vyos-1x.git/src/conf_mode/interfaces_wireguard.py, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2026-05-11T11:07:58+00:00wireguard: T8509: Add fwmark ip rules for VRF-bound interfaces2026-05-11T11:07:58+00:00Nataliia Solomkonatalirs1985@gmail.com2026-05-07T09:18:47+00:00urn:sha1:fea16e41f9a3f4aef4251786b7d157e781368cb9
When a WireGuard interface has both fwmark and VRF configured, outgoing
tunnel packets marked with the fwmark were not routed into the correct
VRF routing table, causing them to hit the l3mdev unreachable rule instead.
Add an ip rule at priority 1998 (after l3mdev at 1000 and before l3mdev
unreachable at 2000) to route fwmark-tagged packets into the correct
VRF routing table.
T8410: Fix typos and mistakes for operational and configuration commands2026-03-24T17:02:56+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-03-20T16:41:24+00:00urn:sha1:bb2aee1e58c1cd30087b935798060e6bf3c698c8
Fix typos and mistakes in the commands and comments
No functional changes
T7591: remove copyright years from source files2025-06-28T21:16:52+00:00Christian Breunigchristian@breunig.cc2025-06-28T18:51:21+00:00urn:sha1:1478516ae437f19ebeb7d6ff9b83dd74f8e76758
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
Merge pull request #4468 from sarthurdev/T57072025-05-20T14:28:12+00:00Daniil Baturindaniil@vyos.io2025-05-20T14:28:12+00:00urn:sha1:37598a366e8d17fc7a546b23d3a4d8ff097272ce
wireguard: T7387: Optimise wireguard peer handlingvyos.utils: T7122: fix IPv6 support in check_port_availability()2025-04-28T20:10:08+00:00Christian Breunigchristian@breunig.cc2025-04-22T14:31:09+00:00urn:sha1:cbb6c944fea616547cec43f7f1ed6ea3cc4beb54
Commit 4523e9c897b3 ("wireguard: T3763: Added check for listening port
availability") added a function to check if a port is free to use or already
occupied by a different running service. This has been done by trying to bind a
socket to said given port.
Unfortunately there is no support for IPv6 address-fdamily in both
socketserver.TCPServer or socketserver.UDPServer. This must be done manually by
deriving TCPServer and setting self.address_family for IPv6.
The new implementation gets rid of both TCPServer and UDPServer and replaces it
with a simple socket binding to a given IPv4/IPv6 address or any interface/
address if unspecified.
In addition build time tests are added for the function to check for proper
behavior during build time of vyos-1x.
resolver: T4930: Fix always True on glob check2025-04-25T17:37:53+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-04-23T18:05:18+00:00urn:sha1:ab602253d57c1fb4a01a9c84f75bbbc480a66189wireguard: T7387: Optimise wireguard peer handling2025-04-25T17:37:53+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-04-23T14:32:43+00:00urn:sha1:2b009d420f28a61353cc373abdea957df0555d18wireguard: T7166: Call vxlan dependency if interface exist2025-02-27T16:01:20+00:00Nataliia Solomkonatalirs1985@gmail.com2025-02-26T10:24:04+00:00urn:sha1:19dc0994af1612a036b58700d10efebcca8c6745wireguard: T4930: use common error message pattern2025-01-18T23:17:12+00:00Christian Breunigchristian@breunig.cc2025-01-18T21:44:35+00:00urn:sha1:c4c35d3b7a9de76802663376b82c7decfc878980wireguard: T4930: allow peers via FQDN2025-01-18T23:17:12+00:00sskajesskaje@gmail.com2024-12-31T02:44:01+00:00urn:sha1:2212a438b234f34f32e08efef2f841ba55a3b6a0
* set interfaces wireguard wgXX peer YY hostname <fqdn>