| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-03-06 | Merge pull request #3088 from nicolas-fort/T6075 | Daniil Baturin | |
| T6075: firewall and NAT: check if interface-group exists when using them in firewall|nat rules. | |||
| 2024-03-05 | T2447: add configurable kernel boot option 'disable-power-saving' | Christian Breunig | |
| Lower available CPU C states to a minimum if this option set. This will set Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1". | |||
| 2024-03-05 | T6075: firewall and NAT: check if interface-group exists when using them in ↵ | Nicolas Fort | |
| firewall|nat rules. | |||
| 2024-03-04 | Merge pull request #3079 from sever-sever/T6084 | Daniil Baturin | |
| T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | |||
| 2024-03-04 | T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | Viacheslav Hletenko | |
| If we have any `vpn ipsec` and `protocol nhrp` configuration we get the empty configuration file `/run/opennhrp/opennhrp.conf` after rebooting the system. Use config dependency instead of the old `resync_nhrp` function fixes this issue | |||
| 2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
| 2024-03-02 | ospf: T5717: sync code with ospfv3 implementation | Christian Breunig | |
| 2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
| Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
| 2024-02-29 | Merge pull request #3056 from natali-rs1985/T5504-current | Christian Breunig | |
| T5504: Keepalived VRRP ability to set more than one peer-address | |||
| 2024-02-28 | banner: T6077: implement ASCII contest winner default logo | Christian Breunig | |
| Implement VyOS ASCII art contest winners logo as the default for our MOTD | |||
| 2024-02-28 | T5504 Keepalived VRRP ability to set more than one peer-address | Nataliia Solomko | |
| 2024-02-27 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
| required | |||
| 2024-02-24 | container: T5909: move registry login to op-mode | Christian Breunig | |
| It does not make sense to perform the "podman login" command when setting up containers, as images are not automatically pulled in from the registry - due to issues with the default route during startup. The same issue manifests in "podman login" where we can not login to a registry unless there is a default route present. This commit changes the behavior that the container registry is part of the configuration, but it is only referenced during "add container image" and thus never during system boot. | |||
| 2024-02-17 | bridge: T6043: do not call vxlan dependency if interface does not exist (yet) | Christian Breunig | |
| In order to keep the proper priority list during system startup and on initial setup/commit for this feature the dependent VXLAN code should not be called, if the interface in question does not exist (yet). | |||
| 2024-02-17 | Merge pull request #3019 from c-po/login-T5972 | Christian Breunig | |
| login: T5972: add possibility to disable individual local user accounts | |||
| 2024-02-16 | login: T5972: add possibility to disable individual local user accounts | Christian Breunig | |
| * set system login user <name> disable | |||
| 2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
| T6001: add option to disable next-hop-tracking resolve-via-default | |||
| 2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
| * set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default | |||
| 2024-02-15 | Merge pull request #3004 from aapostoliuk/T6029-circinus | Daniil Baturin | |
| T6029: Rewritten Accel-PPP services to an identical feature set | |||
| 2024-02-15 | T6029: Rewritten Accel-PPP services to an identical feature set | aapostoliuk | |
| Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. | |||
| 2024-02-14 | eigrp: T2472: improve code for later tests | Christian Breunig | |
| 2024-02-12 | rpki: T6034: remove OpenSSH keys from /run/frr when unloaded | Christian Breunig | |
| 2024-02-12 | pki: T6034: add dependencies to trigger rpki re-run on openssh key update | Christian Breunig | |
| 2024-02-11 | rpki: T6034: move SSH authentication keys to PKI subsystem | Christian Breunig | |
| 2024-02-11 | pki: T6034: add OpenSSH key support | Christian Breunig | |
| set pki openssh rpki private key ... set pki openssh rpki public key ... set pki openssh rpki public type 'ssh-rsa' | |||
| 2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
| T5960: Rewritten authentication node in PPTP to a single view | |||
| 2024-02-08 | T6026: QoS hide attempts to delete qdisc from devices | Viacheslav Hletenko | |
| Hide unexpected output by attempts of deleting `qdisc` from interfaces [ qos ] Error: Cannot find specified qdisc on specified device. Error: Cannot delete qdisc with handle of zero. | |||
| 2024-02-07 | Merge pull request #2952 from c-po/vrf | Christian Breunig | |
| vrf: T5973: module is now statically compiled into the kernel | |||
| 2024-02-07 | Merge pull request #2944 from HollyGurza/T3843-current | Christian Breunig | |
| vpn: T3843: l2tp configuration not cleared after delete | |||
| 2024-02-07 | T5960: Rewritten authentication node in PPTP to a single view | aapostoliuk | |
| Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. | |||
| 2024-02-07 | vrf: T5973: module is now statically compiled into the kernel | Christian Breunig | |
| Always enable VRF strict_mode | |||
| 2024-02-06 | T5921: Fix OpenConnect verify for local users | Viacheslav Hletenko | |
| Fix verify error for the VPN OpenConnect configuration with local authentication and without any user File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 94, in verify if not ocserv["authentication"]["local_users"]: KeyError: 'local_users' | |||
| 2024-02-06 | vpn: T3843: l2tp configuration not cleared after delete | khramshinr | |
| vpn: T5926: IPSEC does not apply after l2tp configuration was changed added dependency between l2tp and ipsec conf added test for apply config to swanctl | |||
| 2024-02-03 | rpki: T6011: known-hosts-file is no longer supported by FRR | Christian Breunig | |
| 2024-02-02 | Merge pull request #2889 from sarthurdev/kea-hooks | Christian Breunig | |
| dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD | |||
| 2024-02-02 | Merge pull request #2927 from ishioni/T5955 | Christian Breunig | |
| container: T5955: add uid/gid settings | |||
| 2024-02-02 | container: T5955: allow setting uid/gid | Piotr Maksymiuk | |
| 2024-02-02 | Merge pull request #2891 from aapostoliuk/T5971-circinus | Viacheslav Hletenko | |
| T5971: Rewritten ppp options in accel-ppp services | |||
| 2024-02-01 | Merge pull request #2756 from nicolas-fort/T4839 | Christian Breunig | |
| T4839: firewall: Add dynamic address group in firewall configuration | |||
| 2024-02-01 | Merge pull request #2860 from indrajitr/ddclient-update-20240119 | Christian Breunig | |
| ddclient: T5966: Adjust dynamic dns config address subpath | |||
| 2024-02-01 | bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | aapostoliuk | |
| Denied using command 'route-target vpn export/import' with 'both' together in bgp configuration. | |||
| 2024-01-30 | Merge pull request #2877 from c-po/vrf-5973 | Christian Breunig | |
| vrf: T5973: multiple bugfixes and improvements | |||
| 2024-01-29 | T5971: Rewritten ppp options in accel-ppp services | aapostoliuk | |
| Rewritten 'ppp-options' to the same view in all accel-ppp services. Adding IPv6 support to PPTP. | |||
| 2024-01-25 | T4839: firewall: Add dynamic address group in firewall configuration, and ↵ | Nicolas Fort | |
| appropiate commands to populate such groups using source and destination address of the packet. | |||
| 2024-01-24 | dhcpv6: T3316: Add support for excluded-prefix in prefix delegation | sarthurdev | |
| 2024-01-23 | T5979: add configurable kernel boot option 'disable-mitigations' | Christian Breunig | |
| 2024-01-23 | bfd: T5967: add minimum-ttl option | Christian Breunig | |
| * set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> * set protocols bfd profile <name> minimum-ttl <1-254> | |||
| 2024-01-22 | vrf: T5973: fix has_rule() to check for l3mdev rule | Christian Breunig | |
| A code path was missing to check if only priority is available in the result of "ip --json -4 rule show", in the case of l3mdev it's a dedicated key! | |||
| 2024-01-22 | vrf: T5973: move initial conntrack firewall table to startup | Christian Breunig | |
| There is no need to add and remove this table during runtime - it can lurk in the standard firewall init code. | |||
| 2024-01-22 | dhcp: T5787: Allow disabled duplicates on static-mapping | sarthurdev | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |