Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-04-04 | Merge pull request #3242 from HollyGurza/T6166 | Christian Breunig | |
T6166: Tech support generation error for custom output location | |||
2024-04-04 | T6166: Tech support generation error for custom output location | khramshinr | |
2024-04-04 | bgp: T5943: BGP Peer-group members must be all internal or all external | khramshinr | |
2024-04-03 | GitHub: run unused imports action only for pull requests | Christian Breunig | |
2024-04-03 | Merge pull request #3240 from c-po/spring-cleaning | Christian Breunig | |
T6199: spring cleaning - drop unused Python imports | |||
2024-04-03 | T6068: dhcp-server: add command <set service dhcp-server high-availability ↵ | Nicolas Fort | |
mode> so user can define what type of ha use: active-active or active-passive | |||
2024-04-03 | GitHub: add action to check for unused imports | Christian Breunig | |
2024-04-03 | T6199: drop unused Python imports | Christian Breunig | |
found using "git ls-files *.py | xargs pylint | grep W0611" | |||
2024-04-03 | T6199: replace netifaces.interfaces() with common custom helpers | Christian Breunig | |
* Use interface_exists() outside of verify() * Use verify_interface_exists() in verify() to drop common error message | |||
2024-04-03 | T6199: drop unused sphinx documentation folder | Christian Breunig | |
2024-04-02 | Merge pull request #3236 from c-po/pki-verify | Christian Breunig | |
configverify: T6198: add common helper for PKI certificate validation | |||
2024-04-02 | configverify: T6198: add common helper for PKI certificate validation | Christian Breunig | |
The next evolutional step after adding get_config_dict(..., with_pki=True) is to add a common verification function for the recurring task of validating SSL certificate existance in e.g. EAPoL, OpenConnect, SSTP or HTTPS. | |||
2024-04-02 | Merge pull request #3229 from c-po/multi-vrf | Christian Breunig | |
T6192: allow binding SSH to multiple VRF instances | |||
2024-04-02 | Merge pull request #3230 from c-po/syntax-cleanup | Christian Breunig | |
firewall: nat: policy: vrf: nft call syntax and import cleanup | |||
2024-04-02 | Merge pull request #3232 from aapostoliuk/T6196-circinus | Christian Breunig | |
T6196: Fixed applying parameters for aggregation in BGP | |||
2024-04-02 | T6196: Fixed applying parameters for aggregation in BGP | aapostoliuk | |
Fixed using 'route-map', 'as-set' and 'summary-only' together in aggregation in BGP | |||
2024-04-01 | Merge pull request #3212 from fett0/T6151 | fett0 | |
bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | |||
2024-04-01 | init: T3355: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | firewall: T970: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | conntrack: T4309: T4903: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nhrp: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | policy: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nat: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | vrf: T3655: always use full nft command name (e.g. --check over -c) | Christian Breunig | |
2024-04-01 | firewall: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | ssh: T6192: allow binding to multiple VRF instances | Christian Breunig | |
Currently VyOS only supports binding a service to one individual VRF. It might become handy to have the services (initially it will be VRF, NTP and SNMP) be bound to multiple VRFs. Changed VRF from leafNode to multi leafNode with defaultValue: default - which is the name of the default VRF. | |||
2024-04-01 | utils: T5738: always use vyos.utils.network.interface_exists over os.path.exists | Christian Breunig | |
2024-04-01 | xml: T5738: extend VRF building blocks with common constraint definition | Christian Breunig | |
2024-04-01 | T6188: | l0crian1 | |
- modified: src/op_mode/firewall.py Changed behavior of "show firewall" for specific rule to only show rule and not also default-action | |||
2024-04-01 | modified: op-mode-definitions/firewall.xml.in | l0crian1 | |
- Added show firewall <sections> detail paths modified: src/op_mode/firewall.py - Added Description as a header to normal "show firewall" commands - Added 'detail' view which shows the output in a list key-pair format Description column was added for these commands and their subsections: show firewall statistics show firewall groups show firewall <family> Detail view was added for these commands: show firewall bridge forward filter detail show firewall bridge forward filter rule <rule#> detail show firewall bridge name <chain> detail show firewall bridge name <chain> rule <rule#> detail show firewall ipv4 forward filter detail show firewall ipv4 forward filter rule <rule#> detail show firewall ipv4 input filter detail show firewall ipv4 input filter rule <rule#> detail show firewall ipv4 output filter detail show firewall ipv4 output filter rule <rule#> detail show firewall ipv4 name <chain> detail show firewall ipv4 name <chain> rule <rule#> detail show firewall ipv6 forward filter detail show firewall ipv6 forward filter rule <rule#> detail show firewall ipv6 input filter detail show firewall ipv6 input filter rule <rule#> detail show firewall ipv6 output filter detail show firewall ipv6 output filter rule <rule#> detail show firewall ipv6 name <chain> detail show firewall ipv6 name <chain> rule <rule#> detail show firewall group detail show firewall group <group> detail | |||
2024-04-01 | Merge pull request #3223 from c-po/T6193-dhcp-client | Daniil Baturin | |
system: T6193: invalid warning "is not a DHCP interface but uses DHCP name-server option" | |||
2024-04-01 | Merge pull request #3224 from c-po/T2590-dhcpv6-client | Daniil Baturin | |
dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | |||
2024-04-01 | Merge pull request #3222 from HollyGurza/T6178 | Christian Breunig | |
T6178: Check that certificate exists during reverse-proxy commit | |||
2024-04-01 | dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | Christian Breunig | |
After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which was present to update /etc/resolv.conf with the DHCP specified nameservers and also the search domain list was no longer present. This commit adds a per interface rendered script to inform vyos-hostsd about the received IPv6 nameservers and search domains. | |||
2024-04-01 | system: T6193: invalid warning "is not a DHCP interface but uses DHCP ↵ | Christian Breunig | |
name-server option" This fixes an invalid warning when using a DHCP VLAN interface to retrieve the system nameserver to be used. VLAN CLI config is not properly expanded leading to a false warning: [ system name-server eth1.10 ] WARNING: "eth1.10" is not a DHCP interface but uses DHCP name-server option! | |||
2024-04-01 | T6178: Check that certificate exists during reverse-proxy commit | khramshinr | |
2024-03-31 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-31 | Merge pull request #3211 from jestabro/tree-mask | Viacheslav Hletenko | |
T6185: simplify marshalling of section and config data for config-sync | |||
2024-03-30 | Merge pull request #3195 from HollyGurza/T4718-current | Christian Breunig | |
dhcp-server: T4718: Listen-address is not commit if the ip address is on the interface with vrf | |||
2024-03-30 | Merge pull request #3218 from dmbaturin/half-cpus | Christian Breunig | |
accel-ppp: T6187: use correct CPU counts adjusted for SMT | |||
2024-03-30 | accel-ppp: T6187: use correct CPU counts adjusted for SMT | Daniil Baturin | |
2024-03-30 | T6188: add description to show firewall | l0crian1 | |
2024-03-30 | Merge pull request #3213 from HollyGurza/T6106 | Daniil Baturin | |
bgp: T6106: Valid commit error for route-reflector-client option defined in peer-group | |||
2024-03-30 | Merge pull request #3215 from jestabro/fix-annotation | Daniil Baturin | |
image-tools: T6186: simplify image annotations fixing regression | |||
2024-03-29 | image-tools: T6186: simplify image annotations fixing regression | John Estabrook | |
2024-03-29 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-29 | bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-29 | bgp: T6106: Valid commit error for route-reflector-client option defined in ↵ | khramshinr | |
peer-group changed exception condition Improved route_reflector_client test | |||
2024-03-29 | bgp: T6010: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-28 | T6121: add section system time-zone | John Estabrook | |