vyos-1x.git/data/templates, branch currentVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current2025-07-02T17:48:17+00:00wan-load-balancing: T7584: Default SNAT behaviour fixed to effect load balanced packets only2025-07-02T17:48:17+00:00Abhishek Safuiabhishek.safui@cdot.in2025-07-02T17:48:17+00:00urn:sha1:4374a27342e58fea1ac5928805e688d6d127fd04
Matched the out iface name in wan load balancer default SNAT rule
so that SNAT is performed to load balanced packets only
vrf: T7544: Ensure correct quoting for VRF ifnames in nftables2025-06-26T14:23:13+00:00Andrew Toppandrewt@telekinetica.net2025-06-26T14:23:13+00:00urn:sha1:c741a290261eb53d5f9ca4849109f19ced8fda9f
* For VRF create/delete:
* Simple dquoting, as before, was parsed away by the shell
* Just escaping the double quotes could cause issues with the shell mangling
VRF names (however unlikely)
* Wrapping original quotes in shell-escaped single quotes is a quick & easy
way to guard against both improper shell parsing and string names being
taken as nft keywords.
* Firewall configuration:
* Firewall "interface name" rules support VRF ifnames and used them unquoted,
fixed for nft_rule template tags (parse_rule)
* Went through and quoted all iif/oifname usage by zones and interface
groups. VRF ifnames weren't available for all cases, but there is
no harm in completeness.
* For this, also created a simple quoted_join template filter to replace
any use of |join(',')
* PBR calls nft but doesn't mind the "vni" name - table IDs used instead
I may have missed some niche nft use-cases that would be exposed to this problem.
T7531: Add FRR no bgp ipv6-auto-ra option2025-06-20T08:59:24+00:00factor2431factor2431@outlook.com2025-06-20T08:59:24+00:00urn:sha1:64b15157fa2c95558f15778671e5e644db97f28dMerge pull request #4558 from natali-rs1985/T69512025-06-19T14:44:46+00:00Daniil Baturindaniil@vyos.io2025-06-19T14:44:46+00:00urn:sha1:79dec52ed4c3a6c035204fad28b9229f709c87c4
firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always acceptfirewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept2025-06-17T15:16:51+00:00Nataliia Solomkonatalirs1985@gmail.com2025-06-13T09:20:40+00:00urn:sha1:8dbc3c5e67cc1fd043a78dd3446a1a733ebd814fcontainer: T7473: fix show/monitor container log failed when log-driver is journald2025-06-17T15:02:07+00:00opswillwill@nixops.org2025-06-17T15:02:07+00:00urn:sha1:5ae3924234f9ffaa2ffda7e9fc52c2b3518a85e2Merge pull request #4497 from yzguy/T74322025-06-12T14:20:21+00:00Daniil Baturindaniil@vyos.io2025-06-12T14:20:21+00:00urn:sha1:dcba87b2394b789c335b44856a8ae7bfea05353c
T7432: RPKI VRF SupportMerge pull request #4536 from ig0rb/fix/T7510-ospf-nssa-translation-error2025-06-10T14:52:07+00:00Daniil Baturindaniil@vyos.io2025-06-10T14:52:07+00:00urn:sha1:a3b5108391bc457e741a21ed0121af52928489f1
T7510: ospfd.frr.j2 ospf nssa translation error - fix templateMerge pull request #4548 from c-po/T7202-conntrack2025-06-09T11:11:38+00:00Daniil Baturindaniil@vyos.io2025-06-09T11:11:38+00:00urn:sha1:34b07a49c052631e58401fd06c218701ad36d0ce
conntrack: T7208: nf_conntrack_buckets defaults and behaviorMerge pull request #4544 from opswill/firewall-feature2025-06-09T08:28:46+00:00Viacheslav Hletenkov.gletenko@vyos.io2025-06-09T08:28:46+00:00urn:sha1:6c8054a9ad223de9aba3646ef8a041c1f8f16839
T7523: firewall: Accepting invalid traffic for pppoe discovery and wol