VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2026-06-29T15:10:13+00:00 2026-06-29T15:10:13+00:00 Christian Breunig christian@breunig.cc 2026-06-25T20:13:11+00:00 urn:sha1:581cbbad5094e1b6cb55d5cfa3954ea2c9c94a70 2026-06-29T15:10:13+00:00 Christian Breunig christian@breunig.cc 2026-06-25T20:10:04+00:00 urn:sha1:1ba7fc62556ff3ef99280d876c92e38d24dc0bfc Add input-queue-limit and output-queue-limit CLI nodes to expose global FRR "bgp input-queue-limit" and "bgp output-queue-limit" commands via our CLI. Parameters control the maximum number of queued messages for all BGP peers during message parsing. FRR default is 10000 which we honor. Note that this is a global option and can only be set for the global/default BGP instance. 2026-06-25T13:06:05+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-06-24T14:10:45+00:00 urn:sha1:a83edf1a11c86df0a1419930b31544296a7a6e6c 2026-06-20T13:51:25+00:00 Alex Kudentsov 43482574+alexk37@users.noreply.github.com 2026-06-20T13:38:51+00:00 urn:sha1:23649ea9dec442795997aac3da148e3312018d75 VRF route leaking via VPNv4/VPNv6 caused all imported (leaked) routes to be withdrawn and reinstalled on every commit - even commits unrelated to BGP, VRF or routing - briefly blackholing traffic that depends on them. Root cause: the BGP address-family template rendered the route-target using the "route-target vpn ..." alias. FRR accepts that alias on input but its config writer only ever emits the canonical "rt vpn ..." form. frr-reload.py diffs the generated config against FRR's running config line by line and has no normalisation for this, so the route-target lines never matched and were deleted and re-added on every reload. Re-applying the route-target runs FRR's vpn_leak_prechange()/postchange(), a non-atomic withdraw-all then reinstall-all of every leaked route. Emit the canonical "rt vpn" keyword so the rendered config round-trips through frr-reload unchanged. FRR also folds an identical import+export route-target into "both" (an order-sensitive, byte-identical match), so do the same to stay idempotent; reordered or differing lists stay split on both sides. Add test_bgp_33_vpn_route_target_idempotency covering both / identical export+import / asymmetric route-target, reading the generated FRR config (getFRRconfig/vtysh returns FRR's already-canonical form and cannot catch the alias). 2026-06-16T18:24:44+00:00 Christian Breunig christian@breunig.cc 2026-06-16T18:24:44+00:00 urn:sha1:fa853ed8f25b5b9bf396d6e819b2c6259e7f5f42 Replace two-word "can not" / "Can not" with "cannot" across comments, ConfigError messages, CLI help text, and op-mode output. Standard SNMP MIB files under mibs/ are left unchanged. 2026-05-21T13:26:07+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-05-19T17:10:37+00:00 urn:sha1:ff96f5895e87db7fc20cff9960a8cdea42c033d0 2026-05-13T15:03:50+00:00 Robin Christ robinchrist@users.noreply.github.com 2026-05-13T15:03:50+00:00 urn:sha1:69b6be91d0eacfd23feb13f96325923f6e26ed25 2026-05-12T14:41:35+00:00 anderbak bjanderson7583@gmail.com 2026-05-12T14:41:35+00:00 urn:sha1:1dd997d724449e941c6bf42be98529372d9f1530 Co-authored-by: Christian Breunig <christian@breunig.cc> 2026-05-11T09:24:43+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-05-06T08:41:57+00:00 urn:sha1:23a7841901d5b7e46f00c628fc1a0946197b3c5b 2026-04-30T12:25:49+00:00 Cheeze-It 16260577+Cheeze-It@users.noreply.github.com 2026-04-30T12:25:49+00:00 urn:sha1:cf5d2b87e184c50b02638442cbc0691e6433dc4c * sr-te: T6750: Adding Segment Routing Traffic Engineering portion of FRR --------- Co-authored-by: Cheeze_It <none@none.com> Co-authored-by: Christian Breunig <christian@breunig.cc>