diff options
| author | Christian Poessinger <christian@poessinger.com> | 2019-12-03 22:01:19 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2019-12-06 20:58:56 +0100 |
| commit | 0d4d4dd840e06c18250d73f27de61261ff141944 (patch) | |
| tree | 5c515082495983658e22d27b1a838b2598e3ecd8 /interface-definitions/interfaces-wireguard.xml | |
| parent | 1ac177febfdd0dfc5a5b40a1b30294de0e2a45e0 (diff) | |
| download | vyos-1x-0d4d4dd840e06c18250d73f27de61261ff141944.tar.gz vyos-1x-0d4d4dd840e06c18250d73f27de61261ff141944.zip | |
T1843: run interface-definitions though GCC preprocessor
A lot of XML code is duplicated (VLAN, interface address) for instance. Such
XML definitions should be moved to feature.xml.i files and then just pulled in
via GCC preprocessor #include definition in e.g. bond or ethernet definitions.
This will give us the ability to single-source repeating node definitions as:
* Interface Address
* Interface Description
* Interface Disable
* VLAN (both vif-s and vif-c)
The .in suffix of the interface-definitions is a marker that those files are
input files to the GCC preprocessor. They will be rendered into proper XML
files in the build directory.
Some node definitions have been reworder to remove escaped double quote
occurances which would have been warned about by the GCC preprocessor.
Diffstat (limited to 'interface-definitions/interfaces-wireguard.xml')
| -rw-r--r-- | interface-definitions/interfaces-wireguard.xml | 150 |
1 files changed, 0 insertions, 150 deletions
diff --git a/interface-definitions/interfaces-wireguard.xml b/interface-definitions/interfaces-wireguard.xml deleted file mode 100644 index 0c32a3bc1..000000000 --- a/interface-definitions/interfaces-wireguard.xml +++ /dev/null @@ -1,150 +0,0 @@ -<?xml version="1.0"?> -<interfaceDefinition> - <node name="interfaces"> - <children> - <tagNode name="wireguard" owner="${vyos_conf_scripts_dir}/interfaces-wireguard.py"> - <properties> - <help>WireGuard interface name</help> - <priority>459</priority> - <!-- subsequent ones may be removed, just make sure ethernet ifs are present --> - <constraint> - <regex>^wg[0-9]{1,4}</regex> - </constraint> - <constraintErrorMessage>illegal interface name</constraintErrorMessage> - <valueHelp> - <format>wgN</format> - <description>WireGuard interface name</description> - </valueHelp> - </properties> - <children> - <leafNode name="address"> - <properties> - <help>IP address</help> - <constraint> - <validator name="ip-cidr"/> - </constraint> - <valueHelp> - <format>ipv4net</format> - <description>IPv4 address and prefix length</description> - </valueHelp> - <valueHelp> - <format>ipv6net</format> - <description>IPv6 address and prefix length</description> - </valueHelp> - <multi/> - </properties> - </leafNode> - <leafNode name="description"> - <properties> - <help>description</help> - <constraint> - <regex>^.{1,100}$</regex> - </constraint> - <constraintErrorMessage>interface description is too long (limit 100 characters)</constraintErrorMessage> - </properties> - </leafNode> - <leafNode name="disable"> - <properties> - <help>disables interface</help> - <valueless/> - </properties> - </leafNode> - <leafNode name="port"> - <properties> - <help>Local port number to accept connections</help> - <constraint> - <validator name="numeric" argument="--range 1024-65535"/> - </constraint> - </properties> - </leafNode> - <leafNode name="mtu"> - <properties> - <help>interface mtu size(default: 1420)</help> - <constraint> - <validator name="numeric" argument="--range 68-9000"/> - </constraint> - </properties> - </leafNode> - <leafNode name="fwmark"> - <properties> - <help>A 32-bit fwmark value set on all outgoing packets</help> - <valueHelp> - <format>number</format> - <description>value which marks the packet for QoS/shaper</description> - </valueHelp> - <constraint> - <validator name="numeric" argument="--range 1-255"/> - </constraint> - </properties> - </leafNode> - <leafNode name="private-key"> - <properties> - <help>Private key to use on that interface</help> - <completionHelp> - <script>${vyos_op_scripts_dir}/wireguard.py --listkdir</script> - </completionHelp> - </properties> - </leafNode> - <tagNode name="peer"> - <properties> - <help>peer alias</help> - <constraint> - <regex>[^ ]{1,100}$</regex> - </constraint> - <constraintErrorMessage>peer alias too long (limit 100 characters)</constraintErrorMessage> - </properties> - <children> - <leafNode name="disable"> - <properties> - <help>disables peer</help> - <valueless/> - </properties> - </leafNode> - <leafNode name="pubkey"> - <properties> - <help>base64 encoded public key</help> - <constraint> - <regex>^[0-9a-zA-Z\+/]{43}=$</regex> - </constraint> - <constraintErrorMessage>Key is not valid 44-character (32-bytes) base64</constraintErrorMessage> - </properties> - </leafNode> - <leafNode name="preshared-key"> - <properties> - <help>base64 encoded preshared key</help> - <constraint> - <regex>^[0-9a-zA-Z\+/]{43}=$</regex> - </constraint> - <constraintErrorMessage>Key is not valid 44-character (32-bytes) base64</constraintErrorMessage> - </properties> - </leafNode> - <leafNode name="allowed-ips"> - <properties> - <help>IP addresses allowed to traverse the peer</help> - <constraint> - <validator name="ip-prefix"/> - </constraint> - <multi/> - </properties> - </leafNode> - <!-- eventually check format IP:port --> - <leafNode name="endpoint"> - <properties> - <help>Remote endpoint (IP:port)</help> - </properties> - </leafNode> - <leafNode name="persistent-keepalive"> - <properties> - <help>how often send keep alives in seconds</help> - <constraint> - <validator name="numeric" argument="--range 1-65535"/> - </constraint> - </properties> - </leafNode> - </children> - </tagNode> - </children> - </tagNode> - </children> - </node> -</interfaceDefinition> |