vyos-1x.git/interface-definitions/system_conntrack.xml.in, branch rolling

xml: T8467: remove unnecessary include, obscuring value help

2026-05-06T16:17:00+00:00

The include is unnecessary, as the element is fully defined in the subsequent lines. As node.def files are only populated on the first instance, this leads to loss of the proper value help entries hence completions. Without these changes, for example: vyos@vyos# set system conntrack ignore ipv4 rule 137 protocol will not list 'all', 'tcp_udp', etc. as intended.

conntrack: T7208: nf_conntrack_buckets defaults and behavior

2025-06-07T08:55:24+00:00

Previously, we used a lower limit of 1 and a default value of 32768 for the nf_conntrack_buckets (conntrack hash-size) sysctl option. However, the Linux kernel enforces an internal minimum of 1024. A configuration migrator will now adjust the lower limit to 1024 if necessary. The former default value of 32768 was passed as a kernel module option, which only took effect after the second system reboot. This was due to the option being rendered but not applied during the first boot. This behavior has been changed so that the value is now configurable at runtime and takes effect immediately. Additionally, since VyOS 1.4 increased the hardware requirements to 4GB of RAM, we now align the default value of nf_conntrack_buckets with the kernel's default for systems with more than 1GB of RAM to 65536 entries. Previously, we only supported half that amount.

T6641: Add vyos-network-event-logger Service

2025-01-21T04:17:26+00:00

The service parses and logs network events for improved monitoring and diagnostics. Supported event types include: - `RTM_NEWROUTE`, `RTM_DELROUTE` - `RTM_NEWLINK`, `RTM_DELLINK` - `RTM_NEWADDR`, `RTM_DELADDR` - `RTM_NEWNEIGH`, `RTM_DELNEIGH`, `RTM_GETNEIGH` - `RTM_NEWRULE`, `RTM_DELRULE` Added operational mode commands for filtered log retrieval: - `show log network-event `: Retrieve logs filtered by event type and interface. - `show interfaces event-log `: Display interface-specific logs filtered by event type.

T6362: Create conntrack logger daemon

2024-07-19T04:44:53+00:00

Merge pull request #3578 from nicolas-fort/raw-hook

2024-06-06T15:19:01+00:00

T3900: Add support for raw tables in firewall

T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeout parameters defined in conntrack to firewall global-opton section.

2024-06-04T13:22:24+00:00

conntrack: T6396: correction to helper message for custom timeout rule

2024-05-31T03:07:17+00:00

conntrack: T4022: add RTSP conntrack helper

2024-03-12T15:19:17+00:00

T5474: establish common file name pattern for XML conf mode commands

2023-12-31T22:49:48+00:00

We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in