vyos-1x.git/interface-definitions, branch current VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=current 2025-06-29T06:35:16+00:00 T7589: Add no-split-gso and ack-filter for CAKE 2025-06-29T06:35:16+00:00 factor2431 factor2431@outlook.com 2025-06-29T06:35:16+00:00 urn:sha1:e7e55a2d3bc3547422583d8f5b3a5a13299a4645 T7531: Add FRR no bgp ipv6-auto-ra option 2025-06-20T08:59:24+00:00 factor2431 factor2431@outlook.com 2025-06-20T08:59:24+00:00 urn:sha1:64b15157fa2c95558f15778671e5e644db97f28d Merge pull request #4558 from natali-rs1985/T6951 2025-06-19T14:44:46+00:00 Daniil Baturin daniil@vyos.io 2025-06-19T14:44:46+00:00 urn:sha1:79dec52ed4c3a6c035204fad28b9229f709c87c4 firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept 2025-06-17T15:16:51+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-06-13T09:20:40+00:00 urn:sha1:8dbc3c5e67cc1fd043a78dd3446a1a733ebd814f container: T7473: fix show/monitor container log failed when log-driver is journald 2025-06-17T15:02:07+00:00 opswill will@nixops.org 2025-06-17T15:02:07+00:00 urn:sha1:5ae3924234f9ffaa2ffda7e9fc52c2b3518a85e2 Merge pull request #4497 from yzguy/T7432 2025-06-12T14:20:21+00:00 Daniil Baturin daniil@vyos.io 2025-06-12T14:20:21+00:00 urn:sha1:dcba87b2394b789c335b44856a8ae7bfea05353c T7432: RPKI VRF Support Merge pull request #4548 from c-po/T7202-conntrack 2025-06-09T11:11:38+00:00 Daniil Baturin daniil@vyos.io 2025-06-09T11:11:38+00:00 urn:sha1:34b07a49c052631e58401fd06c218701ad36d0ce conntrack: T7208: nf_conntrack_buckets defaults and behavior conntrack: T7208: nf_conntrack_buckets defaults and behavior 2025-06-07T08:55:24+00:00 Christian Breunig christian@breunig.cc 2025-06-07T07:15:30+00:00 urn:sha1:08421b277b1f460ebc51673571bab975aece2215 Previously, we used a lower limit of 1 and a default value of 32768 for the nf_conntrack_buckets (conntrack hash-size) sysctl option. However, the Linux kernel enforces an internal minimum of 1024. A configuration migrator will now adjust the lower limit to 1024 if necessary. The former default value of 32768 was passed as a kernel module option, which only took effect after the second system reboot. This was due to the option being rendered but not applied during the first boot. This behavior has been changed so that the value is now configurable at runtime and takes effect immediately. Additionally, since VyOS 1.4 increased the hardware requirements to 4GB of RAM, we now align the default value of nf_conntrack_buckets with the kernel's default for systems with more than 1GB of RAM to 65536 entries. Previously, we only supported half that amount. T7523: firewall: Accepting invalid traffic for pppoe discovery and wol 2025-06-05T04:25:21+00:00 opswill will@nixops.org 2025-06-05T04:04:10+00:00 urn:sha1:bfdba4079b0a76a8c578277adae3f36add832b41 T7512: firewall: Modify accepting invalid traffic for VLAN aware bridge 2025-06-02T04:52:08+00:00 Indrajit Raychaudhuri irc@indrajit.com 2025-06-02T04:32:13+00:00 urn:sha1:b47adae7a3e963bfca3b775f4b84d5121907c76d Allow accepting invalid packets for ethernet types `8021q` and `8021ad` in addition to ARP and UDP types so that stateful bridge firewall works for VLAN-aware bridges in addition to regular bridges.