Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-27 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
required | |||
2024-02-27 | smoketest: T5160: Deduplicate nftables verify functions to testcase class, ↵ | sarthurdev | |
remove obsolete imports | |||
2024-02-25 | dhcp-server: T6063: Add `ignore-client-id` to relax client identifier checks ↵ | sarthurdev | |
for leases | |||
2024-02-18 | smoketest: T6043: proper cleanup after testcase | Christian Breunig | |
This extends commit dbe8c613b ("bridge: T6043: do not call vxlan dependency if interface does not exist (yet)") with a proper cleanup of additional interfaces created during the testrun. | |||
2024-02-17 | bridge: T6043: do not call vxlan dependency if interface does not exist (yet) | Christian Breunig | |
In order to keep the proper priority list during system startup and on initial setup/commit for this feature the dependent VXLAN code should not be called, if the interface in question does not exist (yet). | |||
2024-02-17 | Merge pull request #3019 from c-po/login-T5972 | Christian Breunig | |
login: T5972: add possibility to disable individual local user accounts | |||
2024-02-16 | login: T5972: add possibility to disable individual local user accounts | Christian Breunig | |
* set system login user <name> disable | |||
2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
T6001: add option to disable next-hop-tracking resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default in VRF ↵ | Christian Breunig | |
context * set vrf name <name> ip nht no-resolve-via-default * set vrf name <name> ipv6 nht no-resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
* set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default | |||
2024-02-16 | T5150: rename smoketest config egb-igp-route-maps -> egp-igp-route-maps | Christian Breunig | |
EDB should be EGP for exterior gateway protocol | |||
2024-02-15 | Merge pull request #3012 from sarthurdev/T5993 | Christian Breunig | |
dhcpv6-server: T5993: Extend interface migrator to check VLAN/QinQ | |||
2024-02-15 | Merge pull request #3011 from c-po/rpki-smoketests | Daniil Baturin | |
rpki: T6034: extend config migration testcase | |||
2024-02-15 | Merge pull request #3004 from aapostoliuk/T6029-circinus | Daniil Baturin | |
T6029: Rewritten Accel-PPP services to an identical feature set | |||
2024-02-15 | T6029: Rewritten Accel-PPP services to an identical feature set | aapostoliuk | |
Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. | |||
2024-02-15 | eigrp: T2472: remove smoketest | Christian Breunig | |
Commit 0eb4168aa ("eigrp: T2472: improve code for later tests") added a basic smoketest for EIGRP, which is also run by the CI hence not having a +x bit at all. This just deletes the basic smoketest testing for ASN and EIGRP router-id. We can revert it once it's fixed in FRR upstream. https://github.com/FRRouting/frr/pull/14765 | |||
2024-02-14 | rpki: T6034: extend config migration testcase | Christian Breunig | |
2024-02-14 | eigrp: T2472: improve code for later tests | Christian Breunig | |
2024-02-14 | dhcpv6-server: T5993: Extend interface migrator to check VLAN/QinQ | sarthurdev | |
Updates smoketest config to test migrator change | |||
2024-02-13 | T6019: Fix smoketest test_system_conntrack custom timeout | Viacheslav Hletenko | |
After updateing netfilter in the commit https://github.com/vyos/vyos-build/commit/b31f5fe934bcb37534d49acdb5f7756bf05422e8 The nftables format for conntrack timeouts is different. Fix this. | |||
2024-02-13 | Merge pull request #2999 from sever-sever/T5928 | Christian Breunig | |
T5928: Change firewall priority to 319 | |||
2024-02-13 | Merge pull request #2987 from c-po/evpn-macvrf-soo | Christian Breunig | |
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | |||
2024-02-13 | T5928: Smoketest change firewall flowtable test to use VLAN | Viacheslav Hletenko | |
2024-02-13 | Merge pull request #2988 from c-po/pki-rpki-t6034 | Christian Breunig | |
rpki: T6034: move file based SSH keys for authentication to PKI subsystem | |||
2024-02-13 | dhcpv6-server: T5993: Add subnet `interface` node, link subnet to locally ↵ | sarthurdev | |
connected interfaces Prior dhcpd behaviour implicitly handled requests for locally connected subnets. Kea requires an explicit link between subnets and an interface. | |||
2024-02-12 | rpki: T6034: Add missing sections to configtest | sarthurdev | |
2024-02-12 | rpki: T6024: add migration scripts from file based keys to PKI subsystem | Christian Breunig | |
2024-02-12 | pki: T6034: add dependencies to trigger rpki re-run on openssh key update | Christian Breunig | |
2024-02-12 | T6019: fix smoketest after upgrading nftables and libnftnl packages. | Nicolas Fort | |
2024-02-11 | Merge pull request #2980 from c-po/srv6-T5849 | Daniil Baturin | |
srv6: T5849: add segment support to "protocols static route6" | |||
2024-02-11 | rpki: T6034: move SSH authentication keys to PKI subsystem | Christian Breunig | |
2024-02-11 | bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | Christian Breunig | |
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2 domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originated from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs set protocols bgp address-family l2vpn-evpn mac-vrf soo | |||
2024-02-11 | srv6: T5849: add segment support to "protocols static route6" | Christian Breunig | |
* set protocols static route6 <prefix> next-hop <address> segments 'x:x::x:x/y:y::y/z::z' * set protocols static route6 <prefix> interface <interface> segments 'x:x::x:x/y:y::y/z::z' | |||
2024-02-10 | bgp: T6010: support setting multiple values for neighbor path-attribute | Christian Breunig | |
2024-02-08 | Merge pull request #2955 from c-po/rpki-T6023 | Christian Breunig | |
rpki: T6023: add support for CLI knobs expire-interval and retry-interval | |||
2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
T5960: Rewritten authentication node in PPTP to a single view | |||
2024-02-07 | Merge pull request #2952 from c-po/vrf | Christian Breunig | |
vrf: T5973: module is now statically compiled into the kernel | |||
2024-02-07 | Merge pull request #2957 from c-po/bgp-T6024 | Christian Breunig | |
bgp: T6024: add additional missing FRR features | |||
2024-02-07 | bgp: T6024: add additional missing FRR features | Christian Breunig | |
* set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null> * set protocols bgp parameters allow-martian-nexthop * set protocols bgp parameters no-hard-administrative-reset" | |||
2024-02-07 | rpki: T6023: add support for CLI knobs expire-interval and retry-interval | Christian Breunig | |
2024-02-07 | T5960: Rewritten authentication node in PPTP to a single view | aapostoliuk | |
Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. | |||
2024-02-07 | vrf: T5973: module is now statically compiled into the kernel | Christian Breunig | |
Always enable VRF strict_mode | |||
2024-02-06 | vpn: T3843: l2tp configuration not cleared after delete | khramshinr | |
vpn: T5926: IPSEC does not apply after l2tp configuration was changed added dependency between l2tp and ipsec conf added test for apply config to swanctl | |||
2024-02-06 | Merge pull request #2936 from c-po/rpki-T6011 | Daniil Baturin | |
rpki: T6011: known-hosts-file is no longer supported by FRR | |||
2024-02-05 | T6018: adjust smoketest for update to FastAPI web framework | John Estabrook | |
2024-02-03 | rpki: T6011: known-hosts-file is no longer supported by FRR | Christian Breunig | |
2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
2024-02-02 | Merge pull request #2889 from sarthurdev/kea-hooks | Christian Breunig | |
dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD | |||
2024-02-02 | Merge pull request #2927 from ishioni/T5955 | Christian Breunig | |
container: T5955: add uid/gid settings | |||
2024-02-02 | smoketest: T5955: verify container uid/gid setting | Christian Breunig | |