Age | Commit message (Collapse) | Author |
|
container: T5955: set uid/gid for container (backport #1261)
|
|
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
|
|
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
|
|
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
|
|
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865
(cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
|
|
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
|
|
configuration example is provided.
(cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
|
|
Updated DPD and close-action values in IPSEC (backport #1249)
|
|
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
|
|
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.
(cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
|
|
(cherry picked from commit 2443622964b476bfbcf88b05322fd27b55406fad)
|
|
Update notice telling users how to exclude passive interface.
|
|
(cherry picked from commit cecc0f3c32afb455ddb006b35faf343877061443)
|
|
(cherry picked from commit 8e2932ebb426534b6727836c51395077ed8ed490)
|
|
(cherry picked from commit 1b1cc7986813c65b608ace38bf497622eb74f1cf)
|
|
Updated docs for influxdb
(cherry picked from commit 8628ad46eb25d5e165cf2e03f52c2b7c7bc7b6ca)
|
|
features
(cherry picked from commit 9ca5e9dd89eabda161d974e7359ab2716fe56464)
|
|
Changing CLI to create client address pool
(cherry picked from commit 1096cbcf95f96334d773ab98cce9d26d311f9e51)
|
|
Documentation pdate for https://github.com/vyos/vyos-1x/pull/2718
(cherry picked from commit 05215848a5df37a4cc4075a58b05f19871a56306)
|
|
(cherry picked from commit 0893ca769b1796d2d61dc26a0c0c13d1eda56f5e)
|
|
|
|
Add an example of online checking for updates
```
set system update-check auto-check
set system update-check url <url>
```
(cherry picked from commit fd3073eef7bcbd64112e0581ba10afb58100b30d)
|
|
(cherry picked from commit 0ed155b05523c755a9eb777c49a3a0fd4b56149e)
|
|
(cherry picked from commit 4aeedc96c2168bd6e19c2be7d30584c8a9fa6ab7)
|
|
Add a simple description and example of NAT64
(cherry picked from commit 9a049c007001aaa463ba51f82ecf2fb7ed1e4f20)
|
|
Added set metric (MED) to (+/-)rtt in route-map
(cherry picked from commit a78504e95cac31f84714268441781ed0cc8ff578)
|
|
(cherry picked from commit 0429c317884d8951cbf2e432981edeacd426f3ed)
|
|
Options
sagitta/quick-start.html:
Fix to replace "interface-name" with "name" for rule 30 and 40 in code snippet to correct syntax error.
sagitta/configuration/firewall/global-options.html:
Fix to improve correctness is use of English language from "conform" to "confirming"
On branch sagitta_giggum
Changes to be committed:
modified: quick-start.rst
modified: configuration/firewall/global-options.rst
|
|
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
|
|
|
|
|
|
(cherry picked from commit c8f8c2d10cca97bbc459c5a3565d4230e9fe61df)
|
|
(cherry picked from commit 2e3510f9886a5512b320267f21035d291c2fb3f5)
|
|
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn
backend server.
https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests.
While debugging those failing, it was uncovered, that uvicorn only listens on
IPv4 connections
vyos@vyos# netstat -tulnp | grep 8080
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN -
As the CLI already has an option to move the API communication from an IP to a
UNIX domain socket, the best idea is to make this the default way of
communication, as we never directly talk to the API server but rather use the
NGINX reverse proxy.
(cherry picked from commit 12ffd3e638dc00ae672b47c9dd2a64e0e68d0c01)
|
|
(cherry picked from commit 2de650e60c84c70e26cc02341c07fe84e6d1c1fa)
|
|
(cherry picked from commit 6b2d50c755a56ae62620961131bbaebefe110acc)
|
|
Added:
show log ssh
show log ssh dynamic-protection
show ssh fingerprints
show ssh fingerprints ascii
show ssh dynamic-protection
(cherry picked from commit c9a06800f999f6e68883ec7d3ae7fd97e3b6e4d5)
|
|
(cherry picked from commit 8c838d7ca979a0272052f8eb1dd41fa35645df1d)
|
|
(cherry picked from commit 11cb9979e0087c9742ce80d11dd06318bc533917)
|
|
(cherry picked from commit 8a5804881c580f2c2ff25b25b9c4a5abea9ca228)
|
|
(cherry picked from commit 1ddce99cc861a3e7de23ef218baeb435efa81880)
|
|
(cherry picked from commit 7090b69845a8d304d1608e18efef383082114f33)
|
|
|
|
openvpn: Add peer fingerprint mode
|
|
|
|
Firewall refactor: add visible note in firewall docs:
|
|
|
|
|
|
config blueprint zone-policy
|
|
for changes done for zone based firewall
|