| Age | Commit message (Collapse) | Author |
|---|
|
(cherry picked from commit 4291a1a423c3cbbae9e4142575b36d6fbe1c126f)
|
|
T6090: policy: fix migration script (backport #3137)
|
|
occurs also if only <policy route> is defined.
(cherry picked from commit 1048f49e403d7ce3df379bbf48e7fcc60a74e67b)
|
|
xml: T2518: T160: improve NAT66/NPTv6 and NAT64 help string s (backport #3135)
|
|
xml: T3642: improve PKI CLI help string (backport #3133)
|
|
(cherry picked from commit 7ca0ad91744044f74690179eaec4160d9c4fee65)
|
|
(cherry picked from commit 63de63f43aaa720993faf06ba2789789d87d63c6)
|
|
(cherry picked from commit d6226d60dce4a46c9fa63adbf85f2df86c7bd1b1)
|
|
radvd: T6118: add nat64prefix support RFC8781 (backport #3125)
|
|
T2447: add configurable kernel boot option 'disable-power-saving' (backport #3093)
|
|
Add support for pref64 option, as defined in RFC8781. The prefix valid lifetime
must not be smaller than the "interface interval max" definition which defaults
to 600.
set service router-advert interface eth1 nat64prefix 64:ff9b::/96
(cherry picked from commit f1ead5c6a16aba00699b8a5b9c18ef6cffe8cc4d)
|
|
grub: T4548: Fixed GRUB configuration files order (backport #3126)
|
|
Lower available CPU C states to a minimum if this option set. This will set
Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1".
(cherry picked from commit 3a3e0dff4ff1f80835eca6b2362d792e3ecacc8e)
|
|
To iterate files on ext* file systems GRUB reads their inodes one by one,
ignoring names. This breaks our configuration logic that relies on proper
loading order.
This commit adds a helper `sort_inodes()` that needs to be used whenever GRUB
configuration files are created. It recreates files, changing their inodes in a
way where inodes order matches alphabetical order.
(cherry picked from commit f74923202311e853b677e52cd83bae2be9605c26)
|
|
conntrack: T5080: Fix rule order for applied conntrack modules (backport #3123)
|
|
(cherry picked from commit 1fbda31623054ee944d063f738e4d1d4170341ef)
|
|
vrrp: T6020: vrrp health-check script not applied correctly in keepal…
|
|
Added health-check to sync-group in CLI
Don't use instance health-check when instance in sync group member
Disallow wrong healtch-check configurations
New smoke test
|
|
dhcp-client: T6093: extend regex for client class-id's with DOT (backport #3117)
|
|
xml: T6098: relax description constraint to allow non-ascii characters (backport #3110)
|
|
A restriction to ascii in the constraint disallowed earlier support for
unicode bytes.
(cherry picked from commit 66b92e1cd4ec948c1e2df4bee9b21da9633f5bd8)
|
|
xml: T5738: revert invalid change from lower character limit - 0 length must be allowed (backport #3115)
|
|
The regex used is not working if the string contains dots.
Originally authored by: Lucas <pinheirolucas@pm.me>
(cherry picked from commit c8670ae7941a8bac31e2174d4c6426b47272bfcc)
|
|
be allowed
This reverts a change from commit a72ededa0 ("xml: T5738: lower maximum
description to 255 characters") which incresaed the lower limit from 0 to 1.
We actually require 0 length value for description nodes as introduced in
commit 6eea12512e ("xml: T1579: allow zero length for description").
(cherry picked from commit 724c685cba423758bece827d6d286815933ba912)
|
|
firewall: T6071: truncate rule description field to 255 characters (backport #3113)
|
|
(cherry picked from commit 259ef4740413b39da9b122db19c549eeec88114c)
|
|
e.g. Linux Kernel only supports 255 and not 256 characters for the ifalias field.
(cherry picked from commit a72ededa0b29c25efaab52f2db170c34eba50248)
|
|
http-api: T6107: add an option to increase the request body size limit (backport #3108)
|
|
(cherry picked from commit 4792d39bb84991768404f69ff807e43a9979a79e)
|
|
snmp: T2998: SNMP v3 oid "exclude" option fix (backport #3105)
|
|
(cherry picked from commit 77a25e95da48549f2791b677f4ba187e547b1c6a)
|
|
remote: T6104: fix logic of failure case in MissingHostKeyPolicy (backport #3100)
|
|
conntrack-sync: T6057: Add ability to disable syslog for conntrackd (backport #3099)
|
|
(cherry picked from commit 73e215dc338c8c3a6c9b3d10c952477ba00b923b)
|
|
(cherry picked from commit c37fb4010c50a18029d6c680c42fceb3b8930dbd)
|
|
T6075: firewall and NAT: check if interface-group exists when using them in firewall|nat rules. (backport #3088)
|
|
firewall|nat rules.
(cherry picked from commit 3c0634e572ffdecaf24a9dac16678427f22761ab)
|
|
wifi: T6095: incorrect country "uk" it's actually "gb" (backport #3090)
|
|
All valid country codes can be retrieved from [1] and extracted which resulted
in the completion helper list of this commit.
1: https://git.kernel.org/pub/scm/linux/kernel/git/wens/wireless-regdb.git/tree/db.txt
(cherry picked from commit 45cd735f89a4b6c7419a26d2800d832c9da9f735)
|
|
T6061: fix rule parsing when connection-status is used (backport #3087)
|
|
T6096: Config commits are not synced properly because 00vyos-sync is deleted by vyos-router (backport #3085)
|
|
by vyos-router
(cherry picked from commit 433faaa9fe7d7dfc02db78ff039e772f5037037a)
|
|
(cherry picked from commit 8f2534e9654b61b7db45788bb52ac6cf8017b054)
|
|
T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug (backport #3079)
|
|
http-api: T6069: fix allocation outside of thread lock (backport #3089)
|
|
(cherry picked from commit 7503e419d0dbc9ba81f7299d9df173c0a82f20da)
|
|
xml: T5738: use generic-disable-node building block for "disable" CLI nodes (backport #3091)
|
|
Make the code more uniform and maintainable.
(cherry picked from commit 21b0bf0168697fdbe514ae49a4a28b39a91ec777)
|
|
If we have any `vpn ipsec` and `protocol nhrp` configuration we
get the empty configuration file `/run/opennhrp/opennhrp.conf`
after rebooting the system.
Use config dependency instead of the old `resync_nhrp` function
fixes this issue
(cherry picked from commit 689fea253d9019df20d5c6ac7fa22d5e8454afab)
|
|
qos: T5646: Skip add filter for qos policy limiter class without match (backport #3068)
|
