VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=current 2025-06-28T21:16:52+00:00 2025-06-28T21:16:52+00:00 Christian Breunig christian@breunig.cc 2025-06-28T18:51:21+00:00 urn:sha1:1478516ae437f19ebeb7d6ff9b83dd74f8e76758 The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice 2025-05-20T13:33:17+00:00 Daniil Baturin daniil@vyos.io 2025-05-20T13:33:17+00:00 urn:sha1:532a2ef2f9c4fca7589a968c18d0e896912e2a78 policy: T5069: large-community-list regex validator disallows whitespace 2025-05-09T08:17:01+00:00 Andrew Topp atopp@aus-it.com.au 2025-05-09T08:17:01+00:00 urn:sha1:7c9f908f8658126bbe0e9da9dc71be3db45bf940 * Re-introduce the whitespace/pattern matches ' ' and '_' as allowed * Perform a general Python regex validity check (not 100% 1003.2, but in combination with allowedChars, pretty close) * Introduce a warning against potentially malformed or over-complex patterns, but leave it up to the user to resolve - there are plenty of useful expressions we cannot validate easily 2025-05-08T16:12:35+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2025-05-02T14:31:00+00:00 urn:sha1:c823a6908468acc840fd959066a8079db36cd4b6 Add kernel options which apply during the boot: - isolcpus - nohz_full - rcu_nocbs - default_hugepagesz - hugepages - hugepagesz - numa_balancing - hpet - mce - nosoftlockup - nmi_watchdog CLI: ``` set system option kernel cpu disable-nmi-watchdog set system option kernel cpu isolate-cpus '1,2,4-5' set system option kernel cpu nohz-full '1,2,4-5' set system option kernel cpu rcu-no-cbs '1,2,4-5' set system option kernel disable-hpet set system option kernel disable-mce set system option kernel disable-softlockup set system option kernel memory default-hugepage-size '2M' set system option kernel memory disable-numa-balancing set system option kernel memory hugepage-size 1G hugepage-count '2' set system option kernel memory hugepage-size 2M hugepage-count '512' ``` 2025-03-20T21:00:10+00:00 Christian Breunig christian@breunig.cc 2025-03-20T21:00:10+00:00 urn:sha1:8021bdd62e4142caf4a5e82000c8ca3da99fcae4 Not 31 bytes or 33 bytes, but exactly 32. This matters, because 32 does not divide evenly by .75, so there's a padding character and the penultimate character does not include the whole base64 alphabet. Extend the base64 validator with an optional argument to define the length to match of the decrypted Base64 encoded string. Source: https://lists.zx2c4.com/pipermail/wireguard/2020-December/006222.html 2025-02-12T11:35:39+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-02-12T11:35:39+00:00 urn:sha1:b93937f3dff46be1ff49d60f47327e698e14f14b 2025-02-04T12:24:46+00:00 Nataliia Solomko natalirs1985@gmail.com 2025-01-31T10:56:51+00:00 urn:sha1:6ea6b3e8e8b607e61590bef9dbc40e56b58ebfda 2024-12-18T03:38:37+00:00 khramshinr khramshinr@gmail.com 2024-12-05T08:13:45+00:00 urn:sha1:f2b346c5391651cc38f870304ce9117c72c123bf Implement a command to configure QoS policy filters by ether properties. The supported match types include: - Destination: Specify the Ethernet destination address. - Protocol: Define the Ethernet protocol. - Source: Set the Ethernet source address. `set qos policy <type> <name> class <id> match <match-id> ether <destination|protocol|source> <val>` 2024-09-30T15:16:22+00:00 Daniil Baturin daniil@vyos.io 2024-09-30T15:16:22+00:00 urn:sha1:6b7159f2927f004320c77043d0c819a6b660806d validators: T6743: use native ipaddrcheck validator options for ranges 2024-09-27T15:51:50+00:00 Daniil Baturin daniil@baturin.org 2024-09-27T15:51:50+00:00 urn:sha1:0b7a2a052d0f07c448b371d35863e0f8a324675e