| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-12-01 | interfaces: T8054: use --is-valid-intf-address for validating interface ↵ | Daniil Baturin | |
| addresses | |||
| 2025-12-01 | T8011: VPP fix log duplication in systemd journal | Viacheslav Hletenko | |
| Set the standard output/error to null to avoid log duplication. Starting the service as "nodaemon" seems cause of this behavior. | |||
| 2025-12-01 | T8030: VPP: Check support for changed driver too | Nataliia Solomko | |
| 2025-11-28 | ipsec: T8001: Commit fails removing VTI interface in IPsec config | Oleksandr Kuchmystyi | |
| Fix cases where commit or IPsec up/down hooks fail if the VTI interface has already been deleted or the `/tmp/ipsec_vti_interfaces` file does not exist. Changes: - Return empty dict from `get_interface_config()` if it returns None to avoid TypeError when accessing 'operstate' (vti_updown_db.py). - Use `open_vti_updown_db_for_create_or_update()` in `vti‑up‑down` script so the temporary interface tracking file is created automatically when missing. | |||
| 2025-11-28 | Merge pull request #4824 from alexandr-san4ez/T4251-current | Viacheslav Hletenko | |
| syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS checks | |||
| 2025-11-27 | Merge pull request #4873 from c-po/snmp-trap | Daniil Baturin | |
| snmp: T8039: fix v3 trap targets | |||
| 2025-11-27 | Merge pull request #4863 from natali-rs1985/T8016 | Viacheslav Hletenko | |
| vpp: T8016: Use "numeric" validator for acl port | |||
| 2025-11-27 | Merge pull request #4868 from natali-rs1985/T8036 | Daniil Baturin | |
| vpp: T8036: Commit fails removing nat44 static rule | |||
| 2025-11-27 | vpp: T8016: Use "numeric" validator for acl port | Nataliia Solomko | |
| 2025-11-27 | Merge pull request #4870 from c-po/xml-nat-cleanup | Christian Breunig | |
| nat: T8038: remove duplicate XML definitions for <properties> | |||
| 2025-11-27 | snmp: T8039: fix v3 trap targets | Christian Breunig | |
| The generated Net-SNMP configuration for SNMPv3 trap-targets was fundamentally broken. Not only was the auth/priv type not written in uppercase letters, but also the ordering of transport protocol, IP(v6) address and port was wrong. To complete the issues above - IPv6 addresses did not get wrapped into mandatory [] brackets. | |||
| 2025-11-26 | T8032: add protobuf files for analogue of sessionUnsaved | John Estabrook | |
| 2025-11-26 | Merge pull request #4874 from jestabro/update-edit-level-aware | John Estabrook | |
| T8009: update commit hashes for vyconf edit-level aware session | |||
| 2025-11-26 | T8009: update commit hashes for vyconf edit-level aware session | John Estabrook | |
| 2025-11-26 | Merge pull request #4869 from c-po/T8034 | Christian Breunig | |
| frr: T8034: use dict_search() for routing protocols to check if VRF is used | |||
| 2025-11-26 | Merge pull request #4862 from jestabro/vyconf-edit-level | Daniil Baturin | |
| T8009: add vyconf_cli_compat for retained options of cli-shell-api | |||
| 2025-11-26 | Merge pull request #4865 from jestabro/check-unsaved-on-upgrade | Daniil Baturin | |
| T7319: check for unsaved commits before proceeding with 'add system image' | |||
| 2025-11-26 | Merge pull request #4871 from jestabro/remove-perl-priority-refs | Daniil Baturin | |
| T8041: update comments referring to deprecated priority.pl | |||
| 2025-11-25 | T7319: check unsaved_commits before upgrade | John Estabrook | |
| 2025-11-25 | T8041: update comments referring to deprecated priority.pl | John Estabrook | |
| 2025-11-25 | nat: T8038: remove duplicate XML definitions for <properties> | Christian Breunig | |
| We can remove the XML <properties> because it's the same as already defined in #include <include/nat-rule.xml.i> | |||
| 2025-11-25 | Merge pull request #4859 from cpcowart/cpcowart/send-cert-always | Daniil Baturin | |
| T8027: vpn: adding config for swanctl "send-cert always" | |||
| 2025-11-25 | frr: T8034: use dict_search() for routing protocols to check if VRF is used | Christian Breunig | |
| dict_search() is save when passing in keys that do not exist in the dict we are working on. | |||
| 2025-11-25 | Merge pull request #4860 from sarthurdev/ping-check | John Estabrook | |
| kea: T7913: Fixes for ping-check handling | |||
| 2025-11-25 | vpp: T8036: Commit fails removing nat44 static rule | Nataliia Solomko | |
| 2025-11-24 | Merge pull request #4672 from apschultz/zone_default_firewall_ruleset | Simon | |
| firewall: T7739: Default ruleset for firewall zones | |||
| 2025-11-24 | Merge pull request #4861 from c-po/bond-member-mtu | Christian Breunig | |
| bond: T8023: validate member interface min/max MTU | |||
| 2025-11-24 | Merge pull request #4864 from jestabro/util-file-compare | John Estabrook | |
| T8031: file comparison in boolean check unsaved_commits should ignore blank lines | |||
| 2025-11-23 | T8031: use util file_compare for check unsaved_commits | John Estabrook | |
| 2025-11-23 | T8031: add file comparison utility for comparison modulo empty lines | John Estabrook | |
| 2025-11-22 | smoketests: adjust testcase MTU after lowering QEMU supported MTU | Christian Breunig | |
| We also do need to adjust all other smoketests/configutests which make use of MTU after https://github.com/vyos/vyos-build/pull/1070/commits/d84ad7e2e76bc309b the QEMU guest MTU was lowered. | |||
| 2025-11-21 | T8027: vpn: adding config for swanctl "send-cert always" | Chris Cowart | |
| This setting seems to be required for various Apple clients to connect to the IKEv2 IPSec VPN. | |||
| 2025-11-21 | smoketest: T8023: adjust base interface test for Vlan MTUs | Christian Breunig | |
| Some drivers are limited to an MTU of 1500 byte - e.g. when VyOS runs on PROXMOX with default bridge settings. We use lower values for the testcase test_vif_8021q_mtu_limits which will fit for almost every NIC, but keep the testcase logic intact. | |||
| 2025-11-21 | bond: T8023: validate member interface min/max MTU | Christian Breunig | |
| It is impossible to set the bond interface MTU to be larger or lower then the limits of the underlaying interface MTU. Add proper commit validation and smoketest. | |||
| 2025-11-22 | Merge pull request #4832 from kumvijaya/current | Vijayakumar A | |
| T7981: prs conflict check workflow updated to use schedule checks | |||
| 2025-11-20 | T8009: add vyconf_cli_compat for retained options of cli-shell-api | John Estabrook | |
| For integration with CLI completion and shell internal functions, use vyconf_cli_compat for replacing needed calls of cli-shell-api. | |||
| 2025-11-20 | T8009: add generated protobuf files for edit_level | John Estabrook | |
| 2025-11-20 | Merge pull request #4844 from jestabro/show-config | John Estabrook | |
| T7988: adjust function name to distinguish compare from show config | |||
| 2025-11-20 | kea: T7913: Fixes for ping-check handling | sarthurdev | |
| - Kea docs state multi-threaded mode is required for ping checking. - Parent scope needs enabling if shared-network/subnet has ping-check enabled. | |||
| 2025-11-20 | T7988: update commit hashes for show config | John Estabrook | |
| 2025-11-20 | T7988: adjust function name to distinguish compare from show config | John Estabrook | |
| 2025-11-20 | Merge pull request #4858 from c-po/login-warning | Daniil Baturin | |
| login: T8024: show user warning for unconfigured RADIUS/TACACS source-address | |||
| 2025-11-19 | login: T8024: show user warning for unconfigured TACACS source-address | Christian Breunig | |
| Add a commit-time check and warning to the user if the TACACS source-address is not configured on the system or the given VRF. | |||
| 2025-11-19 | login: T8024: show user warning for unconfigured RADIUS source-address | Christian Breunig | |
| Add a commit-time check and warning to the user if the RADIUS source-address (IPv4 or IPv6) is not configured on the system or the given VRF. | |||
| 2025-11-19 | login: T8024: fix typo in TACACS error message if all servers are disabled | Christian Breunig | |
| 2025-11-19 | Merge pull request #4854 from c-po/veth-fix | Viacheslav Hletenko | |
| veth: T8017: bugfix KeyError: 'peer_name' | |||
| 2025-11-19 | Merge pull request #4850 from sever-sever/T8012 | Christian Breunig | |
| T8012: Add user vpp to user groups | |||
| 2025-11-19 | T8012: Add user vpp to user groups | Viacheslav Hletenko | |
| To allow call VPP api without sudo - Get op-mode commands without sudo - Use API call in smoke-tests | |||
| 2025-11-19 | Merge pull request #4856 from c-po/op-mode-install-cli-fix | Christian Breunig | |
| op-mode: T8000: fix environment when calling my_set | |||
| 2025-11-19 | Merge pull request #4855 from sever-sever/T7970-vppconf | Viacheslav Hletenko | |
| T7970: VPP use systemd-notify to start the service | |||
