Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-03-07 | vrf: T31: reuse Config in interfaces_with_vrf() | Christian Poessinger | |
2020-03-07 | vrf: T31: properly set configuration level when parsing | Christian Poessinger | |
2020-03-06 | vrf: T31: enable vrf support for bridge interface | Christian Poessinger | |
2020-03-06 | vrf: T31: enable vrf support for bonding interface | Christian Poessinger | |
2020-03-06 | vrf: T31: enable vrf support for ethernet interface | Christian Poessinger | |
2020-03-06 | Merge pull request #242 from thomas-mangin/split | Christian Poessinger | |
ifconfig: T2104: splt ifconfig.py into multiple files | |||
2020-03-06 | ifconfig: T2104: splt ifconfig.py into multiple files | Thomas Mangin | |
2020-03-06 | wireless: T2105: Add check interface state | DmitriyEshenko | |
2020-03-05 | vrf: T31: improve kernel rule lookup table code | Christian Poessinger | |
2020-03-05 | vrf: T31: modify kernel rule lookup table only once | Christian Poessinger | |
2020-03-05 | vrf: T31: add more documentation links | Christian Poessinger | |
2020-03-05 | vrf: T31: use subprocess check_output over check_call | Christian Poessinger | |
2020-03-05 | pppoe: T1493: fix for fix of invalid reference of ipv6-up script file | Christian Poessinger | |
Commit d161cbb ("pppoe: T1493: fix invalid reference of ipv6-up script file") actually introduced another bug instead of fixing it. It was catched by vyos-smoketest ... luckily! Sorry! | |||
2020-03-05 | vrf: T31: routing table IDs must be unique | Christian Poessinger | |
2020-03-05 | vrf: T31: use vyos.ifconfig to set ifalias | Christian Poessinger | |
2020-03-05 | vrf: T31: table id is mandatory | Christian Poessinger | |
2020-03-05 | pppoe: T1493: fix invalid reference of ipv6-up script file | Christian Poessinger | |
2020-03-05 | login: T2050: extend verify() on public-keys | Christian Poessinger | |
* A type must be present for any one public-key element * A key must be present for any one public-key element | |||
2020-03-05 | pppoe: T1493: support IPv6 address negotiation which is required for DHCPv6-PD | Christian Poessinger | |
2020-03-05 | macvlan: T1635: ensure 'link' interface really exists | Christian Poessinger | |
2020-03-05 | vxlan: T1636: ensure 'link' interface really exists | Christian Poessinger | |
2020-03-04 | pppoe: T1318: IPv6 support | Christian Poessinger | |
2020-03-04 | vrf: T31: remove pass in exception handler | Christian Poessinger | |
2020-03-04 | banner: T2099: accept empty pre-/post-login banner | Christian Poessinger | |
2020-03-04 | vrf: T31: enable vrf support for dummy interface | Christian Poessinger | |
2020-03-04 | vrf: T31: reorder routing table lookups | Christian Poessinger | |
Linux routing uses rules to find tables - routing targets are then looked up in those tables. If the lookup got a matching route, the process ends. TL;DR; first table with a matching entry wins! You can see your routing table lookup rules using "ip rule", sadly the local lookup is hit before any VRF lookup. Pinging an addresses from the VRF will usually find a hit in the local table, and never reach the VRF routing table - this is usually not what you want. Thus we will re-arrange the tables and move the local lookup furhter down once VRFs are enabled. | |||
2020-03-04 | vrf: T31: adding unreachable routes to the routing tables | Christian Poessinger | |
2020-03-04 | vrf: T31: prior to the v4.8 kernel iif and oif rules are needed | Christian Poessinger | |
.. we run on 4.19 thus this is no longer needed. | |||
2020-03-04 | vrf: T31: create iproute2 table to name mapping reference | Christian Poessinger | |
2020-03-04 | vrf: T31: rename 'vrf disable-bind-to-all ipv4' to 'vrf bind-to-all' | Christian Poessinger | |
By default the scope of the port bindings for unbound sockets is limited to the default VRF. That is, it will not be matched by packets arriving on interfaces enslaved to an l3mdev and processes may bind to the same port if they bind to an l3mdev. TCP & UDP services running in the default VRF context (ie., not bound to any VRF device) can work across all VRF domains by enabling the 'vrf bind-to-all' option. | |||
2020-03-04 | vrf: T31: support add/remove of interfaces from vrf | Christian Poessinger | |
2020-03-04 | vrf: T31: remove superfluous vyos.vrf library functions | Christian Poessinger | |
vyos.vrf.list_vrfs() was only used in one function thus building a library is no longer needed. If it is needed in the future it should be placed into a library again. | |||
2020-03-04 | vrf: T31: reduce script complexity | Christian Poessinger | |
Keep it simple and stupid :) | |||
2020-03-04 | vrf: T31: no need to use sudo calls in vrf.py | Christian Poessinger | |
All configuration mode scripts are already run with sudo. | |||
2020-03-04 | vrf: T31: make 'show vrf' command behave like other 'show interface commands' | Christian Poessinger | |
- remove the additional depth for querying discrete VRF names - retrieve available VRF names from via <path> from CLI rather then invoking an external script | |||
2020-03-04 | vrf: T31: use embedded regex on 'vrf name' instead of python script | Christian Poessinger | |
2020-03-04 | vrf: T31: initial support for a VRF backend in XML/Python | Thomas Mangin | |
This is a work in progress to complete T31 whoever thought it was less than 1 hour of work was ..... optimistic. Only VRF vreation and show is supported right now. No interface can be bound to any one VRF. | |||
2020-03-03 | interfaces: T1579: fix c/p error when evaluating ↵ | Christian Poessinger | |
os.environ['VYOS_TAGNODE_VALUE'] This has been only a theoretical problem but then the error condition was triggered - only an error has been printed instead of raising an Exception. | |||
2020-03-03 | dhcp-server: T2092: add default route to rfc3442-static-route option | Andras Elso | |
2020-03-03 | dhcp-server: T2062: Fix static route bytes | Andras Elso | |
2020-03-01 | syslog: T2086: do not log cron and su to regular syslog | Christian Poessinger | |
2020-03-01 | login: radius: T2089: only query servers when uid matches ... | Christian Poessinger | |
Do not query RADIUS servers when commit is running started from a non RADIUS user (localuser, root). This should reduce the overall system boot time. | |||
2020-03-01 | vmware: T1028: readd static IP address after resume | Christian Poessinger | |
2020-03-01 | pppoe: T2087: enable unlimited connection attempts | Christian Poessinger | |
2020-03-01 | syslog: T2086: move sudo session open/close log entries to auth.log | Christian Poessinger | |
2020-02-27 | Merge pull request #227 from thomas-mangin/T2057 | Christian Poessinger | |
ifconfig: T2057: generalised Interface configuration | |||
2020-02-27 | openvpn: T2075: add support for OpenVPN tls-crypt file option | Christian Poessinger | |
Encrypt and authenticate all control channel packets with the key from keyfile. Encrypting (and authenticating) control channel packets: * provides more privacy by hiding the certificate used for the TLS connection * makes it harder to identify OpenVPN traffic as such * provides "poor-man's" post-quantum security, against attackers who will never know the pre-shared key (i.e. no forward secrecy) | |||
2020-02-27 | login: T2050: retrieve home directory for SSH keys from OS and not guess it | Christian Poessinger | |
We should not rely on the home dir value stored in user['home_dir'] as if a crazy user will choose username root or any other system user this will fail. Should be deny using root at all? | |||
2020-02-25 | [service https] T1443: set default HTTPS listen port | John Estabrook | |
2020-02-25 | login: T1948: migrade local and radius configurations | Christian Poessinger | |
Splitting was not a good idea. By combining both we can create a RADIUS server XML include file which can be reused by multiple implementations to get a uniformed CLI for the users. |