Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-01-13 | ssh: T3212: do not make /run/sshd directory disappear on failure | Christian Poessinger | |
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988) | |||
2021-01-11 | nat: T3206: unable to delete only rules but keep destination node | Christian Poessinger | |
(cherry picked from commit 9db4dbc4a84ff1a110617cb3c7849d7c9d4a62e7) | |||
2021-01-11 | login: T3208: fix wrong string formatting on my_set | Christian Poessinger | |
Commit e8a1c291 ("login: radius: T3192: migrate to get_config_dict()") did an invalid forward of the newly encrypted passwort to my_set to store it inside the config. (cherry picked from commit a7fe2ff4fdfcb2619b892aff170d42609965b20b) | |||
2021-01-09 | login: radius: T3192: remove debug print() | Christian Poessinger | |
(cherry picked from commit 586b440a835cba7d45e50bb6d1781823903332b6) | |||
2021-01-07 | smoketest: ethernet: verify() speed/duplex must both be auto or discrete | Christian Poessinger | |
2021-01-07 | vyos.configverify: provide generic helper to check for interface existence | Christian Poessinger | |
2021-01-07 | login: radius: T3192: migrate to get_config_dict() | Christian Poessinger | |
2021-01-07 | ssh: T2635: harden Jinja2 template and daemon startup | Christian Poessinger | |
2021-01-07 | ssh: T2635: change sshd_config path to /run/sshd | Christian Poessinger | |
2021-01-07 | login: radius: T3192: support IPv6 server(s) and source-address | Christian Poessinger | |
2021-01-07 | bgp: T2174: verify() existence of route-map and prefix-list | Christian Poessinger | |
2021-01-06 | bgp: T2174: verify() proper existance of remote-as | Christian Poessinger | |
2021-01-05 | Merge pull request #667 from Cheeze-It/current | Christian Poessinger | |
ISIS: T3156: Adding segment routing for ISIS | |||
2021-01-05 | ISIS: T3156: Adding segment routing for ISIS | Cheeze_It | |
In this commit we add the segment routing portion for ISIS. There's also an additional check that is added so that the global block label ranges are properly configured. Also added traffic engineering configurations as well. | |||
2021-01-05 | vpn-op-mode: T2639: Sorting vpn ipsec sa | sever-sever | |
2021-01-03 | mirror: add verify() check so we can not mirror back to our self | Christian Poessinger | |
2021-01-03 | op-mode: T3178: add "reset ip|ipv6 bgp" commands | Christian Poessinger | |
2021-01-03 | dhcp: T2562: harden implementation for non existing shared-subnets | Christian Poessinger | |
2021-01-03 | dhcp: T3180: bugfix assignment of sliced ranges to config dict | Christian Poessinger | |
A reference to a dictionary key obtained by a for loop can not be used to update values inside that dictionaries key. You must use the original path to the nested dictionaries key. | |||
2021-01-03 | dhcp: T3180: bugfix NameError when slicing server ranges | Christian Poessinger | |
Introduced in commit e46def834483e ("dhcp: T3100: re-add range slicing support when exclude addresses are used") by not obeying the move from list to dict and still relying on the old list names variables. | |||
2021-01-02 | vrf: T2321: assign loopback IP addresses to individual VRF interfaces | Christian Poessinger | |
47: bar: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000 link/ether 76:7d:c0:53:6d:89 brd ff:ff:ff:ff:ff:ff inet 127.0.0.1/8 scope host bar valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever | |||
2021-01-02 | xml: local-ip completion helper should output address only once and sorted | Christian Poessinger | |
When using VRFs a system can have the same IP address multiple times assigned to different VRFs. When listing all the available IP addresses on the system it makes no sense to list this address multiple times. | |||
2021-01-01 | ethernet: T3171: add CLI option to enable RPS (Receive Packet Steering) | Christian Poessinger | |
set interfaces ethernet <interface> offload rps | |||
2020-12-31 | openvpn: T2994: fix ipv6 server mode | Christian Poessinger | |
2020-12-30 | op-mode: T2874: Fix typo in the script description | sever-sever | |
2020-12-29 | ethernet: T1466: add EAPoL support | Christian Poessinger | |
2020-12-28 | webproxy: T563: use new bash blacklist updater | Christian Poessinger | |
2020-12-28 | webproxy: T563: squidguard: support default ruleset | Christian Poessinger | |
2020-12-28 | webproxy: T563: op-mode: initial command support | Christian Poessinger | |
2020-12-28 | webproxy: T563: add squidguard body | Christian Poessinger | |
2020-12-28 | webproxy: T563: improve handling of cache-peers | Christian Poessinger | |
2020-12-28 | webproxy: T563: migrate from old Perl code to XML and get_config_dict() | Christian Poessinger | |
Basic proxy functionality is working but the squidguard smoketest still fails as this is yet not implemented. | |||
2020-12-28 | ddns: T3151: update scripts to work with Bullseye upstream version | Christian Poessinger | |
2020-12-28 | xml: completion-help: add helper for all local assigned IP addresses | Christian Poessinger | |
This replaces the Python script by a bash variant which is much faster as the Python interpreter does not need to be launched on invocation. | |||
2020-12-23 | xdp: op-mode: T2666: support per interface statistics | Christian Poessinger | |
2020-12-23 | xdp: T2666: move CLI node to "interfaces ethernet <eth> xdp" | Christian Poessinger | |
2020-12-23 | xdp: T2666: require at least 2 TX queues | Christian Poessinger | |
2020-12-22 | op-mode: T2859: Fix show nat source translations | sever-sever | |
2020-12-21 | openvpn: T3142: Change the path to tunnel status file | DmitriyEshenko | |
2020-12-20 | Revert "dhcpv6: T3134: add missing duid support" | Christian Poessinger | |
This reverts commit 9541355433e202fade4692851bffa33ba9d48f44. | |||
2020-12-20 | ethernet: T3140: relax "ethernet offload-options" CLI definition | Christian Poessinger | |
Migrate from ethernet eth1 { offload-options { generic-receive on generic-segmentation on scatter-gather on tcp-segmentation on udp-fragmentation on } } to ethernet eth1 { offload { ufo tso sg gso gro } } | |||
2020-12-20 | wifi: T3043: country-code should be lower case | Christian Poessinger | |
2020-12-20 | Merge branch 'duid' into current | Christian Poessinger | |
* duid: dhcpv6: T3134: add missing duid support | |||
2020-12-20 | dhcpv6: T3134: add missing duid support | Christian Poessinger | |
2020-12-20 | Merge pull request #647 from jpbede/feature/flowacc-enable-egress | Christian Poessinger | |
flow-accounting: T3132: enable egress traffic accounting | |||
2020-12-19 | xdp: T2666: use proper xdp_prog_user.c code | Christian Poessinger | |
2020-12-19 | xdp: T2666: switch to example code provided by xdp-tutorial | Christian Poessinger | |
2020-12-17 | xdp: T2666: initial XDP (generic mode) forwarding support | Christian Poessinger | |
The CLI command 'set interfaces ethernet <interface> offload-options xdp" enables the XDP generic mode on the given interface. vyos@vyos:~$ show interfaces ethernet eth1 eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 xdpgeneric/id:151 qdisc mq state DOWN group default qlen 1000 link/ether 00:50:56:bf:ef:aa brd ff:ff:ff:ff:ff:ff inet6 fe80::250:56ff:febf:efaa/64 scope link tentative valid_lft forever preferred_lft forever Description: fooa XDP code is thankfully copied from [1], thank you for this nice tutorial. NOTE: this is an experimental feature which might break your forwarding/filtering. [1]: https://medium.com/swlh/building-a-xdp-express-data-path-based-peering-router-20db4995da66 | |||
2020-12-17 | flow-accounting: T3132: enable egress traffic accounting | Jan-Philipp Benecke | |
2020-12-14 | netplug: T3130: use Debian upstream version | Christian Poessinger | |