Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-12-06 | nat64: T160: Implement Jool-based NAT64 translator | Joe Groocock | |
Signed-off-by: Joe Groocock <me@frebib.net> | |||
2023-12-05 | Merge pull request #2574 from nicolas-fort/T5779 | Daniil Baturin | |
T5779: conntrack: Apply fixes to <set system conntrack timeout custom> | |||
2023-12-05 | Merge pull request #2575 from aapostoliuk/T5688-fixes | Christian Breunig | |
accel-ppp: T5688: Fixed migration script for pppoe-server | |||
2023-12-05 | accel-ppp: T5688: Fixed migration script for pppoe-server | aapostoliuk | |
Fixed migration script for pppoe-server | |||
2023-12-05 | T5779: conntrack: Apply fixes to <set system conntrack timeout custom>. ↵ | Nicolas Fort | |
Remove what was not working on 1.3, migrate what was working to new syntax and extend feature for ipv6. | |||
2023-12-04 | Merge pull request #2501 from aapostoliuk/T5688-current | Christian Breunig | |
accel-ppp: T5688: Standardized pool configuration in accel-ppp | |||
2023-12-04 | accel-ppp: T5688: Standardized pool configuration in accel-ppp | aapostoliuk | |
Standardized pool configuration for all accel-ppp services. 1. Only named pools are used now. 2. Allows all services to use range in x.x.x.x/mask and x.x.x.x-x.x.x.y format 3. next-pool can be used in all services 2. Allows to use in ipoe gw-ip-address without pool configuration which allows to use Fraimed-IP-Address attribute by radius. 3. Default pool name should be explicidly configured with default-pool. 4. In ipoe netmask and range subnet can be different. | |||
2023-12-04 | Merge pull request #2569 from indrajitr/ddclient-update-20231203-04 | Christian Breunig | |
ddclient: T5791: Simplify and fix migration script for dynamic dns | |||
2023-12-03 | ddclient: T5791: Simplify and fix migration script for dynamic dns | Indrajit Raychaudhuri | |
Mark 'dns dynamic name' as tag node to avoid unexpected nesting. | |||
2023-12-03 | Merge pull request #2566 from c-po/t5769-vti | Christian Breunig | |
vti: T5769: restore interface settings on down -> up event | |||
2023-12-03 | Merge pull request #2567 from indrajitr/ddclient-update-20231203 | Christian Breunig | |
ddclient: T5791: Update dynamic dns configuration path for consistency [followup] | |||
2023-12-03 | ddclient: T5791: Fix file permission for migration script | Indrajit Raychaudhuri | |
2023-12-02 | vti: T5769: restore interface settings on down -> up event | Christian Breunig | |
On VTI interface link down the link-local IPv6 address is removed. As soon as the IPSec tunnel is online again, vti-up-down helper is called which only places the interface in up state using iproute2 command sudo ip link set vti0 up This does not restore the IPv6 LL address. Instead use vyos.ifconfig to properly re-initialize the VTI interface using the generic update() method. | |||
2023-12-02 | Merge pull request #2564 from fett0/T5796 | Christian Breunig | |
T5796:add/fixed OCSERV HTTP security headers | |||
2023-12-02 | T5796:add/fixed OCSERV HTTP security headers | fett0 | |
2023-12-02 | Merge pull request #2562 from indrajitr/avahi-cleanup-2 | Christian Breunig | |
mdns: T5793: Cleanup avahi-daemon configuration in `/etc` [followup] | |||
2023-12-01 | mdns: T5793: Cleanup avahi-daemon configuration in `/etc` | Indrajit Raychaudhuri | |
`/etc/avahi` technically can be deleted since we operate with avahi-daemon configuration in `/run/avahi-daemon`. But we still need to keep `/etc/avahi/services` because avahi-daemon `chroot` to that location at startup. This is setup at build time via `AVAHI_CONFIG_DIR` and there is no way to change it at runtime. | |||
2023-12-01 | Merge pull request #2559 from indrajitr/avahi-cleanup | Christian Breunig | |
mdns: T5793: Cleanup avahi-daemon configuration in `/etc` | |||
2023-12-01 | mdns: T5793: Cleanup avahi-daemon configuration in `/etc` | Indrajit Raychaudhuri | |
`/etc/avahi` can be deleted since we operate with avahi-daemon configuration in `/run/avahi-daemon`. | |||
2023-12-01 | Merge pull request #2554 from indrajitr/ddclient-update-20231128 | Christian Breunig | |
ddclient: T5791: Update dynamic dns configuration path for consistency | |||
2023-12-01 | Merge pull request #2547 from aapostoliuk/T4704-circinus | Christian Breunig | |
policy: T4704: Allowed to set metric (MED) to (+/-)rtt | |||
2023-11-30 | ddclient: T5791: Update smoketest for dynamic dns config path change | Indrajit Raychaudhuri | |
2023-11-30 | ddclient: T5791: Migration script for dynamic dns config path change | Indrajit Raychaudhuri | |
2023-11-30 | ddclient: T5791: Remove XML includes that aren't used anymore | Indrajit Raychaudhuri | |
As followup to interface definition change, remove XML snippets that aren't used anymore. They were there because they were 'include'-ed multiple times in the interface definition `dynamic-dns.xml.in`. Since that's not the case anymore, they can be removed. | |||
2023-11-30 | ddclient: T5791: Update dynamic dns configuration path | Indrajit Raychaudhuri | |
Modify the configuration path to be consistent with the usual dialects of VyoS configuration (wireguard, dns, firewall, etc.) This would also shorten the configuration path and have a unified treatment for RFC2136-based updates and other 'web-service' based updates. While at it, add support for per-service web-options. This would allow for probing different external URLs on a per-service basis. | |||
2023-11-30 | T5778: dhcp server: fix op-mode command <show dhcp server leases ...>. | Nicolas Fort | |
2023-11-30 | policy: T4704: Allowed to set metric (MED) to (+/-)rtt | aapostoliuk | |
Allowed to set metric (MED) to (+/-)rtt in the route-map. | |||
2023-11-29 | Merge pull request #2552 from jestabro/image-update-host-keys | John Estabrook | |
image-tools: T5789: copy ssh host keys on image update | |||
2023-11-29 | image-tools: T5789: copy ssh host keys on image update | John Estabrook | |
2023-11-28 | Merge pull request #2542 from jestabro/single-owner-https-config | John Estabrook | |
http-api: T5782: use single config-mode script for https and http-api | |||
2023-11-28 | Merge pull request #2550 from jestabro/non-interactive-add-delete-image | John Estabrook | |
image-tools: T5751: allow non-interactive add/delete image | |||
2023-11-28 | T5575: Update migration scripts for state policy parsing | Nicolas Fort | |
2023-11-27 | image-tools: T5751: use revised image tools in configsession | John Estabrook | |
2023-11-27 | image-tools: T5751: restore arg raise_error for non-interactive use | John Estabrook | |
2023-11-27 | image-tools: T5751: add arg no_prompt for non-interactive calls | John Estabrook | |
2023-11-27 | image-tools: T5751: normalize args using hyphen instead of underscore | John Estabrook | |
2023-11-27 | T5778: dhcp server: patch op-mode command <show dhcp server leases>. If ↵ | Nicolas Fort | |
*pool* empty, this means that lease was granted by fail-over server. Also fix issue that <show dhcp server leases state all> print nothing. | |||
2023-11-27 | Merge pull request #2546 from c-po/t5749-vrf-fixup | Christian Breunig | |
vyos.utils: T5749: fix get_vrf_members() call to iproute2 | |||
2023-11-27 | vyos.utils: T5749: fix get_vrf_members() call to iproute2 | Christian Breunig | |
The iproute2 master argument is used for both a VRF and a bridge device. Using this in the VRF context would retrieve and report back the wrong interfaces: Old implementation: =================== >>> from vyos.utils.network import get_vrf_members >>> get_vrf_members('br1') ['eth1', 'eth2', 'vxlan1'] >>> get_vrf_members('black') ['br1.3002', 'br1.4000', 'pim6reg10200'] The new implementation: ======================= >>> from vyos.utils.network import get_vrf_members >>> get_vrf_members('br1') [] >>> get_vrf_members('black') ['br1.3002', 'br1.4000', 'pim6reg10200'] | |||
2023-11-27 | smoketest: T31: remove VRF failfast unittest aargument | Christian Breunig | |
2023-11-27 | Merge pull request #2544 from c-po/t5783-smoketests | Christian Breunig | |
smoketest: T5783: check for any abnormal daemon termination | |||
2023-11-27 | Merge pull request #2543 from jestabro/check-in-docker | Christian Breunig | |
image-tools: T4516: exit grub-update service if running in docker | |||
2023-11-26 | http-api: T5782: use single config-mode script for https and http-api | John Estabrook | |
2023-11-26 | smoketest: T5783: check for any abnormal daemon termination | Christian Breunig | |
We need to ensure when stressing FRR with the smoketests that no unexpected crash happens. We simply verify the PID of the individual FRR daemons. | |||
2023-11-26 | Merge pull request #2541 from erkin/commit-fix | Christian Breunig | |
remote: T5773: Fix for broken config download | |||
2023-11-26 | image-tools: T4516: exit grub-update service if running in docker | John Estabrook | |
2023-11-25 | remote: T5773: Fix for broken config upload | erkin | |
2023-11-24 | T5775: firewall: re-add state-policy to firewall. These commands are now ↵ | Nicolas Fort | |
included in <set firewall global-options state-policy> node. | |||
2023-11-23 | Merge pull request #2532 from jestabro/drop-http-api-conf | Christian Breunig | |
http-api: T5768: remove auxiliary http-api.conf | |||
2023-11-22 | http-api: T5768: remove auxiliary http-api.conf | John Estabrook | |