Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-25 | smoketest: bugfix on proper inheritance levels for classmethod | Christian Poessinger | |
2022-04-23 | Firewall: T990: Modifications for new connection-status cli | Nicolas Fort | |
2022-04-21 | pppoe: T4384: replace default-route CLI option with common CLI nodes already ↵ | Christian Poessinger | |
present for DHCP VyOS 1.4 still leverages PPPd internals on the CLI. pppd supports three options for a default route, none, auto, force. * none: No default route is installed on interface up * auto: Default route is only installed if there is yet no default route * force: overwrite any default route There are several drawbacks in this design for VyOS and the users. If auto is specified, this only counted for static default routes - but what about dynamic ones? Same for force, only a static default route got replaced but dynamic ones did not got taken into account. The CLI is changed and we now re-use already existing nodes from the DHCP interface configuration: * no-default-route: On link up no default route is installed, same as the previous default-route none * default-route-distance: We can now specify the distance of this route for the routing table on the system. This defaults to 210 as we have for DHCP interfaces. All this will be migrated using a CLI migration script. | |||
2022-04-21 | bgp: T4385: peer-group member cannot override remote-as of peer-group | Christian Poessinger | |
2022-04-20 | openvpn: T4369: enforce daemon-restart on openvpn-option CLI change | Christian Poessinger | |
2022-04-19 | Merge pull request #1289 from nicolas-fort/T4365 | Christian Poessinger | |
NAT: T4365: Fix for nat tables manipulation on netfilter | |||
2022-04-18 | NAT: T4365: Fix for nat tables manipulation on netfilter | Nicolas Fort | |
2022-04-18 | vxlan: geneve: T4370: support configuration of DF bit option | Christian Poessinger | |
set interfaces vxlan vxlan0 parameters ip df <set|unset|inherit> set interfaces geneve gnv0 parameters ip df <set|unset|inherit> | |||
2022-04-18 | smoketest: salt: must use cmd() instead of run() when readin stdout | Christian Poessinger | |
2022-04-18 | smoketest: salt: add special handling for KVM host | Christian Poessinger | |
2022-04-16 | smoketest: salt-minion: add dummy source-interface | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: add source-interface CLI option support | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: add support for source-interface definition | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: migrate to get_config_dict() | Christian Poessinger | |
2022-04-15 | smoketest: salt: T4363: add initial testcase | Christian Poessinger | |
2022-04-14 | smoketest: firewall: ensure we can also run this test on a live system | Christian Poessinger | |
... by cleaning existing CLI config first | |||
2022-04-14 | smoketest: T4354: Add test for uniq bonding members | Viacheslav Hletenko | |
Extend bonding smoketest Add descriptions to bonding members We encountered a situation where adding any configuration for member of bonding interface excludes the interface from bonding | |||
2022-04-13 | smoketest: ids: bugfix AttributeError | Christian Poessinger | |
AttributeError: 'list' object has no attribute 'join' | |||
2022-04-11 | Firewall: T990: Add snat and dst connection status on firewall | Nicolas Fort | |
2022-04-10 | smoketest: ids: add initial testcase | Christian Poessinger | |
2022-04-10 | smoketest: nat: use setUpClass() over setUp() | Christian Poessinger | |
2022-04-09 | Merge pull request #1242 from goodNETnick/ocserv_local_otp | Christian Poessinger | |
ocserv: T4231: Added OTP support for Openconnect 2FA | |||
2022-04-09 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-04-08 | Firewall: T990: Add snat and dnat connection status on firewall | Nicolas Fort | |
2022-04-08 | smoketest: vrf: T4346: IPv6 address family can no longer be disabled in the ↵ | Christian Poessinger | |
Kernel | |||
2022-04-07 | smoketest: http: add check for missing key | John Estabrook | |
2022-04-07 | smoketest: http: bind http api to unix domain socket | John Estabrook | |
2022-04-07 | policy: T4194: simplify prefix-list duplication checks | Christian Poessinger | |
Commit 5dafe255d ("policy: T4194: Add prefix-list duplication checks") added first support for FRR prefix-list duplication checks. FRR does not allow to specify the same profix list rule multiple times. vyos(config)# ip prefix-list foo seq 10 permit 192.0.2.0/24 vyos(config)# ip prefix-list foo seq 20 permit 192.0.2.0/24 % Configuration failed. Error type: validation Error description: duplicated prefix list value: 192.0.2.0/24 There is a VyOS verify() function which simply probed for the prefix, action, le and ge settings - but as Python has excellent support when comparing data, this can be as simple as a dictionary comparison using "==". | |||
2022-04-07 | ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-06 | Merge pull request #1275 from sarthurdev/firewall_limit | Christian Poessinger | |
firewall: T4345: Fix incorrect firewall rule limit rate format | |||
2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
2022-04-06 | smoketest: http: test API authentication | Christian Poessinger | |
2022-04-06 | smoketest: http: verify nginx config file | Christian Poessinger | |
2022-04-06 | smoketest: vrf: T4331: IPv6 link-local addresses not configured for ↵ | Christian Poessinger | |
interface in VRF | |||
2022-04-04 | smoketest: login: verify test accounts are properly deleted | Christian Poessinger | |
2022-04-04 | smoketest: ssh: verify SSH service is stopped on removal | Christian Poessinger | |
2022-04-04 | smoketest: ssh: verify login of valid and invalid test user | Christian Poessinger | |
In order to test for proper system authentication and security setup a new testcase is added which performs an SSH login and command execution with a predefined user. The result (output of uname -a) must match the output if the command is run natively. We also try to login as an invalid user - this is not allowed to work. | |||
2022-04-03 | smoketest: ospfv3: remove obsolete "end=''" statement in VRF interface | Christian Poessinger | |
This is actually no longer required in FRR 8.2.2 | |||
2022-04-03 | smoketest: ospfv3: T4302: adjust to FRR 8.2 CLI | Christian Poessinger | |
2022-04-03 | smoketest: ospf(v3): ensure we can also run this test on a live system | Christian Poessinger | |
2022-04-03 | smoketest: isis: support running on live systems | Christian Poessinger | |
2022-04-03 | smoketest: isis: extend testcase to verify 'is-type level-2-only' can be set | Christian Poessinger | |
2022-04-01 | smoketest: bgp: adjust test parameter indention | Christian Poessinger | |
2022-04-01 | bgp: T4332: addpath-tx-per-as requires BGP deterministic-med paramtere to be set | Christian Poessinger | |
2022-04-01 | smoketest: bgp: verify graceful-restart options per neighbor | Christian Poessinger | |
2022-03-31 | vyos.ifconfig: T4330: bugfix changing MTU when IPv6 is disabled | Christian Poessinger | |
Commit f8b3d8999c ("ipv6: T4319: do not configure IPv6 related settings if it's disabled") moved the MTU configuration part under the code path which is only run if IPv6 is enabled on the system. This prevented MTU changes on IPv6 disabled systems. | |||
2022-03-31 | Merge pull request #1258 from c-po/t4319-disable-ipv6 | Christian Poessinger | |
T4319: bugfixes for disabled IPv6 (current) | |||
2022-03-31 | bgp: T4326: Add bgp parameter no-suppress-duplicates | Viacheslav Hletenko | |
Add new bgp parameter 'no-suppress-duplicates' set protocols bgp parameters no-suppress-duplicates | |||
2022-03-30 | smoketest: T4319: verify correct assignment of loopback IP addresses | Christian Poessinger | |
2022-03-25 | smoketest: ipv6: fix testcase after using new sysctl interface | Christian Poessinger | |