vyos-1x.git/src/migration-scripts, branch yevhenVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=yevhen2024-08-15T16:12:37+00:00T6649: Accel-ppp separate vlan-mon from listen interfaces2024-08-15T16:12:37+00:00Nataliia Solomkonatalirs1985@gmail.com2024-08-15T10:20:31+00:00urn:sha1:663e468de2b431f771534b4e3a2d00a5924b98feT6648: dhcpv6-server: align stateless DHCPv6 options with stateful2024-08-12T20:23:52+00:00Lucas Christianlucas@lucasec.com2024-08-11T22:18:38+00:00urn:sha1:a2b6098e6f9c1915a61a9aebc8f9852bd897387cvyos.configtree: T6620: allow list_nodes() to work on non-existent paths2024-07-29T18:16:43+00:00Daniil Baturindaniil@baturin.org2024-07-29T18:16:43+00:00urn:sha1:30111fa493c72e7182854f295bc88d9eecccf419
and return an empty list in that case
(handy for migration scripts and the like)
Merge pull request #3823 from srividya0208/T65712024-07-29T16:10:30+00:00Daniil Baturindaniil@vyos.io2024-07-29T16:10:30+00:00urn:sha1:9149c657dfdb4d8297aba3ef1ed1346e670b071b
OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphersfirewall: T4694: incomplete node checks in migration script2024-07-29T15:05:21+00:00Andrew Toppandrewt@telekinetica.net2024-07-29T15:05:21+00:00urn:sha1:3d42009c0e3cf5ea7ea0ed167b4d8f655667edd8
This patch on #3616 will only attempt to fix ipsec matches in rules if the
firewall config tree passed to migrate_chain() has rules attached.
firewall: T4694: Adding rt ipsec exists/missing match to firewall configs (#3616)2024-07-28T11:47:07+00:00talmakionandrewt@telekinetica.net2024-07-28T11:47:07+00:00urn:sha1:e2bf8812f73a75356f56274968be8859a2186d73
* Change ipsec match-ipsec/none to match-ipsec-in and match-none-in for
fw rules
* Add ipsec match-ipsec-out and match-none-out
* Change all the points where the match-ipsec.xml.i include was used
before, making sure the new includes (match-ipsec-in/out.xml.i) are
used appropriately. There were a handful of spots where match-ipsec.xml.i
had snuck back in for output hooked chains already
(the common-rule-* includes)
* Add the -out generators to rendered templates
* Heavy modification to firewall config validators:
* I needed to check for ipsec-in matches no matter how deeply nested
under an output-hook chain(via jump-target) - this always generates
an error.
* Ended up retrofitting the jump-targets validator from root chains
and for named custom chains. It checks for recursive loops and improper
IPsec matches.
* Added "test_ipsec_metadata_match" and "test_cyclic_jump_validation"
smoketestsOpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers2024-07-25T10:07:02+00:00srividya0208a.srividya@vyos.io2024-07-15T10:30:00+00:00urn:sha1:b62b2f5f8a9c4f0a7dc26bce1f15843651119256openvpn: T6591: deprecate OpenVPN server net30 topology (#3825)2024-07-18T18:33:24+00:00Daniil Baturindaniil@vyos.io2024-07-18T18:33:24+00:00urn:sha1:e2b05343b30d2f989968532106e792cbaf75ecf6T6536: change wildcard character from + to * - extend fix to interfaces defined in zone policy.2024-07-03T13:05:35+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-03T12:53:56+00:00urn:sha1:66ec278393dbabe71f320c543816f27797d51140T6536: nat: add migration script that replaces wildcard charater supported in 1.3 <+> with character supported in latest version <*>2024-07-03T13:05:35+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-02T11:54:11+00:00urn:sha1:148af29b68416a5b8d0e025a16aef252fdf31e67