| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-07-22 | wireless: T6425: adjust to latest country-code changes | Christian Breunig | |
| Commit 9e22ab6b2a ("wireless: T6318: move country-code to a system wide configuration") removed the per wifi interface setting for a country-code. This commit adjust the smoketests to the new design. (cherry picked from commit 312273c9569d973c510d871adb941709804d8868) | |||
| 2024-07-22 | wireless: T6425: Add smoketests for VHT beamforming | Alain Lamar | |
| (cherry picked from commit 578fbe0eb436697132e5a738fec5a4ac61ced8da) | |||
| 2024-07-22 | T6599: ipsec: fix incorect default behavior for dead-peer-detection | Lucas Christian | |
| (cherry picked from commit 23a3419d512139650cfe3dc76759b370b0c0c3d6) | |||
| 2024-07-22 | T6599: ipsec: support disabling rekey of CHILD_SA. | Lucas Christian | |
| Also adds support for life_bytes, life_packets, and DPD for remote-access connections. Changes behavior of remote-access esp-group lifetime setting to have parity with site-to-site connections. (cherry picked from commit fd5d7ff0b4fd69b248ecb29c6ec1f3cf844c41cf) | |||
| 2024-07-20 | utils: migrate to new get_vrf_tableid() helper | Christian Breunig | |
| Commit 452068ce7 ("interfaces: T6592: moving an interface between VRF instances failed") introduced a new helper to retrieve the VRF table ID from the Kernel. This commit migrates the old code path where the individual fields got queried to the new helper vyos.utils.network.get_vrf_tableid(). (cherry picked from commit 36f3791e0c15267483d59a3bb74465811d08df88) | |||
| 2024-07-20 | interfaces: T6592: moving an interface between VRF instances failed | Christian Breunig | |
| To reproduce: set vrf name mgmt table '150' set vrf name no-mgmt table '151' set interfaces ethernet eth2 vrf 'mgmt' commit set interfaces ethernet eth2 vrf no-mgmt commit This resulted in an error while interacting with nftables: [Errno 1] failed to run command: nft add element inet vrf_zones ct_iface_map { "eth2" : 151 } The reason is that the old mapping entry still exists and was not removed. This commit adds a new utility function get_vrf_tableid() and compares the current and new VRF table IDs assigned to an interface. If the IDs do not match, the nftables ct_iface_map entry is removed before the new entry is added. (cherry picked from commit 452068ce78581bb6fba2df4dba197e95b9aeb33d) | |||
| 2024-07-17 | configdep: T6559: add smoketest of dependency script error | John Estabrook | |
| (cherry picked from commit ad43aa885a8ef689da212088d6ebb37c32d72883) | |||
| 2024-07-03 | Merge pull request #3757 from natali-rs1985/T5487-current | Christian Breunig | |
| openvpn: T5487: Remove deprecated option --cipher for server and client mode | |||
| 2024-07-03 | ssh: T5878: Allow changing the PubkeyAcceptedAlgorithms option | khramshinr | |
| (cherry picked from commit 06e6e011cdf12e8d10cf1f6d4d848fd5db51720d) | |||
| 2024-07-03 | openvpn: T5487: Remove deprecated option --cipher for server and client mode | Nataliia Solomko | |
| 2024-06-28 | T6477: Add telegraf loki output plugin | Viacheslav Hletenko | |
| Add Loki plugin to telegraf set service monitoring telegraf loki url xxx (cherry picked from commit 3365eb7ab99fa9a259fe440eb51e82fc0a0a4dc6) | |||
| 2024-06-24 | smoketest: T6510: ensure one cannot delete the current user in "system login" | Christian Breunig | |
| (cherry picked from commit 4c7719efa27d9d2966b70b924c90aa2c90022388) | |||
| 2024-06-19 | macsec: T5447: fix error message syntax - there is no tx and rx key, only key | Christian Breunig | |
| (cherry picked from commit f29caa824c02c833a3978b9236391e4277c1a6ba) | |||
| 2024-06-13 | Merge pull request #3639 from natali-rs1985/T5487-current | Daniil Baturin | |
| openvpn: T5487: Remove deprecated option --cipher for server and client mode | |||
| 2024-06-11 | openvpn: T5487: Remove eprecated option --cipher for server and client mode | Nataliia Solomko | |
| 2024-06-11 | firewall: T3900: fix migration and smoketests | Christian Breunig | |
| Commit 770edf016838523 ("T3900: T6394: extend functionalities in firewall") changed the position in the CLI for conntrack timeout. This lead to failing smoketests because of a regression in the migrator. | |||
| 2024-06-10 | Merge pull request #3606 from c-po/utils-cpu-T5195 | Christian Breunig | |
| vyos.utils: T5195: import vyos.cpu to this package | |||
| 2024-06-10 | T6219: align with system sysctl and limit parameters to supported | Nicolas Vollmar | |
| 2024-06-10 | container: T6219: Add support for container sysctl / kernel parameters | Ben Pilgrim | |
| 2024-06-10 | vyos.utils: T5195: import vyos.cpu to this package | Christian Breunig | |
| The intention of vyos.utils package is to have a common ground for repeating actions/helpers. This is also true for number of CPUs and their respective core count. Move vyos.cpu to vyos.utils.cpu | |||
| 2024-06-06 | Merge pull request #3578 from nicolas-fort/raw-hook | Daniil Baturin | |
| T3900: Add support for raw tables in firewall | |||
| 2024-06-05 | Merge pull request #3571 from fett0/T6429 | Daniil Baturin | |
| isis: T6429: fix isis metric-style configuration missing | |||
| 2024-06-04 | ISIS: T6332: add smoketest option | fett0 | |
| 2024-06-04 | T3900: T6394: extend functionalities in firewall; move netfilter sysctl ↵ | Nicolas Fort | |
| timeout parameters defined in conntrack to firewall global-opton section. | |||
| 2024-06-03 | reverse-proxy: T6434: Support additional healthcheck options (#3574) | Alex W | |
| 2024-05-31 | Merge pull request #3557 from haimgel/T6422/allow-multiple-ns-records | Christian Breunig | |
| dns: T6422: allow multiple redundant NS records | |||
| 2024-05-31 | T5307: QoS - traffic-class-map services (#3492) | Roman Khramshin | |
| added new syntax to work with class match filters in QoS policy | |||
| 2024-05-30 | T6422: Smoke test for NS record configration in authoritative DNS, typo & ↵ | Haim Gelfenbeyn | |
| style fixes | |||
| 2024-05-30 | Merge pull request #3510 from HollyGurza/T4576 | Daniil Baturin | |
| T4576: Accel-ppp logging level configuration | |||
| 2024-05-30 | Merge pull request #3546 from c-po/haproxy | Christian Breunig | |
| reverse-proxy: T6419: build full CA chain when verifying backend server | |||
| 2024-05-29 | reverse-proxy: T5231: better mark v4v6 listen any address | Christian Breunig | |
| haproxy supports both ":::80 v4v6" and "[::]:80 v4v6" as listen statement, where the later one is more humand readable. Both act in the same way. | |||
| 2024-05-29 | Merge pull request #3534 from sever-sever/T6411 | Daniil Baturin | |
| T6411: CGNAT fix sequences for external address ranges | |||
| 2024-05-29 | Merge pull request #3537 from fett0/T6332 | Christian Breunig | |
| ISIS: T6332: Fix isis not working only ipv6 | |||
| 2024-05-29 | ISIS: T6332: Fix isis not working only ipv6 | fett0 | |
| 2024-05-28 | Merge pull request #3529 from HollyGurza/T5786 | Christian Breunig | |
| T5786: Add set/show system image to /image endpoint | |||
| 2024-05-28 | T6411: CGNAT fix sequences for external address ranges | Viacheslav Hletenko | |
| Fix the bug where address external alocation was not rely on sequences of the external IP addresses (if set) | |||
| 2024-05-28 | T6406: rename cpus to cpu | Nicolas Vollmar | |
| 2024-05-28 | T6406: add container cpu limit option | Nicolas Vollmar | |
| 2024-05-27 | T6406: check for required kernel config | Nicolas Vollmar | |
| 2024-05-27 | T5786: Add set/show system image to /image endpoint | khramshinr | |
| 2024-05-27 | T4576: Accel-ppp logging level configuration | khramshinr | |
| add ability to change logging level config for: * VPN L2TP * VPN PPTP * VPN SSTP * IPoE Server * PPPoE Serve | |||
| 2024-05-26 | smoketest: T6395: check for VFIO options to be present | Christian Breunig | |
| 2024-05-23 | Merge pull request #3487 from Embezzle/T6370 | Christian Breunig | |
| reverse-proxy: T6370: Set custom HTTP headers in reverse-proxy responses | |||
| 2024-05-22 | nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel ↵ | Christian Breunig | |
| >=5.0 random - In kernel 5.0 and newer this is the same as fully-random. In earlier kernels the port mapping will be randomized using a seeded MD5 hash mix using source and destination address and destination port. https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454 | |||
| 2024-05-21 | reverse-proxy: T6370: Set custom HTTP headers in reverse-proxy responses | Alex W | |
| 2024-05-21 | T6373: QoS Policy Limiter - classes for marked traffic do not work | khramshinr | |
| 2024-05-18 | Merge pull request #3479 from sever-sever/T5169 | Daniil Baturin | |
| T5169: Add smoketest for CGNAT | |||
| 2024-05-17 | T5169: Add smoketest for CGNAT | Viacheslav Hletenko | |
| 2024-05-17 | T6358: Add config option for host process namespace | Nicolas Vollmar | |
| 2024-05-16 | Merge pull request #3450 from HollyGurza/T5756 | Christian Breunig | |
| T5756: L2TP RADIUS backup and weight settings | |||
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |