summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-08-20op-mode: T7741: Fixes for 'show interfaces kernel'l0crian1
Fixes for the following: - Tunnel interfaces report an IP address in the field where a MAC is expected - Podman created veth interfaces list it's parent network as a VRF instead of the actual VRF. - Long descriptions should wrap - Non useful interfaces shouldn't be shown.
2025-08-20Merge pull request #4670 from jestabro/commit-confirmJohn Estabrook
T7493: add vyconf support for commit-confirm
2025-08-20T7728: update git submodule for dynamically generate proposed configJohn Estabrook
2025-08-20T7493: config_mgmt console_scripts available in vyconf contextJohn Estabrook
2025-08-20T7493: use method load_config_obj in revert_softJohn Estabrook
2025-08-20T7493: add load_config_obj to load into vyconfdJohn Estabrook
2025-08-20Merge pull request #49 from jestabro/commit-confirmJohn Estabrook
T7728: T7734: update commit hash for dynamically generate proposed config
2025-08-20Merge pull request #4671 from davi2367/vrf-dhcpViacheslav Hletenko
kea: T6211: fix error in op_mode for VRF support for KEA
2025-08-20kea: T6211: fix error in op_mode for VRF support for KEADavid Vølker
2025-08-19T7728: T7734: update commit hash for dynamically generate proposed configJohn Estabrook
2025-08-19T7728: add package build target for convenienceJohn Estabrook
2025-08-19Merge pull request #4647 from natali-rs1985/T7678Daniil Baturin
T7678: Move "vpp settings host-resources" to "system option resource-limits"
2025-08-19Merge pull request #4662 from vyos/sever-sever-vpp-split-testsDaniil Baturin
T7719: Add VPP tests per PR before merging
2025-08-19Merge pull request #4652 from l0crian1/vid-to-vni-opDaniil Baturin
T7687: Add op-mode for VLAN-to-VNI mapping
2025-08-19T7678: Change node name to resource-limitsNataliia Solomko
2025-08-19Merge pull request #4508 from davi2367/vrf-dhcpDaniil Baturin
kea: T6211: add VRF support for KEA dhcp server
2025-08-19Merge pull request #4660 from jestabro/validate-treeJohn Estabrook
T7718: expose validate_tree* methods and add validate-config script
2025-08-19T7718: update git submodule for validate_tree_filterJohn Estabrook
2025-08-19Merge pull request #48 from jestabro/validate-treeJohn Estabrook
T7718: add binding for validate_tree_filter
2025-08-19T7718: update commit hashes for validate_tree_filterJohn Estabrook
2025-08-19T7718: add binding for validate_tree_filterJohn Estabrook
2025-08-19Merge pull request #4659 from sarthurdev/T7715Daniil Baturin
haproxy: T7715: Add rule matching on subdomains
2025-08-19haproxy: T7715: Move duplicate domain nodes into includesarthurdev
2025-08-19Merge branch 'current' into T7678Nataliia S.
2025-08-18T7718: add validate-config scriptJohn Estabrook
2025-08-18T7718: add python wrappers for validate_tree methodsJohn Estabrook
2025-08-17bgp: T7708: correct logic for route-reflector-client peer_as checkcanoziia
2025-08-15kea: T6211: add VRF support for KEA dhcp serverDavid Vølker
2025-08-14Merge pull request #4661 from jestabro/async-config-syncDaniil Baturin
http-api: T7711: config sync method should be async
2025-08-14Merge pull request #4658 from natali-rs1985/T7716Viacheslav Hletenko
T7716: VPP: Change defaults and add a warning about maximum routes count for current configuration
2025-08-14Merge pull request #4657 from jestabro/sync-config-on-saveDaniil Baturin
T7709: add explicit sync and atomic write on config file save
2025-08-14T7716: VPP: Change defaults and add a warning about maximum routes count for ↵Nataliia Solomko
current configuration
2025-08-14T7719: Add VPP tests per PR before mergingViacheslav Hletenko
Split smoketest and add VPP tests per PR, but before merging for the `package-smoketest.yml`
2025-08-13http-api: T7711: config sync method should be asyncJohn Estabrook
This is needed due to the recent change of the underlying method _configure_op to async.
2025-08-13haproxy: T7715: Add rule matching on subdomainssarthurdev
2025-08-13T7678: Add smoketest for host-resourcesNataliia Solomko
2025-08-13T7678: Remove host-resources from CLINataliia Solomko
It will be configured in section "system option host-resources"
2025-08-13T7678: Move "vpp settings host-resources" to "system option host-resources"Nataliia Solomko
2025-08-12T7709: add atomic write for config file saveJohn Estabrook
2025-08-12Merge pull request #4637 from alexandr-san4ez/T7562-currentDaniil Baturin
ipsec: T7562: Add support for `disable-uniqreqids` option in IPsec configs
2025-08-12Merge pull request #4655 from sever-sever/T7707Daniil Baturin
T7707: VPP add dependency vpp-crypto-engines required for IPsec
2025-08-12Merge pull request #4650 from sever-sever/T7697Daniil Baturin
T7697: Merge vyos-vpp repo into vyos-1x
2025-08-12Merge pull request #4656 from c-po/bonding-T7571Daniil Baturin
bond: T7571: fix inconsistent MAC address behaviour
2025-08-12Merge pull request #40 from dmbaturin/T7583-op-mode-runnerDaniil Baturin
op-mode: T7583: add a new operational command runner
2025-08-12ipsec: T7562: Add support for `disable-uniqreqids` option in IPsec configsOleksandr Kuchmystyi
This commit makes `set vpn ipsec disable-uniqreqids` work with the modern StrongSwan backend by setting `unique=never` in swanctl.conf for connections. This restores legacy behavior about multiple connections with the same identity.
2025-08-11Merge pull request #4645 from l0crian1/add-vni-map-descriptionChristian Breunig
vxlan: T7468: add VLAN-to-VNI mapping description
2025-08-11bond: T7571: fix inconsistent MAC address behaviourChristian Breunig
After upgrading from VyOS 1.3 to 1.4, there is an inconsistent behavior with MAC address assignment on bonded interfaces. In VyOS 1.3, bond interfaces used a hardware MAC address from one of the member interfaces. In 1.4, a synthetic MAC is used by default - generated by the Linux Kernel. Oddly, setting mode 802.3ad (which is also the default) temporarily causes the hardware MAC to be used again - until a reboot, after which the synthetic MAC returns. Deleting the mode config again causes the hardware MAC to be used. This inconsistent behavior has caused issues with MAC-based filtering in networks. The fix is to retrive the hardware MAC address from the first bond member interface and use set it explicitly for the bond interface.
2025-08-11T7707: VPP add dependency vpp-crypto-engines required for IPsecViacheslav
Add the dependency `vpp-crypto-engines` required for IPsec over VPP. Without this, VPP cannot handle IPsec SAs ``` vpp[1901]: linux-cp/ipsec: ipsec sa add cce6bfeb failure(err: -9) 10.0.0.1 -> 10.0.0.2 vpp[1901]: ipsec_sa_add_and_lock:548: No crypto engine support for sha-256-128 ```
2025-08-08Merge pull request #4653 from jestabro/op-cache-field-updateJohn Estabrook
T7699: Fix update of command/help fields in the op_mode_cache generator when paths are shared across files
2025-08-08T7697: VPP ignore pylint import vpp_apiViacheslav
Ignore import vpp_api to skip pylint check. The `python3-vpp-api` depends on `vpp` and we should not use VPP in the container. Use this workaround to skip pylint check.