Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-08-23 | Merge pull request #2142 from nicolas-fort/T5450 | Christian Breunig | |
T5450: allow inverted matcher for interface and interface-group | |||
2023-08-23 | T5472: nat redirect: allow redirection without defining redirected port | Nicolas Fort | |
2023-08-23 | T5450: update smoketest and interface definition in order to work with new ↵ | Nicolas Fort | |
firewall cli | |||
2023-08-23 | Merge pull request #2156 from giga1699/T5447 | Christian Breunig | |
T5447: Initial support for MACsec static keys | |||
2023-08-20 | T5447: Remove redundant self.set_admin_state | Giga Murphy | |
2023-08-20 | T5447: Update copyright years | Giga Murphy | |
2023-08-20 | T5447: Corrected comment in _create header | Giga Murphy | |
2023-08-20 | T5447: Corrected comment for interface down | Giga Murphy | |
2023-08-20 | T5447: Implement maintainer feedback | Giga Murphy | |
2023-08-18 | T5447: Initial support for MACsec static keys | Giga Murphy | |
2023-08-17 | Merge pull request #2130 from aapostoliuk/T5409-sagitta | Christian Breunig | |
wireguard: T5409: Added 'set interfaces wireguard wgX threaded' | |||
2023-08-17 | wireguard: T5409: rename threaded CLI not to per-client-thread | Christian Breunig | |
Using threaded as CLI node is a very deep term used by kernel threads. To make this more understandable to users, rename the node to per-client-thread. It's also not necessary to test if any one peer is configured and probing if the option is set. There is a base test which requires at least one peer to be configured. | |||
2023-08-12 | Merge pull request #2117 from zdc/T5410-sagitta | Daniil Baturin | |
utils: T5410: Extended supported types in `convert_data()` | |||
2023-08-11 | ipv6: T5464: add support for per-interface dad (duplicate address detection) ↵ | Christian Breunig | |
setting | |||
2023-08-11 | ipv6: T5464: use proper XML default for DAD transmits | Christian Breunig | |
This is only a cosmetic change so that the default value is properly retrieved from the defaultValue XML node. | |||
2023-08-11 | T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set ↵ | Nicolas Fort | |
firewall ipv6 name ...> . Also fix some unexpected behaviour with geoip. | |||
2023-08-11 | T5160: firewal refactor: fix tabulation for geo-ip parsing code. Typo fix in ↵ | Nicolas Fort | |
firewall smoketest | |||
2023-08-11 | T5160: firewall refactor: change firewall ip to firewall ipv4 | Nicolas Fort | |
2023-08-11 | T5160: firewall refactor: re-add missing code in template.py which was ↵ | Nicolas Fort | |
accidentaly removed. Update smokestest: remove zone test and fix test_sysfs test | |||
2023-08-11 | T5160: firewall refactor: new cli structure. Update jinja templates, python ↵ | Nicolas Fort | |
scripts and src firewall | |||
2023-08-10 | T5434: use get_defaults instead of defaults | John Estabrook | |
2023-08-10 | T5434: remove unneeded import | John Estabrook | |
2023-08-10 | T5434: replace import of component_version | John Estabrook | |
2023-08-10 | xml: T5218: fix typo in component_version | John Estabrook | |
2023-08-09 | pki: T5273: add a certificate fingerprint command | Daniil Baturin | |
2023-08-09 | xml: T5452: catch lib errors in generate_cache | John Estabrook | |
2023-08-09 | T5453: nat66: exclude checks for nat load-balance when using ipv6 while ↵ | Nicolas Fort | |
parsing nat rules. | |||
2023-08-09 | Merge pull request #2136 from jestabro/with-defaults | Christian Breunig | |
T5319: remove workarounds for incorrect defaults in config-mode scripts | |||
2023-08-08 | T4989: QoS fix policer match mark | Viacheslav Hletenko | |
2023-08-08 | Merge pull request #2119 from nicolas-fort/T5014-dnat | Christian Breunig | |
T5014: nat: add source and destination nat options for configuring lo… | |||
2023-08-07 | dhcp(v6): T5428: add proper return statements in set_dhcp(v6) methods | Christian Breunig | |
2023-08-07 | wireguard: T5409: Added 'set interfaces wireguard wgX threaded' | aapostoliuk | |
Added 'set interfaces wireguard wgX threaded' command. Process traffic from each peer in a dedicated thread. | |||
2023-08-07 | config: T5443: add config merge_defaults method | John Estabrook | |
Drop low-level merge_defaults function in favor of Config method for a middle-grained level of control when merging defaults. | |||
2023-08-07 | xml: T5435: utility function for default value at path | John Estabrook | |
2023-08-06 | T5195: move helpers from vyos.validate to vyos.utils package | Christian Breunig | |
2023-08-05 | vyos.configdict: T5308: remove obsolete T2665_set_dhcpv6pd_defaults function | Christian Breunig | |
2023-08-05 | T5266: QoS limit could be not configured for queue-type prioriy | Viacheslav Hletenko | |
Fix tc qdisc command that use 'limit None' if limit is not in config Limit xx sould be used only if it exists in the config | |||
2023-08-05 | dhcpv6: T5428: client renewal fails when running inside VRF | Christian Breunig | |
2023-08-04 | dhcp: T5428: client renewal fails when running inside VRF | Christian Breunig | |
vyos@vyos# run show vrf MGMT processes 2282 sshd There is no dhclient process running in given VRF. dhclient complains it can not send out packets via the given interface (as it's not bound to that VRF) Aug 02 20:29:54 dhclient[1686]: send_packet: Network is unreachable Aug 02 20:29:54 dhclient[1686]: send_packet: please consult README file regarding broadcast address. Aug 02 20:29:54 dhclient[1686]: dhclient.c:3001: Failed to send 300 byte long packet over fallback interface. | |||
2023-08-04 | dhcp: T5428: provide common direcotry path via vyos.defaults.directories | Christian Breunig | |
Multiple scripts use the same hardcoded path for DHCP client leases in different direcotries - this can't be worse. | |||
2023-08-02 | Merge pull request #2128 from aapostoliuk/T5426-sagitta | Christian Breunig | |
ipsec: T5426: Added exceptions in vici functions calls | |||
2023-08-02 | Merge pull request #2122 from aapostoliuk/T5413 | Christian Breunig | |
wireguard: T5413: Blocked adding the peer with the router's public key | |||
2023-08-02 | wireguard: T5413: Blocked adding the peer with the router's public key | aapostoliuk | |
Disabeled adding the peer with the same public key as the router has. Added smoketest | |||
2023-08-02 | ipsec: T5426: Added exceptions in vici functions calls | aapostoliuk | |
Added exceptions in vici functions calls | |||
2023-07-31 | Merge branch 'current' into T5014-dnat | Nicolás Fort | |
2023-07-31 | T5014: fix conflicts. Add code for redirection, which is causing conflicts. ↵ | Nicolas Fort | |
Change code for new syntax | |||
2023-07-31 | T5014: nat: add source and destination nat options for configuring load ↵ | Nicolas Fort | |
balance within a single rule. | |||
2023-07-31 | dhcpv6-pd: T5387: add support for no-release flag | 1vivy | |
When no-release is specified, dhcp6c client will not release allocated address or prefix on client exit. vyos.ifconfig: dhcpv6: T5387: re-use options_file for no release flag [WIP] * Todo: render Jinja2 template and fill it vyos.ifconfig: dhcpv6: T5387: finish options_file and no release flag in cli vyos.ifconfig: dhcpv6: T5387: fix missing/wrong end tag vyos.ifconfig: dhcpv6: T5387: fix options, no var for -n dhcpv6-client: T5387: fix missing / from filepaths | |||
2023-07-31 | T5416: fix ipsec matcher | Nicolas Fort | |
2023-07-29 | xml: T5403: remove incorrect arg check | John Estabrook | |