VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls 2026-02-18T10:30:02+00:00 2026-02-18T10:30:02+00:00 Oleksandr Kuchmystyi o.kuchmystyi@vyos.io 2026-02-16T14:41:38+00:00 urn:sha1:ed20c353e8e1a7fd9d47bb6020f40815285ef2f9 Add `set vpp settings interfaces-rx-mode <polling|interrupt|adaptive>` to configure RX mode for all interfaces. Raise error if any interface does not support the selected mode. Also remove per-interface rx-mode commands: - `set vpp settings interface <name> rx-mode` - `set vpp kernel-interfaces <name> rx-mode` 2026-02-10T17:39:18+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-02-10T17:28:52+00:00 urn:sha1:f94add1ee4eb7255eb5a39d33aa6314d11e8af7e 2025-11-27T08:26:59+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-11-21T12:39:04+00:00 urn:sha1:92d5da508d2ace60ce7061f5e7c243aaa2fcfed7 2025-11-11T15:11:39+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-11-10T10:39:20+00:00 urn:sha1:ee741870fc153db6642f15a819fc87ee80dba002 Queue sizes must be a power of two and between VLIB_FRAME_SIZE=256 and 65535 https://github.com/FDio/vpp/blob/d39cc2bd9374f9df7e42ad39bb9fb8e2531d3da8/src/plugins/af_xdp/device.c#L588-L608 2025-05-13T14:33:35+00:00 Nataliia S. 81954790+natali-rs1985@users.noreply.github.com 2025-05-13T14:33:35+00:00 urn:sha1:151afffe15ce89755f3c3f81a9d2c647e487f647 CLI: ``` set vpp acl ip tag-name <tag-name> rule <nn> action <permit|deny|permit-reflect> set vpp acl ip tag-name <tag-name> rule <nn> source prefix <prefix> set vpp acl ip tag-name <tag-name> rule <nn> source port <port|range> set vpp acl ip tag-name <tag-name> rule <nn> destination prefix <prefix> set vpp acl ip tag-name <tag-name> rule <nn> destination port <port> set vpp acl ip tag-name <tag-name> rule <nn> protocol <protocol> set vpp acl ip tag-name <tag-name> rule <nn> tcp-flags <fin|syn|rst|psh|ack|urg|ecn|cwr> set vpp acl ip tag-name <tag-name> rule <nn> tcp-flags not <fin|syn|rst|psh|ack|urg|ecn|cwr> set vpp acl ip interface <interface_name> input acl-tag <n> tag-name <tag-name> set vpp acl ip interface <interface_name> output acl-tag <n> tag-name <tag-name> set vpp acl macip tag-name <tag-name> rule <nn> prefix <prefix> set vpp acl macip tag-name <tag-name> rule <nn> mac-address <mac> set vpp acl macip tag-name <tag-name> rule <nn> mac-mask <mac-mask> set vpp acl macip tag-name <tag-name> rule <nn> action <permit|deny> set vpp acl macip interface <interface_name> tag-name <tag-name> ``` OP mode ``` show vpp acl ip tag-name <tag_name> show vpp acl ip interface show vpp acl macip tag-name <tag_name> show vpp acl macip interface ``` 2025-04-25T10:44:45+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-04-23T12:11:16+00:00 urn:sha1:fa293316e679645e6397697428cee96e32e346fc New CLI for static and dynamic NAT: ``` set vpp nat44 interface outside <interface> # multi set vpp nat44 interface inside <interface> # multi set vpp nat44 address-pool translation interface <interface> # multi set vpp nat44 address-pool translation address <address> # multi set vpp nat44 address-pool twice-nat interface <interface> # multi set vpp nat44 address-pool twice-nat address <address> # multi set vpp nat44 static rule <rule> external address <address> set vpp nat44 static rule <rule> external port <port> set vpp nat44 static rule <rule> local address <address> set vpp nat44 static rule <rule> local port <port> set vpp nat44 static rule <rule> protocol <protocol> set vpp nat44 static rule <rule> options twice-nat set vpp nat44 static rule <rule> options self-twice-nat set vpp nat44 static rule <rule> options out-to-in-only set vpp nat44 static rule <rule> options twice-nat-address <address> set vpp nat44 exclude rule <rule> protocol <protocol> set vpp nat44 exclude rule <rule> local-port <port> set vpp nat44 exclude rule <rule> local-address <address> set vpp nat44 exclude rule <rule> external-interface <interface> ``` Settings: ``` set vpp settings nat44 session-limit <limit> # default 64512 set vpp settings nat44 timeout udp <sec> # default 300 set vpp settings nat44 timeout tcp-established <sec> # default 7440 set vpp settings nat44 timeout tcp-transitory <sec> # default 240 set vpp settings nat44 timeout icmp <sec> # default 60 set vpp settings nat44 workers <list> set vpp settings nat44 no-forwarding ``` 2025-02-17T08:23:15+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2025-02-14T15:59:59+00:00 urn:sha1:7897f8d216295b32626dc4d5604349812c592921 Add linux-xfrm-nl plugin Add configuration commands for VPP IPsec ``` set vpp settings ipsec interface-type 'ipsec' set vpp settings ipsec netlink batch-delay-ms '250' set vpp settings ipsec netlink batch-size '150' set vpp settings ipsec netlink rx-buffer-size '1024' ``` 2025-01-07T23:30:14+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2025-01-07T23:30:14+00:00 urn:sha1:d7cad8ea121162dd54722f2c4db72c458dfcf02d