vyos-1x.git/interface-definitions, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2026-05-27T14:04:17+00:00ipsec: T8912: Fix log level not respected in system journal2026-05-27T14:04:17+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-05-27T13:31:15+00:00urn:sha1:3b22850f4fe4163fea73f907ba8fe72777ba8d80
When setting 'vpn ipsec logging log-level 0', DPD informational
messages (log level 1) were still appearing in the system journal.
The root cause is that charon-systemd reads both `charon-systemd.conf`
and `charon-logging.conf` and applies the higher of the two log levels
to the journal. The VyOS only managed `charon-systemd.conf`, leaving
`charon-logging.conf` at its default level of 1, which silently overrode
the user-configured level.
Fix this by rendering `charon-logging.conf` on every commit with
syslog backend set to -1 (silent), making `charon-systemd.conf`
the sole authoritative source for journal log verbosity.
This also eliminates duplicate log entries in the journal that occurred
when both backends were active and writing to the same destination.
Merge pull request #5197 from alexandr-san4ez/T7555-current2026-05-26T14:47:15+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-05-26T14:47:15+00:00urn:sha1:f333e72b999c296565fc23e79b3bf651dc85afb0
ipsec: T7555: Implement `ikev2-reauth` for site-to-site peersMerge pull request #5119 from AppMana/T84802026-05-26T06:11:55+00:00Christian Breunigchristian@breunig.cc2026-05-26T06:11:55+00:00urn:sha1:9534f4202e4430b4a58caa28603e5594178fd745
wan: T8480: add suppress_prefixlength ip rules for internal routingMerge pull request #5215 from alexk37/T8910-ipoe-idle-timeout2026-05-25T06:25:45+00:00Christian Breunigchristian@breunig.cc2026-05-25T06:25:45+00:00urn:sha1:dc47f550e908eb4252ab2a30791b851403a3feae
T8910: ipoe-server: expose accel-ppp idle-timeout optionMerge pull request #5214 from giga1699/T76542026-05-22T18:31:42+00:00Christian Breunigchristian@breunig.cc2026-05-22T18:31:42+00:00urn:sha1:9554a316c80ac808a6b94f098484380cc422e597
openconnect: T7654: OpenConnect Script ExecutionT8910: ipoe-server: expose accel-ppp idle-timeout option2026-05-22T10:54:18+00:00Alex Kudentsov43482574+alexk37@users.noreply.github.com2026-05-22T06:50:27+00:00urn:sha1:ce401c3f099a92c49ee8a0344ac80e113e19883e
Add a CLI knob to terminate idle IPoE sessions after a configurable
timeout:
set service ipoe-server idle-timeout <0-86400>
Today there is no way to age out stale IPoE sessions: clients that go
silent (powered off, link down) leave a session record on the router
indefinitely. accel-ppp natively supports idle-timeout in its [ipoe]
section but VyOS did not expose it.
The option is added as a shared accel-ppp include so it can be reused
by other accel-ppp services in follow-up PRs.
Merge pull request #5198 from indrajitr/T8862-dhcpv6-reservation-multi2026-05-22T08:56:04+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-05-22T08:56:04+00:00urn:sha1:88b93c96faa5b1016546cbc15d1327b4692a87cc
dhcpv6: T8862: Allow multiple addresses and prefixes for reservationsopenconnect: T7654: OpenConnect Script Execution2026-05-21T23:15:49+00:00Giga Murphygiga1699@gmail.com2026-05-21T23:15:49+00:00urn:sha1:81ad0d10ad1df093cb19f715d39696e50f75411antp: T8601: add local stratum option2026-05-21T15:32:53+00:00anderbakbjanderson7583@gmail.com2026-05-04T23:20:30+00:00urn:sha1:fb26030466d017b1c136da6eb631f2c85fb229aaT8822: Add BFD strict mode for BGP2026-05-21T13:26:07+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-05-19T17:10:37+00:00urn:sha1:ff96f5895e87db7fc20cff9960a8cdea42c033d0