<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/interface-definitions/firewall-options.xml.in, branch feature/T9082-codeql-cpp</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2021-08-21T13:26:35+00:00</updated>
<entry>
<title>interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" level</title>
<updated>2021-08-21T13:26:35+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-08-19T16:14:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=b7bfcb6ef0e712bb8c39241051e716a833b2ffe8'/>
<id>urn:sha1:b7bfcb6ef0e712bb8c39241051e716a833b2ffe8</id>
<content type='text'>
Getting rid of "set firewall options" and move it from:

set firewall options interface ethX adjust-mss 1400
set firewall options interface ethX adjust-mss6 1400

to:

set interfaces ethernet ethX ip adjust-mss 1400
set interfaces ethernet ethX ipv6 adjust-mss 1400

In addition add an extra option called clamp-mss-to-pmtu instead of a value.
</content>
</entry>
<entry>
<title>xml: include: provide generic include for disable node</title>
<updated>2021-01-07T16:25:58+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-01-07T16:25:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=582f52764afce78b9be0d95b88f6dc8d0bff9690'/>
<id>urn:sha1:582f52764afce78b9be0d95b88f6dc8d0bff9690</id>
<content type='text'>
</content>
</entry>
<entry>
<title>firewall: T1843: no need to call "sudo" for owner</title>
<updated>2020-06-01T09:37:14+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2020-06-01T09:37:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=c7cacd6382ca8b71ca166a0c7a89ebf19176c756'/>
<id>urn:sha1:c7cacd6382ca8b71ca166a0c7a89ebf19176c756</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T1843: run interface-definitions though GCC preprocessor</title>
<updated>2019-12-06T19:58:56+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2019-12-03T21:01:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=0d4d4dd840e06c18250d73f27de61261ff141944'/>
<id>urn:sha1:0d4d4dd840e06c18250d73f27de61261ff141944</id>
<content type='text'>
A lot of XML code is duplicated (VLAN, interface address) for instance. Such
XML definitions should be moved to feature.xml.i files and then just pulled in
via GCC preprocessor #include definition in e.g. bond or ethernet definitions.

This will give us the ability to single-source repeating node definitions as:
* Interface Address
* Interface Description
* Interface Disable
* VLAN (both vif-s and vif-c)

The .in suffix of the interface-definitions is a marker that those files are
input files to the GCC preprocessor. They will be rendered into proper XML
files in the build directory.

Some node definitions have been reworder to remove escaped double quote
occurances which would have been warned about by the GCC preprocessor.
</content>
</entry>
</feed>
