summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-11Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: ifconfig: T1793: extend set_speed_duplex() delta check [OpenVPN]: T1704: Added uppercase entries of ncp-ciphers, since there seems to be a bug in OpenVPN client when comparing pushed cipher with local ncp cipher list [OpenVPN]: T1704: Moved ncp-ciphers out of encryption block in config template [OpenVPN]: T1704: Changed the description of ncp-ciphers in config [OpenVPN]: T1704: Added function for ncp-ciphers, and ability to disable it. [OpenVPN]: T1704: Changed config structure for OpenVPN encryption to support ncp-ciphers. [OpenVPN]: T1704: Added migration scripts for interface 2-to-3 Intel QAT: T1788: Intel QAT implementation ifconfig: T1793: add delta check on set_speed_duplex() ifconfig: T1793: add delta check on set_flow_control() Python/ifconfig: wireguard: remove trailing whitespaces l2tp: T1747: automatically calculate gw-ip-address QAT: T1788: Intel QAT implementation
2019-11-11ifconfig: T1793: extend set_speed_duplex() delta checkChristian Poessinger
Commit 9e4947770064 ("ifconfig: T1793: add delta check on set_speed_duplex()") was wave1 of reducing the amount of switch-port flaps and BGP session resets. The delta check now also handles the case of fixed speed and duplex settings.
2019-11-11[OpenVPN]: T1704: Added uppercase entries of ncp-ciphers, since there seems ↵vindenesen
to be a bug in OpenVPN client when comparing pushed cipher with local ncp cipher list
2019-11-11[OpenVPN]: T1704: Moved ncp-ciphers out of encryption block in config templatevindenesen
2019-11-11[OpenVPN]: T1704: Changed the description of ncp-ciphers in configvindenesen
2019-11-11[OpenVPN]: T1704: Added function for ncp-ciphers, and ability to disable it.vindenesen
[OpenVPN]: T1704: Changed config structure for OpenVPN encryption to support ncp-ciphers. [OpenVPN]: T1704: Added migration scripts for interface 2-to-3
2019-11-10Intel QAT: T1788: Intel QAT implementationhagbard
* adding packages dependency
2019-11-10ifconfig: T1793: add delta check on set_speed_duplex()Christian Poessinger
The speend and duplex settings should only be changed when they need to. Always configuring this setting will make the kernel disable and re-enable the physical interface. This will not only let the switchport flap but it will also reset e.g. BGP sessions. This is the first part of this fix for speed/duplex auto settings. In addition - this also reduces the config commit time.
2019-11-10ifconfig: T1793: add delta check on set_flow_control()Christian Poessinger
The flow control settings should only be changed when they need to. If flow control is altered, the kernel will disable and re-enable the interface. This will not only let the switchport flap but it will also reset e.g. BGP sessions. In addition - this also reduces the config commit time.
2019-11-10Python/ifconfig: wireguard: remove trailing whitespacesChristian Poessinger
2019-11-11Merge pull request #159 from DmitriyEshenko/QAT-curDaniil Baturin
QAT: T1788: Intel QAT implementation
2019-11-10Merge pull request #158 from DmitriyEshenko/cur-fix-l2tpChristian Poessinger
l2tp: T1747: automatically calculate gw-ip-address.
2019-11-10l2tp: T1747: automatically calculate gw-ip-addressDmitriyEshenko
2019-11-08Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: ddclient: T1789: fix RFC2136 generated config T1774: fix error output Python/ifconfig: T1557: do not allow both IPv4 and dhcp address on interfaces list_interfaces: add wifi interfaces to bridgeable interfaces
2019-11-08ddclient: T1789: fix RFC2136 generated configChristian Poessinger
Commit 967067970494c1800f ("ddclient: T1030: adjust to latest syntax") was under the impression that ddclient 3.9.0 now handles every config item with a comma in the end. This is unfortunately not true on RFC2136 dynamic DNS entries. Remove commas on config template.
2019-11-08QAT: T1788: Intel QAT implementationDmitriyEshenko
2019-11-05Merge pull request #157 from jestabro/currentJohn Estabrook
T1774: fix error output
2019-11-05T1774: fix error outputJohn Estabrook
2019-11-04Python/ifconfig: T1557: do not allow both IPv4 and dhcp address on interfacesChristian Poessinger
2019-11-04list_interfaces: add wifi interfaces to bridgeable interfacesChristian Poessinger
2019-11-02Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: bonding: T1777: change priority to be after ethernet interfaces bridge: T1783: bugfix removal of member interface
2019-11-02bonding: T1777: change priority to be after ethernet interfacesChristian Poessinger
On system reboots (mainly) the bond has been created and configured a MAC address on the physical ports. Later ethernet interfaces have been configured overwriting the bond MAC address.
2019-11-02bridge: T1783: bugfix removal of member interfaceChristian Poessinger
Fix error when deleting a member with: delete interfaces bridge br0 member interface eth1 Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/interfaces-bridge.py", line 304, in <module> apply(c) File "/usr/libexec/vyos/conf_mode/interfaces-bridge.py", line 267, in apply br.del_port( intf['name'] ) TypeError: string indices must be integers
2019-10-31Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: [conf completion]: T1779: Add tunnels to completion [XML templates] T1772: Changed old hacks to proper regex, according to the fix Add a function for retrieving config dicts. snmp: make script extension code more readable snmp: use proper stat literals on chmod() snmp: fix verify() indent on script extensions snmp: fix verify() bail out early order snmp: T1738: cleanup import statements T1759: Fixing dependency bug from previous commit T1773, T1774: add a show config operation with JSON and raw options. T1759: Merging interface.py into ifconfig.py Allow list arguments in the vyos.config show_config() function. Replace the try and wait for segfault approach with explicit inSession check. T1773: add a script for converting the config to JSON. It also exposes those functions in vyos.configtree [XML templates] T1772: Add escaping of `\` symbol in `<regex>`
2019-10-31Merge pull request #156 from kroy-the-rabbit/bridgefixDaniil Baturin
[conf completion]: T1779: Add tunnels to completion
2019-10-30[conf completion]: T1779: Add tunnels to completionkroy
2019-10-28Merge pull request #154 from zdc/T1772Christian Poessinger
[XML templates] T1772: Add escaping of `\` symbol in `<regex>`
2019-10-28[XML templates] T1772: Changed old hacks to proper regex, according to the fixzsdc
2019-10-28Add a function for retrieving config dicts.Daniil Baturin
2019-10-27snmp: make script extension code more readableChristian Poessinger
2019-10-27snmp: use proper stat literals on chmod()Christian Poessinger
2019-10-27snmp: fix verify() indent on script extensionsChristian Poessinger
2019-10-27snmp: fix verify() bail out early orderChristian Poessinger
2019-10-27snmp: T1738: cleanup import statementsChristian Poessinger
2019-10-27Merge pull request #155 from kroy-the-rabbit/py-interfaceChristian Poessinger
T1759: Merging interface.py into ifconfig.py
2019-10-27T1759: Fixing dependency bug from previous commitkroy
2019-10-27T1773, T1774: add a show config operation with JSON and raw options.Daniil Baturin
2019-10-27T1759: Merging interface.py into ifconfig.pykroy
2019-10-27Allow list arguments in the vyos.config show_config() function.Daniil Baturin
2019-10-27Replace the try and wait for segfault approach with explicit inSession check.Daniil Baturin
2019-10-27T1773: add a script for converting the config to JSON.Daniil Baturin
It also exposes those functions in vyos.configtree
2019-10-27Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: snmp: T1769: remove TSM (Transport Security Mode) support snmp: T818: T1738: remove per user/trap engine id T1759: ioctl.pm/interface.pm rewrite
2019-10-27snmp: T1769: remove TSM (Transport Security Mode) supportChristian Poessinger
The SNMPv3 TSM is very complex and I know 0 users of it. Also this is untested and I know no way how it could be tested. Instead of carrying on dead and unused code we should favour a drop of it using a proper config migration script.
2019-10-27snmp: T818: T1738: remove per user/trap engine idChristian Poessinger
As of the SNMP specification an SNMP engine ID should be unique per device. To not make it more complicated for users - only use the global SNMP engine ID.
2019-10-25[vyos.config] T1758: adjust regex for change in Python 3.7John Estabrook
Python 3.7 considers r'\s*' an empty pattern match, instead of the previous behaviour of matching whitespace characters.
2019-10-25[XML templates] T1772: Add escaping of `\` symbol in `<regex>`zsdc
2019-10-24Merge pull request #153 from kroy-the-rabbit/py-interfaceChristian Poessinger
T1759: ioctl.pm/interface.pm rewrite
2019-10-24T1759: ioctl.pm/interface.pm rewritekroy
2019-10-24Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: T1762: adjust the set_level() calls to use the new list representation. [vyos.config] T1764: support both string and list arguments in config functions. T1759: bug fixes, missing interface IP [vyos.config] T1758: use vyos.configtree for reading values, instead of calling cli-shell-api. [HTTP API] Add endpoints for config file and image management. ddclient: T1030: add cloudflare zone config entry [service https] T1443: organize internal data by server block [vyos.config] T1758: check that config setup has completed before calling showConfig, else, default to config.boot [HTTP API] Use a decorator for functions that require authentication. ddclient: T1030: adjust to latest syntax ddclient: T1030: auto create runtime directories ddclient: T1030: use new default configuration file path T1759: Migrating interfaces T1755: fixes issue with 'show vpn ipsec sa' command where lack of keysize (encr-keysize) will result in KeyError - such as for CHACHA20_POLY1305 T1755: fixes issue with 'show vpn ipsec sa' command where lack of hash (integ-alg) will result in KeyError - such as with GCM based options
2019-10-24T1762: adjust the set_level() calls to use the new list representation.Daniil Baturin