summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-07-06firewall: T4500: Fix logrotate size to match rsyslog default valuesarthurdev
2022-07-06Merge pull request #1395 from aapostoliuk/T4513Viacheslav Hletenko
webproxy: T4513: Fixed path to webroxy log files
2022-07-06webproxy: T4513: Fixed path to webroxy log filesaapostoliuk
Fixed path to webproxy log files in webproxy monitor commands
2022-07-05Merge pull request #1394 from sarthurdev/zone_default_logChristian Poessinger
zone-policy: T4512: Add support for `enable-default-log`
2022-07-05Merge pull request #1393 from sarthurdev/firewall_migrateChristian Poessinger
firewall: T2199: Fix migration when `icmpv6 type` is an integer
2022-07-05zone-policy: T4512: Add support for `enable-default-log`sarthurdev
2022-07-05firewall: T2199: Fix migration when `icmpv6 type` is an integersarthurdev
2022-07-05Merge pull request #1389 from sever-sever/T4509Christian Poessinger
dns: T4509: Add dns64-prefix option
2022-07-05op-mode: bgp: T4494: re-use available building blocks for BGP resetsChristian Poessinger
2022-07-05op-mode: bgp: T4494: add "reset bgp" op-mode treeChristian Poessinger
2022-07-05dns: T4509: Add dns64-prefix optionViacheslav Hletenko
rfc6147: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers set service dns forwarding dns64-prefix 2001:db8:aabb::/96
2022-07-05op-mode: bgp: T4494: drop incomplete "reset ipv6 bgp" commandChristian Poessinger
2022-07-05Merge pull request #1379 from sever-sever/T4494Christian Poessinger
bgp: T4494: Ability to reset bgp in VRF
2022-07-04Merge pull request #1386 from sarthurdev/geoip_negateChristian Poessinger
firewall: T4299: Add ability to inverse match country-codes
2022-07-04firewall: T4299: Add ability to inverse match country codessarthurdev
2022-07-04ntp: T4456: call verify_vrf() before individual interface validationChristian Poessinger
It makes no sense to test against a VRF that might not exist at all.
2022-07-04dhclient: T2393: fix "Failed to parse boolean value, ignoring: SIGKILL"Christian Poessinger
Commit 19789463 ("dhclient: T2393: introduce 20 seconds stop timeout - required for smoketesting on Qemu") assigned a string to a boolean field. This has been fixed.
2022-07-04ntp: T4456: support listening on specified interfaceChristian Poessinger
When clients only use DHCP for interface addressing we can not bind NTPd to an address - as it will fail if the address changes. This commit adds support to bind ntpd to a given interface in addition to a given address. set system ntp interface <name>
2022-07-04xml: include: interface - fix help stringChristian Poessinger
2022-07-04Merge pull request #1382 from sever-sever/T4378Viacheslav Hletenko
dns: T4378: Allow wildcard A AAAA record with option all
2022-07-04Merge pull request #1388 from zdc/T4528-sagittaChristian Poessinger
event-handler: T4508: Fixed environment variables
2022-07-04event-handler: T4508: Fixed environment variableszsdc
Fixed usage of environment variables - made an individual environment variable for an event a true copy, instead of a reference to a single environ dictionary. Also, reorganized imports according to PEP8.
2022-07-04dns: T4378: Allow wildcard A AAAA record with option anyViacheslav Hletenko
Ability to set wildcard record for authoritative-domain set authoritative-domain example.com records a any address 192.0.2.11 cat /run/powerdns/zone.example.com.conf * 300 A 192.0.2.11
2022-07-04smoketest: bridge: T4498: add IGMP testcaseChristian Poessinger
2022-07-04Merge pull request #1385 from sarthurdev/ovpn-test-pkiChristian Poessinger
smoketest: T4485: Add CRL for configtest, add script for configtest PKI objects
2022-07-03Merge pull request #1387 from sever-sever/T4507Christian Poessinger
ipoe: T4507: Add option rate-limit for RADIUS authentication
2022-07-02ipoe: T4507: Add option rate-limit for RADIUS authenticationViacheslav Hletenko
Add rate-limit options: attribute, muptiplier and vendor set service ipoe-server auth radius rate-limit attribute 'Mikrotik-Rate-Limit' set service ipoe-server auth radius rate-limit enable set service ipoe-server auth radius rate-limit multiplier '0.001' set service ipoe-server auth radius rate-limit vendor 'Miktorik'
2022-07-01smoketest: T4485: Move smoketest PKI generation to vyos-1xsarthurdev
Allows easy creation of test PKI objects using `vyos.pki` module Generates objects for PKI migration tests
2022-07-01smoketest: T2455: add interface smoketestsChristian Poessinger
2022-07-01Merge pull request #1384 from vyos/revert-1326-T4429Viacheslav Hletenko
Revert "op-mode: T4429: Ability to detect external IP address"
2022-07-01Revert "op-mode: T4429: Ability to detect external IP address"Daniil Baturin
2022-07-01Merge pull request #1383 from sever-sever/T4501Christian Poessinger
event-handler: T4501: Fix for syslog-identifier
2022-07-01openvpn: T4485: Add CRL to OpenVPN config testsarthurdev
2022-07-01event-handler: T4501: Fix for syslog-identifierViacheslav Hletenko
In dictionary we get "syslog-identifier" with dash But we try to parse option with underscore "syslog_identifier" Fix it
2022-07-01bgp: T4490: use common vyos.base.Warning() wrapperChristian Poessinger
2022-07-01Merge branch 'T4490' of https://github.com/sever-sever/vyos-1x into currentChristian Poessinger
* 'T4490' of https://github.com/sever-sever/vyos-1x: bgp: T4490: Add informational message for peer withour AFI
2022-07-01Merge pull request #1380 from sarthurdev/ovpn-multi-caChristian Poessinger
openvpn: T4485: Accept multiple tls ca-certificate values
2022-07-01xml: update interface help stringsChristian Poessinger
2022-07-01xml: vti: T2455: state that VTI is now of type XFRMChristian Poessinger
2022-07-01vti: T2455: add link-local IPv6 address supportChristian Poessinger
Interface should receive an auto generated link-local IPv6 address as we do with all VyOS interfaces by default.
2022-07-01vti: T2455: add IPv6 address supportChristian Poessinger
2022-07-01xml: include: add missing prefix in include file commentChristian Poessinger
2022-06-29router-advert: T4477: support RDNSS lifetime optionChristian Poessinger
set service router-advert interface eth0 name-server-lifetime <value>
2022-06-29xml: streamline interface definition filenames, drop _Christian Poessinger
Some files that described the CLI used underscores to split CLI levels, some others did not. This commit removes all underscores from the filename and only makes use of a hyphen.
2022-06-29bgp: T4494: Ability to reset bgp in VRFViacheslav Hletenko
reset ip bgp vrf foo 192.0.2.2
2022-06-29openvpn: T4485: Update PKI migrator to handle full CA chain migrationsarthurdev
* Also determines and maps to correct CA for migrated CRL
2022-06-29Merge pull request #1378 from vfreex/add-igmp-snooping-optionChristian Poessinger
bridge: T4498: add option to enable/disable IGMP/MLD snooping
2022-06-29bridge: add option to enable/disable IGMP/MLD snoopingYuxiang Zhu
This PR adds an config option to enable/disable IGMP/MLD snooping. ``` set interfaces bridge brN igmp snooping ```
2022-06-29openvpn: T4485: Accept multiple `tls ca-certificate` valuessarthurdev
2022-06-28Merge pull request #1376 from sever-sever/T4473Christian Poessinger
containers: T4473: Fix create container with not exist network