Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-03-23 | Merge pull request #1910 from sarthurdev/ipsec_test | Christian Breunig | |
ipsec: T5003: Resolve issue with IPsec DHCP test | |||
2023-03-23 | T5108: Add option rate-limit for l2tp pptp sstp ipoe raw format | Viacheslav Hletenko | |
There is a missing usefull option 'rate-limit' for L2TP/PPTP/SSTP/IPoE raw output format | |||
2023-03-23 | ipsec: T2816: Cleanup dhcp hook file if not required | sarthurdev | |
2023-03-23 | ipsec: T5003: Resolve issue with ipsec DHCP test | sarthurdev | |
tearDown checks for existence of charon process, however this test does not create any connections by design. | |||
2023-03-23 | op-mode: T5107: raise error instead of calling exit | John Estabrook | |
2023-03-23 | T5086: Add smoketest DROP_MONITOR kernel option | Viacheslav Hletenko | |
2023-03-22 | graphql: T5106: generate client ops for composite functions | John Estabrook | |
2023-03-22 | graphql: T5106: generate client ops for configsession functions | John Estabrook | |
2023-03-22 | graphql: T5106: add auth_token client op | John Estabrook | |
2023-03-22 | Merge pull request #1905 from nicolas-fort/T5105 | Christian Breunig | |
T5105: dhcp-server: Fix error message from dhcp-server | |||
2023-03-22 | T5105: Fix error message from dhcp-server | Nicolas Fort | |
2023-03-21 | Merge pull request #1894 from aapostoliuk/T5043-sagitta | Christian Breunig | |
ipsec: T5043: Rewritten and fixed 'reset vpn' commands | |||
2023-03-21 | Merge pull request #1903 from bstepler/T5104 | Christian Breunig | |
dhcp: pppoe: T5104: fix VRF comparisons | |||
2023-03-21 | ospf: T5102: do not always redistribute babel routes | Christian Breunig | |
2023-03-21 | dhcp: pppoe: T5104: fix VRF comparisons | Brandon Stepler | |
2023-03-21 | Merge pull request #1902 from nicolas-fort/T5050-log | Christian Breunig | |
T5050: fix smoketest policy_route, which was failing after previos co… | |||
2023-03-21 | T5050: fix smoketest policy_route, which was failing after previos commit ↵ | Nicolas Fort | |
was merged | |||
2023-03-21 | T5099: IPoE-server add option next-pool for named ip pools | Viacheslav Hletenko | |
In cases with multiple named IP pools, it is required the option 'next' to be sure that if IP addresses ended in one pool, then they would begin to be allocated from the next named pool. For accel-ppp it requires specific order as pool must be defined before we can use it with the 'next-option' set service ipoe-server client-ip-pool name first-pool subnet '192.0.2.0/25' set service ipoe-server client-ip-pool name first-pool next-pool 'second-pool' set service ipoe-server client-ip-pool name second-pool subnet '203.0.113.0/25' [ip-pool] 203.0.113.0/25,name=second-pool 192.0.2.0/25,name=first-pool,next=second-pool | |||
2023-03-21 | Merge pull request #1889 from nicolas-fort/T5050-log | Viacheslav Hletenko | |
T5050: Firewall: Add log options | |||
2023-03-21 | T5050: Firewall: Add log options | Nicolas Fort | |
2023-03-21 | Merge pull request #1899 from rgwan/current | Christian Breunig | |
pppoe: T5098: allow user to set pppd holdoff option | |||
2023-03-21 | pppoe: T5098: allow user to set pppd holdoff option | Zhiyuan Wan | |
2023-03-20 | Merge pull request #1896 from jestabro/raw-list-openvpn | Daniil Baturin | |
openvpn: T5095: raw output should return list instead of dict | |||
2023-03-17 | Merge pull request #1898 from sever-sever/T5086-def | Christian Breunig | |
T5086: Fix sflow fix default values for server | |||
2023-03-17 | T5086: Fix sflow fix default values for server | Viacheslav Hletenko | |
We drop default values 'port' but don't set it again per server Fix it | |||
2023-03-17 | Merge pull request #1897 from sever-sever/T5086 | Christian Breunig | |
T5086: Add sFlow drop-monitor-limit option | |||
2023-03-17 | T5086: Add sFlow drop-monitor-limit option | Viacheslav Hletenko | |
hsflowd will export the headers of dropped packets (along with the name of the function in the Linux kernel where that skb was dropped) as part of the standard sFlow feed. This measurement complements the sFlow packet sampling and counter-telemetry well because it provides visibility into the traffic that is not flowing. Very helpful for troubleshooting. The limit (a rate limit max of N drops per second sent out in the sFlow datagrams) is the parameter you would set in the CLI. set system sflow drop-monitor-limit 50 | |||
2023-03-16 | Merge pull request #1895 from sever-sever/T5091 | Christian Breunig | |
T5091: IPoE-server verify RADIUS settings | |||
2023-03-16 | opmode: T4837: support ip route display for specific prefixes inside VRF | Christian Breunig | |
2023-03-16 | Merge pull request #1893 from sever-sever/T5092 | Christian Breunig | |
T5092: IPoE-server named pool must not rely on auth type | |||
2023-03-16 | Merge pull request #1891 from sever-sever/T5086 | Christian Breunig | |
T5086: Add sFlow feature based on hsflowd | |||
2023-03-16 | openvpn: T5095: raw output should return list instead of dict | John Estabrook | |
2023-03-16 | ipsec: T5043: Rewritten and fixed 'reset vpn' commands | aapostoliuk | |
1. Rewritten CLI of 'reset vpn' commands. 2. Created 'reset vpn ipsec remote-access' commands to reset RA IKEv2 session. 3. Created 'reset vpn ipsec site-to-site all' command to reset all configured IPSec site-to-site peers sessions. 4. Rewritten 'reset vpn l2t|pptp|sstp' commands to new opmode style. | |||
2023-03-16 | T5091: IPoE-server verify RADIUS settings | Viacheslav Hletenko | |
As we don't have global option 'gateway-address' for ipoe-server we cannot use general configverify.verify_accel_ppp_base_service Add verify radius setting for configuration mode 'radius' Radius authentication required at least one RADIUS server | |||
2023-03-16 | T5092: IPoE-server named pool must not rely on auth type | Viacheslav Hletenko | |
Named pools for ipoe-server must not rely on autentication type It is a separate global option for [ipoe] and [ip-pool] sections | |||
2023-03-16 | T5086: Add sFlow feature based on hsflowd | Viacheslav Hletenko | |
Add sFlow feature based on hsflowd According to user reviews, it works more stable and more productive than pmacct I haven't deleted 'pmacct' 'system flow-accounting sflow' yet It could be migrated or deprecated later set system sflow agent-address '192.0.2.14' set system sflow interface 'eth0' set system sflow interface 'eth1' set system sflow polling '30' set system sflow sampling-rate '100' set system sflow server 192.0.2.1 port '6343' set system sflow server 192.0.2.11 port '6343' | |||
2023-03-14 | Merge pull request #1890 from nicolas-fort/T5055 | Viacheslav Hletenko | |
T5055: NAT: extend packet-type to NAT | |||
2023-03-14 | T5055: NAT: extend packet-type match option which was previously introduced ↵ | Nicolas Fort | |
in firewall, to NAT | |||
2023-03-14 | Merge pull request #1888 from sever-sever/T5085 | Christian Breunig | |
T5085: Fix ipv6 route-map for ospfv3 | |||
2023-03-14 | T5085: Fix ipv6 route-map for ospfv3 | Viacheslav Hletenko | |
Add template to generate zebra "ipv6 protocol ospf6 route-map xxx" | |||
2023-03-13 | Merge pull request #1886 from sever-sever/T2516 | Christian Breunig | |
T2516: Exclude veth interfaces from duplex and speed check | |||
2023-03-13 | T2516: Exclude veth interfaces from duplex and speed check | Viacheslav Hletenko | |
Exclude interfaces with 'veth' driver from duplex and speed check | |||
2023-03-12 | Debian: bump compat (debian helper) version 10 -> 12 | Christian Breunig | |
2023-03-12 | Revert "Debian: T2216: add netavark dependency for podman containers" | Christian Breunig | |
This reverts commit 9ed4113d6c4809a0126d04c99d60eaa76a7b6b15. | |||
2023-03-11 | container: T5003: add dependency on fuse-overlayfs | Christian Breunig | |
Fix podman error about invalid storage: [graphdriver] prior storage driver overlay failed: 'overlay' is not supported over overlayfs, a mount_program is required: backing file system is unsupported for this graph driver" Error: 'overlay' is not supported over overlayfs, a mount_program is required: backing file system is unsupported for this graph driver. | |||
2023-03-11 | keepalived: T5003: remove Debian default config path from ConditionFileNotEmpty | Christian Breunig | |
Also ExecReload is a duplicate of the base service file | |||
2023-03-11 | Debian: T2216: add netavark dependency for podman containers | Christian Breunig | |
2023-03-11 | keepalived: T5003: move to Debian upstream version | Christian Breunig | |
2023-03-11 | Debian: remove python3-pyhumps from build dependencies, provided via pip in ↵ | Christian Breunig | |
container | |||
2023-03-10 | openvpn: xml: T1843: re-use generic username and password building block | Christian Breunig | |