Age | Commit message (Collapse) | Author |
|
(cherry picked from commit b4185f8356d69476292906ebe32daf1c4867601a)
|
|
(cherry picked from commit 5e7e96380b314587bbd8bd584848d39caef86f3f)
|
|
(cherry picked from commit 11a900e706db59459314622050ced7d4117f090b)
|
|
firewall-bridge: T4193: Add op-mode for firewall policy
|
|
There is spelling mistake in "advertisement" of hello-time option's
completion help
(cherry picked from commit b10baca3c8663e7e56eb9abfb3c03ce576c34f1f)
|
|
|
|
DHCP: T4196: fix client-prefix-length parameter
|
|
|
|
(cherry picked from commit 3ef881fcc3aada5846e3dd9ec20054c0e7261f46)
|
|
Drop the overcomplex function get_config_value() to search for NTPd
configuration values. Rather assemble the required string and probe for
its presence in the configuration like we do on most other smoketests.
(cherry picked from commit ba9dc4c2ff89a7a71b84bc84db20e89f604919f2)
|
|
ntp: T4184: Fix allow-clients address 1.3
|
|
NTP-server with option "allow-clients address x.x.x.x" should
accept requests only from clients addresses which declared in
configuration if this option exists
Add "restrict default ignore" to fix it, in another case it
responce to any address
(cherry picked from commit 40f0e78dd94691d54ffd4d2e270ed071e2d2513a)
|
|
T4183: T4110: Ability to set IPv6-link-local addresses for services and wg
|
|
Add ability to set for services like "SSH/NTP" listen IPv6 link-local
addresses
|
|
Allow setting ipv6-link-local addresses as peer address for
wireguard interfaces
Add validator "ipv6-link-local"
|
|
|
|
squid: T3299: Add listen address 0.0.0.0
|
|
(cherry picked from commit 5a73c946000902f6e445b0803ca090f7fc6e0954)
|
|
Without this option systemd startup will hit a timeout and the kill keepalived
again.
(cherry picked from commit 2a279f48e208b90c91eac5d6c5855e65cee39018)
|
|
(cherry picked from commit 1a74e6b3ce061f3c866bcb3f119ee5c73b0c6796)
|
|
(cherry picked from commit 0a91c5de32b52235f4c9c12a6ec34c017011c3df)
|
|
op-mode: T4142: Fix for show input ifbX interfaces
|
|
Ability to see interface type "input" ifbX from op-mode
(cherry picked from commit 5fdf4e5988344f7a890fe351183b58b8e21699c2)
|
|
|
|
keepalived: T4081: Fix health-checking when syn-group is used
|
|
In case if a CLI configuration is not available, dhclient cannot add
nameservers to a `resolv.conf` file, because `vyos-hostsd` requires that
an interface be listed in the `set system name-server` option.
This commit introduces two changes:
* `vyos-hostsd` service will not be started before Cloud-Init fetch all
remote data. This is required because all meta-data should be available
for Cloud-Init before any of VyOS-related services start since it is
used for configuration generation.
* the `vyos-hostsd-client` in the `dhclient-script` will be used only if
the `vyos-hostsd` is running. In other words - if VyOS services already
started, dhclient changes `resolv.conf` using `vyos-hostsd`; in other
cases - does this directly.
These changes should protect us from problems with DHCP during system
boot if DHCP is required by third-party utils.
|
|
l2tp-server: T4117: Add dae-server configuration to template
|
|
(cherry picked from commit d2ca2ac1cf9cacd44a04fbb6da9a884c23f043f6)
|
|
|
|
(cherry picked from commit 5c5e283f8a964f5bbb3d838d1c0aabdee4e2032b)
|
|
(cherry picked from commit a70a4001fe0b3a91a7d86191ff32dcc7205d2eae)
|
|
If health-check scripts are used in vrrp group and vrrp group
is member of sync-group, then health-check scripts should be
part of the section "vrrp_sync_group". In another case the
health-scripts won't work anymore.
|
|
(cherry picked from commit 4aaf0ba69139d84f89e5c3feee6edd845af8d1e5)
|
|
(cherry picked from commit d93b1203bd2e07f8c08c0be88505e8e94f950c53)
|
|
conntrack-sync: T3854: Add missed statistics for op-mode
|
|
After rewriting conntrack-sync to XML/python, part of op-mode
parameters was missed
Add "status" and "statistics" for conntrack-sync
|
|
There is typo in the completion help when this command "set sys login banner"
executed, Changed the completion help to a proper one.
(cherry picked from commit b47e54a84ad96a2fe64d3fa2bbdbfe9c058090b3)
|
|
"any" was missing from the interface list which will be useful to indicate any
interface.
(cherry picked from commit bd53db9eb63b907a83336ccf8d179b46bf5d42d4)
|
|
|
|
(cherry picked from commit 55f8ede2d09a9ad095f9ec5c2a729f8c5fb6aafa)
|
|
T3354: Backport strip-private script
|
|
|
|
remote: T3356: Backport remote module
|
|
|
|
(cherry picked from commit 45d2429aa5d2ffafacdc5d9d00b7097169592427)
|
|
pppoe-server: T3006: Add range to regex generator
|
|
|
|
(cherry picked from commit 25d95b1f73f3e5e0fd2dfc9199f46d808c68af43)
|
|
data
Due to the AWK regex pattern data from a different peer was returned as
the first match was shown.
(cherry picked from commit 6f9ba4e577a6470372a478310ea0c49a6400b8e6)
|
|
(cherry picked from commit 0e3c35e6517f5cfebb4206c735a2ea976a7fd383)
|