vyos-1x.git/src/conf_mode, branch current-merge-commit-handlingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current-merge-commit-handling2024-08-08T16:26:35+00:00qos: T6638: require interface state existence in verify conditional2024-08-08T16:26:35+00:00John Estabrookjestabro@vyos.io2024-08-08T16:24:00+00:00urn:sha1:ed63c9d1896a218715e13e1799fc059f4561f75esysctl: T3204: restore sysctl setttings overwritten by tuned2024-08-05T19:51:53+00:00Christian Breunigchristian@breunig.cc2024-08-05T15:09:07+00:00urn:sha1:8500e8658ff10f52739143fd7814cf60c9195f16Merge branch 'current' into feature/T4694/gre-match-fields2024-08-05T05:28:27+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:28:27+00:00urn:sha1:d30646fad07bd9263b385aa6a26c6d6dbc163e27Merge pull request #3920 from fett0/T65552024-08-05T05:26:17+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:26:17+00:00urn:sha1:aa842a640cbe96719caf4cd1843d718a68f81319
OPENVPN: T6555: add server-bridge options in mode serverMerge pull request #3939 from c-po/unused-imports2024-08-05T05:26:02+00:00Christian Breunigchristian@breunig.cc2024-08-05T05:26:02+00:00urn:sha1:9340765d8484304274d30d252fc16fbebd80a870
T5873: T6619: remove unused importsfirewall: T4694: Adding GRE flags & fields matches to firewall rules2024-08-04T07:52:57+00:00Andrew Toppandrewt@telekinetica.net2024-08-04T07:52:57+00:00urn:sha1:60b0614296874c144665417130d4881461114db0
* Only matching flags and fields used by modern RFC2890 "extended GRE" -
this is backwards-compatible, but does not match all possible flags.
* There are no nftables helpers for the GRE key field, which is critical
to match individual tunnel sessions (more detail in the forum post)
* nft expression syntax is not flexible enough for multiple field
matches in a single rule and the key offset changes depending on flags.
* Thus, clumsy compromise in requiring an explicit match on the "checksum"
flag if a key is present, so we know where key will be. In most cases,
nobody uses the checksum, but assuming it to be off or automatically
adding a "not checksum" match unless told otherwise would be confusing
* The automatic "flags key" check when specifying a key doesn't have similar
validation, I added it first and it makes sense. I would still like
to find a workaround to the "checksum" offset problem.
* If we could add 2 rules from 1 config definition, we could match
both cases with appropriate offsets, but this would break existing
FW generation logic, logging, etc.
* Added a "test_gre_match" smoketest
Merge pull request #3901 from nicolas-fort/T4072-extend-bridge-fwall2024-08-04T07:07:15+00:00Christian Breunigchristian@breunig.cc2024-08-04T07:07:15+00:00urn:sha1:15c77978f30bebe7c6d4f4e9a87c56e12e1382cd
T4072: firewall extend bridge firewallipsec: T5873: remove unused imports2024-08-04T06:45:43+00:00Christian Breunigchristian@breunig.cc2024-08-04T06:45:43+00:00urn:sha1:4d2b10ff1f4e862abf1c11f3cfbdc2a910c48301multicast: T6619: remove unused imports2024-08-04T06:45:12+00:00Christian Breunigchristian@breunig.cc2024-08-04T06:45:12+00:00urn:sha1:9979afa15650bd609399030da1751488baaac70bMerge pull request #3933 from jestabro/add-missing-standard-func2024-08-02T15:53:40+00:00Daniil Baturindaniil@vyos.io2024-08-02T15:53:40+00:00urn:sha1:998df24dc4ed0c1ccd572d09c438d96fe6b79ba8
T6632: add missing standard functions to config scripts