Age | Commit message (Collapse) | Author |
|
We always mangled and worked on the "ip rule" singleton even when nothing
needed to be changed. This resulted in a VRF hickup when the same VRF was added
and removed multiple times.
set interfaces ethernet eth1 vrf foo
set vrf name foo table '1000'
commit
delete interfaces ethernet eth1 vrf
delete vrf
commit
set interfaces ethernet eth1 vrf foo
set vrf name foo table '1000'
commit
broke reachability on eth1 - a reboot was required.
This change will now only alter the ip rule tables once when VRF instances
are created for the first time and will not touch the Kernel "ip rule"
representation afterwards.
(cherry picked from commit 2cec431e5caf9df85640f707cd6dc3077c17c238)
|
|
(cherry picked from commit b40315b3c5051888f499961e63410e14c5d1bad7)
|
|
(cherry picked from commit 812d9770619b968b04961aebf3944fde13df491b)
|
|
(cherry picked from commit d96bab4e6da517f07133667834cd6f8bcfb5160f)
|
|
conntrack-sync: T4237: Fix checks for listen-address list to str
|
|
Verify section conntrack_sync.py funciton 'is_addr_assigned'
should checks address as string not as list
|
|
As INFLUX_TOKEN is present in override.conf.tmpl environment we expect
variable "$INFLUX_TOKEN" in the telegraf template and config but not
value of the token
(cherry picked from commit 19f65290529ac642da419ac77003ddaa70d0cc67)
|
|
monitoring: T3872: Add new feature service monitoring telegraf
|
|
|
|
|
|
|
|
|
|
|
|
(cherry picked from commit b4185f8356d69476292906ebe32daf1c4867601a)
|
|
(cherry picked from commit 5e7e96380b314587bbd8bd584848d39caef86f3f)
|
|
(cherry picked from commit 11a900e706db59459314622050ced7d4117f090b)
|
|
firewall-bridge: T4193: Add op-mode for firewall policy
|
|
There is spelling mistake in "advertisement" of hello-time option's
completion help
(cherry picked from commit b10baca3c8663e7e56eb9abfb3c03ce576c34f1f)
|
|
|
|
DHCP: T4196: fix client-prefix-length parameter
|
|
|
|
(cherry picked from commit 3ef881fcc3aada5846e3dd9ec20054c0e7261f46)
|
|
Drop the overcomplex function get_config_value() to search for NTPd
configuration values. Rather assemble the required string and probe for
its presence in the configuration like we do on most other smoketests.
(cherry picked from commit ba9dc4c2ff89a7a71b84bc84db20e89f604919f2)
|
|
ntp: T4184: Fix allow-clients address 1.3
|
|
NTP-server with option "allow-clients address x.x.x.x" should
accept requests only from clients addresses which declared in
configuration if this option exists
Add "restrict default ignore" to fix it, in another case it
responce to any address
(cherry picked from commit 40f0e78dd94691d54ffd4d2e270ed071e2d2513a)
|
|
T4183: T4110: Ability to set IPv6-link-local addresses for services and wg
|
|
Add ability to set for services like "SSH/NTP" listen IPv6 link-local
addresses
|
|
Allow setting ipv6-link-local addresses as peer address for
wireguard interfaces
Add validator "ipv6-link-local"
|
|
|
|
squid: T3299: Add listen address 0.0.0.0
|
|
(cherry picked from commit 5a73c946000902f6e445b0803ca090f7fc6e0954)
|
|
Without this option systemd startup will hit a timeout and the kill keepalived
again.
(cherry picked from commit 2a279f48e208b90c91eac5d6c5855e65cee39018)
|
|
(cherry picked from commit 1a74e6b3ce061f3c866bcb3f119ee5c73b0c6796)
|
|
(cherry picked from commit 0a91c5de32b52235f4c9c12a6ec34c017011c3df)
|
|
op-mode: T4142: Fix for show input ifbX interfaces
|
|
Ability to see interface type "input" ifbX from op-mode
(cherry picked from commit 5fdf4e5988344f7a890fe351183b58b8e21699c2)
|
|
|
|
keepalived: T4081: Fix health-checking when syn-group is used
|
|
In case if a CLI configuration is not available, dhclient cannot add
nameservers to a `resolv.conf` file, because `vyos-hostsd` requires that
an interface be listed in the `set system name-server` option.
This commit introduces two changes:
* `vyos-hostsd` service will not be started before Cloud-Init fetch all
remote data. This is required because all meta-data should be available
for Cloud-Init before any of VyOS-related services start since it is
used for configuration generation.
* the `vyos-hostsd-client` in the `dhclient-script` will be used only if
the `vyos-hostsd` is running. In other words - if VyOS services already
started, dhclient changes `resolv.conf` using `vyos-hostsd`; in other
cases - does this directly.
These changes should protect us from problems with DHCP during system
boot if DHCP is required by third-party utils.
|
|
l2tp-server: T4117: Add dae-server configuration to template
|
|
(cherry picked from commit d2ca2ac1cf9cacd44a04fbb6da9a884c23f043f6)
|
|
|
|
(cherry picked from commit 5c5e283f8a964f5bbb3d838d1c0aabdee4e2032b)
|
|
(cherry picked from commit a70a4001fe0b3a91a7d86191ff32dcc7205d2eae)
|
|
If health-check scripts are used in vrrp group and vrrp group
is member of sync-group, then health-check scripts should be
part of the section "vrrp_sync_group". In another case the
health-scripts won't work anymore.
|
|
(cherry picked from commit 4aaf0ba69139d84f89e5c3feee6edd845af8d1e5)
|
|
(cherry picked from commit d93b1203bd2e07f8c08c0be88505e8e94f950c53)
|
|
conntrack-sync: T3854: Add missed statistics for op-mode
|
|
After rewriting conntrack-sync to XML/python, part of op-mode
parameters was missed
Add "status" and "statistics" for conntrack-sync
|
|
There is typo in the completion help when this command "set sys login banner"
executed, Changed the completion help to a proper one.
(cherry picked from commit b47e54a84ad96a2fe64d3fa2bbdbfe9c058090b3)
|