vyos-1x.git/interface-definitions/include/interface/ipv6-options.xml.i, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2025-04-23T18:17:06+00:00interface: T4627: not every interface type supports IPv6 interface-identifiers2025-04-23T18:17:06+00:00Christian Breunigchristian@breunig.cc2025-04-23T18:14:56+00:00urn:sha1:d0a20884614e773b074c39cd496717440faa89c1
Turns out commit b124f0b3b ("interface: T4627: support IPv6 Interface
Identifier (token) for SLAAC") uncovered a wrong assumption in VyOS that every
interface type in use always supports SLAAC and IPv6-ND (neighbor discovery).
This is not true for WireGuard, Tunnel and VTI interfaces, thus do not provide
that CLI option. In addition SLAAC support should be removed for those interface
types in a future PR.
T6258: Add sysctl base-reachable-time for IPv62024-04-25T08:23:14+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-04-25T08:23:14+00:00urn:sha1:0bf4b570fe2d239b9fbabd3ae801ad3f04a06bde
Add abiilty to change `base_reachable_time_ms` option
/proc/sys/net/ipv6/neigh/{ifname}/base_reachable_time_ms
interface: T3509: Add per-interface IPv6 source validation2023-08-25T14:51:49+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-08-25T11:54:47+00:00urn:sha1:b6f742716da5f89c7f3f3501220e0f3ae1df45d8ipv6: T5464: add support for per-interface dad (duplicate address detection) setting2023-08-11T21:01:21+00:00Christian Breunigchristian@breunig.cc2023-08-11T20:25:53+00:00urn:sha1:073961a5c833ca820a197c3635138b14e2b16cd7xml: interfaces: use one common building block for "disable-forwarding"2021-08-21T13:26:35+00:00Christian Poessingerchristian@poessinger.com2021-08-19T18:24:39+00:00urn:sha1:0e751221d0832acac807e7f0bc97d7bb31230c3a
Both building blocks only differed in the help text, so use IP for both
IPv4 and IPv6.
interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" level2021-08-21T13:26:35+00:00Christian Poessingerchristian@poessinger.com2021-08-19T16:14:13+00:00urn:sha1:b7bfcb6ef0e712bb8c39241051e716a833b2ffe8
Getting rid of "set firewall options" and move it from:
set firewall options interface ethX adjust-mss 1400
set firewall options interface ethX adjust-mss6 1400
to:
set interfaces ethernet ethX ip adjust-mss 1400
set interfaces ethernet ethX ipv6 adjust-mss 1400
In addition add an extra option called clamp-mss-to-pmtu instead of a value.
xml: remove superfluous "interface" prefix from interface includes2021-08-20T15:17:58+00:00Christian Poessingerchristian@poessinger.com2021-08-19T11:07:18+00:00urn:sha1:0a8a0188033d6b27c521f082fdddae9873dd5d3d