summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-03-31Merge branch 'vyos:current' into ocserv_local_otpgoodNETnick
2022-03-30vyos.ifconfig: make add_addr() method more reader firendlyChristian Poessinger
2022-03-30T4319: do not try to add ::1/128 to lo if IPv6 is disabledDaniil Baturin
2022-03-28Revert "openvpn: T4230: globally enable ip_nonlocal_bind"Daniil Baturin
This reverts commit 1cbcbf40b7721849f9696c05fac65db010a66b7c.
2022-03-27Merge pull request #1253 from jestabro/gql-test-nodeDaniil Baturin
graphql: T3993: add unsettable gql option; this is not exposed by CLI
2022-03-27graphql: T3993: add unsettable gql option; this is not exposed by CLIJohn Estabrook
2022-03-26vyos.validate: T4321: make is_addr_assigned() VRF awareChristian Poessinger
Commit 1bfe09f9 ("vyos.validate: T4321: make is_intf_addr_assigned() VRF aware") added VRF support for an interface bound function. As an interface can only be bound to one VRF check makes less sense. This commit moves the VRF awareness from is_intf_addr_assigned() to is_addr_assigned() so we check the VRF assignment even prior of calling is_intf_addr_assigned() and fail fast.
2022-03-26bgp: T4321: check neighbor IP addresses against VRF contextChristian Poessinger
2022-03-26vyos.validate: T4321: make is_intf_addr_assigned() VRF awareChristian Poessinger
2022-03-25smoketest: ipv6: fix testcase after using new sysctl interfaceChristian Poessinger
2022-03-25smoketest: mpls: disable debug outputChristian Poessinger
2022-03-25mpls: T915: use vyos.util.sysctl_write() helper functionChristian Poessinger
2022-03-25vyos.util: T4319: rename sysctl() -> sysctl_write()Christian Poessinger
2022-03-25ipv6: T4319: do not configure IPv6 related settings if it's disabledChristian Poessinger
2022-03-25system: T4319: align ipv6 settings with ipv4 by using get_config_dict()Christian Poessinger
2022-03-25vyos.util: T4319: provide generic sysctl_read() helperChristian Poessinger
2022-03-25xml: T4319: use common building block for table-size CLI optionChristian Poessinger
2022-03-25T4319: "system ip(v6)" must run before any interface operationChristian Poessinger
2022-03-24ipsec: T4288: bump config version 8 -> 9Christian Poessinger
2022-03-24ipsec: T4288: drop leading empty line to detect runtime environmentChristian Poessinger
2022-03-24Merge pull request #1251 from srividya0208/T4288aChristian Poessinger
ike-group: T4288 : close-action is missing in swanctl.conf
2022-03-24Merge pull request #1248 from sever-sever/T4290Christian Poessinger
bgp: T4290: Add verify source-interface for none ip neighbor
2022-03-24openvpn: T4294: force service restart on openvpn-option node changeChristian Poessinger
2022-03-24ike-group: T4288 : close-action is missing in swanctl.confsrividya0208
close-action parameter is missing in the swanctl.conf file
2022-03-23bgp: T4314: add missing check to migration scriptJohn Estabrook
2022-03-23l2tpv3: T1923: remove duplicate mtu includeChristian Poessinger
2022-03-22Merge pull request #1252 from dmbaturin/T4313Christian Poessinger
T4313: handle exceptions in the "generate public-key-command" script
2022-03-22T4313: handle exceptions in the "generate public-key-command" scriptDaniil Baturin
2022-03-22qos: T4284: delete traffic-policy CLI path via MakefileChristian Poessinger
Implementation is still work in progress, as such the CLI XML definitions are published but the Python code does not work. In this case we must ensure XML backed node.def files are deleted after generation so they do not conflict with the current vyatta-cfg-qos implementation.
2022-03-21qos: T4284: initial XML interface definitions for rewriteChristian Poessinger
2022-03-21mirror: T3089: add verify_mirror() also for bond and bridge interfacesChristian Poessinger
2022-03-20Merge pull request #1250 from fett0/T4304Christian Poessinger
OSPF : T4304: Set import/export filter inter-area prefix
2022-03-19smoketest: Verify export-list rule to ospf-areafett0
2022-03-18OSPF : T4304: add check access-list is definedfett0
2022-03-17OSPF : T4304: Set import/export filter inter-area prefixfett0
2022-03-16frr: T4302: fix Jinja2 template to match new FRR syntaxChristian Poessinger
According to a wrong bug [1] there is no longer a vrf suffix available for interfaces. This got changed in [2] which no longer print vrf name for interface config when using vrf-lite. 1: https://github.com/FRRouting/frr/issues/10805 2: https://github.com/FRRouting/frr/pull/10411
2022-03-16smoketest: remove failfast=True from certian testsChristian Poessinger
2022-03-16ocserv: T4231: Added OTP support for Openconnect 2FAgoodNETnick
2022-03-15Merge pull request #1249 from zdc/T4301-sagittaChristian Poessinger
bonding: T4301: Fixed arp-monitor option
2022-03-15frr: T4302: upgrade to version 8.2Christian Poessinger
2022-03-15bonding: T4301: Fixed arp-monitor optionzsdc
In verify function for arp-monitor option was used by mistake an extra conversion for incoming data before comparing items. This commit removed these unnecessary conversions and makes the option operable.
2022-03-14Merge pull request #1247 from nicolas-fort/T4286Christian Poessinger
Firewall: T4286: Correct ipv6-range validator
2022-03-13bgp: T4290: Add verify source-interface for none ip neighborViacheslav Hletenko
When we use neighbor as interface we must not use option 'source-interface' for example: neighbor eth0 source-interface eth0 Such option can be used for IP/IPv6 neighbors
2022-03-12Firewall: T4286: Correct ipv6-range validatorNicolas Fort
2022-03-12Merge branch 'T2493-nexthop-unchanged' of https://github.com/plett/vyos-1x ↵Christian Poessinger
into current * 'T2493-nexthop-unchanged' of https://github.com/plett/vyos-1x: policy: T2493 ip-next-hop unchanged & peer-address
2022-03-12Merge pull request #1241 from zdc/T4250-sagittaChristian Poessinger
logrotate: T4250: Fixed logrotate config generation
2022-03-12Merge pull request #1246 from sever-sever/T4265Christian Poessinger
bgp: T4265: Add op-mode for bgp flowspec routes
2022-03-11bgp: T4265: Add op-mode for bgp flowspec routesViacheslav Hletenko
2022-03-11Merge pull request #1245 from dberlin/patch-1Christian Poessinger
[Ethtool] T4297: Update drivers supporting speed/flow/duplex
2022-03-11[Ethtool] T4297: Update drivers supporting speed/flow/duplexDaniel Berlin
The iavf, ice, and i40e drivers do not support speed, flow, or duplex control using ethtool. As a result, interface configuration changes fail to commit when using those drivers. This patch fixes that by correctly marking those drivers as not supporting those controls.