| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-01-11 | policy: T2199: Update op-mode syntax to `route6` | sarthurdev | |
| 2022-01-11 | policy: T2199: Refactor policy route script for better error handling | sarthurdev | |
| * Migrates all policy route references from `ipv6-route` to `route6` * Update test config `dialup-router-medium-vpn` to test migration of `ipv6-route` to `route6` | |||
| 2022-01-11 | firewall: T4159: Add warning when an empty group is applied to a rule | sarthurdev | |
| 2022-01-11 | firewall: policy: T2199: Reload policy route script if `firewall group` node ↵ | sarthurdev | |
| is changed | |||
| 2022-01-11 | firewall: op-mode: T4131: Display `show firewall group` reference and member ↵ | sarthurdev | |
| items sorted and one per line | |||
| 2022-01-11 | validators: T4144: Add error messages to the majority of IP validators | sarthurdev | |
| 2022-01-11 | firewall: policy: T4159: T4164: Fix empty firewall groups, create separate ↵ | sarthurdev | |
| file for group definitions. | |||
| 2022-01-11 | policy: T4170: rename "policy ipv6-route" -> "policy route6" | Christian Poessinger | |
| In order to have a consistent looking CLI we should rename this CLI node. There is: * access-list and access-list6 (policy) * prefix-list and prefix-list6 (policy) * route and route6 (static routes) | |||
| 2022-01-11 | containers: T2216: bugfix host networking on image upgrade | Mathew Inkson | |
| The bug was partially fixed with this commit: https://github.com/vyos/vyos-1x/commit/358f0b481d8620cad4954e3fe418054b9a8c3ecd The earlier commit introduced a startup retry (up to 10 times) to allow the OS to settle before the container is started. However, it only applies if host networking is NOT used. This change applies the same for containers where host networking is employed. Since the retry portion of the code (written in the earlier commit) is now referenced twice, it has been moved to its own function. | |||
| 2022-01-10 | nat: T2199: dry-run newly generated config before install | Christian Poessinger | |
| Before installing a new conntrack policy into the OS Kernel, the new policy should be verified by nftables if it can be loaded at all or if it will fail to load. There is no need to load a "bad" configuration if we can pre-test it. | |||
| 2022-01-10 | conntrack: T3579: dry-run newly generated config before install | Christian Poessinger | |
| Before installing a new conntrack policy into the OS Kernel, the new policy should be verified by nftables if it can be loaded at all or if it will fail to load. There is no need to load a "bad" configuration if we can pre-test it. | |||
| 2022-01-10 | conntrack: T3579: prepare for "conntrack timeout custom rule" CLI commands | Christian Poessinger | |
| 2022-01-10 | Merge pull request #1152 from sarthurdev/firewall_validators | Christian Poessinger | |
| firewall: validators: T4148: Improve validators and firewall validator usage | |||
| 2022-01-10 | conntrack: T3579: migrate "conntrack ignore" tree to vyos-1x and nftables | Christian Poessinger | |
| 2022-01-10 | validators: Stricter checking on port-range validator | sarthurdev | |
| 2022-01-10 | validators: T4148: Add text output when validators fail | sarthurdev | |
| 2022-01-10 | firewall: validators: T2199: Improve port validation | sarthurdev | |
| 2022-01-10 | firewall: 4149: Fix verify steps being bypassed when base node is removed | sarthurdev | |
| 2022-01-05 | firewall: zone-policy: T4133: Prevent firewall from trying to clean-up ↵ | sarthurdev | |
| zone-policy chains * Prevent firewall names from using the reserved VZONE prefix | |||
| 2022-01-05 | Merge pull request #1136 from sarthurdev/firewall | Christian Poessinger | |
| zone-policy: T4135: Raise error when using an invalid "from" zone. | |||
| 2022-01-05 | zone-policy: T4135: Raise error when using an invalid "from" zone. | sarthurdev | |
| 2022-01-05 | Merge pull request #1134 from sarthurdev/firewall | Christian Poessinger | |
| firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and zone-policy | |||
| 2022-01-05 | firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and ↵ | sarthurdev | |
| zone-policy | |||
| 2022-01-04 | Merge pull request #1121 from sever-sever/T4109 | Christian Poessinger | |
| keepalived: T4109: Add high-availability virtual-server | |||
| 2022-01-04 | keepalived: T4109: Add high-availability virtual-server | Viacheslav | |
| Add new feature, high-availability virtual-server Change XML, python and templates Move vrrp to root node 'high-availability' as all logic are handler by root node 'high-availability' | |||
| 2022-01-04 | Merge pull request #1130 from sarthurdev/firewall | Christian Poessinger | |
| firewall: T4130: Fix firewall state-policy errors | |||
| 2022-01-04 | firewall: T4130: Fix firewall state-policy errors | sarthurdev | |
| Also fixes: * Issue with multiple state-policy rules being created on firewall updates * Prevents interface rules being inserted before state-policy | |||
| 2022-01-03 | keepalived: T4128: add missing keepalived.service file | Christian Poessinger | |
| 2022-01-03 | keepalived: T4128: add systemd option Type=simple | Christian Poessinger | |
| Without this option systemd startup will hit a timeout and the kill keepalived again. | |||
| 2022-01-03 | test: vyos.validate: also test interface identifier in is_ipv6_link_local() | Christian Poessinger | |
| 2022-01-03 | Merge pull request #1018 from sever-sever/T3872 | Christian Poessinger | |
| monitoring: T3872: Add a new feature service monitoring | |||
| 2022-01-03 | monitoring: T3872: Add a new feature service monitoring telegraf | Viacheslav | |
| 2022-01-03 | Merge pull request #1124 from sever-sever/T4110 | Christian Poessinger | |
| listen-address: T4110: Ability to set IPv6 link-local addresses | |||
| 2022-01-03 | listen-address: T4110: Ability to set IPv6 link-local addresses | Viacheslav | |
| Some services allows to set link-local IPv6 addresses as listen-address. Allow it and add a validator 'ipv6-link-local' and extend listen-address.xml.i to this validator | |||
| 2022-01-01 | nat: T2199: rename iptables -> nftables variable prefix | Christian Poessinger | |
| 2021-12-31 | Merge branch 'firewall' of https://github.com/sarthurdev/vyos-1x into current | Christian Poessinger | |
| * 'firewall' of https://github.com/sarthurdev/vyos-1x: zone_policy: T3873: Implement intra-zone-filtering policy: T2199: Migrate policy route op-mode to XML/Python policy: T2199: Migrate policy route to XML/Python zone-policy: T2199: Migrate zone-policy op-mode to XML/Python zone-policy: T2199: Migrate zone-policy to XML/Python firewall: T2199: Migrate firewall op-mode to XML/Python firewall: T2199: Migrate firewall to XML/Python | |||
| 2021-12-30 | snmp: T4124: migrate to get_config_dict() | Christian Poessinger | |
| 2021-12-30 | Merge pull request #1128 from zdc/T4121-sagitta | Kim | |
| dhclient: T4121: Fixed resolv.conf generation at early boot stage | |||
| 2021-12-30 | dhclient: T4121: Fixed resolv.conf generation at early boot stage | zsdc | |
| In case if a CLI configuration is not available, dhclient cannot add nameservers to a `resolv.conf` file, because `vyos-hostsd` requires that an interface be listed in the `set system name-server` option. This commit introduces two changes: * `vyos-hostsd` service will not be started before Cloud-Init fetch all remote data. This is required because all meta-data should be available for Cloud-Init before any of VyOS-related services start since it is used for configuration generation. * the `vyos-hostsd-client` in the `dhclient-script` will be used only if the `vyos-hostsd` is running. In other words - if VyOS services already started, dhclient changes `resolv.conf` using `vyos-hostsd`; in other cases - does this directly. These changes should protect us from problems with DHCP during system boot if DHCP is required by third-party utils. | |||
| 2021-12-29 | configd: T4086: use 'copy' on mutable global var default_config_data | John Estabrook | |
| 2021-12-27 | snmp: T4093: add missing verify() step for required group per snmp v3 user | Christian Poessinger | |
| 2021-12-27 | conntrack-sync: T4109: Change script name for vrrp | Viacheslav | |
| The script vrrp.py was moved to high-availability.py As all logic are handle by root 'high-avalability' node | |||
| 2021-12-26 | ospfv3: T4107: add support for "default-information originate" | Christian Poessinger | |
| 2021-12-26 | ospfv3: T4108: add support for auto-cost parameter | Christian Poessinger | |
| 2021-12-26 | ospfv3: T4102: nssa area support both no-summary and default-originate | Christian Poessinger | |
| 2021-12-26 | flow-accounting: T4097: move configuration file to /run | Christian Poessinger | |
| 2021-12-26 | flow-accounting: T4097: bugfix removing service from CLI | Christian Poessinger | |
| 2021-12-26 | http: api: T4055: add VRF support | Christian Poessinger | |
| 2021-12-25 | https: T1443: remove duplicate CLI definition | Christian Poessinger | |
| 2021-12-25 | flow-accounting: T4106: support specification of capture packet length | Christian Poessinger | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |