Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-04-03 | T6199: replace netifaces.interfaces() with common custom helpers | Christian Breunig | |
* Use interface_exists() outside of verify() * Use verify_interface_exists() in verify() to drop common error message | |||
2024-04-03 | T6199: drop unused sphinx documentation folder | Christian Breunig | |
2024-04-02 | Merge pull request #3236 from c-po/pki-verify | Christian Breunig | |
configverify: T6198: add common helper for PKI certificate validation | |||
2024-04-02 | configverify: T6198: add common helper for PKI certificate validation | Christian Breunig | |
The next evolutional step after adding get_config_dict(..., with_pki=True) is to add a common verification function for the recurring task of validating SSL certificate existance in e.g. EAPoL, OpenConnect, SSTP or HTTPS. | |||
2024-04-02 | Merge pull request #3229 from c-po/multi-vrf | Christian Breunig | |
T6192: allow binding SSH to multiple VRF instances | |||
2024-04-02 | Merge pull request #3230 from c-po/syntax-cleanup | Christian Breunig | |
firewall: nat: policy: vrf: nft call syntax and import cleanup | |||
2024-04-02 | Merge pull request #3232 from aapostoliuk/T6196-circinus | Christian Breunig | |
T6196: Fixed applying parameters for aggregation in BGP | |||
2024-04-02 | T6196: Fixed applying parameters for aggregation in BGP | aapostoliuk | |
Fixed using 'route-map', 'as-set' and 'summary-only' together in aggregation in BGP | |||
2024-04-01 | Merge pull request #3212 from fett0/T6151 | fett0 | |
bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | |||
2024-04-01 | init: T3355: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | firewall: T970: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | conntrack: T4309: T4903: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nhrp: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | policy: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | nat: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | vrf: T3655: always use full nft command name (e.g. --check over -c) | Christian Breunig | |
2024-04-01 | firewall: T2199: always use full nft command name (e.g. --file over -f) | Christian Breunig | |
2024-04-01 | ssh: T6192: allow binding to multiple VRF instances | Christian Breunig | |
Currently VyOS only supports binding a service to one individual VRF. It might become handy to have the services (initially it will be VRF, NTP and SNMP) be bound to multiple VRFs. Changed VRF from leafNode to multi leafNode with defaultValue: default - which is the name of the default VRF. | |||
2024-04-01 | utils: T5738: always use vyos.utils.network.interface_exists over os.path.exists | Christian Breunig | |
2024-04-01 | xml: T5738: extend VRF building blocks with common constraint definition | Christian Breunig | |
2024-04-01 | Merge pull request #3223 from c-po/T6193-dhcp-client | Daniil Baturin | |
system: T6193: invalid warning "is not a DHCP interface but uses DHCP name-server option" | |||
2024-04-01 | Merge pull request #3224 from c-po/T2590-dhcpv6-client | Daniil Baturin | |
dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | |||
2024-04-01 | Merge pull request #3222 from HollyGurza/T6178 | Christian Breunig | |
T6178: Check that certificate exists during reverse-proxy commit | |||
2024-04-01 | dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains | Christian Breunig | |
After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which was present to update /etc/resolv.conf with the DHCP specified nameservers and also the search domain list was no longer present. This commit adds a per interface rendered script to inform vyos-hostsd about the received IPv6 nameservers and search domains. | |||
2024-04-01 | system: T6193: invalid warning "is not a DHCP interface but uses DHCP ↵ | Christian Breunig | |
name-server option" This fixes an invalid warning when using a DHCP VLAN interface to retrieve the system nameserver to be used. VLAN CLI config is not properly expanded leading to a false warning: [ system name-server eth1.10 ] WARNING: "eth1.10" is not a DHCP interface but uses DHCP name-server option! | |||
2024-04-01 | T6178: Check that certificate exists during reverse-proxy commit | khramshinr | |
2024-03-31 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-31 | Merge pull request #3211 from jestabro/tree-mask | Viacheslav Hletenko | |
T6185: simplify marshalling of section and config data for config-sync | |||
2024-03-30 | Merge pull request #3195 from HollyGurza/T4718-current | Christian Breunig | |
dhcp-server: T4718: Listen-address is not commit if the ip address is on the interface with vrf | |||
2024-03-30 | Merge pull request #3218 from dmbaturin/half-cpus | Christian Breunig | |
accel-ppp: T6187: use correct CPU counts adjusted for SMT | |||
2024-03-30 | accel-ppp: T6187: use correct CPU counts adjusted for SMT | Daniil Baturin | |
2024-03-30 | Merge pull request #3213 from HollyGurza/T6106 | Daniil Baturin | |
bgp: T6106: Valid commit error for route-reflector-client option defined in peer-group | |||
2024-03-30 | Merge pull request #3215 from jestabro/fix-annotation | Daniil Baturin | |
image-tools: T6186: simplify image annotations fixing regression | |||
2024-03-29 | image-tools: T6186: simplify image annotations fixing regression | John Estabrook | |
2024-03-29 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-29 | bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-29 | bgp: T6106: Valid commit error for route-reflector-client option defined in ↵ | khramshinr | |
peer-group changed exception condition Improved route_reflector_client test | |||
2024-03-29 | bgp: T6010: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-28 | T6121: add section system time-zone | John Estabrook | |
2024-03-28 | config-sync: T6185: combine data for sections/configs in one command | John Estabrook | |
Package path/section data in single command containing a tree (dict) of section paths and the accompanying config data. This drops the call to get_config_dict and the need for a list of commands in request. | |||
2024-03-28 | configtree: T6180: add masking function mask_inclusive | John Estabrook | |
2024-03-28 | Merge pull request #3210 from sarthurdev/T6174 | Christian Breunig | |
dhcp: T6174: Add TACACS/Radius users to _kea group | |||
2024-03-28 | dhcp: T6174: Add TACACS/Radius users to _kea group | sarthurdev | |
Also raise op-mode error when unable to fetch data from Kea socket | |||
2024-03-28 | Merge pull request #3198 from HollyGurza/T6159 | Christian Breunig | |
openvpn: T6159: Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" for every client connection | |||
2024-03-28 | Merge pull request #3207 from dmbaturin/T3664-grub-chroot | Christian Breunig | |
vyos.system.grub: T3664: add chroot argument to the GRUB install function | |||
2024-03-28 | Merge pull request #3208 from dmbaturin/T3664-template-env-var | Christian Breunig | |
vyos.template: T3664: add an environment variable for template location | |||
2024-03-28 | vyos.template: T3664: add an environment variable for template location | Daniil Baturin | |
to allow unmodified code to be executed from anywhere, even outside of VyOS installations | |||
2024-03-28 | vyos.system.grub: T3664: add chroot argument to the GRUB install function | Daniil Baturin | |
to faciliate running it outside of a VyOS installation | |||
2024-03-28 | Merge pull request #3200 from sever-sever/T5832 | Daniil Baturin | |
T5832: VRRP allow set interface for exluded-address | |||
2024-03-28 | Merge pull request #3202 from sarthurdev/T5606_1 | Daniil Baturin | |
ipsec: T5606: T5871: Use multi node for CA certificates |