vyos-1x.git/interface-definitions/include, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2026-06-29T15:10:13+00:00bgp: T6573: add missing newline in afi-route-server-client.xml.i2026-06-29T15:10:13+00:00Christian Breunigchristian@breunig.cc2026-06-25T20:13:29+00:00urn:sha1:130f2ce23c639eb1f5ca799799a4eb95923da23a
This is needed for debugging the concatenated XML include blocks, otherwise two
XML comments will show up on one line due to the missing newline which is
annoying.
Merge pull request #5297 from alexandr-san4ez/T8865-rolling2026-06-26T18:16:50+00:00Christian Breunigchristian@breunig.cc2026-06-26T18:16:50+00:00urn:sha1:fe27e9cedb1bc7a91095a19d1867cfda428e12fe
bgp: T8865: Reject `vni` sub-block in VRF l2vpn-evpn when `advertise-all-vni` is globally activeMerge pull request #5282 from sarthurdev/T89872026-06-26T18:04:14+00:00Christian Breunigchristian@breunig.cc2026-06-26T18:04:14+00:00urn:sha1:29d887a9cb2e32db7406442251437ce7f5794803
geoip: T8987: Support updates via source-address/vrfbgp: T8865: Reject `vni` sub-block in VRF l2vpn-evpn when `advertise-all-vni` is globally active2026-06-26T07:28:05+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-06-26T07:23:54+00:00urn:sha1:4e11adfb927c22e2f977c897d56a4d243860e877
When `advertise-all-vni` is configured in the global/default BGP instance,
VyOS generated a `vni <id>` sub-block under each VRF BGP `address-family
l2vpn evpn` context. This conflicts with advertise-all-vni: FRR already
owns all kernel VNIs and returns `% Failed to create VNI` when frr-reload.py
attempts to apply the VRF-level vni sub-block. FRR then performs an early
exit from config processing, silently dropping the entire l2vpn evpn
address-family for all subsequent VRF BGP instances.
Merge pull request #5284 from vyos/T8097-strongswan-esn2026-06-25T14:36:22+00:00Christian Breunigchristian@breunig.cc2026-06-25T14:36:22+00:00urn:sha1:fe78ab4165456fd1d7bcd2ec99d7601dc2e71d2c
T8097: strongswan: add CLI for ESNgeoip: T8987: Support updates via source-address/vrf2026-06-25T14:19:06+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2026-06-17T17:21:48+00:00urn:sha1:be535fd16bdf9a7978d4e2b049fdf0b45c6e9f38bgp: T9013: Add BMP source-interface support2026-06-25T13:06:05+00:00Nataliia Solomkonatalirs1985@gmail.com2026-06-24T14:10:45+00:00urn:sha1:a83edf1a11c86df0a1419930b31544296a7a6e6cMerge pull request #5155 from sarthurdev/geoip2026-06-25T12:16:38+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-06-25T12:16:38+00:00urn:sha1:f48e3771d0724a04fc6eb1abd07b556630e0d451
geoip: T5746: Add GeoIP ASN supportT8097: strongswan: add CLI for ESN2026-06-20T06:59:00+00:00Kyrylo Yatsenkohedrok@gmail.com2026-06-20T06:37:42+00:00urn:sha1:e8611801c7f36d7942ed367c5cf0b0dfd08083d2
Add CLI commands:
set vpn ipsec ike-group MyIKEGroup proposal 1 esn ESN-VALUE
set vpn ipsec esp-group MyESPGroup proposal 1 esn ESN-VALUE
Where ESN-VALUE can be one of:
* required: only establish connection using ESN
* optional: try using ESN, but if not available, accept non-ESN
* disabled (default): don't use ESN
StrongSwan 6.0.6 doesn't allow connections between proposal with
'-noesn' and without '-esn'/'-noesn'. To make it work as expected, use
two proposals for 'optional' and 'disabled':
* required: PROPOSAL-esn
* optional: PROPOSAL-esn-noesn,PROPOSAL
* disabled: PROPOSAL-noesn,PROPOSAL
haproxy: T8931: Add timeout.tunnel in default and backend sections2026-06-19T08:08:06+00:00Indrajit Raychaudhuriirc@indrajit.com2026-05-27T00:18:57+00:00urn:sha1:8a334590daa3104be0519bab8d73557304d8572c