diff options
| author | David Vølker <david@voelker.dk> | 2026-06-01 08:09:06 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-07-01 21:51:21 +0200 |
| commit | 0d3ac22b95cef90e7c54ef823c00bb59b935c158 (patch) | |
| tree | d4655b06e0c9976a5ecdeae87205e944e098c7b9 /data/config-mode-dependencies | |
| parent | 063e007a5a8eac3bb9ad101206dc94734eeaa595 (diff) | |
| download | vyos-1x-0d3ac22b95cef90e7c54ef823c00bb59b935c158.tar.gz vyos-1x-0d3ac22b95cef90e7c54ef823c00bb59b935c158.zip | |
firewall: T8761: re-introduce VRF interface names in generated firewall config
This change re-implements the intended behaviour from T4180 aswell as from
T4506, it ensures that both the vrf-member interface aswell as the vrf itself
is added as an oifname -> meaning that traffic traversing and originating from
withing VyOS is matches outbound.
Changes done by c-po:
* re-sort dependency list to keep diff low
* vyos.configdict.is_vrf_changed() should return early and not carry
over the to-be return value
* keep common coding style (dict by . separation) in nftables-zone.j2
Co-authored-by: Christian Breunig <christian@breunig.cc>
Diffstat (limited to 'data/config-mode-dependencies')
| -rw-r--r-- | data/config-mode-dependencies/vyos-1x.json | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/data/config-mode-dependencies/vyos-1x.json b/data/config-mode-dependencies/vyos-1x.json index 6b9cc0e42..24118a02b 100644 --- a/data/config-mode-dependencies/vyos-1x.json +++ b/data/config-mode-dependencies/vyos-1x.json @@ -9,41 +9,71 @@ }, "interfaces_bonding": { "ethernet": ["interfaces_ethernet"], + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_bridge": { "vxlan": ["interfaces_vxlan"], "wlan": ["interfaces_wireless"], + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, + "interfaces_dummy": { + "firewall": ["firewall"] + }, "interfaces_ethernet": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_geneve": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_l2tpv3": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_macsec": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, + "interfaces_openvpn": { + "firewall": ["firewall"] + }, + "interfaces_pppoe": { + "firewall": ["firewall"] + }, "interfaces_pseudo_ethernet": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, + "interfaces_sstpc": { + "firewall": ["firewall"] + }, + "interfaces_tunnel": { + "firewall": ["firewall"] + }, "interfaces_virtual_ethernet": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, + "interfaces_vti": { + "firewall": ["firewall"] + }, "interfaces_vxlan": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_wireless": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_wwan": { + "firewall": ["firewall"], "static_arp": ["protocols_static_arp"] }, "interfaces_wireguard": { + "firewall": ["firewall"], "vxlan": ["interfaces_vxlan"] }, "load_balancing_wan": { |