Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-11 | bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | Christian Breunig | |
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2 domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originated from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs set protocols bgp address-family l2vpn-evpn mac-vrf soo | |||
2024-02-10 | Merge pull request #2983 from c-po/rpki-t6004 | Christian Breunig | |
rpki: T6004: add missing startup priority | |||
2024-02-10 | rpki: T6004: add missing startup priority | Christian Breunig | |
2024-02-10 | xml: T5738: improve PKI building blocks for CLI | Christian Breunig | |
2024-02-08 | Merge pull request #2955 from c-po/rpki-T6023 | Christian Breunig | |
rpki: T6023: add support for CLI knobs expire-interval and retry-interval | |||
2024-02-08 | Merge pull request #2968 from natali-rs1985/T5685-current | Daniil Baturin | |
T5685: Keepalived VRRP prefix is not necessary for the virtual address | |||
2024-02-08 | T5685: Keepalived VRRP prefix is not necessary for the virtual address | Nataliia Solomko | |
2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
T5960: Rewritten authentication node in PPTP to a single view | |||
2024-02-07 | Merge pull request #2957 from c-po/bgp-T6024 | Christian Breunig | |
bgp: T6024: add additional missing FRR features | |||
2024-02-07 | xml: T302: replace references to Quagga with FRRouting | Christian Breunig | |
2024-02-07 | bgp: T6024: add additional missing FRR features | Christian Breunig | |
* set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null> * set protocols bgp parameters allow-martian-nexthop * set protocols bgp parameters no-hard-administrative-reset" | |||
2024-02-07 | rpki: T6023: add support for CLI knobs expire-interval and retry-interval | Christian Breunig | |
2024-02-07 | T5960: Rewritten authentication node in PPTP to a single view | aapostoliuk | |
Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. | |||
2024-02-06 | Merge pull request #2936 from c-po/rpki-T6011 | Daniil Baturin | |
rpki: T6011: known-hosts-file is no longer supported by FRR | |||
2024-02-03 | rpki: T6011: known-hosts-file is no longer supported by FRR | Christian Breunig | |
2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
2024-02-02 | Merge pull request #2748 from MattKobayashi/t5848 | Christian Breunig | |
qos: T5848: Add triple-isolate option to CAKE policy config | |||
2024-02-02 | qos: T5848: improve flow-isolation help strings | Christian Breunig | |
2024-02-02 | Merge pull request #2889 from sarthurdev/kea-hooks | Christian Breunig | |
dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD | |||
2024-02-02 | Merge pull request #2927 from ishioni/T5955 | Christian Breunig | |
container: T5955: add uid/gid settings | |||
2024-02-02 | container: T5955: allow setting uid/gid | Piotr Maksymiuk | |
2024-02-02 | Merge pull request #2891 from aapostoliuk/T5971-circinus | Viacheslav Hletenko | |
T5971: Rewritten ppp options in accel-ppp services | |||
2024-02-01 | upnp: T5989: add ipv4-prefix as a valid option for UPnP ACLs | Chris Buechler | |
2024-02-01 | Merge pull request #2756 from nicolas-fort/T4839 | Christian Breunig | |
T4839: firewall: Add dynamic address group in firewall configuration | |||
2024-02-01 | Merge pull request #2860 from indrajitr/ddclient-update-20240119 | Christian Breunig | |
ddclient: T5966: Adjust dynamic dns config address subpath | |||
2024-02-01 | Merge pull request #2903 from HollyGurza/T5687 | Christian Breunig | |
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | |||
2024-02-01 | dns forwarding: T5687: add missing constraints on ecs-add-for CLI node | Christian Breunig | |
Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a proper constraint enforcing this. | |||
2024-02-01 | Merge pull request #2914 from aapostoliuk/T5930-circinus | Christian Breunig | |
bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | |||
2024-02-01 | bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | aapostoliuk | |
Denied using command 'route-target vpn export/import' with 'both' together in bgp configuration. | |||
2024-02-01 | Merge pull request #2887 from nicolas-fort/T5977 | Christian Breunig | |
T5977: firewall: remove ipsec options in output chain rule definition… | |||
2024-01-31 | dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | khramshinr | |
Fix option descriptions | |||
2024-01-30 | reverse-proxy: T5999: Allow root for exact match in backend rule URL | cleopold73 | |
2024-01-30 | dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | khramshinr | |
2024-01-29 | T5971: Rewritten ppp options in accel-ppp services | aapostoliuk | |
Rewritten 'ppp-options' to the same view in all accel-ppp services. Adding IPv6 support to PPTP. | |||
2024-01-25 | T4839: firewall: Add dynamic address group in firewall configuration, and ↵ | Nicolas Fort | |
appropiate commands to populate such groups using source and destination address of the packet. | |||
2024-01-24 | dhcp: T3316: Change help text on `listen-interface` to be generic | sarthurdev | |
2024-01-24 | dhcpv6: T3316: Add support for excluded-prefix in prefix delegation | sarthurdev | |
2024-01-24 | dhcpv6: T3771: Allow installation of routes for delegated prefixes | sarthurdev | |
2024-01-23 | T5977: firewall: remove ipsec options in output chain rule definitions, ↵ | Nicolas Fort | |
since it's not supported. | |||
2024-01-23 | T5979: add configurable kernel boot option 'disable-mitigations' | Christian Breunig | |
2024-01-23 | bfd: T5967: add minimum-ttl option | Christian Breunig | |
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> * set protocols bfd profile <name> minimum-ttl <1-254> | |||
2024-01-22 | sflow: T5968: add VRF support | Christian Breunig | |
Add support to run hsflowd in a dedicated (e.g. management) VRF. Command will be "set system sflow vrf <name>" like with any other service | |||
2024-01-21 | ddclient: T5966: Migration script for dynamic dns config subpath change | Indrajit Raychaudhuri | |
2024-01-21 | ddclient: T5966: Adjust dynamic dns config address subpath | Indrajit Raychaudhuri | |
Modify the dynamic dns configuration 'address' subpath for better clarity on how the address is obtained. Additionally, remove `web-options` and fold those options under the path `address web`. | |||
2024-01-21 | Merge pull request #2863 from c-po/ntp-T5692 | Christian Breunig | |
ntp: T5692: add support to configure leap second behavior | |||
2024-01-21 | Merge pull request #2852 from sever-sever/T5958 | Viacheslav Hletenko | |
T5958: QoS add basic implementation of policy shaper-hfsc | |||
2024-01-21 | ntp: T5692: add support to configure leap second behavior | Christian Breunig | |
* set service ntp leap-second [ignore|smear|system|timezone] Where timezone is the new and old default resulting in adding "leapsectz right/UTC" to chrony.conf. The most prominent new option is "smear" which will add leapsecmode slew maxslewrate 1000 smoothtime 400 0.001 leaponly to chrony. See https://chrony-project.org/doc/4.3/chrony.conf.html leapsecmode for additional information | |||
2024-01-18 | T5779: conntrack: bump version number | Christian Breunig | |
2024-01-18 | T5958: QoS add basic implementation of policy shaper-hfsc | Viacheslav Hletenko | |
QoS policy shaper-hfsc was not implemented after rewriting the traffic-policy to qos policy. We had CLI but it does not use the correct class. Add a basic implementation of policy shaper-hfsc. Write the class `TrafficShaperHFS` | |||
2024-01-18 | Merge pull request #2848 from c-po/T5738-config-management | Christian Breunig | |
xml: T5738: re-use source-address-ipv4-ipv6 building block for config-management |