summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-11-05T7915: minor fixes for consistent exception handling and error messagesJohn Estabrook
The addition of alert exn to vyos1x-config allows an audit of all raised exceptions, providing fixes for consistent handling and error reporting.
2025-11-05T7969: expose boolean test value_existsJohn Estabrook
2025-11-05firewall: T7112: Default action drop failsOleksandr Kuchmystyi
Prevent `KeyError` by safely handling missing 'member' dict in zone config. Add smoketest to verify commit fails gracefully when zone has no interfaces.
2025-11-04wlb: T7977: Updated smoketest to validate nft vmap weight bucketsl0crian1
2025-11-04Merge pull request #4828 from c-po/restart-container-vrfViacheslav Hletenko
container: T7305: fix VRF loss when restarting pods
2025-11-04Merge pull request #4825 from vyos/T7849Daniil Baturin
T7849: ZBF allow to use wildcard interfaces as member
2025-11-04veth: T7990: fix stale DHCP clients when removing virtual Ethernet pairsChristian Breunig
When removing a veth interface, the kernel automatically deletes its peer interface, since veth devices always exist in pairs. However, this automatic removal does not trigger the remove() helper in vyos.ifconfig.interfaces, which can leave associated DHCP(v6) clients running indefinitely. For example: ip link add veth0 type veth peer name veth1 ip link del dev veth1 Removing veth1 will also delete veth0 in the kernel, but the VyOS cleanup routines are never called for veth0. This patch ensures that peer removal correctly purges both interfaces and their associated state. This drops the workarounds in veth smoketest and falls back to the common interface smoketests from the inherited base class.
2025-11-04Merge pull request #4829 from c-po/pki-t7976Christian Breunig
pki: T7976: calls to node_changed_presence() must use unmangled config paths
2025-11-04Merge pull request #4747 from natali-rs1985/T7789Nataliia S.
T7789: T7661: VPP prevent failing to load XDP in clouds (ena/gve drivers)
2025-11-04syslog: T4251: Implement migration script for TLS sectionOleksandr Kuchmystyi
- Drop "tls enable" node (make "tls" a standalone key). - Split "tls permitted-peers" list by commas into multiple "tls permitted-peer" entries.
2025-11-04T7981: prs conflict check workflow updated to use schedulekumvijaya
2025-11-03container: T7305: fix VRF loss when restarting podsChristian Breunig
Container networks are only started when there is at least one active consumer. If a network is created without any attached containers, it does not need to be assigned to a VRF yet. When the last container in a pod is stopped, its associated container network is removed. Upon container restart, the kernel recreates the network, but the VRF assignment may be lost in the process. This change ensures that all container networks are correctly reattached to their designated VRFs when a pod restarts.
2025-11-03vyos.ifconfig: T7305: set_vrf() should call get_vrf() helperChristian Breunig
2025-11-03Merge pull request #4831 from jestabro/update-for-reloadJohn Estabrook
T7980: T7910: update libvyosconfig/Makefile for vyconfd restart/show_session
2025-11-03T7980: T7910: update libvyosconfig/Makefile for vyconfd restart/show_sessionsJohn Estabrook
2025-11-03Merge pull request #4808 from natali-rs1985/T7949Daniil Baturin
T7949: VPP add the ability to configure bond subinterfaces for NAT
2025-11-03Merge pull request #4827 from jestabro/vyconfd-restartDaniil Baturin
T7980: Load active config on vyconfd restart
2025-11-03Merge pull request #4818 from l0crian1/wlb-defaultsViacheslav Hletenko
wlb: T7966: Restore default route when interface disconnects/reconnects
2025-11-03Merge pull request #4819 from l0crian1/verify-nftables-docstringsViacheslav Hletenko
smoketests: T7971: Add docstrings to nftables verification helpers
2025-11-02pki: T7976: calls to node_changed_presence() must use unmangled config pathsChristian Breunig
We do use mangled config paths where pki = conf.get_config_dict(base, key_mangling=('-', '_'), ... returns a config dict where "-" is replaced by "_" when assembling the config dict keys. This does not work when we throw the retrieved path into ConfigDiff().node_changed_presence() https://github.com/vyos/vyos-1x/blob/07936657062c/src/conf_mode/pki.py#L259-L265 Add orig_path key which is preferred over path.
2025-11-01T7980: distinguish vyconfd initialization from restartJohn Estabrook
2025-11-01T7980: defer startup of vyconfd for consistent bookkeepingJohn Estabrook
To ensure consistency of vyconfd restart in the testing framework, defer startup until execution of set_vyconf_backend.py. This will be restored to vyos-router once vyos-boot-config-loader.py is adapted to vyconf.
2025-11-01Merge pull request #4820 from c-po/certbot-fixesChristian Breunig
pki: T7953: implement certbot_renew() function to have everything at one place
2025-10-31wlb: T7977: Fix weight calculation for multiple interfacesl0crian1
- Fixed issue in T7977 - Added smoketest for 3 or more interfaces in rule - Added wait_for function to utils/misc.py
2025-10-31T7789: T7661: VPP prevent failing to set XDP driver on cloudsNataliia Solomko
Some cloud NICs (ena, gve) fail to load XDP if all RX queues are configured. To avoid this, we limit the number of queues to half of the maximum supported by the driver.
2025-10-31T7849: ZBF allow to use wildcard interfaces as memberViacheslav Hletenko
Allow to use wildcard interfaces for zone-based firewall It should allow interfaces like ipoe*/pppoe*/l2tp*
2025-10-31syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS ↵Oleksandr Kuchmystyi
checks - Renamed `permitted-peers` to `permitted-peer` across templates, schema, and tests. - Added support for multiple `permitted-peer` entries and trimmed empty values. - Replaced TLS/UDP warning with ConfigError for strict validation. - Updated tests to use TCP for TLS and verified new validation logic.
2025-10-31Merge pull request #4822 from natali-rs1985/T7975Christian Breunig
T7975: VPP: Fix API calls for sFlow
2025-10-31T7849: Extend regex for constraint wildcard interfacesViacheslav Hletenko
Allow ipoe*, vpp and pod interfaceds
2025-10-30wlb: TT7966: Refactor dynamic nexthop resolutionl0crian1
2025-10-30T7975: VPP: Fix API calls for sFlowNataliia Solomko
2025-10-30Merge pull request #4813 from natali-rs1985/T7797Daniil Baturin
T7797: VPP: switching from XDP to DPDK driver fails in cloud vm (hv_netvsc)
2025-10-30Merge pull request #4702 from nvollmar/T6686Daniil Baturin
T6686: adds container health checks
2025-10-29smoketests: T7971: Add docstrings to nftables verification helpersl0crian1
2025-10-29pki: T7953: systemd certbot.service must not use PrivateTmpChristian Breunig
PrivateTmp needs to be disabled, otherwise we can not load the current VyOS configuration to reconfigure the service automatically when certbot runs.
2025-10-29pki: T7953: implement certbot_renew() function to have everything at one placeChristian Breunig
2025-10-29Merge pull request #4817 from c-po/dhcpv6-migrator-fixChristian Breunig
dhcpv6: T7967: fix migration script for automatic SLAAC selection
2025-10-29wlb: T7966: Restore default route when interface disconnects/reconnectsl0crian1
2025-10-29dhcpv6: T7967: fix migration script for automatic SLAAC selectionChristian Breunig
Commit f08a5700e7 ("dhcpv6: T7646: restore missing default route after upgrade") introduced a regression affecting both non-VIF and VIF interfaces. The addressing mode check in the migration logic was incorrect for both cases. For non-VIF interfaces, the migration was skipped entirely due to a missing configuration test. For VIF (VLAN) interfaces, the existing test always evaluated to true, since it incorrectly assumed that DHCPv6 was configured even when a static address was present. Smoketests have been extended to cover for these cases.
2025-10-29Merge pull request #4812 from c-po/pki-certbot-fixesChristian Breunig
pki: T7953: refactor internal dependency generation
2025-10-29Merge pull request #4810 from bl0way/T7896-frr-profileChristian Breunig
T7896: Add frr profile selection
2025-10-29frr: T7896: use proper XML CLI defaults in profile testcaseChristian Breunig
2025-10-29frr: T7896: Configure frr profile with 'system frr profile' commandbl0way
Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-10-28Merge pull request #4815 from jestabro/fix-indent-option-82John Estabrook
dhcp-server: T3936: fix indent typo
2025-10-28dhcp-server: T3936: fix indent typoJohn Estabrook
2025-10-28dhcp-server: T3936: Added support for DHCP Option 82 (#4665)cblackburn-igl
* dhcp-server: T3936: Added support for DHCP Option 82 This commit adds support in both the CLI and the underlying code for DHCP Option 82 to be used to filter/route DHCP address assignments. The primary use case for this is to support enterprise switches which can "tag" DHCP requests with physical real world informaiton such as which switch first saw the request and which port it originated from (known in this context as remote-id and circuit-id). Once client-classes have been defined they can be assigned to subnets or ranges so that only certain addresses get assigned to specific requests. There is also a corresponding documentation update which pairs with this code change. (cherry picked from commit 326b5e713cb363a2b9f69e2204c4ee2ccd9939bb) * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update interface-definitions/include/dhcp/dhcp-server-common-config.xml.i Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> --------- Co-authored-by: Daniil Baturin <daniil@baturin.org> Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com>
2025-10-28Merge pull request #4796 from natali-rs1985/T7938Daniil Baturin
T7938: VPP: Rewrite sFlow implementation
2025-10-27Merge pull request #4811 from c-po/del-container-image-fixChristian Breunig
T7957: filter stderr when deleting container images
2025-10-27T7797: VPP: switching from XDP to DPDK driver fails in cloud vm (hv_netvsc)Nataliia Solomko
2025-10-27Merge pull request #4806 from alexandr-san4ez/T7906-currentChristian Breunig
haproxy: T7906: Probing of a port other than the one to which normal traffic is sent
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-08 05:41:50 +0000