summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2022-03-28Revert "openvpn: T4230: globally enable ip_nonlocal_bind"Daniil Baturin
This reverts commit 382d5aa16d81b745e522a14122b429750ee64789.
2022-03-27graphql: T3993: add unsettable gql option; this is not exposed by CLIJohn Estabrook
(cherry picked from commit 9d3acc2b55f2d1c563f1941e59c98c159211dc58)
2022-03-25mpls: T915: use vyos.util.sysctl_write() helper functionChristian Poessinger
(cherry picked from commit cabe0c06e2312cc872d3e22d91611a3ccecefdb0)
2022-03-25vyos.util: T4319: rename sysctl() -> sysctl_write()Christian Poessinger
(cherry picked from commit 364009e4317fb5c6732635726b511613aa2ed519)
2022-03-25system: T4319: align ipv6 settings with ipv4 by using get_config_dict()Christian Poessinger
(cherry picked from commit 1b16a4eab926462c0d2752d698bedf28c995058d)
2022-03-24openvpn: T4230: globally enable ip_nonlocal_bindChristian Poessinger
(cherry picked from commit 1cbcbf40b7721849f9696c05fac65db010a66b7c)
2022-03-24Merge pull request #1210 from sever-sever/T4230-equChristian Poessinger
openvpn: T4230: Delete checks if local-host address assigned
2022-03-24openvpn: T4294: force service restart on openvpn-option node changeChristian Poessinger
(cherry picked from commit 999b1e50dfdea8694174e82d22b2438cb1bf5e28)
2022-03-23Merge pull request #1235 from hensur/equuleus-ipv6-local-routeChristian Poessinger
backport: T4515: T4219: policy local-route6 and inbound-interface support
2022-03-15bonding: T4301: Fixed arp-monitor optionzsdc
In verify function for arp-monitor option was used by mistake an extra conversion for incoming data before comparing items. This commit removed these unnecessary conversions and makes the option operable. (cherry picked from commit df4b544c29974e36b52fc42bcbf617f50738a4a6)
2022-03-10T3506: loadkey: Add `generate public-key-command` commanderkin
2022-03-05conntrackd: T4259: fix daemon configuration pathChristian Poessinger
(cherry picked from commit aa8080d316dbeb4d26bf67f6d67efeda43b2bc07)
2022-03-05conntrackd: T4259: prevent startup of multiple daemon instancesChristian Poessinger
(cherry picked from commit 2c94c3ec72a559de405b29b4399250db3085717e)
2022-03-04op-mode: lldp: T3999: bugfix cap' referenced before assignmentChristian Poessinger
(cherry picked from commit c06861440cd21ff7c668b35ed1039f5fac4101b9)
2022-02-28ssh: T4273: bugfix cipher and key-exchange multi nodesChristian Poessinger
After hardning the regex validator to be preceeded with ^ and ending with $ it was no longer possible to have a comma separated list as SSH ciphers. The migrations cript is altered to migrate the previous comma separated list to individual multi node entries - cipher and key-exchange always had been multinodes - so this just re-arranges some values and does not break CLI compatibility (cherry picked from commit 61fa1c95164e4222e79b078b1a796f41397e0ee3)
2022-02-23backport: policy: T4219: add local-route(6) incoming-interfaceHenning Surmeier
2022-02-23backport: policy: T4151: remove all previous rules on editHenning Surmeier
2022-02-23backport: policy: T4151: Bugfix policy ipv6-local-routeHenning Surmeier
2022-02-23backport: policy: T4151: Add policy ipv6-local-routeHenning Surmeier
Adds support for `ip -6 rule` policy based routing. Also, extends the existing ipv4 implemenation with a `destination` key, which is translated as `ip rule add to x.x.x.x/x` rules. https://phabricator.vyos.net/T4151
2022-02-23pbr: T3702: Fix incorrect splits for fwmarkViacheslav
2022-02-23pbr: T3702: Add rules match fwmarkViacheslav
2022-02-23tunnel: T4267: "parameters ip key" on GRE not required for different remotesChristian Poessinger
(cherry picked from commit e64d45717940aa4fb4a072065bdfa04f884d00cc)
2022-02-22vxlan: T4264: interface is destroyed and rebuild on description changeChristian Poessinger
When changing "general" parameters like: - interface IP address - MTU - description the interface is destroyed and recreated ... this should not happen! (cherry picked from commit 2373b232849c847717cbdcfac7390d8376e227ca)
2022-02-22Revert "backport: policy: T4151: Add policy ipv6-local-route"Christian Poessinger
This reverts commit e11a7ff1b2817cc8f4b595171fe82a43a209ebc2.
2022-02-22Revert "backport: policy: T4151: Bugfix policy ipv6-local-route"Christian Poessinger
This reverts commit ed7c674da17519e6331a9cef8522c5e49251d505.
2022-02-22Revert "backport: policy: T4151: remove all previous rules on edit"Christian Poessinger
This reverts commit b71a04811bd61e1faf2bc4eaceaaae8bdbf97dc6.
2022-02-22Revert "backport: policy: T4219: add local-route(6) incoming-interface"Christian Poessinger
This reverts commit 72d7152f794cfe48821797d62865024c1843096e.
2022-02-21vxlan: T4120: code cleanup for multiple remotesChristian Poessinger
(cherry picked from commit 3a605ad020d8d20b08a72cb1284f6e590d1fd7b5)
2022-02-21bridge: remove unreferenced import -> leaf_node_changedChristian Poessinger
(cherry picked from commit 25b2f2a8057260ad0d2c59823618d7c9f0fba707)
2022-02-21vxlan: T4120: add ability to set multiple remotes (PR #1127)Andreas
VXLAN does support using multiple remotes but VyOS does not. Add the ability to set multiple remotes and add their flood lists using "bridge" command. (cherry picked from commit 0ecddff7cffa8900d351d5c15e32420f9d780c0b)
2022-02-19Merge pull request #1219 from hensur/equuleus-ipv6-local-routeChristian Poessinger
backport: T4515: T4219: policy local-route6 and inbound-interface support
2022-02-17Merge pull request #1221 from sever-sever/T3686-equChristian Poessinger
openvpn: T3686: Fix for check local-address in script and tmpl
2022-02-16backport: policy: T4219: add local-route(6) incoming-interfaceHenning Surmeier
2022-02-15dhcpv6-server: T3494: Get address from network to correct sortingDmitriyEshenko
2022-02-15openvpn: T3686: Fix for check local-address in script and tmplViacheslav Hletenko
Local-address should be checked/executed only if it exists in the openvpn configuration, dictionary, jinja2 template (cherry picked from commit 230ac0a202acd7ae9ad9bccb9e777ee5a0e0b7b7)
2022-02-14backport: policy: T4151: remove all previous rules on editHenning Surmeier
2022-02-14backport: policy: T4151: Bugfix policy ipv6-local-routeHenning Surmeier
2022-02-14backport: policy: T4151: Add policy ipv6-local-routeHenning Surmeier
Adds support for `ip -6 rule` policy based routing. Also, extends the existing ipv4 implemenation with a `destination` key, which is translated as `ip rule add to x.x.x.x/x` rules. https://phabricator.vyos.net/T4151
2022-02-14tunnel: T4154: import cleanupChristian Poessinger
(cherry picked from commit 122c7a53575f67759f157e02eca776f799658dc1)
2022-02-14tunnel: T4154: verify() no more then one GRE tunnel is used w/o "ip key" per ↵Christian Poessinger
interface It is impossible for the OS kernel to distinguish multiple GRE tunnels when no "gre key" is configured when sourcing tunnels from the same interface. (cherry picked from commit 6f1326d6b68f6dcb83843374c876407ef2922bd1)
2022-02-13vrf: T4191: bugfix for "ip rule" when VRFs are createdChristian Poessinger
We always mangled and worked on the "ip rule" singleton even when nothing needed to be changed. This resulted in a VRF hickup when the same VRF was added and removed multiple times. set interfaces ethernet eth1 vrf foo set vrf name foo table '1000' commit delete interfaces ethernet eth1 vrf delete vrf commit set interfaces ethernet eth1 vrf foo set vrf name foo table '1000' commit broke reachability on eth1 - a reboot was required. This change will now only alter the ip rule tables once when VRF instances are created for the first time and will not touch the Kernel "ip rule" representation afterwards. (cherry picked from commit 2cec431e5caf9df85640f707cd6dc3077c17c238)
2022-02-11conntrack-sync: T4237: Fix checks for listen-address list to strViacheslav Hletenko
Verify section conntrack_sync.py funciton 'is_addr_assigned' should checks address as string not as list
2022-02-09openvpn: T4230: Delete checks if local-host address assignedViacheslav Hletenko
OpenVPN can't start if it depends on VRRP virtual-address as virtual-address is not yet assigned by HA (openvpn and ha in one commit) as we have checks "if address assigned" It depends on commit priorities: 460 interfaces/openvpn 800 high-availability Replace check if local-host address assigned from raise ConfigError to print (just notification) Allow to bind OpenVPN service to nonlocal address
2022-02-08monitoring: T3872: Add new feature service monitoring telegrafViacheslav Hletenko
2022-02-05vrrp: T4226: transition-script does not work for groups containing a hypen (-)Christian Poessinger
(cherry picked from commit 11a900e706db59459314622050ced7d4117f090b)
2022-02-03firewall-bridge: T4193: Add op-mode for firewall policyViacheslav Hletenko
2022-01-15wireguard: T4183: Allow setting ipv6 link local addres for peerViacheslav
Allow setting ipv6-link-local addresses as peer address for wireguard interfaces Add validator "ipv6-link-local"
2022-01-10Merge pull request #1146 from sever-sever/T3299-equChristian Poessinger
squid: T3299: Add listen address 0.0.0.0
2022-01-09keepalived: T4128: add missing keepalived.service fileChristian Poessinger
(cherry picked from commit 5a73c946000902f6e445b0803ca090f7fc6e0954)
2022-01-09keepalived: T4128: add systemd option Type=simpleChristian Poessinger
Without this option systemd startup will hit a timeout and the kill keepalived again. (cherry picked from commit 2a279f48e208b90c91eac5d6c5855e65cee39018)
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-23 04:39:41 +0000