Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-05-17 | op-mode: T4429: Ability to detect external IP address | Viacheslav Hletenko | |
In some cases, it is useful to detect own external IP address for example if the host behind NAT Send curl request to random online service from the list to detect IP address ; show ip external ; 192.0.2.95 | |||
2022-05-16 | Merge pull request #1290 from sever-sever/T4373 | Christian Poessinger | |
ppppoe-server: T4373: Add option multiplier for correct shaping | |||
2022-05-16 | pppoe-server: T4373: Add option multiplier for correct shaping | Viacheslav Hletenko | |
Multiplier option is required by some vendors for correct shaping For RADIUS based rate-limits edit service pppoe-server set authentication radius rate-limit multiplier '0.001' | |||
2022-05-13 | smoketest: add sshguard allow-from case | Christian Poessinger | |
2022-05-13 | sshguard: T4408: rename whitelist-address -> allow-from | Christian Poessinger | |
We do not only allow individual host addresses but also prefixes. | |||
2022-05-13 | Debian: T4408: add missing sshguard dependency | Christian Poessinger | |
2022-05-13 | Merge pull request #1320 from sever-sever/T4408 | Christian Poessinger | |
sshguard: T4408: Add service ssh dynamic-protection | |||
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-12 | vrrp: T4417: bugfix service startup priority | Christian Poessinger | |
2022-05-12 | conntrack: T3535: use "reload-or-restart" from systemd | Christian Poessinger | |
2022-05-12 | vrrp: T3944: use "reload-or-restart" over individual code paths | Christian Poessinger | |
systemd has its internal reload or restart logic - we do not need to programm it on our own. | |||
2022-05-12 | container: T2216: use warning over exception when container image does not exist | Christian Poessinger | |
2022-05-12 | Merge pull request #1323 from sever-sever/T4399 | Christian Poessinger | |
Revert "NHRP : T4399: fix issues restart nhrp when add or del tunnel" | |||
2022-05-12 | Merge pull request #1325 from sever-sever/T4424 | Christian Poessinger | |
policy: T4424: Fix incorrect format for IPv6 prefixes | |||
2022-05-12 | policy: T4424: Fix incorrect format for IPv6 prefixes | Viacheslav Hletenko | |
2022-05-12 | Revert "NHRP : T4399: fix issues restart nhrp when add or del tunnel" | Viacheslav Hletenko | |
This reverts commit d1455f936ca721633fcc04d5c84169b4ccf2f447. New spokes can't register on hub with 'reload-or-restart' option And requires option 'restart' for opennhrp.service | |||
2022-05-11 | Merge pull request #1321 from sever-sever/T4405 | Christian Poessinger | |
T4405: Fix administrative distance of DHCP routes | |||
2022-05-10 | T4405: Fix administrative distance of DHCP routes | Dmitri Toubelis | |
- Default dhclient script only uses value of `$IF_MERIC` envvar for default route recived via `router` option. - This variable has no effect on rotes received via `rfc3442-classless-static-routes` option - Considering that Vyos overrrides `ip` command originating from `dhclient` this can be easily fixed in `iptovtysh()` function by using the `$IF_METRIC` envvar directly in the dhclient hook. (cherry picked from commit 0c00e7bf8b6e68814607fde4ff0cd70ce9f4b486) | |||
2022-05-09 | Merge pull request #1279 from nicolas-fort/T990 | Christian Poessinger | |
Firewall: T990: Add snat and dnat connection status on firewall | |||
2022-05-08 | container: T4000: use unique storage for container image | Christian Poessinger | |
Do no longer store container images which are pulled from any registry to /config/containers. Instead save them to a unified location that is the same accross all images on the system: /usr/lib/live/mount/persistence/container/storage Reason for this change is, while living under /config/containers a VyOS image upgrade copied all downloaded container images to the new image - doubling the used space per image on every upgrade. With the new location the images are all the same for every VyOS image running. Container userdata can still be stored under /config and copied to a newer image making rollbacks still efficient. | |||
2022-05-08 | container: op-mode: T3852: use XML inline podman commands | Christian Poessinger | |
Reduce bloat of containers_op.py wrapper script. All commands can be passed directly to podman via the XML script. This also makes the execution faster, as no Python environment needs to be build up. | |||
2022-05-08 | container: T4353: fix conf-mode script name | Christian Poessinger | |
2022-05-08 | smoketest: policy-route: use setUpClass() | Christian Poessinger | |
2022-05-08 | policy: evpn: T3739: support "set evpn gateway-ip" | Christian Poessinger | |
2022-05-07 | vrf: T4419: support to disable IP forwarding within a given VRF | Christian Poessinger | |
2022-05-06 | ocserv: T4231: XML OTP support must not be added globally - only for openconnect | Christian Poessinger | |
2022-05-06 | ipsec: T4353: use "" quotes on road-warrior id | Christian Poessinger | |
2022-05-06 | bgp: T4385: verify() peer-group in interface based neighbors | Christian Poessinger | |
2022-05-06 | Merge pull request #1316 from srividya0208/T4381 | Christian Poessinger | |
openvpn: T4381: Add tunnel ip column for status command | |||
2022-05-06 | openvpn: T4381: Add tunnel ip column for status command | srividya0208 | |
Added the tunnel ip column to see the assigned ip address in server mode | |||
2022-05-05 | op-mode: T4416: Rewrite 'traceroute' op-command and expand available options ↵ | 3roin | |
using python | |||
2022-05-05 | Merge pull request #1312 from sever-sever/T4410 | Christian Poessinger | |
monitoring: T4410: Add telegraf output Plugin http for Splunk | |||
2022-05-05 | smoketest: do not auto-load big firewall config on smoketest | Christian Poessinger | |
This takes a very long time, but keep the config for manual runs | |||
2022-05-05 | policy: T4414: add support for route-map "as-path prepend last-as x" | Christian Poessinger | |
2022-05-05 | monitoring: T4410: Add telegraf output Plugin http for Splunk | Viacheslav Hletenko | |
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x' | |||
2022-05-03 | Merge pull request #1310 from sever-sever/T4315 | Christian Poessinger | |
monitoring: T4315: Add telegraf output plugin prometheus-client | |||
2022-05-03 | monitoring: T4315: Add telegraf output plugin prometheus-client | Viacheslav Hletenko | |
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client | |||
2022-05-02 | ipsec: T4353: bugfix template extension | Christian Poessinger | |
2022-05-02 | T2216: file is called container.py | Christian Poessinger | |
2022-05-01 | accel-ppp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | http: api: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-logs: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | openconnect: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | syslog: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | igmp-proxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | pppoe: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | nhrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: zone: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lcd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |