Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-21 | pppoe: T4384: replace default-route CLI option with common CLI nodes already ↵ | Christian Poessinger | |
present for DHCP VyOS 1.4 still leverages PPPd internals on the CLI. pppd supports three options for a default route, none, auto, force. * none: No default route is installed on interface up * auto: Default route is only installed if there is yet no default route * force: overwrite any default route There are several drawbacks in this design for VyOS and the users. If auto is specified, this only counted for static default routes - but what about dynamic ones? Same for force, only a static default route got replaced but dynamic ones did not got taken into account. The CLI is changed and we now re-use already existing nodes from the DHCP interface configuration: * no-default-route: On link up no default route is installed, same as the previous default-route none * default-route-distance: We can now specify the distance of this route for the routing table on the system. This defaults to 210 as we have for DHCP interfaces. All this will be migrated using a CLI migration script. | |||
2022-04-21 | bgp: T4385: peer-group member cannot override remote-as of peer-group | Christian Poessinger | |
2022-04-20 | openvpn: T4369: enforce daemon-restart on openvpn-option CLI change | Christian Poessinger | |
2022-04-18 | vxlan: geneve: T4370: support configuration of DF bit option | Christian Poessinger | |
set interfaces vxlan vxlan0 parameters ip df <set|unset|inherit> set interfaces geneve gnv0 parameters ip df <set|unset|inherit> | |||
2022-04-18 | openvpn: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-18 | bgp: T4368: AS specified for local-as can not be the same as remote-as | Christian Poessinger | |
2022-04-16 | geneve: T4366: prevent interface re-creation on nasic parameter change | Christian Poessinger | |
Changing the geneve interface description does destroy the interface on the kernel level - this should be avoided as it's ... stupid! | |||
2022-04-16 | vyos.base: use Warning() helper where applicable | Christian Poessinger | |
2022-04-16 | salt-minion: T4364: issue warning - do not use sha1 hashing algorithm | Christian Poessinger | |
2022-04-16 | dhcp(v6)-relay: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-16 | salt-minion: T4364: remove debug print statement | Christian Poessinger | |
2022-04-16 | dns: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-15 | dhcp(v6)-server: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: add source-interface CLI option support | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: add support for source-interface definition | Christian Poessinger | |
2022-04-15 | salt-minion: T4364: migrate to get_config_dict() | Christian Poessinger | |
2022-04-15 | salt-minion: T4363: mine_interval option is not set | Christian Poessinger | |
2022-04-15 | salt-minion: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | wifi: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | macsec: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | ethernet: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | ssh: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | ntp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-14 | frr: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-12 | frr: rpki: T4353: add ".j2" file extension on Jinja2 template | Christian Poessinger | |
2022-04-11 | snmp: T4346: remove IPv6 disabled code-path | Christian Poessinger | |
2022-04-10 | nat: T2199: bugfix dry-run newly generated config before install | Christian Poessinger | |
Commit bb76e8d7f1635 ("nat: T2199: dry-run newly generated config before install") added support to verify the generated nftables ruleset. Unfortunately if the verify failed - a Python exception was triggered: NameError: name 'nftables_ct_file' is not defined This was due to bad copy/pasting. | |||
2022-04-09 | Merge pull request #1242 from goodNETnick/ocserv_local_otp | Christian Poessinger | |
ocserv: T4231: Added OTP support for Openconnect 2FA | |||
2022-04-09 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-04-08 | dhcp-server: T4344: Fix underscores for shared network name | Viacheslav Hletenko | |
Shared network name should not be handled by tag node mangling I.e. should not replace underscores with dashed set service dhcp-server shared-network-name NET_01 shared-network NET_01 { authoritative; ... on commit { set shared-networkname = "NET_01"; } } | |||
2022-04-07 | policy: T4194: simplify prefix-list duplication checks | Christian Poessinger | |
Commit 5dafe255d ("policy: T4194: Add prefix-list duplication checks") added first support for FRR prefix-list duplication checks. FRR does not allow to specify the same profix list rule multiple times. vyos(config)# ip prefix-list foo seq 10 permit 192.0.2.0/24 vyos(config)# ip prefix-list foo seq 20 permit 192.0.2.0/24 % Configuration failed. Error type: validation Error description: duplicated prefix list value: 192.0.2.0/24 There is a VyOS verify() function which simply probed for the prefix, action, le and ge settings - but as Python has excellent support when comparing data, this can be as simple as a dictionary comparison using "==". | |||
2022-04-07 | ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | ipv6: T4346: deprecate CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | qos: T4284: rename "traffic-policy" node to "qos policy" | Christian Poessinger | |
"set traffic-policy" now becomes "set qos policy" "set interface ethernet eth0 traffic-policy" now bvecomes "set qos interface eth0" | |||
2022-04-07 | qos: T4284: support mirror and redirect on all interface types | Christian Poessinger | |
2022-04-06 | Merge pull request #1275 from sarthurdev/firewall_limit | Christian Poessinger | |
firewall: T4345: Fix incorrect firewall rule limit rate format | |||
2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
2022-04-06 | dns: forwarding: T3804: fix warning message about "system name-server" | Christian Poessinger | |
2022-04-05 | dns: forwarding: T3804: bugfix DHCP name-servers used for recursion | Christian Poessinger | |
Commit 2ecf7a9f9c ('name-server: T3804: merge "system name-servers-dhcp" into "system name-server"') missed out an old dictionary key "system_name_server_dhcp" and thus system nameservers configured via DHCP did not get used for the DNS forwar recursor. | |||
2022-04-04 | login: T4341: busy wait on userdel(8) until the account was deleted successfully | Christian Poessinger | |
2022-04-04 | login: T4341: disable user account prior to deletion | Christian Poessinger | |
2022-04-04 | wwan: T4338: changing interface description should not trigger reconnect | Christian Poessinger | |
Changing the WWAN interface description will trigger an interface reconnect. Reconnects should only be triggered in changes to the connection parameters like bond interfaces. | |||
2022-04-04 | Merge pull request #1267 from sever-sever/T2580 | Christian Poessinger | |
ipoe: T2580: Add pools and gateway options | |||
2022-04-04 | ipoe: T2580: Add pools and gateway options | Viacheslav Hletenko | |
Add new feature to allow to use named pools Can be used also with Radius attribute 'Framed-Pool' set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2022-04-03 | isis: T3156: add segment routing local-block for ISIS | Christian Poessinger | |
2022-04-02 | wwan: T4324: properly start/stop ModemManager and cron helper on interface ↵ | Christian Poessinger | |
add/removal | |||
2022-04-01 | bgp: T4332: addpath-tx-per-as requires BGP deterministic-med paramtere to be set | Christian Poessinger | |
2022-03-31 | Merge branch 'vyos:current' into ocserv_local_otp | goodNETnick | |
2022-03-30 | vrf: T4319: do not add IPv6 localhost address if IPv6 is disabled | Christian Poessinger | |
2022-03-28 | Revert "openvpn: T4230: globally enable ip_nonlocal_bind" | Daniil Baturin | |
This reverts commit 1cbcbf40b7721849f9696c05fac65db010a66b7c. |