vyos-1x.git/interface-definitions/include/policy, branch c-po-patch-1VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=c-po-patch-12024-10-03T14:51:55+00:00T6760: firewall: add packet modifications existing in policy route to regular firewall ruleset.2024-10-03T14:51:55+00:00Nicolas Fortnicolasfort1988@gmail.com2024-10-03T14:51:55+00:00urn:sha1:e846d2c1500df83742eb803684980396857cc0f1T4072: firewall: extend firewall bridge capabilities, in order to include new chains, priorities, and firewall groups2024-08-01T16:25:31+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-24T14:08:19+00:00urn:sha1:20551379e8e2b4b6e342b39ea67738876e559bbfpbr: T6430: Allow forwarding into VRFs by name as well as route table IDs2024-07-30T03:48:18+00:00Andrew Toppatopp@aus-it.com.au2024-07-30T03:48:18+00:00urn:sha1:adeac78ed6585b16102bd82581b54c75819714b2
* PBR can only target table IDs up to 200 and the previous PR to extend the
range was rejected
* PBR with this PR can now also target VRFs directly by name, working around
targeting problems for VRF table IDs outside the overlapping 100-200 range
* Validation ensures rules can't target both a table ID and a VRF name
(internally they are handled the same)
* Added a simple accessor (get_vrf_table_id) for runtime mapping a VRF name
to table ID, based on vyos.ifconfig.interface._set_vrf_ct_zone().
It does not replace that usage, as it deliberately does not handle non-VRF
interface lookups (would fail with a KeyError).
* Added route table ID lookup dict, global route table and VRF table defs
to vyos.defaults. Table ID references have been updated in code touched
by this PR.
* Added a simple smoketest to validate 'set vrf' usage in PBR rules
T3900: add support for raw table in firewall.2024-05-15T17:09:16+00:00Nicolas Fortnicolasfort1988@gmail.com2024-05-15T17:09:16+00:00urn:sha1:6871c5541c1962e63d7a9b75d2bb43df2a8d372bgit: T5803: Adjust git configuration for baseline defaults2023-12-08T19:26:26+00:00Indrajit Raychaudhuriirc@indrajit.com2023-12-05T22:30:17+00:00urn:sha1:c30002208d392177cb1ffc1a5c714f7ad6d573b6
Apply baseline defaults for `.gitattributes` and `.vscode/settings.json`
for improved developer experience.
The `.gitattrbutes` settings are based on:
Git documentation (https://git-scm.com/docs/gitattributes#_effects)
GitHub documentation (https://docs.github.com/en/get-started/getting-started-with-git/configuring-git-to-handle-line-endings)
Community templates (https://github.com/gitattributes/gitattributes)
Since editor-agnostic line-ending specific settings are applied to
`.gitattributes`, they can be removed from `.vscode/settings.json`.
The global VSCode defaults have also been removed to avoid duplication.
xml: T5738: re-use "disable" building block2023-11-16T19:07:12+00:00Christian Breunigchristian@breunig.cc2023-11-16T19:04:27+00:00urn:sha1:019723aaa4217403f1fcbcd636f573ea403f909cpim6: T5733: add missing FRR PIM6 related features2023-11-13T21:23:09+00:00Christian Breunigchristian@breunig.cc2023-11-13T21:19:44+00:00urn:sha1:403d2ffd6e46cb082b1d16ddf515e1784bee968cpim: T5733: fix CLI level of global PIM commands2023-11-13T21:19:32+00:00Christian Breunigchristian@breunig.cc2023-11-13T20:36:31+00:00urn:sha1:dd13213ae94f071bc30cc17f5fabef02fbf95939T5729: firewall: switch to valueless in order to remove unnecessary <enable|disable> commands; log and state moved to new syntax.2023-11-10T19:26:35+00:00Nicolas Fortnicolasfort1988@gmail.com2023-11-10T19:26:35+00:00urn:sha1:c4409d6a4e11bf2acc7b5b96888e2c471c4559e5Merge pull request #2325 from sever-sever/T51652023-09-30T06:34:00+00:00Christian Breunigchristian@breunig.cc2023-09-30T06:34:00+00:00urn:sha1:179703886441ef5508a63ba6d9d4c11b050d3ff8
T5165: Migrate policy local-route rule x destination to address