Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-02-09 | Merge pull request #1807 from dmbaturin/T4988-new-jinja-filters | Christian Breunig | |
vyos.template: T4988: add bytes and seconds conversion filters | |||
2023-02-08 | vyos.template: T4988: add bytes and seconds conversion filters | Daniil Baturin | |
2023-02-08 | Merge pull request #1804 from sever-sever/T2603 | Christian Breunig | |
T2603: PPPoE-server change default min-mtu value 1280 | |||
2023-02-08 | T2603: PPPoE-server change default min-mtu value 1280 | Viacheslav Hletenko | |
Minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Change 'min-mtu' from 1492 to 1280 | |||
2023-02-06 | Merge pull request #1802 from kylem0/T4980 | Christian Breunig | |
ntp: T4980: change chrony deny all logic | |||
2023-02-06 | ntp: T4980: change chrony deny all logic | Kyle Mitchell | |
2023-02-06 | graphql: T4979: add query show_user_info | John Estabrook | |
2023-02-04 | dhcp-relay: xml: T2408: fix CLI constraints | Christian Breunig | |
The old interface-name validator was replaced by a faster implementation in OCaml. Interface validator can be selected by including the appropriate code snippet. | |||
2023-02-04 | dhcp-relay: T2408: use Warning() on deprecated interface CLI node | Christian Breunig | |
2023-02-04 | Merge pull request #1603 from nicolas-fort/T2408 | Christian Breunig | |
T2408: dhcp-relay: Add listen-interface and upstream-interface feature | |||
2023-02-04 | qos: T4284: add safeguard for non existing interfaces | Christian Breunig | |
When shaper is bound to a dialup (e.g. PPPoE) interface it is possible, that it is yet not availbale when to QoS code runs. Skip the configuration and inform the user. | |||
2023-02-04 | qos: xml: T4284: policy-name is alpha-numeric only | Christian Breunig | |
2023-02-04 | qos: xml: T4284: bandwidh unit suffix is optional | Christian Breunig | |
2023-02-04 | bgp: T4817: extend smoketest to cover for local-role feature | Christian Breunig | |
2023-02-04 | bgp: T4817: improve help and constraint error messages | Christian Breunig | |
2023-02-04 | bgp: T4817: add local-role (RFC9234) support for peer-groups | Christian Breunig | |
Extend commit 8a75e92d ("T4817 added support for RFC 9234") to also support peer-groups. | |||
2023-02-04 | GitHub: update assign author action to version 1.6.2 | Christian Breunig | |
2023-02-04 | qos: T4969: update "match mark" value range | Christian Breunig | |
This improves commit d2885ad0 ("T4969: fix class match mark number"). | |||
2023-02-04 | Merge pull request #1792 from DaniilHarun/current | Christian Breunig | |
T4969: fix class match mark number | |||
2023-02-04 | Merge pull request #1797 from ServerForge/current | Christian Breunig | |
bgp: T4817: add support for RFC9234 | |||
2023-02-04 | Revert "login: T4975: Fixed broken CLI commands" | Christian Breunig | |
This reverts commit 3a6e77d479da4321b851163490a9b79ef2cef7b8. A general solution is implemented in Commit 29a44a73 ("T4975: always sync() filesystem after commit"). | |||
2023-02-04 | T4975: always sync() filesystem after commit | Christian Breunig | |
2023-02-04 | T4817, Corrected formatting. | Kyle McClammy | |
2023-02-04 | T4817 added support for RFC 9234 | Kyle McClammy | |
2023-02-03 | Merge pull request #1795 from zdc/T4975-sagitta | Daniil Baturin | |
login: T4975: Fixed broken CLI commands | |||
2023-02-02 | login: T4975: Fixed broken CLI commands | zsdc | |
User profile files are not saved to disk after configuration is fully applied. Because of this, after a fast system reset, profile files can be empty, and CLI is broken. This fix adds a `sync()` call after the user's configuration, which should protect from data loss and fix the problem with profiles. | |||
2023-01-31 | T4969: fix class match mark number | DaniilHarun | |
2023-01-30 | Merge pull request #1791 from sever-sever/T4964 | Christian Breunig | |
T4964: Fix template bgpd.frr.j2 for l2vpn vni route-targets | |||
2023-01-30 | T4964: Fix template bgpd.frr.j2 for l2vpn vni route-targets | Viacheslav Hletenko | |
Route-target export/import for l2vpn-evpn vni xxx works as leafNode with multiple values We have to use "for" for such values | |||
2023-01-30 | Merge pull request #1761 from sever-sever/T4916-curr | Viacheslav Hletenko | |
T4916: Rewrite IPsec peer authentication and psk migration | |||
2023-01-29 | xml: T1579: allow zero length for description | Christian Breunig | |
Some older VyOS 1.3 installations seem to use zero-length description fields. Do not break them! | |||
2023-01-28 | vrrp: T1297: improve gratuitous ARP default value handling and help strings | Christian Breunig | |
2023-01-28 | Merge pull request #1787 from PeppyH/T4958-openconnect-radius-accounting | Christian Breunig | |
T4958: ocserv: openconnect: Add RADIUS accounting support | |||
2023-01-28 | Merge pull request #1789 from jestabro/insert_error | Christian Breunig | |
configtree: T4961: improve error reporting of function copy | |||
2023-01-28 | openconnect: T4955: Removed wrong acctserver in radiusclient.conf | Jamie Austin | |
Removes port key from accounting server merged config dictionary. | |||
2023-01-28 | T4958: ocserv: openconnect: refactor RADIUS accounting support | Jamie Austin | |
2023-01-28 | T4958: ocserv: openconnect: adds support for configuring RADIUS accounting | Jamie Austin | |
Adds CLI configuration options to configure RADIUS accounting for OpenConnect VPN sessions. This functionality cannot be used outside of the RADIUS OpenConnect VPN authentication mode | |||
2023-01-27 | configtree: T4961: improve error reporting of copy | John Estabrook | |
2023-01-27 | Merge pull request #1785 from aapostoliuk/T4955-sagitta | Christian Breunig | |
openconnect: T4955: Removed wrong authserver in radiusclient.conf | |||
2023-01-27 | Merge pull request #1788 from MartB/patch-1 | Christian Breunig | |
sysctl: T4928: remove outdated conntrack_helper | |||
2023-01-27 | sysctl: T4928: remove outdated conntrack_helper | Martin Böh | |
This sysctl has been removed from kernel 6.0.X onwards but its removal was skipped when upgrading the kernel. See: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/netfilter?id=b118509076b39cc5e616c0680312b5caaca535fe | |||
2023-01-27 | Merge pull request #1786 from MartB/patch-1 | Christian Breunig | |
vyos.ethtool: T4963: improve driver name detection | |||
2023-01-27 | vyos.ethtool: T4963: improve driver name detection | Martin Böh | |
The previous solution did not work for drivers that were no modules. e.g compiled with a kernel config set to CONFIG_VIRTIO_NET=y | |||
2023-01-26 | config-mgmt: T4962: add missing flag re.MULTILINE | John Estabrook | |
2023-01-26 | config-mgmt: T4962: fix typo in regex | John Estabrook | |
2023-01-26 | ntp: T4961: create path ['service'] if it doesn't exist | John Estabrook | |
config.copy does not recursively create nodes of the path. On install image, the path ['service'] is not present in config.boot.default, so must be created before config.copy['service', 'ntp']. | |||
2023-01-26 | openconnect: T4955: Removed wrong authserver in radiusclient.conf | aapostoliuk | |
After merging config dictionary with default values, radius port the default value was merged not in a proper way. It is added as a server. After creating radiusclient.conf added and the illegal authserver equal 'port'. | |||
2023-01-26 | T4916: Rewrite IPsec peer authentication and psk migration | Viacheslav Hletenko | |
Rewrite strongswan IPsec authentication to reflect structure from swanctl.conf The most important change is that more than one local/remote ID in the same auth entry should be allowed replace: 'ipsec site-to-site peer <tag> authentication pre-shared-secret xxx' => 'ipsec authentication psk <tag> secret xxx' set vpn ipsec authentication psk <tag> id '192.0.2.1' set vpn ipsec authentication psk <tag> id '192.0.2.2' set vpn ipsec authentication psk <tag> secret 'xxx' set vpn ipsec site-to-site peer <tag> authentication local-id '192.0.2.1' set vpn ipsec site-to-site peer <tag> authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer <tag> authentication remote-id '192.0.2.2' Add template filter for Jinja2 'generate_uuid4' | |||
2023-01-26 | Merge pull request #1782 from MartB/arm64-cpu | Viacheslav Hletenko | |
T4956: fix 'show hardware cpu' issue on arm64 | |||
2023-01-25 | config-mgmt: T4957: upload to archive only for location effective_values | John Estabrook | |