summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-04-22Merge pull request #4419 from sskaje/T5636HEADcurrentDaniil Baturin
geoip: T5636: Add geoip for policy route/route6
2025-04-22Merge pull request #4392 from symysak/T4627Daniil Baturin
interface: T4627: support setting of IPv6 Interface Identifier(Token)
2025-04-22Merge pull request #4444 from l0crian1/T7322-fix-allowed-vlanDaniil Baturin
bridge: T7322: fix slow performance of allowed vlan
2025-04-22Merge pull request #4466 from aapostoliuk/T7383-rollingDaniil Baturin
ospf: T7383: Fixed unconfigured redistribution of nhrp into ospf
2025-04-22T6773: RFC-2136 support for Kea DHCP4 server (#4153)Alex Bukharov
2025-04-22ospf: T7383: Fixed unconfigured redistribution of nhrp into ospfaapostoliuk
Fixed unconfigured redistribution of nhrp into ospf.
2025-04-20Merge pull request #4462 from kumvijaya/currentChristian Breunig
T7334: pr mirror trigger workflow added with label creation permission for default github token
2025-04-20T7334: pr mirror trigger workflow added with label creation permission for ↵kumvijaya
default github token
2025-04-18interface: T4627: support IPv6 Interface Identifier (token) for SLAACYoshiaki Suyama
Add common IPv6 CLI option (use ethernet as example): set interfaces ethernet eth0 ipv6 address interface-identifier Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-04-18firewall: T7370: Add conntrack log commands (#4459)l0crian1
* firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * Fix capitalization --------- Co-authored-by: l0crian1 <ryan.claridge13@gmail.com> Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-04-18Merge pull request #4458 from l0crian1/t7369-allow-state-policy-log-opDaniil Baturin
firewall: T7369: Match global state policies in show firewall
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-17Merge pull request #4446 from sever-sever/T7343Daniil Baturin
T7343: IPsec add traffic-selector handling for VTI interfaces
2025-04-17Merge pull request #4454 from c-po/dhcp6c-orderDaniil Baturin
dhcpv6-client: T6113: add proper startup/shutdown order for systemd units
2025-04-17T7343: IPsec add traffic-selector handling for VTI interfacesViacheslav Hletenko
Allow to set traffic-selector for VTI interfaces We can set several local and remote IPv4 and IPv6 prefixes ``` set vpn ipsec site-to-site peer P1 vti traffic-selector local prefix 0.0.0.0/0 set vpn ipsec site-to-site peer P1 vti traffic-selector local prefix :/0 set vpn ipsec site-to-site peer P1 vti traffic-selector remote prefix 192.0.2.0/24 ```
2025-04-17firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-16firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-15dhcpv6-client: T6113: add proper startup/shutdown order for systemd unitsChristian Breunig
When running dhcp6c on top of a PPPoE interface, properly honor the dependency chain with systemd. On shutdown we need to stop the wide-dhcpv6-client prior to shutting down the ppp portion of the interface.
2025-04-15grub: T7327: honor "system option kernel" settings during image upgradeChristian Breunig
When performing an image upgrade and Linux Kernel command-line option that should be passed via GRUB to the Linux Kernel are missing on the first boot. This is because when generating the GRUB command-line via the op-mode scripts the CLI nodes defining the options are not honored. This commit re-implements the code-path in op-mode which generates the strings passed via GRUB to the Linux Kernel command-line. NOTE: If (for a yet unknown reason) a Kernel command-line option string changes during a major - or minor - upgrade of the Linux Kernel, we will need to adapt that logic and possibly call a helper from within the NEW updated image rootfs. Thus we can ship future information back into the past like the "Grays Sports Almanac" from Back to the Future Part II.
2025-04-15op-mode: T7327: drop superfluous "sudo" for "show system image"Christian Breunig
2025-04-15Merge pull request #4412 from sarthurdev/kea_2.6Daniil Baturin
kea: T7281: Add ping-check, use built-in option for classless static routes
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-15Merge pull request #4449 from c-po/netplug-T7353Daniil Baturin
T7353: T7360: netplug: behavior change 1.3.8 -> 1.4 when interface with DHCP address looses carrier
2025-04-15Merge pull request #4445 from jestabro/vyconf-configsessionJohn Estabrook
T7321: Replace legacy operations in configsession.py with vyconf client operations
2025-04-15T7321: update commit hashe for replace configsession legacy operationsJohn Estabrook
2025-04-14netplug: T7360: DHCPv6 address is not cleared when interface goes oper-downChristian Breunig
When an interface goes down - e.g. cable unplugged - the DHCPv6 assigned IPv6 address is not removed from said interface. We should provide the same behavior as with IPv4. IPv6 address should be removed and dhcpv6 client restarted once the interface goes operational up again.
2025-04-14netplug: T7353: bugfix DHCP client not stopped when interface goes downChristian Breunig
The initial rewrite of vyos-netplug-dhcp-client by me tried to outsmart the DHCP client implementation by re-using vyos.ifconfig.Interface(). This added a regression where an interface loosing it's carrier no longer deconfigured it's IP address. This was a change in behavior form VyOS 1.3. In addition a bug is fixed as when a VLANs interface parent looses it's carrier we now also stop the DHCP client process. This script is now back to simply starting/stopping the DHCP client process.
2025-04-14kea: T7310: add support for RFC-5417 (option 138) (#4430)David Vølker
* dhcp-server: T7310: add support for option 138 CAPWAP AC to KEA * kea: T7310: Update data/templates/dhcp-server/kea-dhcp4.conf.j2 Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> * kea: T7310: Update python/vyos/kea.py Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> * kea: T7310: add smoketest for capwap-ac-v4 * kea: T7310: Update python/vyos/kea.py Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> --------- Co-authored-by: David Vølker <davvol@davvol.dk> Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com>
2025-04-14Merge pull request #4440 from sarthurdev/fqdn_cacheSimon
firewall: T7333: Use separate cache keys per inet family
2025-04-14Merge pull request #4450 from c-po/ansi-bold-T7356Viacheslav Hletenko
vyos-router: T7356: unset ANSI bold control character during boot
2025-04-14Merge pull request #4451 from jestabro/check-image-name-reuseDaniil Baturin
T7359: confirm image name is available before proceeding with image installation
2025-04-14ids: T7241: remove Fastnetmon from the base systemDaniil Baturin
It will eventually be moved to an addon
2025-04-14Merge pull request #4448 from c-po/unused-imports-T7355Viacheslav Hletenko
T7355: cleanup unused Python3 imports
2025-04-14kea: T7281: Update smoketest service check, return logs on errorsarthurdev
2025-04-14kea: T7281: No longer uses control agent for HAsarthurdev
2025-04-14kea: T7281: Remove `ping-check` from Kea migratorsarthurdev
2025-04-14kea: T7281: Add support for ping-check in Keasarthurdev
2025-04-14kea: T7281: Use Kea internal option for option 121 routes, remove option 249sarthurdev
Remove legacy windows static route on option 249
2025-04-13T7359: confirm image name is available before acceptingJohn Estabrook
An attempt to reuse the name of an existing installed image should prompt the user to re-enter a name, rather than allowing the installation to fail.
2025-04-13vyos-router: T7356: unset ANSI bold control character during bootChristian Breunig
With the Debian Upgrade from buster to bookworm during the 1.3 -> 1.4 cycle we inherited a non nice looking ANSI bold setting on the terminal. The ANSI bold control character is reset "\033[0m" in this commit.
2025-04-13netplug: T7353: define proper systemd serviceChristian Breunig
Netplug daemon is started last after all interfaces got initialized to properly monitor them for up/down events
2025-04-13T7353: honor service startup order for vyos-grub-updateChristian Breunig
vyos-grub-update service must have been started prior reaching systemd vyos.target.
2025-04-13T7355: cleanup unused Python3 importsChristian Breunig
Some unused import statements sneaked into the codebase. This is about cleaning them up
2025-04-13T7355: check src/services Python scripts for unused importsChristian Breunig
2025-04-11Merge pull request #4443 from c-po/netplug-T7346Christian Breunig
netplug: T7346: only call interface helpers if interface is not removed
2025-04-11T7321: expose vyconfd client functions in configsessionJohn Estabrook
2025-04-11T7321: add decorator to raise named exception on errorJohn Estabrook
2025-04-11T7321: add VyconfSession class and methodsJohn Estabrook
Encapsulation of standard config session functions, to replace legacy versions in configsession.py.
2025-04-11T7321: translate enums by value instead of nameJohn Estabrook
2025-04-11T7321: add append version utilJohn Estabrook
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-17 21:22:31 +0000