vyos-1x.git/interface-definitions/include/version, branch mergify/bp/circinus/pr-4032VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=mergify%2Fbp%2Fcircinus%2Fpr-40322024-08-23T06:18:32+00:00wireless: T6318: move country-code to a system wide configuration2024-08-23T06:18:32+00:00Christian Breunigchristian@breunig.cc2024-06-15T19:40:04+00:00urn:sha1:549a16f5b1437d437ccc873ded500b8cecd03c28
Wireless devices are subject to regulations issued by authorities. For any
given AP or router, there will most likely be no case where one wireless NIC is
located in one country and another wireless NIC in the same device is located
in another country, resulting in different regulatory domains to apply to the
same box.
Currently, wireless regulatory domains in VyOS need to be configured per-NIC:
set interfaces wireless wlan0 country-code us
This leads to several side-effects:
* When operating multiple WiFi NICs, they all can have different regulatory
domains configured which might offend legislation.
* Some NICs need additional entries to /etc/modprobe.d/cfg80211.conf to apply
regulatory domain settings, such as: "options cfg80211 ieee80211_regdom=US"
This is true for the Compex WLE600VX. This setting cannot be done
per-interface.
Migrate the first found wireless module country-code from the wireless
interface CLI to: "system wireless country-code"
(cherry picked from commit 9e22ab6b2aee48029d3455f65880e45c558cf1da)
T6649: Accel-ppp separate vlan-mon from listen interfaces2024-08-16T09:38:06+00:00Nataliia Solomkonatalirs1985@gmail.com2024-08-15T10:20:31+00:00urn:sha1:3bb5d5df1e38a6d995395b6e69ad142e6445b09d
(cherry picked from commit 663e468de2b431f771534b4e3a2d00a5924b98fe)
openvpn: T6591: deprecate OpenVPN server net30 topology (#3825)2024-07-18T18:58:05+00:00Daniil Baturindaniil@vyos.io2024-07-18T18:33:24+00:00urn:sha1:3b9e283855556707d3df27465f571efb869aeb9b
(cherry picked from commit e2b05343b30d2f989968532106e792cbaf75ecf6)
openvpn: T5487: Remove eprecated option --cipher for server and client mode2024-06-11T15:04:18+00:00Nataliia Solomkonatalirs1985@gmail.com2024-06-11T15:04:18+00:00urn:sha1:0f669a22615a18c3cd8da2f65f3ed79686992320Merge pull request #3578 from nicolas-fort/raw-hook2024-06-06T15:19:01+00:00Daniil Baturindaniil@vyos.io2024-06-06T15:19:01+00:00urn:sha1:85da43aa26470e0657ba68437a297ed11045d132
T3900: Add support for raw tables in firewallT3900: T6394: extend functionalities in firewall; move netfilter sysctl timeout parameters defined in conntrack to firewall global-opton section.2024-06-04T13:22:24+00:00Nicolas Fortnicolasfort1988@gmail.com2024-05-24T16:44:41+00:00urn:sha1:770edf016838523c248e3c8a36c5f327a0b98415reverse-proxy: T6409: Remove unused backend parameters2024-05-27T20:48:50+00:00Alex Wembezzle.dev@proton.me2024-05-27T20:47:24+00:00urn:sha1:fb6602f431f5595b97ea3726467ec782fa50ceb8nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel >=5.02024-05-22T19:33:06+00:00Christian Breunigchristian@breunig.cc2024-05-22T19:31:32+00:00urn:sha1:7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070
random - In kernel 5.0 and newer this is the same as fully-random. In earlier
kernels the port mapping will be randomized using a seeded MD5 hash mix using
source and destination address and destination port.
https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454
Merge pull request #3364 from natali-rs1985/T6234-current2024-05-01T15:34:00+00:00Daniil Baturindaniil@vyos.io2024-05-01T15:34:00+00:00urn:sha1:6872b3f1a3f3765e0f32fdc9e701aa9b1c490e7f
pppoe-server: T6234: PPPoE-server pado-delay refactoringopenconnect: T4982: Support defining minimum TLS version in openconnect VPN2024-04-29T19:53:51+00:00Alex Wembezzle.dev@proton.me2024-04-29T19:53:51+00:00urn:sha1:9ff74d4370f0a5f66c303074796dab8b1ca5c4a5