summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-12-01interfaces: T8054: use --is-valid-intf-address for validating interface ↵Daniil Baturin
addresses
2025-12-01T8011: VPP fix log duplication in systemd journalViacheslav Hletenko
Set the standard output/error to null to avoid log duplication. Starting the service as "nodaemon" seems cause of this behavior.
2025-12-01T8030: VPP: Check support for changed driver tooNataliia Solomko
2025-11-28ipsec: T8001: Commit fails removing VTI interface in IPsec configOleksandr Kuchmystyi
Fix cases where commit or IPsec up/down hooks fail if the VTI interface has already been deleted or the `/tmp/ipsec_vti_interfaces` file does not exist. Changes: - Return empty dict from `get_interface_config()` if it returns None to avoid TypeError when accessing 'operstate' (vti_updown_db.py). - Use `open_vti_updown_db_for_create_or_update()` in `vti‑up‑down` script so the temporary interface tracking file is created automatically when missing.
2025-11-28Merge pull request #4824 from alexandr-san4ez/T4251-currentViacheslav Hletenko
syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS checks
2025-11-27Merge pull request #4873 from c-po/snmp-trapDaniil Baturin
snmp: T8039: fix v3 trap targets
2025-11-27Merge pull request #4863 from natali-rs1985/T8016Viacheslav Hletenko
vpp: T8016: Use "numeric" validator for acl port
2025-11-27Merge pull request #4868 from natali-rs1985/T8036Daniil Baturin
vpp: T8036: Commit fails removing nat44 static rule
2025-11-27vpp: T8016: Use "numeric" validator for acl portNataliia Solomko
2025-11-27Merge pull request #4870 from c-po/xml-nat-cleanupChristian Breunig
nat: T8038: remove duplicate XML definitions for <properties>
2025-11-27snmp: T8039: fix v3 trap targetsChristian Breunig
The generated Net-SNMP configuration for SNMPv3 trap-targets was fundamentally broken. Not only was the auth/priv type not written in uppercase letters, but also the ordering of transport protocol, IP(v6) address and port was wrong. To complete the issues above - IPv6 addresses did not get wrapped into mandatory [] brackets.
2025-11-26T8032: add protobuf files for analogue of sessionUnsavedJohn Estabrook
2025-11-26Merge pull request #4874 from jestabro/update-edit-level-awareJohn Estabrook
T8009: update commit hashes for vyconf edit-level aware session
2025-11-26T8009: update commit hashes for vyconf edit-level aware sessionJohn Estabrook
2025-11-26Merge pull request #4869 from c-po/T8034Christian Breunig
frr: T8034: use dict_search() for routing protocols to check if VRF is used
2025-11-26Merge pull request #4862 from jestabro/vyconf-edit-levelDaniil Baturin
T8009: add vyconf_cli_compat for retained options of cli-shell-api
2025-11-26Merge pull request #4865 from jestabro/check-unsaved-on-upgradeDaniil Baturin
T7319: check for unsaved commits before proceeding with 'add system image'
2025-11-26Merge pull request #4871 from jestabro/remove-perl-priority-refsDaniil Baturin
T8041: update comments referring to deprecated priority.pl
2025-11-25T7319: check unsaved_commits before upgradeJohn Estabrook
2025-11-25T8041: update comments referring to deprecated priority.plJohn Estabrook
2025-11-25nat: T8038: remove duplicate XML definitions for <properties>Christian Breunig
We can remove the XML <properties> because it's the same as already defined in #include <include/nat-rule.xml.i>
2025-11-25Merge pull request #4859 from cpcowart/cpcowart/send-cert-alwaysDaniil Baturin
T8027: vpn: adding config for swanctl "send-cert always"
2025-11-25frr: T8034: use dict_search() for routing protocols to check if VRF is usedChristian Breunig
dict_search() is save when passing in keys that do not exist in the dict we are working on.
2025-11-25Merge pull request #4860 from sarthurdev/ping-checkJohn Estabrook
kea: T7913: Fixes for ping-check handling
2025-11-25vpp: T8036: Commit fails removing nat44 static ruleNataliia Solomko
2025-11-24Merge pull request #4672 from apschultz/zone_default_firewall_rulesetSimon
firewall: T7739: Default ruleset for firewall zones
2025-11-24Merge pull request #4861 from c-po/bond-member-mtuChristian Breunig
bond: T8023: validate member interface min/max MTU
2025-11-24Merge pull request #4864 from jestabro/util-file-compareJohn Estabrook
T8031: file comparison in boolean check unsaved_commits should ignore blank lines
2025-11-23T8031: use util file_compare for check unsaved_commitsJohn Estabrook
2025-11-23T8031: add file comparison utility for comparison modulo empty linesJohn Estabrook
2025-11-22smoketests: adjust testcase MTU after lowering QEMU supported MTUChristian Breunig
We also do need to adjust all other smoketests/configutests which make use of MTU after https://github.com/vyos/vyos-build/pull/1070/commits/d84ad7e2e76bc309b the QEMU guest MTU was lowered.
2025-11-21T8027: vpn: adding config for swanctl "send-cert always"Chris Cowart
This setting seems to be required for various Apple clients to connect to the IKEv2 IPSec VPN.
2025-11-21smoketest: T8023: adjust base interface test for Vlan MTUsChristian Breunig
Some drivers are limited to an MTU of 1500 byte - e.g. when VyOS runs on PROXMOX with default bridge settings. We use lower values for the testcase test_vif_8021q_mtu_limits which will fit for almost every NIC, but keep the testcase logic intact.
2025-11-21bond: T8023: validate member interface min/max MTUChristian Breunig
It is impossible to set the bond interface MTU to be larger or lower then the limits of the underlaying interface MTU. Add proper commit validation and smoketest.
2025-11-22Merge pull request #4832 from kumvijaya/currentVijayakumar A
T7981: prs conflict check workflow updated to use schedule checks
2025-11-20T8009: add vyconf_cli_compat for retained options of cli-shell-apiJohn Estabrook
For integration with CLI completion and shell internal functions, use vyconf_cli_compat for replacing needed calls of cli-shell-api.
2025-11-20T8009: add generated protobuf files for edit_levelJohn Estabrook
2025-11-20Merge pull request #4844 from jestabro/show-configJohn Estabrook
T7988: adjust function name to distinguish compare from show config
2025-11-20kea: T7913: Fixes for ping-check handlingsarthurdev
- Kea docs state multi-threaded mode is required for ping checking. - Parent scope needs enabling if shared-network/subnet has ping-check enabled.
2025-11-20T7988: update commit hashes for show configJohn Estabrook
2025-11-20T7988: adjust function name to distinguish compare from show configJohn Estabrook
2025-11-20Merge pull request #4858 from c-po/login-warningDaniil Baturin
login: T8024: show user warning for unconfigured RADIUS/TACACS source-address
2025-11-19login: T8024: show user warning for unconfigured TACACS source-addressChristian Breunig
Add a commit-time check and warning to the user if the TACACS source-address is not configured on the system or the given VRF.
2025-11-19login: T8024: show user warning for unconfigured RADIUS source-addressChristian Breunig
Add a commit-time check and warning to the user if the RADIUS source-address (IPv4 or IPv6) is not configured on the system or the given VRF.
2025-11-19login: T8024: fix typo in TACACS error message if all servers are disabledChristian Breunig
2025-11-19Merge pull request #4854 from c-po/veth-fixViacheslav Hletenko
veth: T8017: bugfix KeyError: 'peer_name'
2025-11-19Merge pull request #4850 from sever-sever/T8012Christian Breunig
T8012: Add user vpp to user groups
2025-11-19T8012: Add user vpp to user groupsViacheslav Hletenko
To allow call VPP api without sudo - Get op-mode commands without sudo - Use API call in smoke-tests
2025-11-19Merge pull request #4856 from c-po/op-mode-install-cli-fixChristian Breunig
op-mode: T8000: fix environment when calling my_set
2025-11-19Merge pull request #4855 from sever-sever/T7970-vppconfViacheslav Hletenko
T7970: VPP use systemd-notify to start the service