Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-03 | rpki: T6011: known-hosts-file is no longer supported by FRR | Christian Breunig | |
2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
2024-02-02 | Merge pull request #2748 from MattKobayashi/t5848 | Christian Breunig | |
qos: T5848: Add triple-isolate option to CAKE policy config | |||
2024-02-02 | qos: T5848: improve flow-isolation help strings | Christian Breunig | |
2024-02-02 | Merge pull request #2889 from sarthurdev/kea-hooks | Christian Breunig | |
dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD | |||
2024-02-02 | Merge pull request #2927 from ishioni/T5955 | Christian Breunig | |
container: T5955: add uid/gid settings | |||
2024-02-02 | container: T5955: allow setting uid/gid | Piotr Maksymiuk | |
2024-02-02 | Merge pull request #2891 from aapostoliuk/T5971-circinus | Viacheslav Hletenko | |
T5971: Rewritten ppp options in accel-ppp services | |||
2024-02-01 | upnp: T5989: add ipv4-prefix as a valid option for UPnP ACLs | Chris Buechler | |
2024-02-01 | Merge pull request #2756 from nicolas-fort/T4839 | Christian Breunig | |
T4839: firewall: Add dynamic address group in firewall configuration | |||
2024-02-01 | Merge pull request #2860 from indrajitr/ddclient-update-20240119 | Christian Breunig | |
ddclient: T5966: Adjust dynamic dns config address subpath | |||
2024-02-01 | Merge pull request #2903 from HollyGurza/T5687 | Christian Breunig | |
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | |||
2024-02-01 | dns forwarding: T5687: add missing constraints on ecs-add-for CLI node | Christian Breunig | |
Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a proper constraint enforcing this. | |||
2024-02-01 | Merge pull request #2914 from aapostoliuk/T5930-circinus | Christian Breunig | |
bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | |||
2024-02-01 | bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | aapostoliuk | |
Denied using command 'route-target vpn export/import' with 'both' together in bgp configuration. | |||
2024-02-01 | Merge pull request #2887 from nicolas-fort/T5977 | Christian Breunig | |
T5977: firewall: remove ipsec options in output chain rule definition… | |||
2024-01-31 | dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | khramshinr | |
Fix option descriptions | |||
2024-01-30 | reverse-proxy: T5999: Allow root for exact match in backend rule URL | cleopold73 | |
2024-01-30 | dns forwarding: T5687: Implement ECS settings for PowerDNS recursor | khramshinr | |
2024-01-29 | T5971: Rewritten ppp options in accel-ppp services | aapostoliuk | |
Rewritten 'ppp-options' to the same view in all accel-ppp services. Adding IPv6 support to PPTP. | |||
2024-01-25 | T4839: firewall: Add dynamic address group in firewall configuration, and ↵ | Nicolas Fort | |
appropiate commands to populate such groups using source and destination address of the packet. | |||
2024-01-24 | dhcp: T3316: Change help text on `listen-interface` to be generic | sarthurdev | |
2024-01-24 | dhcpv6: T3316: Add support for excluded-prefix in prefix delegation | sarthurdev | |
2024-01-24 | dhcpv6: T3771: Allow installation of routes for delegated prefixes | sarthurdev | |
2024-01-23 | T5977: firewall: remove ipsec options in output chain rule definitions, ↵ | Nicolas Fort | |
since it's not supported. | |||
2024-01-23 | T5979: add configurable kernel boot option 'disable-mitigations' | Christian Breunig | |
2024-01-23 | bfd: T5967: add minimum-ttl option | Christian Breunig | |
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> * set protocols bfd profile <name> minimum-ttl <1-254> | |||
2024-01-22 | sflow: T5968: add VRF support | Christian Breunig | |
Add support to run hsflowd in a dedicated (e.g. management) VRF. Command will be "set system sflow vrf <name>" like with any other service | |||
2024-01-21 | ddclient: T5966: Migration script for dynamic dns config subpath change | Indrajit Raychaudhuri | |
2024-01-21 | ddclient: T5966: Adjust dynamic dns config address subpath | Indrajit Raychaudhuri | |
Modify the dynamic dns configuration 'address' subpath for better clarity on how the address is obtained. Additionally, remove `web-options` and fold those options under the path `address web`. | |||
2024-01-21 | Merge pull request #2863 from c-po/ntp-T5692 | Christian Breunig | |
ntp: T5692: add support to configure leap second behavior | |||
2024-01-21 | Merge pull request #2852 from sever-sever/T5958 | Viacheslav Hletenko | |
T5958: QoS add basic implementation of policy shaper-hfsc | |||
2024-01-21 | ntp: T5692: add support to configure leap second behavior | Christian Breunig | |
* set service ntp leap-second [ignore|smear|system|timezone] Where timezone is the new and old default resulting in adding "leapsectz right/UTC" to chrony.conf. The most prominent new option is "smear" which will add leapsecmode slew maxslewrate 1000 smoothtime 400 0.001 leaponly to chrony. See https://chrony-project.org/doc/4.3/chrony.conf.html leapsecmode for additional information | |||
2024-01-18 | T5779: conntrack: bump version number | Christian Breunig | |
2024-01-18 | T5958: QoS add basic implementation of policy shaper-hfsc | Viacheslav Hletenko | |
QoS policy shaper-hfsc was not implemented after rewriting the traffic-policy to qos policy. We had CLI but it does not use the correct class. Add a basic implementation of policy shaper-hfsc. Write the class `TrafficShaperHFS` | |||
2024-01-18 | Merge pull request #2848 from c-po/T5738-config-management | Christian Breunig | |
xml: T5738: re-use source-address-ipv4-ipv6 building block for config-management | |||
2024-01-18 | xml: T5738: re-use source-address-ipv4-ipv6 building block for config-management | Christian Breunig | |
2024-01-18 | Merge pull request #2846 from c-po/t863 | Daniil Baturin | |
ndp-proxy: T5863: add missing priority to honor interface dependencies | |||
2024-01-18 | ndp-proxy: T5863: add missing priority to honor interface dependencies | Christian Breunig | |
2024-01-17 | T5953: Changed values of 'close-action' to Strongswan values | aapostoliuk | |
Changed the value from 'hold' to 'trap' in the 'close-action' option in the IKE group. Changed the value from 'restart' to 'start' in the 'close-action' option in the IKE group. | |||
2024-01-17 | Merge pull request #2832 from aapostoliuk/T5865-circinus | Christian Breunig | |
T5865: Moved ipv6 pools to named ipv6 pools in accel-ppp | |||
2024-01-16 | T4658: Renamed DPD action value from 'hold' to 'trap' | aapostoliuk | |
Renamed DPD action value from 'hold' to 'trap' | |||
2024-01-16 | T5865: Moved ipv6 pools to named ipv6 pools in accel-ppp | aapostoliuk | |
Moved ipv6 pools to named ipv6 pools in accel-ppp services | |||
2024-01-14 | bgp: T591: add VPN nexthop support per address-family | Christian Breunig | |
set protocols bgp address-family ipv4-unicast nexthop vpn export <ipv4-address|ipv6-address> set protocols bgp address-family ipv6-unicast nexthop vpn export <ipv4-address|ipv6-address> | |||
2024-01-14 | bgp: T591: add SRv6 per address-family SID support | Christian Breunig | |
set protocols bgp address-family ipv4-unicast sid vpn export <auto|1-1048575> set protocols bgp address-family ipv6-unicast sid vpn export <auto|1-1048575> | |||
2024-01-13 | dhcpv6: T3316: Add `listen-interface` as supported by Kea | sarthurdev | |
2024-01-13 | dhcpv6: T3316: Move options to separate node and extend scopes | sarthurdev | |
* Also migrate `address-range` to `range` tag node for consistency with dhcpv4 server syntax | |||
2024-01-11 | dhcp: dhcpv6: T3316: Add `subnet-id` so leases remain mapped to entries in ↵ | Simon | |
the lease file (#2796) | |||
2024-01-10 | Merge pull request #2777 from aapostoliuk/T5688-multirange | Christian Breunig | |
T5688: Changed 'range' to multi in 'client-ip-pool' for accell-ppp | |||
2024-01-10 | Merge pull request #2787 from c-po/bgp-5913 | Viacheslav Hletenko | |
bgp: T5913: allow peer-group support for ipv4|6-labeled-unicast SAFI |