summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2020-03-10pppoe: T1318: minor code cleanupChristian Poessinger
2020-03-09openvpn: T2065: pass daemon parameter to start-stop-daemon in op-modeChristian Poessinger
Commit cd2147cfa2 ("openvpn: T2065: move daemon parameter to start-stop-daemon commandline") only added the cfg-mode part but missed out op-mode.
2020-03-09T1967: add a migration script for the enforce-first-as option.Daniil Baturin
2020-03-08vrf: T31: add missing import netifaces.interfacesChristian Poessinger
2020-03-08wireless: T1627: configure own_ip_addr to be compliant with the RADIUS protocolChristian Poessinger
2020-03-08wireless: radius: T2110: aupport server disable optionChristian Poessinger
2020-03-08vrf: T31: fix invalid variable referenceChristian Poessinger
With commit d61cab4 ("vrf: T31: enable vrf support for wireless interface") an unknown variable has been referenced.
2020-03-08vrf: T31: add member interfaces to 'show ver' outputChristian Poessinger
VRF name state mac address flags interfaces -------- ----- ----------- ----- ---------- blue up de:c4:83:d8:74:24 noarp,master,up,lower_up dum200,eth0.302 red up be:36:ce:02:df:aa noarp,master,up,lower_up dum100,eth0.300,bond0.100,peth0
2020-03-08vrf: T31: enable vrf support for wireless interfaceChristian Poessinger
2020-03-08vrf: T31: enable vrf support for pseudo-ethernet/macvlan interfaceChristian Poessinger
2020-03-08macvlan: T1635: add missing VLAN/VIF creation logicChristian Poessinger
2020-03-08vrf: T31: support VRF usage on VLAN/VIF interfacesChristian Poessinger
2020-03-07wireless: T2107: fix connecting to networks without passphraseChristian Poessinger
2020-03-07pppoe: T1318: move to Python3 f-strings where possibleChristian Poessinger
2020-03-07vrf: T31: enable vrf support for pppoe interfaceChristian Poessinger
2020-03-07pppoe: T1493: rename variables on ipv6-up scriptChristian Poessinger
2020-03-07pppoe: T1318: add ip-pre-up scriptChristian Poessinger
ppp already supports ip-pre-up script but none was being supplied. Need ip-pre-up to handle renames and firewall properly. Script imported from old VyOS PPP fork repository at https://github.com/vyos/ppp-debian
2020-03-07vrf: T31: move to Python3 f-strings where possibleChristian Poessinger
2020-03-07vrf: T31: ensure VRF can not be deleted with an attached routing protocolChristian Poessinger
2020-03-07vrf: T31: rephrase error messagesChristian Poessinger
2020-03-07vrf: T31: reuse Config in interfaces_with_vrf()Christian Poessinger
2020-03-07vrf: T31: properly set configuration level when parsingChristian Poessinger
2020-03-06vrf: T31: enable vrf support for bridge interfaceChristian Poessinger
2020-03-06vrf: T31: enable vrf support for bonding interfaceChristian Poessinger
2020-03-06vrf: T31: enable vrf support for ethernet interfaceChristian Poessinger
2020-03-06Merge pull request #242 from thomas-mangin/splitChristian Poessinger
ifconfig: T2104: splt ifconfig.py into multiple files
2020-03-06ifconfig: T2104: splt ifconfig.py into multiple filesThomas Mangin
2020-03-06wireless: T2105: Add check interface stateDmitriyEshenko
2020-03-05vrf: T31: improve kernel rule lookup table codeChristian Poessinger
2020-03-05vrf: T31: modify kernel rule lookup table only onceChristian Poessinger
2020-03-05vrf: T31: add more documentation linksChristian Poessinger
2020-03-05vrf: T31: use subprocess check_output over check_callChristian Poessinger
2020-03-05pppoe: T1493: fix for fix of invalid reference of ipv6-up script fileChristian Poessinger
Commit d161cbb ("pppoe: T1493: fix invalid reference of ipv6-up script file") actually introduced another bug instead of fixing it. It was catched by vyos-smoketest ... luckily! Sorry!
2020-03-05vrf: T31: routing table IDs must be uniqueChristian Poessinger
2020-03-05vrf: T31: use vyos.ifconfig to set ifaliasChristian Poessinger
2020-03-05vrf: T31: table id is mandatoryChristian Poessinger
2020-03-05pppoe: T1493: fix invalid reference of ipv6-up script fileChristian Poessinger
2020-03-05login: T2050: extend verify() on public-keysChristian Poessinger
* A type must be present for any one public-key element * A key must be present for any one public-key element
2020-03-05pppoe: T1493: support IPv6 address negotiation which is required for DHCPv6-PDChristian Poessinger
2020-03-05macvlan: T1635: ensure 'link' interface really existsChristian Poessinger
2020-03-05vxlan: T1636: ensure 'link' interface really existsChristian Poessinger
2020-03-04pppoe: T1318: IPv6 supportChristian Poessinger
2020-03-04vrf: T31: remove pass in exception handlerChristian Poessinger
2020-03-04banner: T2099: accept empty pre-/post-login bannerChristian Poessinger
2020-03-04vrf: T31: enable vrf support for dummy interfaceChristian Poessinger
2020-03-04vrf: T31: reorder routing table lookupsChristian Poessinger
Linux routing uses rules to find tables - routing targets are then looked up in those tables. If the lookup got a matching route, the process ends. TL;DR; first table with a matching entry wins! You can see your routing table lookup rules using "ip rule", sadly the local lookup is hit before any VRF lookup. Pinging an addresses from the VRF will usually find a hit in the local table, and never reach the VRF routing table - this is usually not what you want. Thus we will re-arrange the tables and move the local lookup furhter down once VRFs are enabled.
2020-03-04vrf: T31: adding unreachable routes to the routing tablesChristian Poessinger
2020-03-04vrf: T31: prior to the v4.8 kernel iif and oif rules are neededChristian Poessinger
.. we run on 4.19 thus this is no longer needed.
2020-03-04vrf: T31: create iproute2 table to name mapping referenceChristian Poessinger
2020-03-04vrf: T31: rename 'vrf disable-bind-to-all ipv4' to 'vrf bind-to-all'Christian Poessinger
By default the scope of the port bindings for unbound sockets is limited to the default VRF. That is, it will not be matched by packets arriving on interfaces enslaved to an l3mdev and processes may bind to the same port if they bind to an l3mdev. TCP & UDP services running in the default VRF context (ie., not bound to any VRF device) can work across all VRF domains by enabling the 'vrf bind-to-all' option.