0f593bbfe9c85c690f6e4cddfb257a835906e Multicast has not been implemented for the tunnel interfaces. We have only configuration CLI commands that do anything. Fix it. ip link set dev <tag> multicast on ip link set dev <tag> multicast off (cherry picked from commit ac821d0d1764e9623015e04c5158a06c00ab370b) 2023-02-12T20:00:53+00:00 Christian Breunig christian@breunig.cc 2023-02-12T20:00:53+00:00 urn:sha1:b6290329f2d6f5d05a8ff577f0be8a7e0f0ebdee Replace links to the phabricator site from https://phabricator.vyos.net to https://vyos.dev (cherry-picked form commit bd9416a6aa9d5d0a746dc2cebc8d0330fd27d1a2) 2022-10-03T12:00:29+00:00 Christian Poessinger christian@poessinger.com 2022-10-03T12:00:29+00:00 urn:sha1:8560c1cc38f9104fe0d12fe72e0312c52afa9c08 wireguard: T4702: actively revoke peer if it gets disabled 2022-09-24T17:56:53+00:00 Christian Poessinger christian@poessinger.com 2022-09-24T17:27:16+00:00 urn:sha1:23e92590334ad179befdffd3e181e1b48a6d07f7 The initial implementation in commit 9fb9e5cade ("ethernet: T3171: add CLI option to enable RPS (Receive Packet Steering)" only changed the CPU affinity for RX queue 0. This commit takes all RX queues into account. (cherry picked from commit 13645bc2cfd31f1525078469f23e89491987e0ea) 2022-09-17T19:10:04+00:00 Christian Poessinger christian@poessinger.com 2022-09-17T18:36:22+00:00 urn:sha1:99b63a1eb5a4441aba4bd0c8908007450ceb7d1c When any configured peer is set to `disable` while the Wireguard tunnel is up and running it does not get actively revoked and removed. This poses a security risk as connections keep beeing alive. Whenever any parameter of a peer changes we actively remove the peer and fully recreate it on the fly. (cherry picked from commit a4feb96af9ac45aff41ded1744cf302b5c5a9e7e)