vyos-1x.git/src/conf_mode/interfaces-vti.py, branch yevhen-secretsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=yevhen-secrets2023-12-31T22:49:48+00:00T5474: establish common file name pattern for XML conf mode commands2023-12-31T22:49:48+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
T5195: vyos.util -> vyos.utils package refactoring (#2093)2023-07-14T20:18:36+00:00Christian Breunigchristian@breunig.cc2023-07-14T20:18:36+00:00urn:sha1:d1ca536da448749dff557f13ecae97b124026e96
* T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process
* T5195: use read_file and write_file implementation from vyos.utils.file
Changed code automatically using:
find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} +
find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} +
* T5195: move chmod* helpers to vyos.utils.permission
* T5195: use colon_separated_to_dict from vyos.utils.dict
* T5195: move is_systemd_service_* to vyos.utils.process
* T5195: fix boot issues with missing imports
* T5195: move dict_search_* helpers to vyos.utils.dict
* T5195: move network helpers to vyos.utils.network
* T5195: move commit_* helpers to vyos.utils.commit
* T5195: move user I/O helpers to vyos.utils.iovyos.configdict: T4391: enable get_interface_dict() ti be used with ConfigTreeQuery()2022-04-25T18:30:26+00:00Christian Poessingerchristian@poessinger.com2022-04-25T18:30:26+00:00urn:sha1:85d6c8f7c62f7a52fbae5d0eaddd1f8803bd8014
When VyOS is booting and an interface is brought up (PPPoE) which requires a
user callback script that is executed asynchronously when the interface is up
we can not use Config(). The problem is, Config() is not available when
the system starts and the initial commit is still processed.
We need to move to ConfigTreeQuery() which was build for this exact same
purpose. TO reduce side effects and also dependencies on the entire
vyos.configdict library the set_level()/get_level() calls got eliminated
from within the library. All calls to functions like:
* get_removed_vlans()
* is_node_changed()
* leaf_node_changed()
* is_mirror_intf()
* ...
Now require that the full config path to the node is passed.
qos: T4284: support mirror and redirect on all interface types2022-04-07T07:44:35+00:00Christian Poessingerchristian@poessinger.com2022-03-23T09:07:41+00:00urn:sha1:37c6d9fae5172b0342f94212e6483b3aa8fcd673qos: T4284: initial XML interface definitions for rewrite2022-03-21T20:41:41+00:00Christian Poessingerchristian@poessinger.com2022-03-21T20:41:41+00:00urn:sha1:3584691b35f35e40a1bfc22c34da031141fd0dfaipsec: T3720: assigning vti secondary address caused interface in A/D state2021-08-09T18:25:24+00:00Christian Poessingerchristian@poessinger.com2021-08-09T18:25:24+00:00urn:sha1:96049e6fdad05bd73423ea64780e90b385807cb9ipsec: T1441: switch from vti to xfrm interfaces2021-06-28T20:58:24+00:00Christian Poessingerchristian@poessinger.com2021-06-28T20:58:24+00:00urn:sha1:0751065ffa2161bedd040197dd51ad6ece5ab19b
XFRM interfaces are similar to VTI devices in their basic functionality but
offer several advantages:
* No tunnel endpoint addresses have to be configured on the interfaces.
Compared to VTIs, which are layer 3 tunnel devices with mandatory endpoints,
this resolves issues with wildcard addresses (only one VTI with wildcard
endpoints is supported), avoids a 1:1 mapping between SAs and interfaces, and
easily allows SAs with multiple peers to share the same interface.
* Because there are no endpoint addresses, IPv4 and IPv6 SAs are supported on
the same interface (VTI devices only support one address family).
* IPsec modes other than tunnel are supported (VTI devices only support
tunnel mode).
* No awkward configuration via GRE keys and XFRM marks. Instead, a new identifier
(XFRM interface ID) links policies and SAs with XFRM interfaces.
vti: T3595: error out when adding VTI interface withouth IPSec2021-06-04T17:33:52+00:00Christian Poessingerchristian@poessinger.com2021-06-04T17:33:52+00:00urn:sha1:31d58e7d038ddf176c3fa9647e687939f6d02646vti: T1579: only remove the interface when it exists2021-05-29T13:37:46+00:00Christian Poessingerchristian@poessinger.com2021-05-29T13:37:46+00:00urn:sha1:153a1c1d2549632342030fb4f7d41456b4f17fdbvti: ipsec: T2816: interfaces must be created using the vyos.ifconfig library2021-05-28T19:52:42+00:00Christian Poessingerchristian@poessinger.com2021-05-28T19:52:42+00:00urn:sha1:ce5fe544e4d6c0bd8e6425ec97d0bdfd130630a4