vyos-1x.git/src/migration-scripts, branch sagitta VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=sagitta 2024-07-03T17:16:27+00:00 T6536: change wildcard character from + to * - extend fix to interfaces defined in zone policy. 2024-07-03T17:16:27+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-03T12:53:56+00:00 urn:sha1:20d4ffd527ccea5fb78f2f9e56c887bbc041b1e0 (cherry picked from commit 66ec278393dbabe71f320c543816f27797d51140) T6536: nat: add migration script that replaces wildcard charater supported in 1.3 <+> with character supported in latest version <*> 2024-07-03T14:33:55+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-02T11:54:11+00:00 urn:sha1:8c43dea52c1f3507b8176d7dd3e146f0cb8d476d (cherry picked from commit 148af29b68416a5b8d0e025a16aef252fdf31e67) # Conflicts: # src/migration-scripts/nat/6-to-7 interfaces: T6519: harden config migration if ethernet interface is missing 2024-06-26T14:35:54+00:00 Christian Breunig christian@breunig.cc 2024-06-26T13:35:10+00:00 urn:sha1:b9fb91699b9af7a8ea375d4662a50363004eacfd During a corner case where the configuration is migrated to a different system with fewer ethernet interfaces, migration will fail during an image upgrade. vyos.ethtool.Ethtool() is instantiated with an invalid interface leading to an exception that kills the migrator (cherry picked from commit e47d4fd385631236da6882233b09f6364cbb077b) reverse-proxy: T6409: unindent migration script code path 2024-05-30T15:28:48+00:00 Christian Breunig christian@breunig.cc 2024-05-30T15:25:27+00:00 urn:sha1:8f7da732497ba5b249be092ae6019b3750410375 (cherry picked from commit dd2516904527c74e01e0ced5166afe72a479ee00) reverse-proxy: T6409: Remove unused backend parameters 2024-05-30T15:28:48+00:00 Alex W embezzle.dev@proton.me 2024-05-27T20:47:24+00:00 urn:sha1:a2a3a3e239534d5665f5992c3aacd15545904c87 (cherry picked from commit fb6602f431f5595b97ea3726467ec782fa50ceb8) nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel >=5.0 2024-05-23T14:19:40+00:00 Christian Breunig christian@breunig.cc 2024-05-22T19:31:32+00:00 urn:sha1:2c94114a3fe13ab9adc0be5b953a97584f0ab541 random - In kernel 5.0 and newer this is the same as fully-random. In earlier kernels the port mapping will be randomized using a seeded MD5 hash mix using source and destination address and destination port. https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454 (cherry picked from commit 7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070) pppoe-server: T6234: fix permissions on migration script 2024-05-02T18:48:16+00:00 John Estabrook jestabro@vyos.io 2024-05-02T02:23:03+00:00 urn:sha1:f6207ed0a4eb03555f8e5d983001672547cd0206 (cherry picked from commit a1f4404739e0baf2f378fe7c890174350a59ffc4) pppoe-server: T6234: PPPoE-server pado-delay refactoring 2024-05-01T15:34:47+00:00 Nataliia Solomko natalirs1985@gmail.com 2024-04-25T10:27:50+00:00 urn:sha1:0891817c6f0b4d4bb3e8d4c21f2873ab43e1be26 (cherry picked from commit 107ee099e82397b31fca8cf1ac3860cbf76f0596) openconnect: T4982: Support defining minimum TLS version in openconnect VPN 2024-04-30T06:30:40+00:00 Alex W embezzle.dev@proton.me 2024-04-29T19:53:51+00:00 urn:sha1:ef665adb7e44ef03e7f3e6f2cd1db88315ffcbe1 (cherry picked from commit 9ff74d4370f0a5f66c303074796dab8b1ca5c4a5) T5535: firewall: migrate command <set system ip disable-directed-broadcast> to firewall global-optinos 2024-04-15T14:41:29+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-04-15T14:15:14+00:00 urn:sha1:67bc10841f088e4ccabc30b1442b43f8d5902f5e (cherry picked from commit 76dcecafca977b640dd16d8e68c4a050ca1af4fb)