vyos-1x.git/interface-definitions/include/version, branch pr-templateVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=pr-template2024-12-19T11:45:48+00:00T6953: add migration for old configuration2024-12-19T11:45:48+00:00Nicolas Vollmarnvo@scaling.ch2024-12-18T20:40:55+00:00urn:sha1:8092236acc138f21aaea32df706a713f07ed88b7static: T6746: migrate BFD CLI nodes2024-12-16T21:24:50+00:00Christian Breunigchristian@breunig.cc2024-12-11T20:22:41+00:00urn:sha1:147751ec59527800e956b7ea689805ba80769abe
Migrate "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd multi-hop
source <z.z.z.z> profile <NAME>" to: "set protocols static route <x.x.x.x/x>
next-hop <y.y.y.y> bfd profile bar"
FRR supports only one source IP address per BFD multi-hop session. VyOS
had CLI cupport for multiple source addresses which made no sense.
T6790: QoS: Improve CAKE Policy (#4173)2024-11-20T09:21:37+00:00Roman KhramshinHollyGurza@users.noreply.github.com2024-11-20T09:21:37+00:00urn:sha1:1c8321a8679e132cec1b769ab364149e794558cc
- Fixed handling of flow isolation parameters.
- Corrected support for `nat` and `nonat` in flow isolation.
- Extended RTT values to cover the full range supported by `tc`.
- Make migration script 2-to-3 qosT3501: Allow using more than one tuned profile2024-11-07T17:29:05+00:00Nataliia Solomkonatalirs1985@gmail.com2024-10-28T13:18:19+00:00urn:sha1:029cde4608c450a16495e0676b410a4b38183960haproxy: T6745: Rename `reverse-proxy` to `haproxy`2024-10-09T13:55:15+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2024-10-09T12:55:11+00:00urn:sha1:90a4827284acd3cb072cdfeef323c522802c6449http-api: T6736: add migration script and update version2024-09-30T03:21:21+00:00John Estabrookjestabro@vyos.io2024-09-30T01:49:30+00:00urn:sha1:40d966310cb5d8d758f7fa801facd0a560795783T6649: Accel-ppp separate vlan-mon from listen interfaces2024-08-15T16:12:37+00:00Nataliia Solomkonatalirs1985@gmail.com2024-08-15T10:20:31+00:00urn:sha1:663e468de2b431f771534b4e3a2d00a5924b98feT6648: dhcpv6-server: align stateless DHCPv6 options with stateful2024-08-12T20:23:52+00:00Lucas Christianlucas@lucasec.com2024-08-11T22:18:38+00:00urn:sha1:a2b6098e6f9c1915a61a9aebc8f9852bd897387cMerge pull request #3823 from srividya0208/T65712024-07-29T16:10:30+00:00Daniil Baturindaniil@vyos.io2024-07-29T16:10:30+00:00urn:sha1:9149c657dfdb4d8297aba3ef1ed1346e670b071b
OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphersfirewall: T4694: Adding rt ipsec exists/missing match to firewall configs (#3616)2024-07-28T11:47:07+00:00talmakionandrewt@telekinetica.net2024-07-28T11:47:07+00:00urn:sha1:e2bf8812f73a75356f56274968be8859a2186d73
* Change ipsec match-ipsec/none to match-ipsec-in and match-none-in for
fw rules
* Add ipsec match-ipsec-out and match-none-out
* Change all the points where the match-ipsec.xml.i include was used
before, making sure the new includes (match-ipsec-in/out.xml.i) are
used appropriately. There were a handful of spots where match-ipsec.xml.i
had snuck back in for output hooked chains already
(the common-rule-* includes)
* Add the -out generators to rendered templates
* Heavy modification to firewall config validators:
* I needed to check for ipsec-in matches no matter how deeply nested
under an output-hook chain(via jump-target) - this always generates
an error.
* Ended up retrofitting the jump-targets validator from root chains
and for named custom chains. It checks for recursive loops and improper
IPsec matches.
* Added "test_ipsec_metadata_match" and "test_cyclic_jump_validation"
smoketests