vyos-1x.git/src/conf_mode/conntrack.py, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2023-12-31T22:49:48+00:00T5474: establish common file name pattern for XML conf mode commands2023-12-31T22:49:48+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
T5779: conntrack: Apply fixes to <set system conntrack timeout custom>. Remove what was not working on 1.3, migrate what was working to new syntax and extend feature for ipv6.2023-12-05T10:44:19+00:00Nicolas Fortnicolasfort1988@gmail.com2023-12-05T10:36:14+00:00urn:sha1:24a1a70596fafdd35d88506159e6cb9cd94e7a66conntrack: T5376: Fixes for conntrack-sync configdep2023-09-29T09:40:43+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-29T07:58:41+00:00urn:sha1:42ff4d8a7ba7d01037a1e985cb803cd3355a33f2
Fixes `KeyError: 'conntrack_sync'`
Ignore `ConfigError("ConfigError('Interface eth1 requires an IP address!')")` due to calling conntrack-sync too early
conntrack: T5376: Use vyos.configdep to call conntrack-sync2023-09-24T14:50:05+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-23T12:04:48+00:00urn:sha1:5acf5acedbf7e0c581653ddf2e7693f148017943conntrack: T5376: T5598: Fix for kernel conntrack helpers2023-09-24T14:50:05+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-21T10:05:20+00:00urn:sha1:fd0bcaf120bc4ad5f3e9add93f0fa2c2c60e984f
`nf_conntrack_helper` that auto-assigned helpers is removed from the kernel
conntrack: firewall: T4502: Update conntrack check for new flowtable CLI2023-09-19T19:14:20+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-19T19:06:35+00:00urn:sha1:cdbe969308c1f540050d288ffc6b55abbefa7534
Also updates flowtable smoketest to verify conntrack enabled
conntrack: T5217: Add tcp flag matching to `system conntrack ignore`2023-09-18T18:26:51+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-18T18:24:22+00:00urn:sha1:fb3ef9af5e394aa25692003fb3c185bfedefe3cb
- Moves MSS node out of `tcp-flags.xml.i` and into `tcp-mss.xml.i`
- Update smoketest to verify TCP flag matching
conntrack: T5571: Refactor conntrack to be independent conf script from firewall, nat, nat662023-09-16T11:20:10+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-14T01:01:56+00:00urn:sha1:734d84f696944419a2d6f11bc16dda03900add34conntrack: T4309: T4903: Refactor `system conntrack ignore` rule generation, add IPv6 support and firewall groups2023-09-04T10:36:11+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2023-09-03T11:08:00+00:00urn:sha1:5a8e3089b35e2eca2f896a01410fcdf6ac928278T5319: remove workarounds for defaults in conntrack.py2023-08-07T05:48:31+00:00John Estabrookjestabro@vyos.io2023-08-06T01:50:59+00:00urn:sha1:bb3794d033cc72db43a8d0c1702b7cd0352f358b