summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2022-09-16ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peerViacheslav Hletenko
Migration and Change boolean nodes "enable/disable" to disable-xxxx, enable-xxxx and just xxx for VPN IPsec configurations - IKE changes: - replace 'ipsec ike-group <tag> mobike disable' => 'ipsec ike-group <tag> disable-mobike' - replace 'ipsec ike-group <tag> ikev2-reauth yes|no' => 'ipsec ike-group <tag> ikev2-reauth' - ESP changes: - replace 'ipsec esp-group <tag> compression enable' => 'ipsec esp-group <tag> compression' - PEER changes: - replace: 'peer <tag> id xxx' => 'peer <tag> local-id xxx' - replace: 'peer <tag> force-encapsulation enable' => 'peer <tag> force-udp-encapsulation' - add option: 'peer <tag> remote-address x.x.x.x' Add 'peer <name> remote-address <name>' via migration script
2022-08-08Merge pull request #1461 from nicolas-fort/nat66-excludeChristian Poessinger
nat66: T4598: Add exclude options in nat66
2022-08-05nat66: T4598: Add exclude options in nat66Nicolas Fort
2022-08-05ocserv: T4597: Check bind port before openconnect commitViacheslav Hletenko
Check if openconnect listen port is available and not used by another service
2022-08-05Merge pull request #1459 from dmbaturin/genop-exnViacheslav Hletenko
T2719: add an exception hierarchy for op mode errors
2022-08-05bgp: T4257: bugfixes after renaming "local-as" to "system-as"Christian Poessinger
2022-08-04Merge https://github.com/Cheeze-It/vyos-1x into currentChristian Poessinger
* https://github.com/Cheeze-It/vyos-1x: bgp: T4257: Changing BGP "local-as" to "system-as"
2022-08-04T2719: add an exception hierarchy for op mode errorsDaniil Baturin
2022-08-04Merge pull request #1457 from sever-sever/T4586Christian Poessinger
nat66: T4586: Add SNAT destination prefix and DNAT address
2022-08-04macsec: T4592: can not create two interfaces using the same source-interfaceChristian Poessinger
2022-08-03validators: T4586: Add IPv6 exclude validators for address/prefixViacheslav Hletenko
Add IPV6 exclude validators: - ipv6-address-exclude - ipv6-prefix-exclude Will use in nat66 source/destination
2022-08-02containers: T4585: Add option restart to containers.pyViacheslav Hletenko
Add option restart to `containers.py`
2022-08-02container: T4585: Rewrite show containerViacheslav Hletenko
Rewrite op-mode: - show container - show container network - show container image to the new vyos.opmode format
2022-08-02hostap: T4584: add Debian specific options to systemd unit filesChristian Poessinger
2022-08-01macsec: T4537: remove debug falg "-d" from systemd service fileChristian Poessinger
2022-08-01macsec: T4537: supply PID path via systemd service file to daemonChristian Poessinger
2022-08-01macsec: T4391: bugfix config pathChristian Poessinger
After commit 85d6c8f7c62 ("vyos.configdict: T4391: enable get_interface_dict() to be used with ConfigTreeQuery()") we also need to use the full path when working with Config() as previous calls to get_interface_dict() no longer change the level of Config().
2022-08-01macsec: T4537: restart wpa_supplicant on errorChristian Poessinger
2022-08-01macsec: T3368: check key length for gcm-aes-128/gcm-aes-256Christian Poessinger
2022-08-01vrf: T4562: Check VRF if it has not been configuredViacheslav Hletenko
Check list of VRF's, check key 'ifname' is configured If not configured, return message "VRF is not configured"
2022-08-01Merge pull request #1446 from sever-sever/T4578Christian Poessinger
dns-forwarding: T4578: Rewrite show dns forwarding
2022-08-01router-advert: T4582: fix preferred cannot equal valid lifetimeinitramfs
Allows preferred lifetime for prefix advertisements to equal the configured valid lifetime as per RFC 4861.
2022-07-31graphql: T4580: handle case of op-mode script name containing hyphensJohn Estabrook
2022-07-30bgp: T4257: Changing BGP "local-as" to "system-as"Cheeze_It
bgp: T4257: Changing BGP "local-as" to "system-as" This change is to change the global BGP name for the node "local-as" to "system-as" This is needed so that there's less ambiguity with the local-as feature per neighbor. bgp: T4257: Changing BGP "local-as" to "system-as" bgp: T4257: Changing BGP "local-as" to "system-as" This change is to change the global BGP name for the node "local-as" to "system-as" This is needed so that there's less ambiguity with the local-as feature per neighbor.
2022-07-30bridge: T4579: cleanup interface dict (remove empty keys)Christian Poessinger
2022-07-30dns-forwarding: T4578: Rewrite show dns forwardingViacheslav Hletenko
Rewrite op-mode "show dns forwarding statistics" to new format Use vyos.opmode format
2022-07-30nat: T4089: Rewrite show nat destination rulesViacheslav Hletenko
Rewrite op-mode "show nat destination rules" to new format use "show_rules --direction destination" Delete old script "show_nat_rules.py"
2022-07-29Merge pull request #1403 from sever-sever/T4518Christian Poessinger
lb-wan: T4518: Add XML for conf mode load-balancing wan
2022-07-29Merge pull request #1432 from jestabro/gql-op-modeJohn Estabrook
graphql: T4554: Automate GraphQL handling of standardized op-mode requests
2022-07-29Merge pull request #1438 from sever-sever/T4569Christian Poessinger
bridge: T4569: Extend bridge.py for op-mode
2022-07-29Merge pull request #1440 from sever-sever/T4570Christian Poessinger
vxlan: T4570: Verify MTU for remote address if source not defined
2022-07-29Merge pull request #1441 from sever-sever/T4543Christian Poessinger
nat: T4543: Fix and rewrite show nat source statistics
2022-07-29Merge pull request #1443 from sever-sever/T4562Christian Poessinger
vrf: T4562: Rewrite show vrf name xxx delete old script op-mode
2022-07-29T4577: wwan: fix incorrect return value unpackingDate Huang
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
2022-07-29vrf: T4562: Rewrite show vrf name xxx delete old scriptViacheslav Hletenko
Add option "--name" for function "show" to get required VRF name Delete old script "show_vrf.py"
2022-07-28nat: T4543: Fix and rewrite show nat source statisticsViacheslav Hletenko
Rewrite "show nat source statistics" Use new format 'vyos.opmode module' Ability to get raw and formatted output
2022-07-28vxlan: T4570: Verify MTU for remote address if source not definedViacheslav Hletenko
In some cases `source_address` can be not defined in the conf So we should to check list of `remote` vxlanX addresses If remote address is IPv6 - add overhead +20 bytes to default overhead 50. I.e. +70 bytes for IPv6
2022-07-26nat: T4531: Fix op-mode NAT rules add default valuesViacheslav Hletenko
Add default values for the function _get_formatted_output_rules For variables: sport, dport, proto, saddr, daddr As in parser and loop those values or some of them may not occur
2022-07-26bridge: T4569: Extend bridge.py for op-modeViacheslav Hletenko
Extend bridge.py op-mode script, allow next commands to use own op-mode functions Add: show bridge vlan show bridge brX fdb show bridge brX mdb
2022-07-26T4571: add sflow vrf to sflow agent address IP validationDavid
2022-07-26Merge pull request #1436 from aapostoliuk/T4546-sagittaChristian Poessinger
nhrp: T4546: Fixed gateway in route add command
2022-07-26Merge pull request #1435 from sever-sever/T4569Christian Poessinger
bridge: T4569: Rewrite show bridge script of vyos.opmode format
2022-07-26nhrp: T4546: Fixed gateway in route add commandaapostoliuk
Fixed incorrect key to get gateway for route add command
2022-07-26bridge: T4569: Rewrite show bridge script of vyos.opmode formatViacheslav Hletenko
2022-07-25graphql: T4554: add resolver support for op-mode scriptsJohn Estabrook
2022-07-25bgp: T4560: neighbor/peer-group local-as option is only allowed for eBGPChristian Poessinger
2022-07-25fastnetmon: T2659: PID file location is static and can't be changedChristian Poessinger
2022-07-25Merge pull request #1433 from sever-sever/T4568Christian Poessinger
ipsec: T4568: Fix debug IPsec peer op-mode
2022-07-25fastnetmon: T4556: Allow configure white_list_path and populate with ↵Adrian Almenar
hosts/networks that should be ignored.
2022-07-25Merge pull request #1426 from sever-sever/T4545-natChristian Poessinger
nat: T4545: Rewrite show nat source rules script