Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-10-04 | Merge pull request #4048 from rebortg/node_exporter | Christian Breunig | |
T973: add basic node_exporter implementation | |||
2024-10-03 | T973: remove irrelevant standard values | rebortg | |
2024-10-03 | T6760: firewall: add packet modifications existing in policy route to ↵ | Nicolas Fort | |
regular firewall ruleset. | |||
2024-09-30 | Merge pull request #4112 from c-po/policy-T6751 | Daniil Baturin | |
policy: T6751: add missing completion helpers for community-list | |||
2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
T6687: add fqdn support to nat rules. | |||
2024-09-30 | policy: T6751: add missing completion helpers for community-list | Christian Breunig | |
Add all missing, well-known values for the community-list regex. | |||
2024-09-24 | Merge pull request #3966 from lucasec/t6630 | Daniil Baturin | |
T6630: ntp: support hardware timestamp offload and other mechanisms to improve accuracy | |||
2024-09-21 | T6630: ntp: move interface timestamping configuration under ptp node | Christian Breunig | |
2024-09-21 | T6630: ntp: rename ptp-transport to ptp and use defaultValue for port | Christian Breunig | |
2024-09-21 | T6630: ntp: add chrony "ntp over ptp" transport | Lucas Christian | |
2024-09-21 | T6630: ntp: add hardware timestamp offload | Lucas Christian | |
2024-09-21 | T6630: ntp: add "interleave" option | Lucas Christian | |
2024-09-21 | lldp: T6727: add missing input validation for interface names | Christian Breunig | |
There is no input CLI validation on the interface name passed to the LLDP service. | |||
2024-09-19 | Merge pull request #4061 from c-po/syslog-T5367 | Daniil Baturin | |
syslog: T5367: add format option to include timezone in message | |||
2024-09-18 | T973: add basic node_exporter implementation | rebortg | |
2024-09-16 | T6687: add fqdn support to nat rules. | Nicolas Fort | |
2024-09-15 | bond: T6709: add EAPoL support | Christian Breunig | |
2024-09-12 | syslog: T5367: add format option to include timezone in message | Christian Breunig | |
Add CLI option to include the systems timezone in the syslog message sent to a collector. This can be enabled using: set system syslog host <hostname> format include-timezone | |||
2024-09-12 | Merge pull request #4046 from nvollmar/T6703 | Christian Breunig | |
T6703: Adds option to configure AMD pstate driver | |||
2024-09-12 | Merge pull request #4021 from natali-rs1985/T6652-current | Daniil Baturin | |
openfabric: T6652: Add support for OpenFabric protocol | |||
2024-09-12 | Merge pull request #4041 from natali-rs1985/T6685-current | Daniil Baturin | |
pppoe-server: T6685: Add options to accept any and blank service names | |||
2024-09-12 | pppoe-server: T6685: Possibility of any services name or blank in pppoe | Nataliia Solomko | |
2024-09-12 | Merge pull request #4032 from dvlogic/Allow_Container_DNS_Disable | Christian Breunig | |
T6701: Added ability to disable the container DNS plugin | |||
2024-09-11 | T6703: shorten help description | Nicolas Vollmar | |
2024-09-11 | T6703: Adds option to configure AMD pstate driver | Nicolas Vollmar | |
2024-09-11 | T6294: Service dns forwarding add the ability to configure ZonetoCache | khramshinr | |
2024-09-11 | Merge pull request #4023 from nvollmar/T6679 | Christian Breunig | |
T6679: add group option for nat66 | |||
2024-09-11 | Merge pull request #4028 from alainlamar/T6693 | Christian Breunig | |
T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | |||
2024-09-11 | container: T6701: add support to disable container network DNS support | Dave Vogel | |
Add ability to set the container network with a disable-dns setting to disable the DNS plugin that is on be default. set container network <network> no-name-server | |||
2024-09-10 | T6698: firewall: add matcher for vlan type. (#4027) | Nicolás Fort | |
2024-09-07 | T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | Alain Lamar | |
2024-09-04 | openfabric: T6652: Add support for OpenFabric protocol | Nataliia Solomko | |
OpenFabric is a routing protocol providing link-state routing with efficient flooding for topologies like spine-leaf networks. FRR implements OpenFabric in a daemon called fabricd | |||
2024-09-02 | T6679: add destination groups | Nicolas Vollmar | |
2024-09-02 | Merge pull request #4018 from nicolas-fort/T6647 | Daniil Baturin | |
T6647: firewall. Introduce patch for accepting invalid ARP and DHCP | |||
2024-08-28 | T6647: firewall. Introduce patch for accepting ARP and DHCP replies on ↵ | Nicolas Fort | |
stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. | |||
2024-08-27 | T6681: Add option for SLAAC to support suppress Interval Advertisement in RAs | Hikari Kongou | |
2024-08-20 | Merge pull request #3975 from lucasec/t6183 | Christian Breunig | |
T6183: interfaces openvpn: suppport specifying IP protocol version | |||
2024-08-16 | Merge pull request #3987 from natali-rs1985/T6649-current | Daniil Baturin | |
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces | |||
2024-08-15 | T5794: change firewall priority in oder to be loaded after all interfaces. | nicolas | |
2024-08-15 | T6649: Accel-ppp separate vlan-mon from listen interfaces | Nataliia Solomko | |
2024-08-13 | T6183: interfaces openvpn: suppport specifying IP protocol version | Lucas Christian | |
2024-08-12 | T6648: dhcpv6-server: align stateless DHCPv6 options with stateful | Lucas Christian | |
2024-08-05 | firewall: T4694: fix GRE key include path in XML | Christian Breunig | |
2024-08-05 | Merge branch 'current' into feature/T4694/gre-match-fields | Christian Breunig | |
2024-08-05 | Merge pull request #3920 from fett0/T6555 | Christian Breunig | |
OPENVPN: T6555: add server-bridge options in mode server | |||
2024-08-04 | firewall: T4694: Adding GRE flags & fields matches to firewall rules | Andrew Topp | |
* Only matching flags and fields used by modern RFC2890 "extended GRE" - this is backwards-compatible, but does not match all possible flags. * There are no nftables helpers for the GRE key field, which is critical to match individual tunnel sessions (more detail in the forum post) * nft expression syntax is not flexible enough for multiple field matches in a single rule and the key offset changes depending on flags. * Thus, clumsy compromise in requiring an explicit match on the "checksum" flag if a key is present, so we know where key will be. In most cases, nobody uses the checksum, but assuming it to be off or automatically adding a "not checksum" match unless told otherwise would be confusing * The automatic "flags key" check when specifying a key doesn't have similar validation, I added it first and it makes sense. I would still like to find a workaround to the "checksum" offset problem. * If we could add 2 rules from 1 config definition, we could match both cases with appropriate offsets, but this would break existing FW generation logic, logging, etc. * Added a "test_gre_match" smoketest | |||
2024-08-02 | OPENVPN: T6555: fix name to bridge | fett0 | |
2024-08-02 | T4072: change same helpers in xml definitions; add notrack action for ↵ | Nicolas Fort | |
prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest | |||
2024-08-01 | T6570: firewall: add global-option to configure sysctl parameter for ↵ | Nicolas Fort | |
enabling/disabling sending traffic from bridge layer to ipvX layer | |||
2024-08-01 | T4072: firewall: extend firewall bridge capabilities, in order to include ↵ | Nicolas Fort | |
new chains, priorities, and firewall groups |