VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2025-12-10T20:25:15+00:00 2025-12-10T20:25:15+00:00 Christian Breunig christian@breunig.cc 2025-12-10T19:33:27+00:00 urn:sha1:e2e35c9ad02e12b1c68a04b16311277c8deca469 Configuration files for config tests gathered from lab installations, customers or our own networks were placed in multiple directories - all related to the same thing. We have had config-tests, configs and config.no-load. This commit re-arranges all the files and places a proper README for the users. 2025-12-04T15:40:10+00:00 Daniil Baturin daniil@vyos.io 2025-12-04T15:40:10+00:00 urn:sha1:02034e4fd77e8af64a7f6a66e5da7fefcd4a9e90 ipsec: T7594: Rename `respond` connection-type in IPSec peer settings to `trap` 2025-12-04T15:33:59+00:00 Daniil Baturin daniil@vyos.io 2025-12-04T15:33:59+00:00 urn:sha1:0544895af02cbc0ff882cded3c2774469a41cbc7 syslog: T8059: migrate host:port node names to the new syntax with a dedicated port option 2025-12-04T15:03:54+00:00 Oleksandr Kuchmystyi o.kuchmystyi@vyos.io 2025-11-28T14:52:59+00:00 urn:sha1:2dc91c0a96c3d3212387be02b80c58fce7c68bd8 The previous 'connection-type respond' option in IPsec site-to-site peers was misleading - instead of passively waiting for peer initiation, it would initiate negotiation when matching traffic appeared, potentially causing SA duplication and renegotiation loops. 2025-12-04T10:44:25+00:00 Daniil Baturin daniil@baturin.org 2025-12-02T14:09:49+00:00 urn:sha1:4b9a008b24eafbb3bc0f81578ed22e96e2d72b6f with a dedicated port option 2025-12-02T20:41:39+00:00 Christian Breunig christian@breunig.cc 2025-12-02T06:15:07+00:00 urn:sha1:b4299d7b9af8cdac63472423b2b567a4569e9a63 This adds necessary embedded certificates to validate the migration logic added in commit 63cc76fa236 ("openvpn: T7738: avoid duplicate certs during 1.3 -> 1.4 migration"). The CA used was generated using EasyRSA as described in our documentation: https://docs.vyos.io/en/1.3/configuration/interfaces/openvpn.html#generate-x-509-certificate-and-keys 2025-11-22T09:06:41+00:00 Christian Breunig christian@breunig.cc 2025-11-22T09:06:41+00:00 urn:sha1:6285a2fd7fec1239bdd1ccc8b4e40e10a9086c48 We also do need to adjust all other smoketests/configutests which make use of MTU after https://github.com/vyos/vyos-build/pull/1070/commits/d84ad7e2e76bc309b the QEMU guest MTU was lowered. 2025-10-29T11:22:42+00:00 Christian Breunig christian@breunig.cc 2025-10-29T11:12:52+00:00 urn:sha1:c5ef4f4ebf38a249998498ebe443f3cc733b64fd Commit f08a5700e7 ("dhcpv6: T7646: restore missing default route after upgrade") introduced a regression affecting both non-VIF and VIF interfaces. The addressing mode check in the migration logic was incorrect for both cases. For non-VIF interfaces, the migration was skipped entirely due to a missing configuration test. For VIF (VLAN) interfaces, the existing test always evaluated to true, since it incorrectly assumed that DHCPv6 was configured even when a static address was present. Smoketests have been extended to cover for these cases. 2025-10-16T23:03:10+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2025-10-13T17:05:22+00:00 urn:sha1:f87b522967bb7e3354278628d5d6ef9356a87948 2025-10-16T12:04:28+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2025-10-16T12:04:28+00:00 urn:sha1:d8dc670cd3eb7c9d0e41d8211284e1469657cc42 T7897: VPP: fix rx-mode interrupt for XDP driver with workers