VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=current 2025-06-19T14:44:46+00:00 2025-06-19T14:44:46+00:00 Daniil Baturin daniil@vyos.io 2025-06-19T14:44:46+00:00 urn:sha1:79dec52ed4c3a6c035204fad28b9229f709c87c4 firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept 2025-06-17T15:16:51+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-06-13T09:20:40+00:00 urn:sha1:8dbc3c5e67cc1fd043a78dd3446a1a733ebd814f 2025-06-17T15:02:07+00:00 opswill will@nixops.org 2025-06-17T15:02:07+00:00 urn:sha1:5ae3924234f9ffaa2ffda7e9fc52c2b3518a85e2 2025-06-07T08:55:24+00:00 Christian Breunig christian@breunig.cc 2025-06-07T07:15:30+00:00 urn:sha1:08421b277b1f460ebc51673571bab975aece2215 Previously, we used a lower limit of 1 and a default value of 32768 for the nf_conntrack_buckets (conntrack hash-size) sysctl option. However, the Linux kernel enforces an internal minimum of 1024. A configuration migrator will now adjust the lower limit to 1024 if necessary. The former default value of 32768 was passed as a kernel module option, which only took effect after the second system reboot. This was due to the option being rendered but not applied during the first boot. This behavior has been changed so that the value is now configurable at runtime and takes effect immediately. Additionally, since VyOS 1.4 increased the hardware requirements to 4GB of RAM, we now align the default value of nf_conntrack_buckets with the kernel's default for systems with more than 1GB of RAM to 65536 entries. Previously, we only supported half that amount. 2025-05-08T20:51:39+00:00 Christian Breunig christian@breunig.cc 2025-05-05T18:52:57+00:00 urn:sha1:876786654552b40180a34b73c6eb327722d09e15 VyOS 1.4.1 implemented support for logging facilities for HAProxy. The facilities got included from the syslog XML definition, which also added "virtual" or non existing facilities in HAProxy, namely: all, authpriv and mark. If any of the above facilities is set, HAProxy will not start. The XML definition for syslog also came with an arbitrary log-level "all" that is also unsupported in HAProxy. This commit adds a migration script removing the illegal CLI nodes. 2025-04-15T14:51:25+00:00 Daniil Baturin daniil@vyos.io 2025-04-15T14:51:25+00:00 urn:sha1:2f54cbc0504a20424274e45b9210467d33acf919 ids: T7241: remove Fastnetmon from the base system 2025-04-14T15:49:52+00:00 Daniil Baturin daniil@baturin.org 2025-04-14T10:56:36+00:00 urn:sha1:5797e2c0f489272f2ff32b3884ea756f306b50e4 It will eventually be moved to an addon 2025-02-27T15:07:39+00:00 Christian Breunig christian@breunig.cc 2025-02-27T15:07:39+00:00 urn:sha1:467d4d6888542c45307fcd1d177ccbd18128f597 policy: T7116: Remove unsupported use of BGP community "internet" 2025-02-26T22:11:35+00:00 Simon 965089+sarthurdev@users.noreply.github.com 2025-02-26T22:11:35+00:00 urn:sha1:92ad401f0b7459fa3c50092a1bdd8255946e5661 * wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function 2025-02-26T12:20:41+00:00 Andrew Topp andrewt@telekinetica.net 2025-02-26T12:20:41+00:00 urn:sha1:ab9213910aef95161d365e046d13cdf1b79738d9 This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4.