Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-07-20 | T2719: fix unused imports | Daniil Baturin | |
2022-07-19 | T2719: patch for general support for boolean options | John Estabrook | |
Signed-off-by: Daniil Baturin <daniil@vyos.io> | |||
2022-07-07 | T2719: rework 'show hardware cpu *' commands in the new style | Daniil Baturin | |
2022-07-05 | T2719: convert the 'show system memory' script to the new style | Daniil Baturin | |
2022-07-05 | T2719: update op mode CLI definition for 'show version' | Daniil Baturin | |
2022-07-05 | T2719: initial version of the route op mode script | Daniil Baturin | |
2022-07-05 | T2719: convert 'show version' to the new op mode style | Daniil Baturin | |
2022-06-17 | T2719: handle non-existent interfaces in the neighbor script | Daniil Baturin | |
2022-06-16 | T2719: correct module path in the neighbor script | Daniil Baturin | |
2022-06-15 | T2719: add reset command to the neighbor script | Daniil Baturin | |
2022-06-14 | T2719: fix module import path | Daniil Baturin | |
2022-06-09 | T2719: prototype of an op mode command runner | Daniil Baturin | |
based on type hints and introspection | |||
2022-06-06 | T4446: use format strings instead of old-fasionhed format method | Daniil Baturin | |
2022-06-02 | T4446: use a unified neighbor display script | Daniil Baturin | |
2022-06-02 | sla: T4222: Add OWAMP and TWAMP for service sla | Viacheslav Hletenko | |
OWAMP is a command line client application and a policy daemon used to determine one way latencies between hosts. OWAMP session control uses traditional client-server communication between a control-client and a server, TWAMP (two-way active measurement protocol) Add configuration and operation modes set service sla owamp-server set service sla twamp-server run force owping 192.0.2.120 run force twping 192.0.2.190 | |||
2022-05-31 | Merge pull request #1344 from sarthurdev/pki_update | Christian Poessinger | |
pki: T3642: Update conf scripts using changed PKI objects | |||
2022-05-31 | pki: T3642: Update conf scripts using changed PKI objects | sarthurdev | |
2022-05-31 | policy: T3976: fix SyntaxError: invalid non-printable character | Christian Poessinger | |
2022-05-31 | IPv6: T3976: add prefix-list and access-list option from ipv6 route-map | fett0 | |
2022-05-31 | pki: T3642: Enable `generate pki openvpn ...` to install into config | sarthurdev | |
2022-05-30 | pki: T3642: Add ability to import files into PKi configuration | sarthurdev | |
2022-05-29 | eigrp: T2472: add basic template rendering and FRR communication | Christian Poessinger | |
2022-05-29 | rip: T4448: remove default version for RIP | Christian Poessinger | |
Commit f9e38622 ("rip: T4448: add support to set protocol version on an interface level") also added the versionspecified on a per interface level. the RIp version carried a default value of 2 which makes RIPv1 and RIPv2 no longer working which is dthe default for FRR. Remove the default "2" from the RIP version specifier to make this behavior work again. | |||
2022-05-29 | eigrp: T2472: add initial python helper | Christian Poessinger | |
2022-05-28 | rip: T4448: add support to set protocol version on an interface level | Christian Poessinger | |
2022-05-28 | xml: rip: T4448: rename include files to match schema | Christian Poessinger | |
2022-05-25 | Merge pull request #1333 from sever-sever/T4442 | John Estabrook | |
http-api: T4442: Add action reset | |||
2022-05-26 | http-api: T4442: Add action reset | Viacheslav Hletenko | |
Add action 'reset' (op-mode) for HTTP-API http://localhost/reset curl --unix-socket /run/api.sock -X POST -Fkey=mykey \ -Fdata='{"op": "reset", "path": ["ip", "bgp", "192.0.2.14"]}' \ http://localhost/reset | |||
2022-05-25 | configtest: T4382: missing block in migration script vrf/0-to-1 | John Estabrook | |
The config vrf-basic reveals a missing block in the migration script vrf/0-to-1, moving 'next-hop-vrf' to 'vrf'. As this only exists in Sagitta, modify script 0-to-1. Also, fix the 'system nt' typo seen in vrf-ospf. | |||
2022-05-25 | configtest: T4382: fix missing delete of 'ipsec-interfaces' node | John Estabrook | |
Migration of bgp-azure-ipsec-gateway and bgp_dmvpn_hub reveals that migration script ipsec/5-to-6 leaves the empty node 'ipsec-interfaces' after moving the interface; fix the migration script, as it is not yet in 1.3. | |||
2022-05-25 | Merge pull request #1319 from goodNETnick/ocserv_sh_otp_key | Viacheslav Hletenko | |
ocserv: T4420: show configured 2FA OTP key | |||
2022-05-25 | Merge pull request #1088 from zdc/T4020-sagitta | Daniil Baturin | |
FRR: T4020: Added CLI options for FRR daemons | |||
2022-05-21 | flow-accounting: T4099: "source-address" must exist locally | Christian Poessinger | |
2022-05-21 | nhrp: T4353: use ".service" suffix on systemd name | Christian Poessinger | |
2022-05-21 | flow-accounting: T4437: also install rule to IPv6 VYOS_CT_PREROUTING_HOOK | Christian Poessinger | |
2022-05-20 | Merge pull request #1317 from sever-sever/T4418 | Christian Poessinger | |
monitoring: T4418: Add output plugin azure-data-explorer | |||
2022-05-20 | monitoring: T4418: Add output plugin azure-data-explorer | Viacheslav Hletenko | |
Add output telegraf Plugin Azure Data Explorer set service monitoring telegraf azure-data-explorer authentication client-id 'x' set service monitoring telegraf azure-data-explorer authentication client-secret 'x' set service monitoring telegraf azure-data-explorer authentication tenant-id 'x' set service monitoring telegraf azure-data-explorer database 'x' set service monitoring telegraf azure-data-explorer group-metrics 'single-table' set service monitoring telegraf azure-data-explorer url 'http://localhost.loc' | |||
2022-05-19 | dmvpn: nhrp: T4434: secret length can not exceed 8 characters | Christian Poessinger | |
2022-05-19 | T4432: display load averages normalized for the number of CPU cores | Daniil Baturin | |
2022-05-16 | ocserv: T4420: show configured 2FA OTP key | goodNETnick | |
2022-05-13 | Merge pull request #1320 from sever-sever/T4408 | Christian Poessinger | |
sshguard: T4408: Add service ssh dynamic-protection | |||
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-12 | conntrack: T3535: use "reload-or-restart" from systemd | Christian Poessinger | |
2022-05-12 | vrrp: T3944: use "reload-or-restart" over individual code paths | Christian Poessinger | |
systemd has its internal reload or restart logic - we do not need to programm it on our own. | |||
2022-05-12 | container: T2216: use warning over exception when container image does not exist | Christian Poessinger | |
2022-05-12 | Revert "NHRP : T4399: fix issues restart nhrp when add or del tunnel" | Viacheslav Hletenko | |
This reverts commit d1455f936ca721633fcc04d5c84169b4ccf2f447. New spokes can't register on hub with 'reload-or-restart' option And requires option 'restart' for opennhrp.service | |||
2022-05-10 | T4405: Fix administrative distance of DHCP routes | Dmitri Toubelis | |
- Default dhclient script only uses value of `$IF_MERIC` envvar for default route recived via `router` option. - This variable has no effect on rotes received via `rfc3442-classless-static-routes` option - Considering that Vyos overrrides `ip` command originating from `dhclient` this can be easily fixed in `iptovtysh()` function by using the `$IF_METRIC` envvar directly in the dhclient hook. (cherry picked from commit 0c00e7bf8b6e68814607fde4ff0cd70ce9f4b486) | |||
2022-05-08 | container: op-mode: T3852: use XML inline podman commands | Christian Poessinger | |
Reduce bloat of containers_op.py wrapper script. All commands can be passed directly to podman via the XML script. This also makes the execution faster, as no Python environment needs to be build up. | |||
2022-05-07 | vrf: T4419: support to disable IP forwarding within a given VRF | Christian Poessinger | |
2022-05-06 | bgp: T4385: verify() peer-group in interface based neighbors | Christian Poessinger | |