Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-05-23 | Merge pull request #3505 from c-po/nat66-T6365 | Daniil Baturin | |
nat66: T6365: remove warnings for negated interface selections by name | |||
2024-05-23 | dhcpv6-server: T6381: fix typos in select ConfigError messages in VyOS ↵ | Ginko | |
current (#3508) | |||
2024-05-22 | nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel ↵ | Christian Breunig | |
>=5.0 random - In kernel 5.0 and newer this is the same as fully-random. In earlier kernels the port mapping will be randomized using a seeded MD5 hash mix using source and destination address and destination port. https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454 | |||
2024-05-22 | nat66: T6365: remove warnings for negated interface selections by name | Christian Breunig | |
2024-05-22 | Merge pull request #3482 from alryaz/patch-1 | Christian Breunig | |
nat: T6365: remove warnings for negated interface selections by name | |||
2024-05-22 | nat: T6365: use interface_exists() over netifaces.interfaces() | Christian Breunig | |
2024-05-22 | nat: T6365: use string startswith() over [0] index access | Christian Breunig | |
2024-05-22 | nat: T6365: remove warnings for negated interface selections by name | Ryazanov Alexander Mihailovich | |
2024-05-21 | reverse-proxy: T6370: Set custom HTTP headers in reverse-proxy responses | Alex W | |
2024-05-21 | T6366: CGNAT add ability to get external and internal allocations | Viacheslav Hletenko | |
Add the ability to show port allocation per external or internal address With huge entries, it is necessary to filter it by specific external/internal IP address | |||
2024-05-19 | Merge pull request #3483 from sever-sever/T6364 | Daniil Baturin | |
T6364: CGNAT drop hard limit that allows only one translation rule | |||
2024-05-18 | T6349: updated pr-labels workflow permission (#3485) | Vijayakumar A | |
2024-05-18 | T5169: Allow to set CGNAT multiple internal pools | Viacheslav Hletenko | |
Allow to set multiple CGNAT internal pools ``` set nat cgnat pool internal int-01 range '100.64.0.0/28' set nat cgnat pool internal int-01 range '100.64.222.11-100.64.222.14' ``` | |||
2024-05-18 | T6364: CGNAT drop hard limit that allows only one translation rule | Viacheslav Hletenko | |
As PoC for CGNAT had a hard limit of using only one translation rule for one internal pool. Drop this limit and extend the usage number of the rules. ``` set nat cgnat rule 100 source pool 'int-01' set nat cgnat rule 100 translation pool 'ext-01' set nat cgnat rule 120 source pool 'vyos-int-02' set nat cgnat rule 120 translation pool 'vyos-ext-02' ``` | |||
2024-05-17 | Merge pull request #3471 from natali-rs1985/T6348-current | Christian Breunig | |
op mode: T6348: SNAT op-mode fails with flowtable offload entries | |||
2024-05-17 | Merge pull request #3472 from nvollmar/T6358 | Christian Breunig | |
T6358: Container config option to enable host pid | |||
2024-05-17 | T6358: Add config option for host process namespace | Nicolas Vollmar | |
2024-05-17 | T6358: Remove duplicate host name handling | Nicolas Vollmar | |
2024-05-17 | Merge pull request #3466 from sever-sever/T6350 | Daniil Baturin | |
T6350: CGNAT add op-mode to show allocation | |||
2024-05-17 | Merge pull request #3464 from sever-sever/T6351 | Daniil Baturin | |
T6351: CGNAT add verification if the pool exists | |||
2024-05-17 | op mode: T6348: SNAT op-mode fails with flowtable offload entries | Nataliia Solomko | |
2024-05-17 | Merge pull request #3463 from sever-sever/T6347 | Christian Breunig | |
T6347: CGNAT fix error if pool contain dashes in the name | |||
2024-05-16 | T6350: CGNAT add op-mode to show allocation | Viacheslav Hletenko | |
Add op-mode command `show nat cgnat allocation` to get CGNAT allocations (internal address, external address, port-range) | |||
2024-05-16 | Merge pull request #3458 from l0crian1/T6335-add-evpn-op | Christian Breunig | |
T6335: Add/Update EVPN op commands | |||
2024-05-16 | T6351: CGNAT add verification if the pool exists | Viacheslav Hletenko | |
Add verification if the external/internal pools are exists before we can use them in the source and translation rules | |||
2024-05-16 | T6347: CGNAT fix error if pool contain dashes in the name | Viacheslav Hletenko | |
2024-05-16 | T6335: Add/Update EVPN op commands | l0crian1 | |
Converted completion helpers from python to bash for performance Previous commit: Added the following commands: show evpn show evpn es show evpn es <es-id> show evpn es detail show evpn es-evi show evpn es-evi detail show evpn es-evi vni <num> show evpn vni show evpn vni detail show evpn vni <num> Updated the following commands: show evpn access-vlan show evpn arp-cache show evpn mac show evpn next-hops show evpn rmac | |||
2024-05-15 | T6335: Add/Update EVPN op commands | l0crian1 | |
Added the following commands: show evpn show evpn es show evpn es <es-id> show evpn es detail show evpn es-evi show evpn es-evi detail show evpn es-evi vni <num> show evpn vni show evpn vni detail show evpn vni <num> Updated the following commands: show evpn access-vlan show evpn arp-cache show evpn mac show evpn next-hops show evpn rmac | |||
2024-05-15 | T3900: add support for raw table in firewall. | Nicolas Fort | |
2024-05-15 | op mode: T6339: display build flavor and comment in "show version" | Daniil Baturin | |
2024-05-14 | T3420: Remove service upnp | Viacheslav Hletenko | |
Remove `service upnp` as it never worked as expected, nft rules do not integrated and custom patches do not seem like a suitable solution for now. Security: UPnP has been historically associated with security risks due to its automatic and potentially unauthenticated nature. UPnP devices might be vulnerable to unauthorized access or exploitation. | |||
2024-05-12 | Merge pull request #3447 from c-po/evpn-uplink-t6306 | Daniil Baturin | |
ethernet: T6306: add support for EVPN MH uplink/core tracking | |||
2024-05-12 | suricata: T751: Initial support for suricata | Maxime THIEBAUT | |
2024-05-12 | Merge pull request #3442 from nicolas-fort/T6329 | Christian Breunig | |
T6329: firewall: add a patch for op-mode command <show firewall group> | |||
2024-05-12 | T6329: firewall: use isinstance() in op-mode script | Christian Breunig | |
2024-05-11 | ethernet: T6306: add support for EVPN MH uplink/core tracking | Christian Breunig | |
When all the underlay links go down the PE no longer has access to the VxLAN +overlay. To prevent blackholing of traffic the server/ES links are protodowned on the PE. A link can be setup for uplink tracking via the following configuration: set interfaces ethernet eth0 evpn uplink | |||
2024-05-10 | image-tools: T6176: use console_hint as default | John Estabrook | |
2024-05-10 | image-tools: T6176: add console hint during image install | John Estabrook | |
2024-05-10 | image-tools: T6184: add op-mode set boot-console | John Estabrook | |
2024-05-10 | image-tools: T6327: drop boot console type ttyUSB | John Estabrook | |
2024-05-10 | T6329: firewall: add a patch for op-mode command <show firewall group> | Nicolas Fort | |
2024-05-10 | Merge pull request #3410 from fett0/T6303 | Christian Breunig | |
Bond: T6303: add system mac address on interfaces bond | |||
2024-05-10 | bond: T6303: system-mac is not allowed to be a multicast MAC address | Christian Breunig | |
2024-05-08 | bridge: T6317: add dependency call for wireless interfaces | Christian Breunig | |
2024-05-08 | bridge: T6317: call dependency when deleting bridge member | Christian Breunig | |
2024-05-07 | Merge pull request #3422 from HollyGurza/T6082 | Christian Breunig | |
bgp: T6082: Allow the same local-as and remote-as in one peer group | |||
2024-05-07 | op-mode: T6284: IPoE-server op-mode does not show IPv6 address field | Nataliia Solomko | |
2024-05-07 | bgp: T6082: Allow the same local-as and remote-as in one peer group | khramshinr | |
2024-05-04 | op-mode: T6291: add LACP related commands | l0crian1 | |
show interfaces bonding lacp detail show interfaces bonding <bondif> lacp detail show interfaces bonding <bondif> lacp neighbors Co-authored-by: l0crian1 <ryan.claridge13@gmail.com> | |||
2024-05-02 | qos: T6225: Fix qos random-detect policy | khramshinr | |
Fix default values for random-detect Remove dsmakr qdisc from gred cofig because dsmark was deleted from kernel |