Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-04-02 | Merge pull request #3230 from c-po/syntax-cleanup | Christian Breunig | |
firewall: nat: policy: vrf: nft call syntax and import cleanup | |||
2024-04-02 | Merge pull request #3232 from aapostoliuk/T6196-circinus | Christian Breunig | |
T6196: Fixed applying parameters for aggregation in BGP | |||
2024-04-02 | T6196: Fixed applying parameters for aggregation in BGP | aapostoliuk | |
Fixed using 'route-map', 'as-set' and 'summary-only' together in aggregation in BGP | |||
2024-04-01 | Merge pull request #3212 from fett0/T6151 | fett0 | |
bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | |||
2024-04-01 | init: T3355: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | firewall: T970: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | conntrack: T4309: T4903: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nhrp: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | policy: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nat: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | vrf: T3655: always use full nft command name (e.g. --check over -c) | Christian Breunig | |
2024-04-01 | firewall: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | Merge pull request #3223 from c-po/T6193-dhcp-client | Daniil Baturin | |
system: T6193: invalid warning "is not a DHCP interface but uses DHCP name-server option" | |||
2024-04-01 | Merge pull request #3224 from c-po/T2590-dhcpv6-client | Daniil Baturin | |
dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | |||
2024-04-01 | Merge pull request #3222 from HollyGurza/T6178 | Christian Breunig | |
T6178: Check that certificate exists during reverse-proxy commit | |||
2024-04-01 | dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | Christian Breunig | |
After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which was present to update /etc/resolv.conf with the DHCP specified nameservers and also the search domain list was no longer present. This commit adds a per interface rendered script to inform vyos-hostsd about the received IPv6 nameservers and search domains. | |||
2024-04-01 | system: T6193: invalid warning "is not a DHCP interface but uses DHCP ↵ | Christian Breunig | |
name-server option" This fixes an invalid warning when using a DHCP VLAN interface to retrieve the system nameserver to be used. VLAN CLI config is not properly expanded leading to a false warning: [ system name-server eth1.10 ] WARNING: "eth1.10" is not a DHCP interface but uses DHCP name-server option! | |||
2024-04-01 | T6178: Check that certificate exists during reverse-proxy commit | khramshinr | |
2024-03-31 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-31 | Merge pull request #3211 from jestabro/tree-mask | Viacheslav Hletenko | |
T6185: simplify marshalling of section and config data for config-sync | |||
2024-03-30 | Merge pull request #3195 from HollyGurza/T4718-current | Christian Breunig | |
dhcp-server: T4718: Listen-address is not commit if the ip address is on the interface with vrf | |||
2024-03-30 | Merge pull request #3218 from dmbaturin/half-cpus | Christian Breunig | |
accel-ppp: T6187: use correct CPU counts adjusted for SMT | |||
2024-03-30 | accel-ppp: T6187: use correct CPU counts adjusted for SMT | Daniil Baturin | |
2024-03-30 | Merge pull request #3213 from HollyGurza/T6106 | Daniil Baturin | |
bgp: T6106: Valid commit error for route-reflector-client option defined in peer-group | |||
2024-03-30 | Merge pull request #3215 from jestabro/fix-annotation | Daniil Baturin | |
image-tools: T6186: simplify image annotations fixing regression | |||
2024-03-29 | image-tools: T6186: simplify image annotations fixing regression | John Estabrook | |
2024-03-29 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-29 | bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-29 | bgp: T6106: Valid commit error for route-reflector-client option defined in ↵ | khramshinr | |
peer-group changed exception condition Improved route_reflector_client test | |||
2024-03-29 | bgp: T6010: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-28 | T6121: add section system time-zone | John Estabrook | |
2024-03-28 | config-sync: T6185: combine data for sections/configs in one command | John Estabrook | |
Package path/section data in single command containing a tree (dict) of section paths and the accompanying config data. This drops the call to get_config_dict and the need for a list of commands in request. | |||
2024-03-28 | configtree: T6180: add masking function mask_inclusive | John Estabrook | |
2024-03-28 | Merge pull request #3210 from sarthurdev/T6174 | Christian Breunig | |
dhcp: T6174: Add TACACS/Radius users to _kea group | |||
2024-03-28 | dhcp: T6174: Add TACACS/Radius users to _kea group | sarthurdev | |
Also raise op-mode error when unable to fetch data from Kea socket | |||
2024-03-28 | Merge pull request #3198 from HollyGurza/T6159 | Christian Breunig | |
openvpn: T6159: Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" for every client connection | |||
2024-03-28 | Merge pull request #3207 from dmbaturin/T3664-grub-chroot | Christian Breunig | |
vyos.system.grub: T3664: add chroot argument to the GRUB install function | |||
2024-03-28 | Merge pull request #3208 from dmbaturin/T3664-template-env-var | Christian Breunig | |
vyos.template: T3664: add an environment variable for template location | |||
2024-03-28 | vyos.template: T3664: add an environment variable for template location | Daniil Baturin | |
to allow unmodified code to be executed from anywhere, even outside of VyOS installations | |||
2024-03-28 | vyos.system.grub: T3664: add chroot argument to the GRUB install function | Daniil Baturin | |
to faciliate running it outside of a VyOS installation | |||
2024-03-28 | Merge pull request #3200 from sever-sever/T5832 | Daniil Baturin | |
T5832: VRRP allow set interface for exluded-address | |||
2024-03-28 | Merge pull request #3202 from sarthurdev/T5606_1 | Daniil Baturin | |
ipsec: T5606: T5871: Use multi node for CA certificates | |||
2024-03-28 | Merge pull request #2965 from lucasec/t5872 | Daniil Baturin | |
T5872: ipsec remote access VPN: support dhcp-interface. | |||
2024-03-28 | Merge pull request #3201 from dmbaturin/T4516-format-string-fix | Christian Breunig | |
grub: T4516: correct a format string | |||
2024-03-28 | grub: T4516: correct a format string | Daniil Baturin | |
2024-03-28 | ipsec: T5606: T5871: Use multi node for CA certificates | sarthurdev | |
This changes behaviour from fetching CA chain in PKI, to the user manually setting CA certificates. Prevents unwanted parent CAs existing in PKI from being auto-included as may not be desired/intended. | |||
2024-03-28 | T5832: VRRP allow set interface for exluded-address | Viacheslav Hletenko | |
Ability to set interface for `excluded-address` The excluded-addresses are not listed in the VRRP packet (adverts packets). We have this ability for `address`, add the same feature for the excluded-address ``` set high-availability vrrp group GRP-01 excluded-address 192.0.2.202 interface 'dum2' set high-availability vrrp group GRP-01 excluded-address 192.0.2.203 interface 'dum3' ``` | |||
2024-03-28 | Merge pull request #3194 from c-po/dhclient-T6175 | Christian Breunig | |
op-mode: T6175: "renew dhcp interface <name>" does not check for DHCP interface | |||
2024-03-28 | openvpn: T6159: Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" ↵ | khramshinr | |
for every client connection Don't show duplicate info of vtunx show header when clints is not connected but server is configured | |||
2024-03-28 | dhcp-server: T4718: Listen-address is not commit if the ip address is on the ↵ | khramshinr | |
interface with vrf |