vyos-1x.git/smoketest, branch current-merge-commit-handlingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current-merge-commit-handling2024-08-09T14:03:21+00:00T6643: firewall: fix ip address range parsing on firewall rules.2024-08-09T14:03:21+00:00Nicolas Fortnicolasfort1988@gmail.com2024-08-09T14:03:21+00:00urn:sha1:ff58f3e5f30d3775487a6a3b561863aa37d11d43smoketest: T6614: add op-mode test for Kernel version (#3946)2024-08-06T09:55:08+00:00Christian Breunigchristian@breunig.cc2024-08-06T09:55:08+00:00urn:sha1:c4ffc87da9a1fc9655df189a31797cf31a94e41asysctl: T3204: restore sysctl setttings overwritten by tuned2024-08-05T19:51:53+00:00Christian Breunigchristian@breunig.cc2024-08-05T15:09:07+00:00urn:sha1:8500e8658ff10f52739143fd7814cf60c9195f16smoketest: T6555: openvpn: NameError: name 'elf' is not defined2024-08-05T18:22:25+00:00Christian Breunigchristian@breunig.cc2024-08-05T18:22:25+00:00urn:sha1:9bd2c196fe238a38f4fd0977efd1727333e7770esmoketest: T6555: openvpn: SyntaxError: '(' was never closed2024-08-05T05:45:00+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:45:00+00:00urn:sha1:2fd817e51532c6428c95704233e62585e76b2ad8Merge branch 'current' into feature/T4694/gre-match-fields2024-08-05T05:28:27+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:28:27+00:00urn:sha1:d30646fad07bd9263b385aa6a26c6d6dbc163e27Merge pull request #3920 from fett0/T65552024-08-05T05:26:17+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:26:17+00:00urn:sha1:aa842a640cbe96719caf4cd1843d718a68f81319
OPENVPN: T6555: add server-bridge options in mode serverfirewall: T4694: Adding GRE flags & fields matches to firewall rules2024-08-04T07:52:57+00:00Andrew Toppandrewt@telekinetica.net2024-08-04T07:52:57+00:00urn:sha1:60b0614296874c144665417130d4881461114db0
* Only matching flags and fields used by modern RFC2890 "extended GRE" -
this is backwards-compatible, but does not match all possible flags.
* There are no nftables helpers for the GRE key field, which is critical
to match individual tunnel sessions (more detail in the forum post)
* nft expression syntax is not flexible enough for multiple field
matches in a single rule and the key offset changes depending on flags.
* Thus, clumsy compromise in requiring an explicit match on the "checksum"
flag if a key is present, so we know where key will be. In most cases,
nobody uses the checksum, but assuming it to be off or automatically
adding a "not checksum" match unless told otherwise would be confusing
* The automatic "flags key" check when specifying a key doesn't have similar
validation, I added it first and it makes sense. I would still like
to find a workaround to the "checksum" offset problem.
* If we could add 2 rules from 1 config definition, we could match
both cases with appropriate offsets, but this would break existing
FW generation logic, logging, etc.
* Added a "test_gre_match" smoketest
Merge pull request #3901 from nicolas-fort/T4072-extend-bridge-fwall2024-08-04T07:07:15+00:00Christian Breunigchristian@breunig.cc2024-08-04T07:07:15+00:00urn:sha1:15c77978f30bebe7c6d4f4e9a87c56e12e1382cd
T4072: firewall extend bridge firewallT6619: Remove the remaining uses of per-protocol FRR configs (#3916)2024-08-02T15:41:05+00:00Roman KhramshinHollyGurza@users.noreply.github.com2024-08-02T15:41:05+00:00urn:sha1:f2256ad338fc3fbaa9a5de2c0615603cd23e0f94