Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-14 | ssh: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | ntp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | frr: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-12 | frr: rpki: T4353: add ".j2" file extension on Jinja2 template | Christian Poessinger | |
2022-04-11 | snmp: T4346: remove IPv6 disabled code-path | Christian Poessinger | |
2022-04-10 | nat: T2199: bugfix dry-run newly generated config before install | Christian Poessinger | |
Commit bb76e8d7f1635 ("nat: T2199: dry-run newly generated config before install") added support to verify the generated nftables ruleset. Unfortunately if the verify failed - a Python exception was triggered: NameError: name 'nftables_ct_file' is not defined This was due to bad copy/pasting. | |||
2022-04-09 | Merge pull request #1242 from goodNETnick/ocserv_local_otp | Christian Poessinger | |
ocserv: T4231: Added OTP support for Openconnect 2FA | |||
2022-04-09 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-04-08 | dhcp-server: T4344: Fix underscores for shared network name | Viacheslav Hletenko | |
Shared network name should not be handled by tag node mangling I.e. should not replace underscores with dashed set service dhcp-server shared-network-name NET_01 shared-network NET_01 { authoritative; ... on commit { set shared-networkname = "NET_01"; } } | |||
2022-04-07 | policy: T4194: simplify prefix-list duplication checks | Christian Poessinger | |
Commit 5dafe255d ("policy: T4194: Add prefix-list duplication checks") added first support for FRR prefix-list duplication checks. FRR does not allow to specify the same profix list rule multiple times. vyos(config)# ip prefix-list foo seq 10 permit 192.0.2.0/24 vyos(config)# ip prefix-list foo seq 20 permit 192.0.2.0/24 % Configuration failed. Error type: validation Error description: duplicated prefix list value: 192.0.2.0/24 There is a VyOS verify() function which simply probed for the prefix, action, le and ge settings - but as Python has excellent support when comparing data, this can be as simple as a dictionary comparison using "==". | |||
2022-04-07 | ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | ipv6: T4346: deprecate CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | qos: T4284: rename "traffic-policy" node to "qos policy" | Christian Poessinger | |
"set traffic-policy" now becomes "set qos policy" "set interface ethernet eth0 traffic-policy" now bvecomes "set qos interface eth0" | |||
2022-04-07 | qos: T4284: support mirror and redirect on all interface types | Christian Poessinger | |
2022-04-06 | Merge pull request #1275 from sarthurdev/firewall_limit | Christian Poessinger | |
firewall: T4345: Fix incorrect firewall rule limit rate format | |||
2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
2022-04-06 | dns: forwarding: T3804: fix warning message about "system name-server" | Christian Poessinger | |
2022-04-05 | dns: forwarding: T3804: bugfix DHCP name-servers used for recursion | Christian Poessinger | |
Commit 2ecf7a9f9c ('name-server: T3804: merge "system name-servers-dhcp" into "system name-server"') missed out an old dictionary key "system_name_server_dhcp" and thus system nameservers configured via DHCP did not get used for the DNS forwar recursor. | |||
2022-04-04 | login: T4341: busy wait on userdel(8) until the account was deleted successfully | Christian Poessinger | |
2022-04-04 | login: T4341: disable user account prior to deletion | Christian Poessinger | |
2022-04-04 | wwan: T4338: changing interface description should not trigger reconnect | Christian Poessinger | |
Changing the WWAN interface description will trigger an interface reconnect. Reconnects should only be triggered in changes to the connection parameters like bond interfaces. | |||
2022-04-04 | Merge pull request #1267 from sever-sever/T2580 | Christian Poessinger | |
ipoe: T2580: Add pools and gateway options | |||
2022-04-04 | ipoe: T2580: Add pools and gateway options | Viacheslav Hletenko | |
Add new feature to allow to use named pools Can be used also with Radius attribute 'Framed-Pool' set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2022-04-03 | isis: T3156: add segment routing local-block for ISIS | Christian Poessinger | |
2022-04-02 | wwan: T4324: properly start/stop ModemManager and cron helper on interface ↵ | Christian Poessinger | |
add/removal | |||
2022-04-01 | bgp: T4332: addpath-tx-per-as requires BGP deterministic-med paramtere to be set | Christian Poessinger | |
2022-03-31 | Merge branch 'vyos:current' into ocserv_local_otp | goodNETnick | |
2022-03-30 | vrf: T4319: do not add IPv6 localhost address if IPv6 is disabled | Christian Poessinger | |
2022-03-28 | Revert "openvpn: T4230: globally enable ip_nonlocal_bind" | Daniil Baturin | |
This reverts commit 1cbcbf40b7721849f9696c05fac65db010a66b7c. | |||
2022-03-27 | graphql: T3993: add unsettable gql option; this is not exposed by CLI | John Estabrook | |
2022-03-26 | bgp: T4321: check neighbor IP addresses against VRF context | Christian Poessinger | |
2022-03-25 | mpls: T915: use vyos.util.sysctl_write() helper function | Christian Poessinger | |
2022-03-25 | vyos.util: T4319: rename sysctl() -> sysctl_write() | Christian Poessinger | |
2022-03-25 | system: T4319: align ipv6 settings with ipv4 by using get_config_dict() | Christian Poessinger | |
2022-03-24 | Merge pull request #1248 from sever-sever/T4290 | Christian Poessinger | |
bgp: T4290: Add verify source-interface for none ip neighbor | |||
2022-03-24 | openvpn: T4294: force service restart on openvpn-option node change | Christian Poessinger | |
2022-03-21 | qos: T4284: initial XML interface definitions for rewrite | Christian Poessinger | |
2022-03-21 | mirror: T3089: add verify_mirror() also for bond and bridge interfaces | Christian Poessinger | |
2022-03-18 | OSPF : T4304: add check access-list is defined | fett0 | |
2022-03-16 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-03-15 | bonding: T4301: Fixed arp-monitor option | zsdc | |
In verify function for arp-monitor option was used by mistake an extra conversion for incoming data before comparing items. This commit removed these unnecessary conversions and makes the option operable. | |||
2022-03-13 | bgp: T4290: Add verify source-interface for none ip neighbor | Viacheslav Hletenko | |
When we use neighbor as interface we must not use option 'source-interface' for example: neighbor eth0 source-interface eth0 Such option can be used for IP/IPv6 neighbors | |||
2022-03-07 | logrotate: T4250: Fixed logrotate config generation | zsdc | |
* Removed `/var/log/auth.log` and `/var/log/messages` from `/etc/logrotate.d/rsyslog`, because they conflict with VyOS-controlled items what leads to service error. * Removed generation config file for `/var/log/messages` from `system-syslog.py` - this should be done from `syslom logs` now. * Generate each logfile from `system syslog file` to a dedicated logrotate config file. * Fixed logrotate config file names in `/etc/rsyslog.d/vyos-rsyslog.conf`. * Added default logrotate settins for `/var/log/messages` | |||
2022-03-03 | static: T4283: support "reject" routes - emit an ICMP unreachable when matched | Christian Poessinger | |
2022-03-01 | flow-accounting: T4277: support sending flow-data via VRF interface | Christian Poessinger | |
It should be possible to send the gathered data via a VRF bound interface to the collector. This is somehow related to T3981 but it's the opposite side of the netflow process. set system flow-accounting vrf <name> | |||
2022-02-26 | lldp: T4272: migrate to get_config_dict() | Christian Poessinger | |
2022-02-25 | zone-policy: T2199: bugfix defaultValue usage | Christian Poessinger | |
Instead of hardcoding the default behavior inside the Jinaj2 template, all defaults are required to be specified inside teh XML definition. This is required to automatically render the appropriate CLI tab completion commands. | |||
2022-02-23 | tunnel: T4267: "parameters ip key" on GRE not required for different remotes | Christian Poessinger | |
2022-02-22 | vxlan: T4264: interface is destroyed and rebuild on description change | Christian Poessinger | |
When changing "general" parameters like: - interface IP address - MTU - description the interface is destroyed and recreated ... this should not happen! | |||
2022-02-21 | vxlan: T4120: code cleanup for multiple remotes | Christian Poessinger | |