Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-05-31 | policy: T3976: fix SyntaxError: invalid non-printable character | Christian Poessinger | |
2022-05-31 | IPv6: T3976: add prefix-list and access-list option from ipv6 route-map | fett0 | |
2022-05-31 | pki: T3642: Enable `generate pki openvpn ...` to install into config | sarthurdev | |
2022-05-30 | pki: T3642: Add ability to import files into PKi configuration | sarthurdev | |
2022-05-29 | eigrp: T2472: add basic template rendering and FRR communication | Christian Poessinger | |
2022-05-29 | rip: T4448: remove default version for RIP | Christian Poessinger | |
Commit f9e38622 ("rip: T4448: add support to set protocol version on an interface level") also added the versionspecified on a per interface level. the RIp version carried a default value of 2 which makes RIPv1 and RIPv2 no longer working which is dthe default for FRR. Remove the default "2" from the RIP version specifier to make this behavior work again. | |||
2022-05-29 | eigrp: T2472: add initial python helper | Christian Poessinger | |
2022-05-28 | rip: T4448: add support to set protocol version on an interface level | Christian Poessinger | |
2022-05-28 | xml: rip: T4448: rename include files to match schema | Christian Poessinger | |
2022-05-25 | Merge pull request #1333 from sever-sever/T4442 | John Estabrook | |
http-api: T4442: Add action reset | |||
2022-05-26 | http-api: T4442: Add action reset | Viacheslav Hletenko | |
Add action 'reset' (op-mode) for HTTP-API http://localhost/reset curl --unix-socket /run/api.sock -X POST -Fkey=mykey \ -Fdata='{"op": "reset", "path": ["ip", "bgp", "192.0.2.14"]}' \ http://localhost/reset | |||
2022-05-25 | configtest: T4382: missing block in migration script vrf/0-to-1 | John Estabrook | |
The config vrf-basic reveals a missing block in the migration script vrf/0-to-1, moving 'next-hop-vrf' to 'vrf'. As this only exists in Sagitta, modify script 0-to-1. Also, fix the 'system nt' typo seen in vrf-ospf. | |||
2022-05-25 | configtest: T4382: fix missing delete of 'ipsec-interfaces' node | John Estabrook | |
Migration of bgp-azure-ipsec-gateway and bgp_dmvpn_hub reveals that migration script ipsec/5-to-6 leaves the empty node 'ipsec-interfaces' after moving the interface; fix the migration script, as it is not yet in 1.3. | |||
2022-05-25 | Merge pull request #1319 from goodNETnick/ocserv_sh_otp_key | Viacheslav Hletenko | |
ocserv: T4420: show configured 2FA OTP key | |||
2022-05-25 | Merge pull request #1088 from zdc/T4020-sagitta | Daniil Baturin | |
FRR: T4020: Added CLI options for FRR daemons | |||
2022-05-21 | flow-accounting: T4099: "source-address" must exist locally | Christian Poessinger | |
2022-05-21 | nhrp: T4353: use ".service" suffix on systemd name | Christian Poessinger | |
2022-05-21 | flow-accounting: T4437: also install rule to IPv6 VYOS_CT_PREROUTING_HOOK | Christian Poessinger | |
2022-05-20 | Merge pull request #1317 from sever-sever/T4418 | Christian Poessinger | |
monitoring: T4418: Add output plugin azure-data-explorer | |||
2022-05-20 | monitoring: T4418: Add output plugin azure-data-explorer | Viacheslav Hletenko | |
Add output telegraf Plugin Azure Data Explorer set service monitoring telegraf azure-data-explorer authentication client-id 'x' set service monitoring telegraf azure-data-explorer authentication client-secret 'x' set service monitoring telegraf azure-data-explorer authentication tenant-id 'x' set service monitoring telegraf azure-data-explorer database 'x' set service monitoring telegraf azure-data-explorer group-metrics 'single-table' set service monitoring telegraf azure-data-explorer url 'http://localhost.loc' | |||
2022-05-19 | dmvpn: nhrp: T4434: secret length can not exceed 8 characters | Christian Poessinger | |
2022-05-19 | T4432: display load averages normalized for the number of CPU cores | Daniil Baturin | |
2022-05-16 | ocserv: T4420: show configured 2FA OTP key | goodNETnick | |
2022-05-13 | Merge pull request #1320 from sever-sever/T4408 | Christian Poessinger | |
sshguard: T4408: Add service ssh dynamic-protection | |||
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-12 | conntrack: T3535: use "reload-or-restart" from systemd | Christian Poessinger | |
2022-05-12 | vrrp: T3944: use "reload-or-restart" over individual code paths | Christian Poessinger | |
systemd has its internal reload or restart logic - we do not need to programm it on our own. | |||
2022-05-12 | container: T2216: use warning over exception when container image does not exist | Christian Poessinger | |
2022-05-12 | Revert "NHRP : T4399: fix issues restart nhrp when add or del tunnel" | Viacheslav Hletenko | |
This reverts commit d1455f936ca721633fcc04d5c84169b4ccf2f447. New spokes can't register on hub with 'reload-or-restart' option And requires option 'restart' for opennhrp.service | |||
2022-05-10 | T4405: Fix administrative distance of DHCP routes | Dmitri Toubelis | |
- Default dhclient script only uses value of `$IF_MERIC` envvar for default route recived via `router` option. - This variable has no effect on rotes received via `rfc3442-classless-static-routes` option - Considering that Vyos overrrides `ip` command originating from `dhclient` this can be easily fixed in `iptovtysh()` function by using the `$IF_METRIC` envvar directly in the dhclient hook. (cherry picked from commit 0c00e7bf8b6e68814607fde4ff0cd70ce9f4b486) | |||
2022-05-08 | container: op-mode: T3852: use XML inline podman commands | Christian Poessinger | |
Reduce bloat of containers_op.py wrapper script. All commands can be passed directly to podman via the XML script. This also makes the execution faster, as no Python environment needs to be build up. | |||
2022-05-07 | vrf: T4419: support to disable IP forwarding within a given VRF | Christian Poessinger | |
2022-05-06 | bgp: T4385: verify() peer-group in interface based neighbors | Christian Poessinger | |
2022-05-06 | openvpn: T4381: Add tunnel ip column for status command | srividya0208 | |
Added the tunnel ip column to see the assigned ip address in server mode | |||
2022-05-05 | op-mode: T4416: Rewrite 'traceroute' op-command and expand available options ↵ | 3roin | |
using python | |||
2022-05-05 | Merge pull request #1312 from sever-sever/T4410 | Christian Poessinger | |
monitoring: T4410: Add telegraf output Plugin http for Splunk | |||
2022-05-05 | policy: T4414: add support for route-map "as-path prepend last-as x" | Christian Poessinger | |
2022-05-05 | monitoring: T4410: Add telegraf output Plugin http for Splunk | Viacheslav Hletenko | |
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x' | |||
2022-05-03 | monitoring: T4315: Add telegraf output plugin prometheus-client | Viacheslav Hletenko | |
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client | |||
2022-05-01 | accel-ppp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | http: api: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-logs: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | openconnect: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | syslog: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | igmp-proxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | pppoe: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | nhrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: zone: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lcd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |