vyos-1x.git/src/helpers, branch fix/T8955-http-api-verify-tls

T8502: add client support for config-sync excluded paths

2026-05-28T13:31:26+00:00

wan: T8480: make only-default-route opt-in

2026-05-12T17:57:27+00:00

wan: T8480: add suppress_prefixlength ip rules for internal routing

2026-05-12T17:57:08+00:00

WLB per-interface routing tables only contain a default route. When LAN traffic is fwmarked by WLB nftables rules, ip rule policy routes it to these tables where internal destinations (BGP, connected, DNAT) have no matching route and incorrectly exit via WAN. Add ip rule with table main suppress_prefixlength 0 before each per-interface table rule. This checks the main routing table first for specific routes but suppresses the default route, so only internet-bound traffic falls through to WLB per-interface tables. Signed-off-by: doctorpangloss <2229300+doctorpangloss@users.noreply.github.com>

wan: T8481: scope flush-connections to WLB connection marks (#5163)

2026-05-12T13:58:51+00:00

* wan: T8481: scope flush-connections to WLB connection marks flush-connections runs conntrack --delete which destroys all conntrack entries system-wide, including unrelated NAT translations and established connections that have nothing to do with WLB. WLB tags every connection it manages with a conntrack mark via the wlb_mangle_isp_ chain (ct mark set 0xc9, 0xca, etc.). Scope the flush to these marks so only WLB-managed connections are affected. Signed-off-by: doctorpangloss <2229300+doctorpangloss@users.noreply.github.com> * wan: T8481: replace conntrack deletion from state changed block --------- Signed-off-by: doctorpangloss <2229300+doctorpangloss@users.noreply.github.com> Co-authored-by: doctorpangloss <2229300+doctorpangloss@users.noreply.github.com>

utils: T8541: add write-config-file-value helper

2026-04-26T17:38:17+00:00

Introduce src/helpers/write-config-file-value.py to patch a saved config.boot from scripts by writing a quoted CLI path with an optional value (omit --value to create a valueless node). Extend vyos.utils.config.write_saved_value() to safely update saved configs: create missing parent nodes before tagging (ConfigTree.set_tag requires nodes to exist) and then write the requested value/valueless leaf back to disk. Remove the legacy serial console activation script which is now replaced by the helper-based approach. The helper is run once during ISO Image assembly and will inject the approprate serial console defintiions into config.boot.default.

T8445: add revised boot activation script runner

2026-04-15T20:17:27+00:00

T8410: Fix typos and mistakes for operational and configuration commands

2026-03-24T17:02:56+00:00

Fix typos and mistakes in the commands and comments No functional changes

geoip: T6768: Add system name-server check

2026-03-13T13:14:48+00:00

Merge pull request #4949 from sarthurdev/geoip_refactor

2026-02-05T15:31:02+00:00

geoip: T7926: T8049: Refactor geoip code and add MaxMind support

http-api: T7090: Implement background configure operations for REST API

2026-01-28T06:57:55+00:00

Large config commits (`service config-sync`) can block the REST API request path and sometimes must be deferred (e.g., when changing `service https`). This commit introduces an in-memory background operation manager that queues (FIFO) full configure operations (commands + commit/commit-confirm) as single jobs, tracks status/result, and exposes active operations via `/retrieve/background-operations`.