summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-26https: T3357: redirect http request on non-standard https portJohn Estabrook
2021-02-26Merge pull request #746 from sever-sever/T3324Christian Poessinger
bgp: T3324: Add checks for peer password
2021-02-26bgp: T3324: Add checks for peer passwordsever-sever
2021-02-26Merge pull request #745 from sever-sever/T3323Daniil Baturin
bgp: T3323: Add verify for ttl-security and ebgp-multihop
2021-02-26bgp: T3323: Add verify for ttl-security and ebgp-multihopsever-sever
2021-02-25configd: T3302: set mode correctly on open for redirectJohn Estabrook
2021-02-25smoketest: configs: extend bgp-small-internet-exchange with more policiesChristian Poessinger
2021-02-25smoketest: extend "policy" smoke testsChristian Poessinger
Only missing is the route-map smoketest which tens to become very "heavy"
2021-02-24smoketest: add basic "policy access-list" test caseChristian Poessinger
2021-02-24test: remove "test_ethtool.py" as this does not run on JenkinsChristian Poessinger
2021-02-24ethernet: T3163: fix typos in vyos.ethtool commentsChristian Poessinger
2021-02-24Debian: bump package version to 1.4dev0Christian Poessinger
2021-02-24ethernet: T3163: not all NIC drivers support ring-buffer configurationChristian Poessinger
In addition to commit cf1156a60e ("ethernet: T3163: probe driver for maximum rx/tx ring-buffer size") this extends the logic in a way as not every driver supports setting the buffers at all so it will properly error out. When invoking "ethtool -g" both stdout and stderr are captured and no exception is raised if it's an unsupported driver feature. The verify() section will inform the user about the illegal operation.
2021-02-24validators: interface-name script must also support VLAN interfacesChristian Poessinger
2021-02-24xml: add missing constaint to source-interface includeChristian Poessinger
2021-02-24route: static: T2450: add missing "dhcp-interface" route optionChristian Poessinger
As thought in the beginning the dhcp-interface route option can not be superseeded by the interface option. When a route is installed for a DHCP interface, that interface is usually a broadcast interface which can not be used for plain interface-based routes. The old Vyatta logic was migrated to Python where the current received next-hop address from the DHCP interface is installed as next-hop address.
2021-02-24Merge pull request #742 from erkin/currentChristian Poessinger
op-mode: Correct help messages
2021-02-24op-mode: Correct help messageserkin
2021-02-23configd: T3302: redirect script stdout/err to file on bootJohn Estabrook
2021-02-23Merge pull request #740 from DmitriyEshenko/1x2302202001Christian Poessinger
dhcp-server: T2927: Add empty args if does not possible to determine …
2021-02-23Merge pull request #739 from sever-sever/T3211Christian Poessinger
routing: T3211: Add redistribute protocol IS-IS to bgp ospf rip
2021-02-23dhcp-server: T2927: Add empty args if does not possible to determine variablesDmitriyEshenko
2021-02-23routing: T3211: Add redistribute protocol IS-IS to bgp ospf ripsever-sever
2021-02-22tunnel: T3072: remove duplicate key from mapping dict used in apply()Christian Poessinger
2021-02-22vyos.ifconfig: extend debug option to print input dictChristian Poessinger
2021-02-22xml: tunnel: erspan: make individual parameter nodes reusableChristian Poessinger
VXLAN will get tos, ttl and flowlabel options thus make individual parameter settings reusable by splitting tunnel-parameters-ip.xml.i into individual files.
2021-02-22Merge branch 'current' of https://github.com/vyos/vyos-1x into currentDaniil Baturin
2021-02-22T3346: handle the case of empty nodes when migrating NAT to syntax version 5Daniil Baturin
2021-02-21ethernet: T3163: probe driver for maximum rx/tx ring-buffer sizeChristian Poessinger
2021-02-21console-server: T2490: do not use cli-shell-api in systemd unitChristian Poessinger
(cherry picked from commit d5804b19d3ffecdd4fe6bd89d50ac84dabb549fd)
2021-02-21Merge pull request #737 from sever-sever/T3332Christian Poessinger
bgp: T3322: Fix timers for neighbor
2021-02-21bgp: T3322: Fix timers for neighborsever-sever
2021-02-20ethernet: T3342: Xen vif driver requires sg offloading for MTU > 1500 bytesChristian Poessinger
2021-02-20vyos.ethtool: import helper classChristian Poessinger
This helper class could be used to interact and retrieve information from ethtool. It is not used so far in production code.
2021-02-20op-mode: bgp: T1513: no need for "sudo"Christian Poessinger
Commit 68f7d1474d ("op-mode: bgp: T1513: add "show bgp" tree containing l2vpn evpn") added the required XML definitions and a bash helper script. The helper always got invoked using "sudo" which is not necessary for vtysh. Calling "sudo" only slows down the system when e.g. RADIUS backed accounts are used.
2021-02-20op-mode: bgp: T1513: add "show bgp" tree containing l2vpn evpnChristian Poessinger
2021-02-19bgp: T3332: fix UnboundLocalError when using route-reflector-clientChristian Poessinger
local variable 'peer_group' referenced before assignment.
2021-02-19Merge pull request #736 from sever-sever/T3330Christian Poessinger
bgp: T3330: Fix capability orf prefix-list
2021-02-19bgp: T3330: Fix capability orf prefix-listsever-sever
2021-02-19Merge pull request #735 from sever-sever/T3331Daniil Baturin
bgp: T3331: Fix set unsuppress-map for neighbor
2021-02-19bgp: T3331: Fix set unsuppress-map for neighborsever-sever
2021-02-18Merge pull request #734 from jestabro/T3302John Estabrook
configd: T3302: redirect stdout/stderr from scripts to console
2021-02-18validator: T3326: add missing interfaces (e.g. ppp and l2tpv3)Christian Poessinger
2021-02-17configd: T3302: redirect stdout/stderr from scripts to consoleJohn Estabrook
2021-02-17configsession: T3259: avoid deadlock when data fills stdout pipeJohn Estabrook
If the subprocess is producing enough data (in this case showConfig on a large config file), then the construction: p = subprocess.Popen(.., stdout=subprocess.PIPE, ..) p.wait() will deadlock with the subprocess waiting for data to be consumed, while the Python process waits for its termination. So consume data, then wait for termination.
2021-02-17Merge pull request #728 from sever-sever/T3299Christian Poessinger
squid: T3299: Add listen address 0.0.0.0
2021-02-17squid: T3299: Add listen address 0.0.0.0sever-sever
2021-02-16bfd: T3310: use end to exit FRR scopeChristian Poessinger
We need to exit from the bfd context by end instead of exit, else FRR reload will get confused: frr-reload output: 168 2021-02-16 21:13:19,014 DEBUG: LINE ip prefix-list GLOBAL seq 10 permit 192.168.100.1/32: append to current_context_lines, ['bfd']
2021-02-16ospf: T3047: support virtual-link interfaces on "passive-interface-exclude"Christian Poessinger
This superseeds GitHub pull request #723 by implementing support to add an OSPF virtual-link interface which connects different areas to the "no passive-interface" configuration option when the system uses "passive-interface default". Setting "protocols ospf passive-interface-exclude vlink0" on the VyOS CLI will render the FRR OSPF configuration "no passive-interface VLINK0".
2021-02-16bgp: T2100: always set "no bgp network import-check"Christian Poessinger
In order to keep the current behavior when upgrading from 1.2 -> 1.3 -> 1.4 FRR requires us to set this option. This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the rib (default). If you have the [no] form configured then BGP will not check for the networks existence in the rib. For FRR versions 7.3 and before frr defaults for datacenter were the network must exist, traditional did not check for existence. For versions 7.4 and beyond both traditional and datacenter the network must exist. VyOS uses "traditional".