summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-11-09T978: Support PowerDNS Recursor outbound queries over IPv6.Geoff Adams
This requires adding a query-local-address6 setting to enable outbound IPv6 queries in general, and also formatting upstream nameserver IPv6 addresses in such a way that Recursor can parse them. (cherry picked from commit 5d2e36da657fd2e15f9dc8d5588b06478bd3d55c)
2018-11-08cleanup: move files from vyos-build repo to vyos-1x where they are requiredChristian Poessinger
(cherry picked from commit 15065070b7c22709e259a6ae0cc4a27fd7b59d6b)
2018-11-08T974: bugfix dns forwarder not listening on IPv6 addressesChristian Poessinger
By default PowerDNS only allows 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 for incoming DNS queries - we changed this to 0.0.0.0/0 to be reachable by everyone. This only covered the IPv4 address space and any IPv6 related query was not handled by the server. (cherry picked from commit 1682d7167461ab9ef72471b31b199094b335276d)
2018-11-07T959: XML/Python rewrite of "protocol igmp-proxy" and op-mode commandsChristian Poessinger
Examples: ========= CFG commands: vyos@vyos# set protocols igmp-proxy disable-quickleave vyos@vyos# set protocols igmp-proxy interface eth0 alt-subnet '172.16.35.0/24' vyos@vyos# set protocols igmp-proxy interface eth0 alt-subnet '172.31.0.0/24' vyos@vyos# set protocols igmp-proxy interface eth0 role 'upstream' vyos@vyos# set protocols igmp-proxy interface eth1 role 'downstream' vyos@vyos# show protocols igmp-proxy { disable-quickleave interface eth0 { alt-subnet 172.16.35.0/24 alt-subnet 172.31.0.0/24 role upstream } interface eth1 { role downstream } } OP mode commands: ----------------- vyos@vyos:~$ show ip multicast interface Interface BytesIn PktsIn BytesOut PktsOut Local eth0 0.0b 0 0.0b 0 xxx.xxx.xxx.65 eth1 0.0b 0 0.0b 0 xxx.xxx.xx.201 vyos@vyos:~$ show ip multicast mfc Group Origin Pkts Bytes Wrong In Out xxx.x.xx.1 xxx.xx.0.1 10 9.81KB 0 eth0 eth1 xxx.x.xx.2 xxx.xx.0.1 -- (cherry picked from commit 698c5a40b2ece2f3eb41ad932660f7ceb1f80092)
2018-11-05T965: Fix Wireguard configuration inconsistencieshagbard
- pubkey updates now work - removing peers or interfaces work, was related tothe fact that tag nodes are called multiple times
2018-11-06Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2018-11-06Merge branch 'current' into cruxDaniil Baturin
2018-11-05T966: Traceback when deleting wireguard interfacehagbard
2018-11-05T288: add a script for normalizing IP(v6) addresses so that they can be ↵Daniil Baturin
safely passed to iproute2.
2018-11-05T288: add a script for normalizing IP(v6) addresses so that they can be ↵Daniil Baturin
safely passed to iproute2.
2018-11-05Merge branch 'current' of https://github.com/vyos/vyos-1x into currentDaniil Baturin
2018-11-05T950: make sure agentx is enabled in FRR only when SNMP is setup, and ↵Daniil Baturin
supress duplicate error messages.
2018-11-05T950: make sure agentx is enabled in FRR only when SNMP is setup, and ↵Daniil Baturin
supress duplicate error messages.
2018-11-03T958: Problems with wireguard descriptionhagbard
2018-11-03T958: Problems with wireguard descriptionhagbard
2018-11-02T949: config issue when creating multiple wg interfaces at the same time.hagbard
2018-11-02T949: config issue when creating multiple wg interfaces at the same time.hagbard
2018-11-02T939: Remove possibility to specify DHCP relay portChristian Poessinger
(cherry picked from commit c4c183a16fe2ddc612ed947fc5513c87f30c7c27)
2018-11-02T939: Remove possibility to specify DHCP relay portChristian Poessinger
2018-10-31Merge pull request #35 from ovsiannikov/componentversionsDaniil Baturin
T688: parsing component version string
2018-10-29T240: system integrity checkhagbard
2018-10-29T240: system integrity checkhagbard
2018-10-28Merge branch 'current' into cruxDaniil Baturin
2018-10-28T923: enable AgentX in FRR after SNMP is configured.Daniil Baturin
2018-10-28T931: fix passing arguments to tcpdump filter option.Daniil Baturin
We need to pass all completion words rather than just the first since filters can contain whitespace.
2018-10-26T886: validation logic in `interfaces wireguard wgX address x.x.x.x brokenhagbard
- removed ip-host from tree, iproute2 will detect faulty addresses and return exit 1
2018-10-26T886: validation logic in `interfaces wireguard wgX address x.x.x.x brokenhagbard
- removed ip-host from tree, iproute2 will detect faulty addresses and return exit 1
2018-10-25T938: do not bind DHCP relay to default port if unspecifiedChristian Poessinger
Binding isc-dhcp-relay to its default port (67 e.g. for IPv4) will result in an error when starting up the service: bad: ---- $ dhcrelay -q -4 -p 67 -c 10 -A 576 -m discard -i eth0.21 -i eth0 10.253.253.1 binding to user-specified port 67 good: ----- $ dhcrelay -q -4 -c 10 -A 576 -m discard -i eth0.21 -i eth0 10.253.253.1 Setting removed from the IPv6 implementation, too!
2018-10-25T937: proper handle IPv6 link-local addresses in vyos.validate moduleChristian Poessinger
The problem is that some IPv6 addresses reported by the system (mainly link-local addresses) contain an interface suffix like %eth0, this was not properly handeled in the validator script. Remove any given interface attribute on passed IPv6 addresses. If no interface suffix is added - there is no problem. (cherry picked from commit de131151b2c52c6d91ce586066433e7c0afc2080)
2018-10-25T937: proper handle IPv6 link-local addresses in vyos.validate moduleChristian Poessinger
The problem is that some IPv6 addresses reported by the system (mainly link-local addresses) contain an interface suffix like %eth0, this was not properly handeled in the validator script. Remove any given interface attribute on passed IPv6 addresses. If no interface suffix is added - there is no problem.
2018-10-25T933: vrrp split brain while using unicast mode and virtual mac addresshagbard
- adding vmac_xmit_base to keepalived.conf when use_vmac is being used otherwise both nodes will become master
2018-10-25T933: vrrp split brain while using unicast mode and virtual mac addresshagbard
- adding vmac_xmit_base to keepalived.conf when use_vmac is being used otherwise both nodes will become master
2018-10-21T634: remove 'service ssh allow-root'Christian Poessinger
2018-10-21T634: remove 'service ssh allow-root'Christian Poessinger
(cherry picked from commit 9cf0514668b1461d3b74076b99c9edabafa10418)
2018-10-20SNMP: update comments in Python generatorChristian Poessinger
2018-10-20T923: support SNMP integration with FRR routing daemonChristian Poessinger
2018-10-19Merge branch 'dhcp-relay' into currentChristian Poessinger
* dhcp-relay: dhcpv6-relay: added missing verify() step for listen and upstream interfaces T913: DHCP relay service XML/Python rewrite for IPv6 T913: DHCP relay service XML/Python rewrite for IPv4 vyos-1x now depends on isc-dhcp-relay dns-forwarding: fix XML interface indenting
2018-10-19dhcpv6-relay: added missing verify() step for listen and upstream interfacesChristian Poessinger
2018-10-19Add Client keepalive option for use with cloud-initUnicronNL
Add option to specify multiple listening ports Clean up template generation layout
2018-10-17Fixing check for local IP, using validator --is-any-host.hagbard
2018-10-17Fixing check for local IP, using validator --is-any-host.hagbard
2018-10-17T913: DHCP relay service XML/Python rewrite for IPv6Christian Poessinger
2018-10-17T913: DHCP relay service XML/Python rewrite for IPv4Christian Poessinger
2018-10-17vyos-1x now depends on isc-dhcp-relayChristian Poessinger
2018-10-17dns-forwarding: fix XML interface indentingChristian Poessinger
2018-10-17Update show-bridge.xmlDaniil Baturin
2018-10-15Merge pull request #55 from hagbard-01/cruxhagbard-01
Bugfixes: T870,T886
2018-10-15T886: validation logic in `interfaces wireguard wgX address x.x.x.x brokenhagbard
2018-10-15T870: Commit-confirm restarts the server even after commithagbard
- adding removal of the at job and /var/run/confirm.job - fixed indents
2018-10-14T896: Fix dynamic DNS for CUSTOM providerChristian Poessinger
JINJA2 templated missed the 'server=' statement when generating custom dynamic DNS entries in the resulting ddclient.conf.