VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2023-12-31T22:49:48+00:00 2023-12-31T22:49:48+00:00 Christian Breunig christian@breunig.cc 2023-12-30T22:25:20+00:00 urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465 We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in 2023-12-08T14:14:07+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-12-08T14:14:07+00:00 urn:sha1:fe99c45e05fd5794905145ddca80e6078145c2e8 Add ability to configure multiple SSL certificates for frontend/service set load-balancing reverse-proxy service web mode http set load-balancing reverse-proxy service web port 443 set load-balancing reverse-proxy service web ssl certificate cert1 set load-balancing reverse-proxy service web ssl certificate cert2 2023-10-25T10:19:39+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-10-25T10:19:39+00:00 urn:sha1:0431f1b32c1fc90de82adea5a7e63dad1416c340 The current named for certificates are hardcoded in generated config to: - ca.pem - cert.pem.key - cert.pem It cause a generated config certificates and certificates itself are different (test-cert-1.pem and ca.pem) bind :::8080 v4v6 ssl crt /run/haproxy/test-cert-1.pem /run/haproxy/ca.pem It is a bug of initial impelemtation. Fix required correct names from PKI certificates 2023-08-07T05:48:31+00:00 John Estabrook jestabro@vyos.io 2023-08-06T03:59:11+00:00 urn:sha1:4e356a6f5e5fca46169789f9a69f90c353e37400 2023-07-15T18:13:12+00:00 Christian Breunig christian@breunig.cc 2023-07-15T18:12:56+00:00 urn:sha1:5f77ccf91eb402c548fc91b2e080a4b2b86f4181 2023-07-14T20:18:36+00:00 Christian Breunig christian@breunig.cc 2023-07-14T20:18:36+00:00 urn:sha1:d1ca536da448749dff557f13ecae97b124026e96 * T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process * T5195: use read_file and write_file implementation from vyos.utils.file Changed code automatically using: find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} + find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} + * T5195: move chmod* helpers to vyos.utils.permission * T5195: use colon_separated_to_dict from vyos.utils.dict * T5195: move is_systemd_service_* to vyos.utils.process * T5195: fix boot issues with missing imports * T5195: move dict_search_* helpers to vyos.utils.dict * T5195: move network helpers to vyos.utils.network * T5195: move commit_* helpers to vyos.utils.commit * T5195: move user I/O helpers to vyos.utils.io 2023-05-19T14:57:43+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-05-19T14:57:43+00:00 urn:sha1:62ce80bd0cb49524f07d6badb2973f15528c0f1b To accept a Proxy Protocol header on incoming TCP connections, add an accept-proxy parameter to the bind line in a frontend section. This parameter detects both Proxy Protocol version 1 (text format) and Proxy Protocol version 2 (binary format). set load-balancing reverse-proxy backend <tag> server <tag> send-proxy 2023-05-19T09:57:11+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-05-19T09:57:11+00:00 urn:sha1:e201bd35511e1a000ffa21a4194d234634cfd76c Improve and refactoring "load-balancing reverse-proxy" - replace 'reverse-proxy server <tag>' => 'reverse-proxy service <tag>' - replace 'reverse-proxy global-parameters tls <xxx>' => 'reverse-proxy global-parameters tls-version-min xxx' => 'reverse-proxy global-parameters ssl-bind-ciphers xxx' - replace 'reverse-proxy service https rule <tag> set server 'xxx' => 'reverse-proxy service https rule <tag> set backend 'xxx' 'service https rule <tag> domain-name xxx' set as multinode 2023-05-17T13:23:18+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-05-13T12:59:12+00:00 urn:sha1:6d0325190fcede5b912c20cfb6ffefab90a3f4f4