summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-01-13ssh: T3212: do not make /run/sshd directory disappear on failureChristian Poessinger
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988)
2021-01-11nat: T3206: unable to delete only rules but keep destination nodeChristian Poessinger
(cherry picked from commit 9db4dbc4a84ff1a110617cb3c7849d7c9d4a62e7)
2021-01-11login: T3208: fix wrong string formatting on my_setChristian Poessinger
Commit e8a1c291 ("login: radius: T3192: migrate to get_config_dict()") did an invalid forward of the newly encrypted passwort to my_set to store it inside the config. (cherry picked from commit a7fe2ff4fdfcb2619b892aff170d42609965b20b)
2021-01-09login: radius: T3192: remove debug print()Christian Poessinger
(cherry picked from commit 586b440a835cba7d45e50bb6d1781823903332b6)
2021-01-07smoketest: ethernet: verify() speed/duplex must both be auto or discreteChristian Poessinger
2021-01-07vyos.configverify: provide generic helper to check for interface existenceChristian Poessinger
2021-01-07login: radius: T3192: migrate to get_config_dict()Christian Poessinger
2021-01-07ssh: T2635: harden Jinja2 template and daemon startupChristian Poessinger
2021-01-07ssh: T2635: change sshd_config path to /run/sshdChristian Poessinger
2021-01-07login: radius: T3192: support IPv6 server(s) and source-addressChristian Poessinger
2021-01-07bgp: T2174: verify() existence of route-map and prefix-listChristian Poessinger
2021-01-06bgp: T2174: verify() proper existance of remote-asChristian Poessinger
2021-01-05Merge pull request #667 from Cheeze-It/currentChristian Poessinger
ISIS: T3156: Adding segment routing for ISIS
2021-01-05ISIS: T3156: Adding segment routing for ISISCheeze_It
In this commit we add the segment routing portion for ISIS. There's also an additional check that is added so that the global block label ranges are properly configured. Also added traffic engineering configurations as well.
2021-01-05vpn-op-mode: T2639: Sorting vpn ipsec sasever-sever
2021-01-03mirror: add verify() check so we can not mirror back to our selfChristian Poessinger
2021-01-03op-mode: T3178: add "reset ip|ipv6 bgp" commandsChristian Poessinger
2021-01-03dhcp: T2562: harden implementation for non existing shared-subnetsChristian Poessinger
2021-01-03dhcp: T3180: bugfix assignment of sliced ranges to config dictChristian Poessinger
A reference to a dictionary key obtained by a for loop can not be used to update values inside that dictionaries key. You must use the original path to the nested dictionaries key.
2021-01-03dhcp: T3180: bugfix NameError when slicing server rangesChristian Poessinger
Introduced in commit e46def834483e ("dhcp: T3100: re-add range slicing support when exclude addresses are used") by not obeying the move from list to dict and still relying on the old list names variables.
2021-01-02vrf: T2321: assign loopback IP addresses to individual VRF interfacesChristian Poessinger
47: bar: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000 link/ether 76:7d:c0:53:6d:89 brd ff:ff:ff:ff:ff:ff inet 127.0.0.1/8 scope host bar valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever
2021-01-02xml: local-ip completion helper should output address only once and sortedChristian Poessinger
When using VRFs a system can have the same IP address multiple times assigned to different VRFs. When listing all the available IP addresses on the system it makes no sense to list this address multiple times.
2021-01-01ethernet: T3171: add CLI option to enable RPS (Receive Packet Steering)Christian Poessinger
set interfaces ethernet <interface> offload rps
2020-12-31openvpn: T2994: fix ipv6 server modeChristian Poessinger
2020-12-30op-mode: T2874: Fix typo in the script descriptionsever-sever
2020-12-29ethernet: T1466: add EAPoL supportChristian Poessinger
2020-12-28webproxy: T563: use new bash blacklist updaterChristian Poessinger
2020-12-28webproxy: T563: squidguard: support default rulesetChristian Poessinger
2020-12-28webproxy: T563: op-mode: initial command supportChristian Poessinger
2020-12-28webproxy: T563: add squidguard bodyChristian Poessinger
2020-12-28webproxy: T563: improve handling of cache-peersChristian Poessinger
2020-12-28webproxy: T563: migrate from old Perl code to XML and get_config_dict()Christian Poessinger
Basic proxy functionality is working but the squidguard smoketest still fails as this is yet not implemented.
2020-12-28ddns: T3151: update scripts to work with Bullseye upstream versionChristian Poessinger
2020-12-28xml: completion-help: add helper for all local assigned IP addressesChristian Poessinger
This replaces the Python script by a bash variant which is much faster as the Python interpreter does not need to be launched on invocation.
2020-12-23xdp: op-mode: T2666: support per interface statisticsChristian Poessinger
2020-12-23xdp: T2666: move CLI node to "interfaces ethernet <eth> xdp"Christian Poessinger
2020-12-23xdp: T2666: require at least 2 TX queuesChristian Poessinger
2020-12-22op-mode: T2859: Fix show nat source translationssever-sever
2020-12-21openvpn: T3142: Change the path to tunnel status fileDmitriyEshenko
2020-12-20Revert "dhcpv6: T3134: add missing duid support"Christian Poessinger
This reverts commit 9541355433e202fade4692851bffa33ba9d48f44.
2020-12-20ethernet: T3140: relax "ethernet offload-options" CLI definitionChristian Poessinger
Migrate from ethernet eth1 { offload-options { generic-receive on generic-segmentation on scatter-gather on tcp-segmentation on udp-fragmentation on } } to ethernet eth1 { offload { ufo tso sg gso gro } }
2020-12-20wifi: T3043: country-code should be lower caseChristian Poessinger
2020-12-20Merge branch 'duid' into currentChristian Poessinger
* duid: dhcpv6: T3134: add missing duid support
2020-12-20dhcpv6: T3134: add missing duid supportChristian Poessinger
2020-12-20Merge pull request #647 from jpbede/feature/flowacc-enable-egressChristian Poessinger
flow-accounting: T3132: enable egress traffic accounting
2020-12-19xdp: T2666: use proper xdp_prog_user.c codeChristian Poessinger
2020-12-19xdp: T2666: switch to example code provided by xdp-tutorialChristian Poessinger
2020-12-17xdp: T2666: initial XDP (generic mode) forwarding supportChristian Poessinger
The CLI command 'set interfaces ethernet <interface> offload-options xdp" enables the XDP generic mode on the given interface. vyos@vyos:~$ show interfaces ethernet eth1 eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 xdpgeneric/id:151 qdisc mq state DOWN group default qlen 1000 link/ether 00:50:56:bf:ef:aa brd ff:ff:ff:ff:ff:ff inet6 fe80::250:56ff:febf:efaa/64 scope link tentative valid_lft forever preferred_lft forever Description: fooa XDP code is thankfully copied from [1], thank you for this nice tutorial. NOTE: this is an experimental feature which might break your forwarding/filtering. [1]: https://medium.com/swlh/building-a-xdp-express-data-path-based-peering-router-20db4995da66
2020-12-17flow-accounting: T3132: enable egress traffic accountingJan-Philipp Benecke
2020-12-14netplug: T3130: use Debian upstream versionChristian Poessinger