VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=mergify%2Fbp%2Fcircinus%2Fpr-3903 2024-08-01T05:52:51+00:00 2024-08-01T05:52:51+00:00 Lucas Christian lucas@lucasec.com 2024-07-30T06:22:05+00:00 urn:sha1:1171e3d359cc2718afc80fccfc99c7ecccf95dbd (cherry picked from commit e97d86e619e134f4dfda06efb7df4a3296d17b95) 2024-07-31T12:27:38+00:00 aapostoliuk 108394744+aapostoliuk@users.noreply.github.com 2024-07-31T12:26:25+00:00 urn:sha1:d213e3f09ad38d3db26e7293ae1e6bc83790016e Removed unused pprint module (cherry picked from commit cb1834742f4ed01d99d6396af8339dd59788ef65) 2024-07-31T09:09:05+00:00 Christian Breunig christian@breunig.cc 2024-07-31T09:09:05+00:00 urn:sha1:cdfa92e5c0c80962175c56305001a7218c923395 ipsec: T6148: Fixed reset command by adding init after terminating (backport #3763) 2024-07-31T06:00:31+00:00 Christian Breunig christian@breunig.cc 2024-07-31T06:00:31+00:00 urn:sha1:10bf3c85278370ba03ca371ce3598e1fae470998 T6313: Add "NAT" to "generate" command for rule resequence (backport #3715) 2024-07-30T13:53:07+00:00 Andrew Topp andrewt@telekinetica.net 2024-07-08T13:58:25+00:00 urn:sha1:9d8609c97650c0a65856bdfe705b740070de9f1a * Created op-mode command "restart serial console" * Relocated service control to vyos.utils.serial helpers, used by conf- and op-mode serial console handling * Checking for logged-in serial sessions that may be affected by getty reconfig * Warning the user when changes are committed and serial sessions are active, otherwise restart services as normal. No prompts issued during commit, all config gen/commit steps still occur except for the service restarts (everything remains consistent) * To apply committed changes, user will need to run "restart serial console" to complete the process or reboot the whole router * Added additional flags and target filtering for generic use of helpers. (cherry picked from commit bc9049ebd76576d727fa87b10b96d1616950237c) 2024-07-30T12:21:51+00:00 aapostoliuk 108394744+aapostoliuk@users.noreply.github.com 2024-07-28T12:54:08+00:00 urn:sha1:9be079ac855b20622240c0e577c7f5db9d075798 Strongswan does not initiate session after termination via vici. Added an CHILD SAs initialization on the initiator side of the tunnel. (cherry picked from commit 8838b29180ccc26d2aca0c22c9c8ca5e274825b2) 2024-07-30T12:00:36+00:00 khramshinr khramshinr@gmail.com 2024-06-24T13:56:21+00:00 urn:sha1:014bf70b494bc0c479e97d8fa4cfe88d4c0d8498 (cherry picked from commit 142545b0535d0a994182389c99b7bcd6d7c37c24) 2024-07-30T07:47:39+00:00 Christian Breunig christian@breunig.cc 2024-07-26T11:43:31+00:00 urn:sha1:ebac16ea3f242c0a5a35d38b65e549130db7b763 (cherry picked from commit 31acb42ecdf4ecf0f636f831f42a845b8a00d367) 2024-07-30T07:47:39+00:00 Christian Breunig christian@breunig.cc 2024-07-26T11:25:19+00:00 urn:sha1:a05251f766c68fbff506bc01f6c095350f904bb7 When any of the following features NAT, NAT66 or Firewall is enabled, for every VRF on the CLI we install one rule into nftables for conntrack: chain vrf_zones_ct_in { type filter hook prerouting priority raw; policy accept; counter packets 3113 bytes 32227 ct original zone set iifname map @ct_iface_map counter packets 8550 bytes 80739 ct original zone set iifname map @ct_iface_map counter packets 5644 bytes 67697 ct original zone set iifname map @ct_iface_map } This is superfluous. (cherry picked from commit d6e9824f1612bd8c876437c071f31a1a0f44af5d) 2024-07-26T10:52:29+00:00 Christian Breunig christian@breunig.cc 2024-07-26T10:52:29+00:00 urn:sha1:aaaabd60e2fedd9416d9de2932af2f122b33b67f T6605: restore configd error formatting to be consistent with CLI (backport #3868)