Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-03-18 | T6136: add error checks when using dynamic firewall groups | Nicolas Fort | |
2024-03-16 | Merge pull request #3112 from Ingramz/add-rtsp-2 | Christian Breunig | |
conntrack: T4022: add RTSP conntrack helper | |||
2024-03-16 | Merge pull request #3132 from sever-sever/T6121 | Christian Breunig | |
T6121: Extend service config-sync to new sections | |||
2024-03-15 | T6090: fix policy route migration script. Ensure that tcp flags migration ↵ | Nicolas Fort | |
occurs also if only <policy route> is defined. | |||
2024-03-15 | T6121: Extend service config-sync to new sections | Viacheslav Hletenko | |
Extend `service config-sync` with new sections: - LeafNodes: pki, policy, vpn, vrf (syncs the whole sections) - Nodes: interfaces, protocols, service (syncs subsections) In this cae the Node allows to uses the next level section i.e subsection For example any of the subsection of the node `interfaces`: - set service config-sync section interfaces pseudo-ethernet - set service config-sync section interfaces virtual-ethernet Example of the config: ``` set service config-sync mode 'load' set service config-sync secondary address '192.0.2.1' set service config-sync secondary key 'xxx' set service config-sync section firewall set service config-sync section interfaces pseudo-ethernet set service config-sync section interfaces virtual-ethernet set service config-sync section nat set service config-sync section nat66 set service config-sync section protocols static set service config-sync section pki set service config-sync section vrf ``` | |||
2024-03-13 | Merge pull request #3125 from c-po/radvd-T6118 | Daniil Baturin | |
radvd: T6118: add nat64prefix support RFC8781 | |||
2024-03-13 | Merge pull request #3126 from zdc/T4548-circinus | Christian Breunig | |
grub: T4548: Fixed GRUB configuration files order | |||
2024-03-13 | grub: T4548: Fixed configuration files order | zsdc | |
To iterate files on ext* file systems GRUB reads their inodes one by one, ignoring names. This breaks our configuration logic that relies on proper loading order. This commit adds a helper `sort_inodes()` that needs to be used whenever GRUB configuration files are created. It recreates files, changing their inodes in a way where inodes order matches alphabetical order. | |||
2024-03-12 | radvd: T6118: add nat64prefix support RFC8781 | Christian Breunig | |
Add support for pref64 option, as defined in RFC8781. The prefix valid lifetime must not be smaller than the "interface interval max" definition which defaults to 600. set service router-advert interface eth1 nat64prefix 64:ff9b::/96 | |||
2024-03-12 | conntrack: T4022: add RTSP conntrack helper | Indrek Ardel | |
2024-03-12 | Merge pull request #3123 from sarthurdev/T5080_order | Christian Breunig | |
conntrack: T5080: Fix rule order for applied conntrack modules | |||
2024-03-12 | conntrack: T5080: Fix rule order for applied conntrack modules | sarthurdev | |
2024-03-11 | T5872: re-write exit hook to always regenerate config | Lucas Christian | |
2024-03-10 | T6114: fix broken migration dhcpv6-server 4-to-5 | Lucas Christian | |
2024-03-10 | T5872: further fixes to ipsec dhcp exit hook | Lucas Christian | |
2024-03-10 | T5872: fix ipsec dhclient exit hook | Lucas Christian | |
2024-03-10 | T5872: ipsec remote access VPN: support dhcp-interface. | Lucas Christian | |
2024-03-10 | Merge pull request #3113 from c-po/firewall-T6071 | Daniil Baturin | |
firewall: T6071: truncate rule description field to 255 characters | |||
2024-03-10 | firewall: T6071: truncate rule description field to 255 characters | Christian Breunig | |
2024-03-09 | Merge pull request #3106 from sarthurdev/T6102 | Daniil Baturin | |
dhcp: T6102: Fix clear DHCP lease op-mode | |||
2024-03-07 | Merge pull request #2966 from HollyGurza/T6020 | Daniil Baturin | |
vrrp: T6020: vrrp health-check script not applied correctly | |||
2024-03-07 | Merge pull request #1740 from sarthurdev/tpm_luks | Daniil Baturin | |
config: T4919: Add support for encrypted config with TPM | |||
2024-03-07 | config: T4919: Support copying encrypted volumes during install | sarthurdev | |
Re-implements https://github.com/vyos/vyatta-cfg-system/pull/194 | |||
2024-03-07 | config: T4919: mount/unmount encrypted config on VyOS start/stop | sarthurdev | |
Re-implements https://github.com/vyos/vyatta-cfg/pull/54 | |||
2024-03-07 | config: T4919: Add support for encrypted config file with TPM | sarthurdev | |
2024-03-06 | dhcp: T6102: Fix clear DHCP lease op-mode | sarthurdev | |
* Add `clear dhcpv6-server lease` * Standardize using vyos.opmode | |||
2024-03-06 | Merge pull request #3088 from nicolas-fort/T6075 | Daniil Baturin | |
T6075: firewall and NAT: check if interface-group exists when using them in firewall|nat rules. | |||
2024-03-06 | Merge pull request #3085 from Apachez-/T6096 | Christian Breunig | |
T6096: Config commits are not synced properly because 00vyos-sync is deleted by vyos-router | |||
2024-03-05 | Merge pull request #3089 from jestabro/allocate-under-lock | John Estabrook | |
http-api: T6069: fix allocation outside of thread lock | |||
2024-03-05 | T2447: add configurable kernel boot option 'disable-power-saving' | Christian Breunig | |
Lower available CPU C states to a minimum if this option set. This will set Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1". | |||
2024-03-05 | http-api: T6069: fix allocation outside of thread lock | John Estabrook | |
2024-03-05 | T6075: firewall and NAT: check if interface-group exists when using them in ↵ | Nicolas Fort | |
firewall|nat rules. | |||
2024-03-04 | T6096: Config commits are not synced properly because 00vyos-sync is deleted ↵ | Apachez | |
by vyos-router | |||
2024-03-04 | Merge pull request #3079 from sever-sever/T6084 | Daniil Baturin | |
T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | |||
2024-03-04 | T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | Viacheslav Hletenko | |
If we have any `vpn ipsec` and `protocol nhrp` configuration we get the empty configuration file `/run/opennhrp/opennhrp.conf` after rebooting the system. Use config dependency instead of the old `resync_nhrp` function fixes this issue | |||
2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
2024-03-02 | ospf: T5717: sync code with ospfv3 implementation | Christian Breunig | |
2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
2024-03-01 | Merge pull request #3061 from sarthurdev/T6079_current | Christian Breunig | |
dhcp-server: T6079: Disable duplicate static-mappings on migration | |||
2024-03-01 | smoketest: T6079: probe for duplicate IP address static-mapping | Christian Breunig | |
2024-03-01 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-29 | Merge pull request #2659 from jestabro/remove-trivial-redundancies | John Estabrook | |
configdep: T5839: remove trivially redundant config dependency calls | |||
2024-02-29 | Merge pull request #3056 from natali-rs1985/T5504-current | Christian Breunig | |
T5504: Keepalived VRRP ability to set more than one peer-address | |||
2024-02-29 | Merge pull request #3060 from c-po/banner | Daniil Baturin | |
banner: T6077: implement ASCII contest winner default logo | |||
2024-02-29 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-29 | dhcp-server: T6079: Disable duplicate static-mappings on migration | sarthurdev | |
2024-02-28 | dhcp-server: T6079: Increment Kea migrator versions | sarthurdev | |
2024-02-28 | configdep: T5660: remove global redundancies under vyos-configd | John Estabrook | |
2024-02-28 | banner: T6077: implement ASCII contest winner default logo | Christian Breunig | |
Implement VyOS ASCII art contest winners logo as the default for our MOTD | |||
2024-02-28 | Merge pull request #3055 from sarthurdev/T6073 | Christian Breunig | |
vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required |