Age | Commit message (Collapse) | Author |
|
conntrack-sync: T1244: Support for StartupResync in conntrackd
|
|
dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains (backport #3224)
|
|
|
|
After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which
was present to update /etc/resolv.conf with the DHCP specified nameservers and
also the search domain list was no longer present.
This commit adds a per interface rendered script to inform vyos-hostsd about
the received IPv6 nameservers and search domains.
(cherry picked from commit ece425f0191762638b7c967097accd8739e9103d)
|
|
T6150: Fixed setting a static IP address by Radius in IPoE
|
|
system: T6193: invalid warning "is not a DHCP interface but uses DHCP name-server option" (backport #3223)
|
|
name-server option"
This fixes an invalid warning when using a DHCP VLAN interface to retrieve the
system nameserver to be used. VLAN CLI config is not properly expanded
leading to a false warning:
[ system name-server eth1.10 ]
WARNING: "eth1.10" is not a DHCP interface but uses DHCP name-server option!
(cherry picked from commit 61e70c5500ad5b0a9d25bdee28d982644bad6461)
|
|
Fixed setting a static IP address by Radius in IPoE
Allowing using named pools by default
Allowed adding 'gateway-address' without named pool.
|
|
snmp: T2998: SNMP v3 oid "exclude" option fix
|
|
T6110: dhcp: add error check when fail-over is enabled on a subnet, but range is not defined.
|
|
|
|
vrrp: T5504: Keepalived VRRP ability to set more than one peer-address
|
|
|
|
range is not defined.
|
|
|
|
conntrack-sync: T6057: Add ability to disable syslog for conntrackd
|
|
|
|
T5418: PPPoE allowed creating subnet started from any IP
|
|
Added the possibility of creating subnet in PPPoE
client's IP pools started from any IP.
|
|
configverify: T3992: fix KeyError in verify_address()
|
|
rpki: T6004: add missing startup priority (backport #2983)
|
|
Reproducible by:
set interfaces bridge br0 member interface eth1.10
set interfaces ethernet eth1 vif 10 address 100.64.0.1/24
File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 314, in verify_vlan_config
verify_address(vlan)
File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 206, in verify_address
interface = config['ifname']
KeyError: 'ifname'
|
|
utils: T5239: add low-level read from config.boot (RPKI fixes)
|
|
|
|
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
|
|
xml: T302: replace references to Quagga with FRRouting
|
|
|
|
T5586: delete old systemd unit keepalived service
|
|
|
|
The custom systemd unit is not required as we generate 10-override
which was implemented in https://github.com/vyos/vyos-1x/pull/2310/commits/5a6938a2e14373dfaa72211fe18deeb257d3ba12
|
|
bfd: T5967: add minimum-ttl option
|
|
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254>
(partially cherry-picked from 1f07dcbddfcfdbb9079936ec479c5633934dd547)
|
|
(cherry picked from commit 32183aa0f0f9c51126d21693db0eafa256419b31)
|
|
ethernet: T4638: deleting parent interface does not delete underlying VIFs (backport #2850)
|
|
(cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b)
|
|
wireguard: T5924: harden migration script logic 22-to-23
|
|
|
|
The original commit 2c1c36135 ("wireguard: T5413: Blocked adding the peer with
the router's public key") did not honor the fact that there might be no
private-key CLI node defined for a WireGuard interface. If this is the case,
private-key defaults to "default". This fact needs to be handled in the
migration script.
|
|
console: T4646: Fixed USB console issues (backport #1508)
|
|
* fixed the `systemctl restart` command that used a value from config instead
converted to `ttyUSBX`
* moved systemd units from `/etc/` to `/run/`
(cherry picked from commit ad1236e8d72ff29e0e2215df175b6f032fba75eb)
|
|
T1297: vrrp: backport VRRP GARP options to Equuleus
|
|
|
|
ddclient: T5852: add missing priority (backport #2703)
|
|
Running ddclient on a VLAN interface will fail during reboot as there is no
discrete priority to tell that the dynamic DNS service needs to be started
after the interfaces.
(cherry picked from commit ef237a7555843226e9bf48e552ed5feb5df581f4)
|
|
T5796:backport-add/fixed OCSERV HTTP security headers
|
|
|
|
T5817: Fix for show openvpn server
|
|
In some cases we can get error:
```
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 173, in <module>
data = get_status(args.mode, intf)
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 130, in get_status
client["tunnel"] = get_vpn_tunnel_address(client['remote'], interface)
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 66, in get_vpn_tunnel_address
tunnel_ip = lst[0].split(',')[0]
IndexError: list index out of range
```
|
|
wireguard: T5413: Blocked adding the peer with the router's public key
|
|
|