summaryrefslogtreecommitdiff
path: root/docs/configuration
AgeCommit message (Collapse)Author
2024-02-02Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261Robert Göhler
container: T5955: set uid/gid for container (backport #1261)
2024-02-02Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250Robert Göhler
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
2024-02-02container: T5955: set uid/gid for containerPiotr Maksymiuk
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
2024-02-02T5979: add configurable kernel boot option 'disable-mitigations'Christian Breunig
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
2024-02-02Changed IPv6 pool documentation in accel-ppp servicesaapostoliuk
Changed IPv6 pool documentation in accel-ppp services to named IPv6 pools. https://vyos.dev/T5865 (cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
2024-02-01dns forwarding: T5687: Implement ECS settings for PowerDNS recursorkhramshinr
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
2024-01-30Adding first documentation regarding IDS and FastNetMon. Also a brief ↵Nicolas Fort
configuration example is provided. (cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
2024-01-25Merge pull request #1253 from vyos/mergify/bp/sagitta/pr-1249Robert Göhler
Updated DPD and close-action values in IPSEC (backport #1249)
2024-01-23bfd: T5967: add minimum-ttl optionChristian Breunig
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
2024-01-22Updated DPD and close-action values in IPSECaapostoliuk
Changed from 'hold' to 'trap' and from 'restart' to 'start' in close-action. Changed from 'hold' to 'trap' in DPD action. (cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
2024-01-21ntp: T5692: add support to configure leap second behaviorChristian Breunig
(cherry picked from commit 2443622964b476bfbcf88b05322fd27b55406fad)
2024-01-18Update passive-interface default exclusion noticestrifel
Update notice telling users how to exclude passive interface.
2024-01-11https: add latest CLI changesChristian Breunig
(cherry picked from commit cecc0f3c32afb455ddb006b35faf343877061443)
2024-01-11pki: T5886: add support for ACME protocol (LetsEncrypt)Christian Breunig
(cherry picked from commit 8e2932ebb426534b6727836c51395077ed8ed490)
2024-01-11added new NPTv6/DHCPv6 exampleTrae Santiago
(cherry picked from commit 1b1cc7986813c65b608ace38bf497622eb74f1cf)
2024-01-08Update monitoring.rstBubun Das
Updated docs for influxdb (cherry picked from commit 8628ad46eb25d5e165cf2e03f52c2b7c7bc7b6ca)
2024-01-06dns: T5900: add dont-throttle-netmasks and serve-stale-extensions powerdns ↵Christian Breunig
features (cherry picked from commit 9ca5e9dd89eabda161d974e7359ab2716fe56464)
2023-12-30accel-ppp: T5688: Changing CLI to create client address poolaapostoliuk
Changing CLI to create client address pool (cherry picked from commit 1096cbcf95f96334d773ab98cce9d26d311f9e51)
2023-12-30system: T5877: Shorten system domain-search config pathChristian Breunig
Documentation pdate for https://github.com/vyos/vyos-1x/pull/2718 (cherry picked from commit 05215848a5df37a4cc4075a58b05f19871a56306)
2023-12-28dhcp-server: update docs for op-mode command <show dhcp server leases>Nicolas Fort
(cherry picked from commit 0893ca769b1796d2d61dc26a0c0c13d1eda56f5e)
2023-12-27firewall: sync to master branchChristian Breunig
2023-12-26Add system update-check exampleViacheslav Hletenko
Add an example of online checking for updates ``` set system update-check auto-check set system update-check url <url> ``` (cherry picked from commit fd3073eef7bcbd64112e0581ba10afb58100b30d)
2023-12-25snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp"Christian Breunig
(cherry picked from commit 0ed155b05523c755a9eb777c49a3a0fd4b56149e)
2023-12-15frr: T4020: document multiple per daemon config knobsChristian Breunig
(cherry picked from commit 4aeedc96c2168bd6e19c2be7d30584c8a9fa6ab7)
2023-12-11NAT64: Add example of configuration for NAT64Viacheslav Hletenko
Add a simple description and example of NAT64 (cherry picked from commit 9a049c007001aaa463ba51f82ecf2fb7ed1e4f20)
2023-12-08policy: T4704: Added set metric (MED) to (+/-)rtt in route-mapaapostoliuk
Added set metric (MED) to (+/-)rtt in route-map (cherry picked from commit a78504e95cac31f84714268441781ed0cc8ff578)
2023-12-02vpn: update site2site VTI exampleChristian Breunig
(cherry picked from commit 0429c317884d8951cbf2e432981edeacd426f3ed)
2023-11-29docs: fix to code snippet in Quick Start/Firewall and typo Firewall/Global ↵Giggum
Options sagitta/quick-start.html: Fix to replace "interface-name" with "name" for rule 30 and 40 in code snippet to correct syntax error. sagitta/configuration/firewall/global-options.html: Fix to improve correctness is use of English language from "conform" to "confirming" On branch sagitta_giggum Changes to be committed: modified: quick-start.rst modified: configuration/firewall/global-options.rst
2023-11-24ipsec: gre: use dummy interface in example over loopbackChristian Breunig
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
2023-11-24fix some build warningsrebortg
2023-11-23backport Firewall docs from masterrebortg
2023-11-22vxlan: T5753: add support for VNI filteringChristian Breunig
(cherry picked from commit c8f8c2d10cca97bbc459c5a3565d4230e9fe61df)
2023-11-22http: T5762: rename "virtual-host listen-port" -> "virtual-host port"Christian Breunig
(cherry picked from commit 2e3510f9886a5512b320267f21035d291c2fb3f5)
2023-11-21http: T5762: api: make API socket backend communication the one and only defaultChristian Breunig
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn backend server. https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests. While debugging those failing, it was uncovered, that uvicorn only listens on IPv4 connections vyos@vyos# netstat -tulnp | grep 8080 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN - As the CLI already has an option to move the API communication from an IP to a UNIX domain socket, the best idea is to make this the default way of communication, as we never directly talk to the API server but rather use the NGINX reverse proxy. (cherry picked from commit 12ffd3e638dc00ae672b47c9dd2a64e0e68d0c01)
2023-11-16pim: igmp: T5733: adjust to latest CLI syntaxChristian Breunig
(cherry picked from commit 2de650e60c84c70e26cc02341c07fe84e6d1c1fa)
2023-11-07Add "monitor log ssh" and "monitor log ssh dynamic-protection"JeffWDH
(cherry picked from commit 6b2d50c755a56ae62620961131bbaebefe110acc)
2023-11-07Update ssh.rstJeffWDH
Added: show log ssh show log ssh dynamic-protection show ssh fingerprints show ssh fingerprints ascii show ssh dynamic-protection (cherry picked from commit c9a06800f999f6e68883ec7d3ae7fd97e3b6e4d5)
2023-10-31T5699: vxlan: migrate "external" CLI know to "parameters external"Christian Breunig
(cherry picked from commit 8c838d7ca979a0272052f8eb1dd41fa35645df1d)
2023-10-31vxlan: T5668: add CLI knob to enable ARP/ND suppressionChristian Breunig
(cherry picked from commit 11cb9979e0087c9742ce80d11dd06318bc533917)
2023-10-28vxlan: add missing "parameters nolearning" helpChristian Breunig
(cherry picked from commit 8a5804881c580f2c2ff25b25b9c4a5abea9ca228)
2023-10-17wireless: extend example with missing country-codeChristian Breunig
(cherry picked from commit 1ddce99cc861a3e7de23ef218baeb435efa81880)
2023-10-08T5630: pppoe: allow to specify MRU in addition to already configurable MTUChristian Breunig
(cherry picked from commit 7090b69845a8d304d1608e18efef383082114f33)
2023-09-13vrf: add NAT exampleChristian Breunig
2023-09-13Merge pull request #1075 from dmbaturin/T5270-openvpn-peer-fingerprintJohn Estabrook
openvpn: Add peer fingerprint mode
2023-09-13openvpn: Add peer fingerprint modeDaniil Baturin
2023-09-11Merge pull request #1076 from nicolas-fort/Firewall_new_cli_updateRobert Göhler
Firewall refactor: add visible note in firewall docs:
2023-09-10T5518: Document `protocols pim6`Yuxiang Zhu
2023-09-09vxlan: T3700: support VLAN tunnel mapping of VLAN aware bridgesChristian Breunig
2023-09-08Firewall refactor: add visible note in firewall docs: zone, quick-start and ↵Nicolas Fort
config blueprint zone-policy
2023-09-04correction of ipsec compression syntax and added a referencesrividya0208
for changes done for zone based firewall