summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-03-26T6150: Fixed setting a static IP address by Radius in IPoEaapostoliuk
Fixed setting a static IP address by Radius in IPoE Allowing using named pools by default Allowed adding 'gateway-address' without named pool.
2024-03-14Merge pull request #3121 from natali-rs1985/T2998-equuleusDaniil Baturin
snmp: T2998: SNMP v3 oid "exclude" option fix
2024-03-14Merge pull request #3111 from nicolas-fort/T6110Daniil Baturin
T6110: dhcp: add error check when fail-over is enabled on a subnet, but range is not defined.
2024-03-14snmp: T2998: updated snmp.pyNataliia Solomko
2024-03-14Merge pull request #3130 from natali-rs1985/T5504-equuleusDaniil Baturin
vrrp: T5504: Keepalived VRRP ability to set more than one peer-address
2024-03-13vrrp: T5504: Keepalived VRRP ability to set more than one peer-addressNataliia Solomko
2024-03-12T6110: dhcp: add error check when fail-over is enabled on a subnet, but ↵Nicolas Fort
range is not defined.
2024-03-11snmp: T2998: SNMP v3 oid "exclude" option fixNataliia Solomko
2024-03-07Merge pull request #3104 from natali-rs1985/T6057-equuleusDaniil Baturin
conntrack-sync: T6057: Add ability to disable syslog for conntrackd
2024-03-07conntrack-sync: T6057: Add ability to disable syslog for conntrackdNataliia Solomko
2024-02-16Merge pull request #3018 from aapostoliuk/T5418-equuleusDaniil Baturin
T5418: PPPoE allowed creating subnet started from any IP
2024-02-16T5418: PPPoE allowed creating subnet started from any IPaapostoliuk
Added the possibility of creating subnet in PPPoE client's IP pools started from any IP.
2024-02-14Merge pull request #3010 from c-po/t3992-equuleusChristian Breunig
configverify: T3992: fix KeyError in verify_address()
2024-02-14Merge pull request #3006 from vyos/mergify/bp/equuleus/pr-2983Daniil Baturin
rpki: T6004: add missing startup priority (backport #2983)
2024-02-13configverify: T3992: fix KeyError in verify_address()Christian Breunig
Reproducible by: set interfaces bridge br0 member interface eth1.10 set interfaces ethernet eth1 vif 10 address 100.64.0.1/24 File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 314, in verify_vlan_config verify_address(vlan) File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 206, in verify_address interface = config['ifname'] KeyError: 'ifname'
2024-02-13Merge pull request #3007 from c-po/rpki-fixesChristian Breunig
utils: T5239: add low-level read from config.boot (RPKI fixes)
2024-02-13utils: T5239: add low-level read from config.bootChristian Breunig
2024-02-13rpki: T6004: add missing startup priorityChristian Breunig
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
2024-02-10Merge pull request #2981 from c-po/equuleusDaniil Baturin
xml: T302: replace references to Quagga with FRRouting
2024-02-10xml: T302: replace references to Quagga with FRRoutingChristian Breunig
2024-02-07Merge pull request #2949 from sever-sever/T55861.3.6Daniil Baturin
T5586: delete old systemd unit keepalived service
2024-02-07T5586: Improve systemd keepalived override fileViacheslav Hletenko
2024-02-07T5586: delete old systemd unit keepalived serviceViacheslav Hletenko
The custom systemd unit is not required as we generate 10-override which was implemented in https://github.com/vyos/vyos-1x/pull/2310/commits/5a6938a2e14373dfaa72211fe18deeb257d3ba12
2024-02-01Merge pull request #2920 from c-po/bfd-equuleus-T5967Daniil Baturin
bfd: T5967: add minimum-ttl option
2024-02-01bfd: T5967: add minimum-ttl optionChristian Breunig
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> (partially cherry-picked from 1f07dcbddfcfdbb9079936ec479c5633934dd547)
2024-02-01GitHub: update PR request laballer to v5.0.0 tagChristian Breunig
(cherry picked from commit 32183aa0f0f9c51126d21693db0eafa256419b31)
2024-01-21Merge pull request #2868 from vyos/mergify/bp/equuleus/pr-2850Christian Breunig
ethernet: T4638: deleting parent interface does not delete underlying VIFs (backport #2850)
2024-01-21ethernet: T4638: deleting parent interface does not delete underlying VIFsChristian Breunig
(cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b)
2024-01-13Merge pull request #2816 from c-po/equuleus-migration-T5924Christian Breunig
wireguard: T5924: harden migration script logic 22-to-23
2024-01-12GitHub: add pull request labalerChristian Breunig
2024-01-12wireguard: T5924: harden migration script logic 22-to-23Christian Breunig
The original commit 2c1c36135 ("wireguard: T5413: Blocked adding the peer with the router's public key") did not honor the fact that there might be no private-key CLI node defined for a WireGuard interface. If this is the case, private-key defaults to "default". This fact needs to be handled in the migration script.
2024-01-10Merge pull request #2779 from vyos/mergify/bp/equuleus/pr-1508Daniil Baturin
console: T4646: Fixed USB console issues (backport #1508)
2024-01-09console: T4646: Fixed USB console issueszsdc
* fixed the `systemctl restart` command that used a value from config instead converted to `ttyUSBX` * moved systemd units from `/etc/` to `/run/` (cherry picked from commit ad1236e8d72ff29e0e2215df175b6f032fba75eb)
2024-01-09Merge pull request #2776 from nicolas-fort/T1297Daniil Baturin
T1297: vrrp: backport VRRP GARP options to Equuleus
2024-01-09T1297: vrrp: backport VRRP GARP options to EquuleusNicolas Fort
2023-12-29Merge pull request #2706 from vyos/mergify/bp/equuleus/pr-2703Christian Breunig
ddclient: T5852: add missing priority (backport #2703)
2023-12-28ddclient: T5852: add missing priorityChristian Breunig
Running ddclient on a VLAN interface will fail during reboot as there is no discrete priority to tell that the dynamic DNS service needs to be started after the interfaces. (cherry picked from commit ef237a7555843226e9bf48e552ed5feb5df581f4)
2023-12-16Merge pull request #2572 from fett0/T5796Christian Breunig
T5796:backport-add/fixed OCSERV HTTP security headers
2023-12-15 T5796:add command http-security-headersfett0
2023-12-12Merge pull request #2619 from sever-sever/T5817Daniil Baturin
T5817: Fix for show openvpn server
2023-12-12T5817: Fix for show openvpn serverViacheslav Hletenko
In some cases we can get error: ``` Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 173, in <module> data = get_status(args.mode, intf) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 130, in get_status client["tunnel"] = get_vpn_tunnel_address(client['remote'], interface) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 66, in get_vpn_tunnel_address tunnel_ip = lst[0].split(',')[0] IndexError: list index out of range ```
2023-12-09Merge pull request #2540 from aapostoliuk/T5413-equuleusDaniil Baturin
wireguard: T5413: Blocked adding the peer with the router's public key
2023-12-04 T5796:add/fixed OCSERV HTTP security headersfett0
2023-12-04Merge pull request #2570 from dmbaturin/https-api-keys-fix1.3.5Daniil Baturin
https: T5772: Move API key check to http-api.py
2023-12-04https: T5772: return from verify if NoneJohn Estabrook
​ Signed-off-by: Daniil Baturin <daniil@baturin.org>
2023-12-04https: T5772: require that at least one valid API key is presentDaniil Baturin
2023-12-04Revert "https api: T5772: check if keys are configured"Daniil Baturin
This reverts commit 57ba2fa91573ad2ecd03f0c2eb89507dfc397f1e.
2023-12-02Merge pull request #2442 from srividya0208/T5714Daniil Baturin
T5714: op-cmd: Fix for "show log vpn ipsec/all"
2023-11-30Merge pull request #2553 from dmbaturin/T5772Daniil Baturin
https: T5772: remove the default API key
2023-11-30https: T5772: remove the default API keyDaniil Baturin
The new verification code prevents it from being used, but it's not a reason to keep it
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-22 13:54:05 +0000