Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-04 | op-mode: T3619: bugfix "show interfaces" for VLANs | Christian Poessinger | |
Commit 31169fa8a7 ("vyos.ifconfig: T3619: only set offloading options if supported by NIC") always instantiated an object of the Ethtool class for an ethernet object - this is right as a real ethernet interface is managed by Ethtool. Unfortunately the script used for "show interface" determindes the "base class" for an interface by its name, so eth0 -> Ethernet, eth0.10 -> Ethernet. This assumption is incorrect as a VLAN interface can not have the physical parameters changed of its underlaying interface. This can only be done for eth0. There is no need for the op-mode script to determine the implementation class for an interface at this level, as we are only interested in the state of the interface and it's IP addresses - which is a common operation valid for every interface on VyOS. | |||
2021-09-04 | op-mode: import cleanup in "show interfaces" script | Christian Poessinger | |
2021-09-02 | op-mode: T1376: speed up tab-completion for DHCP pool listing | Christian Poessinger | |
Commit 9f20bee81c ("T1376: improve show_dhcp and show_dhcpv6") added the tab completion helper to list the availbale IP pools to query. This was done by calling a python script which then called cli-shell-api which resulted in a penalty by the Python interpreter startup. This can be solved by directly using the cli-shell-api wrapper available as <path> in op-mode - as also seen for DHCPv6. | |||
2021-08-26 | op-mode: frr: T1514: add possibility to restart isis daemon | Christian Poessinger | |
(cherry picked from commit b4b2c91127289c7b62afb24304054d57357a48c5) | |||
2021-08-25 | Merge pull request #977 from dmbaturin/no-system-integrity | Christian Poessinger | |
T3773: delete the original "show system integrity" command | |||
2021-08-24 | op-mode: T2223: drop dead code "get_vrrp_intf()" | Christian Poessinger | |
2021-08-24 | T3773: delete the original "show system integrity" command | Daniil Baturin | |
2021-08-23 | ipsec: T1210: use ConfigTreeQuery() instead of Config() from op-mode | Christian Poessinger | |
2021-08-23 | pki: T3642: use ConfigTreeQuery() instead of Config() from op-mode | Christian Poessinger | |
2021-08-23 | container: T2216: op-mode now supports updating the image for a given container | Christian Poessinger | |
2021-08-15 | wireguard: T3756: fix generated qr code header | Boris Manojlovic | |
2021-08-15 | Merge pull request #970 from jack9603301/T3648 | Christian Poessinger | |
op-mode: nat: T3648: Modify the operation mode script implementation of NAT to fix the existing problem | |||
2021-08-14 | op-mode: ipsec: T3745: "show vpn ipse sa" improve sorting | Christian Poessinger | |
2021-08-14 | op-mode: nat: T3648: Modify the operation mode script implementation of NAT ↵ | jack9603301 | |
to fix the existing problem | |||
2021-08-13 | pki: T3752: Fix file output for certificate requests | sarthurdev | |
2021-08-12 | Merge pull request #963 from FileGo/T3744 | Christian Poessinger | |
dns: T3744: fixed dns fwd statistics formatting | |||
2021-08-12 | dns: T3744: fixed dns fwd statistics formatting | FileGo | |
2021-08-05 | PING: T3634: Fixing do not fragment to Ping | Cheeze_It | |
In this commit we fix the do not fragment capability for ping commands. Sorry for messing it up earlier :( | |||
2021-08-01 | ping: T3707: add UnicodeError exception when invalid IP address is passed | Christian Poessinger | |
2021-07-30 | vyos.util: drop custom implementations in favor of is_systemd_service_running() | Christian Poessinger | |
Commit f520182b ("vyos.util: add is_systemd_service_running() helper function") added a new helper function that can be used to check if a systemd service is running. Drop all custom implementations in favor of this library call. | |||
2021-07-29 | ipsec: T1210: add op-mode command to print Windows connection profile | Christian Poessinger | |
2021-07-26 | ipsec: T1210: extend support for iOS profile generation | Christian Poessinger | |
$ generate ipsec mac-ios-profile <connection> remote <ip> | |||
2021-07-23 | pki: T3642: Add ability to write generated certificates/keys to specified ↵ | sarthurdev | |
filenames | |||
2021-07-22 | pki: wireguard: T3642: remove obsolete op-mode script | Christian Poessinger | |
As the keys are now stored inside the CLI configuration and no longer in a file on the filesystem, this command is no longer required. Also there are dedicated CLI commands available to display the additional Wireguard information. - show interfaces wireguard wg10 - show interfaces wireguard wg10 summary | |||
2021-07-20 | ipsec: T1210: add op-mode command for macOS and iOS profile generation | Christian Poessinger | |
generate ipsec mac-ios-profile <connection> remote <ip|fqdn> will generate a matching IPSec profile which can be loaded on an iOS device. | |||
2021-07-19 | pki: wireguard: T3642: Replace/remove old Wireguard op-mode commands | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-12 | vrf: T31: remove supefluous new-lines for each VRF instance | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-05 | pki: T3642: Support for adding SANs on certificate requests | sarthurdev | |
2021-07-04 | pki: T3642: Add standard extensions to generated certificates | sarthurdev | |
2021-07-03 | pki: T3642: Fix for correct method on encoding certificate request | sarthurdev | |
2021-07-03 | pki: T3642: Add support for signing and revoking subordinate CAs | sarthurdev | |
2021-07-02 | ipsec: T3656: T3659: Fix pass-through with ipv6. Fix op-mode ipsec commands. ↵ | sarthurdev | |
Remove python3-crypto dependency. | |||
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-27 | op-mode: bond: T2546: implement "show interface bond * slaves" command | Christian Poessinger | |
Add implementation with XML and Python. | |||
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-26 | nat: nat66: T3648: Fix script logic errors and missing logic handling | jack9603301 | |
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-23 | IPSec: T3643: Fix path for swanctl.conf file | Viacheslav | |
2021-06-22 | ipsec: T3643: T2816: Update IPSec VPN op-mode commands | sarthurdev | |
2021-06-20 | Merge pull request #889 from erkin/current | Christian Poessinger | |
T3506: loadkey: Add `generate public-key-command` command | |||
2021-06-20 | Add `save` line | erkin | |
2021-06-20 | ipsec: T3617: Correct typo on encryption variable | sarthurdev | |
2021-06-20 | T3506: loadkey: Add `generate public-key-command` command | erkin | |
2021-06-18 | Merge pull request #884 from sarthurdev/opmode_ike_sa | Christian Poessinger | |
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | |||
2021-06-18 | ping: T3634: Adding do not fragment to Ping (#885) | Cheeze-It | |
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com> | |||
2021-06-17 | ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | sarthurdev | |
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. |