summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-21console-server: T2490: do not use cli-shell-api in systemd unitChristian Poessinger
(cherry picked from commit d5804b19d3ffecdd4fe6bd89d50ac84dabb549fd)
2021-02-21Merge pull request #737 from sever-sever/T3332Christian Poessinger
bgp: T3322: Fix timers for neighbor
2021-02-21bgp: T3322: Fix timers for neighborsever-sever
2021-02-20ethernet: T3342: Xen vif driver requires sg offloading for MTU > 1500 bytesChristian Poessinger
2021-02-20vyos.ethtool: import helper classChristian Poessinger
This helper class could be used to interact and retrieve information from ethtool. It is not used so far in production code.
2021-02-20op-mode: bgp: T1513: no need for "sudo"Christian Poessinger
Commit 68f7d1474d ("op-mode: bgp: T1513: add "show bgp" tree containing l2vpn evpn") added the required XML definitions and a bash helper script. The helper always got invoked using "sudo" which is not necessary for vtysh. Calling "sudo" only slows down the system when e.g. RADIUS backed accounts are used.
2021-02-20op-mode: bgp: T1513: add "show bgp" tree containing l2vpn evpnChristian Poessinger
2021-02-19bgp: T3332: fix UnboundLocalError when using route-reflector-clientChristian Poessinger
local variable 'peer_group' referenced before assignment.
2021-02-19Merge pull request #736 from sever-sever/T3330Christian Poessinger
bgp: T3330: Fix capability orf prefix-list
2021-02-19bgp: T3330: Fix capability orf prefix-listsever-sever
2021-02-19Merge pull request #735 from sever-sever/T3331Daniil Baturin
bgp: T3331: Fix set unsuppress-map for neighbor
2021-02-19bgp: T3331: Fix set unsuppress-map for neighborsever-sever
2021-02-18Merge pull request #734 from jestabro/T3302John Estabrook
configd: T3302: redirect stdout/stderr from scripts to console
2021-02-18validator: T3326: add missing interfaces (e.g. ppp and l2tpv3)Christian Poessinger
2021-02-17configd: T3302: redirect stdout/stderr from scripts to consoleJohn Estabrook
2021-02-17configsession: T3259: avoid deadlock when data fills stdout pipeJohn Estabrook
If the subprocess is producing enough data (in this case showConfig on a large config file), then the construction: p = subprocess.Popen(.., stdout=subprocess.PIPE, ..) p.wait() will deadlock with the subprocess waiting for data to be consumed, while the Python process waits for its termination. So consume data, then wait for termination.
2021-02-17Merge pull request #728 from sever-sever/T3299Christian Poessinger
squid: T3299: Add listen address 0.0.0.0
2021-02-17squid: T3299: Add listen address 0.0.0.0sever-sever
2021-02-16bfd: T3310: use end to exit FRR scopeChristian Poessinger
We need to exit from the bfd context by end instead of exit, else FRR reload will get confused: frr-reload output: 168 2021-02-16 21:13:19,014 DEBUG: LINE ip prefix-list GLOBAL seq 10 permit 192.168.100.1/32: append to current_context_lines, ['bfd']
2021-02-16ospf: T3047: support virtual-link interfaces on "passive-interface-exclude"Christian Poessinger
This superseeds GitHub pull request #723 by implementing support to add an OSPF virtual-link interface which connects different areas to the "no passive-interface" configuration option when the system uses "passive-interface default". Setting "protocols ospf passive-interface-exclude vlink0" on the VyOS CLI will render the FRR OSPF configuration "no passive-interface VLINK0".
2021-02-16bgp: T2100: always set "no bgp network import-check"Christian Poessinger
In order to keep the current behavior when upgrading from 1.2 -> 1.3 -> 1.4 FRR requires us to set this option. This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the rib (default). If you have the [no] form configured then BGP will not check for the networks existence in the rib. For FRR versions 7.3 and before frr defaults for datacenter were the network must exist, traditional did not check for existence. For versions 7.4 and beyond both traditional and datacenter the network must exist. VyOS uses "traditional".
2021-02-16ospfv3: T3313: move interface related options to "protocols ospfv3 interface"Christian Poessinger
2021-02-15Merge pull request #732 from c-po/t3310-bfdJohn Estabrook
bfd: T3310: migrate to get_config_dict() and FRR reload
2021-02-15bgp: T1513: add per VRF vni supportChristian Poessinger
2021-02-15bfd: T3310: implement peer profile supportChristian Poessinger
2021-02-15bfd: T3310: migrate to get_config_dict() and FRR reloadChristian Poessinger
2021-02-15GitHub: update help strings in PR templateChristian Poessinger
2021-02-15smoketest: bfd: ensure sessions are sourced from a valid local ifChristian Poessinger
.. if BFD connections will be source from invalid sources this will crash bfdd in FRR 7.3
2021-02-15bgp: T3311: remove remote-as from address-familyChristian Poessinger
When moving from Quagga to FRR the BGP address-family was extended by an invalid peer-group statement. FRR always moved a configured peer-group from the AFI level down to the neighbor level. With the migration to FRR reload we must take care about this by ourselves.
2021-02-14templates: convert DOS -> UNIX line endingsChristian Poessinger
2021-02-14bgp: T2315: add CLI options for addpath-tx-(all-paths|bestpath-per-AS)Christian Poessinger
* protocols bgp 65000 neighbor 192.0.2.1 address-family ipv4-unicast addpath-tx-all * protocols bgp 65000 neighbor 192.0.2.1 address-family ipv4-unicast addpath-tx-per-as * protocols bgp 65000 neighbor 2001:db8::1 address-family ipv6-unicast addpath-tx-all * protocols bgp 65000 neighbor 2001:db8::1 address-family ipv6-unicast addpath-tx-per-as
2021-02-14frr: harden "router" regexChristian Poessinger
2021-02-14bgp: T1513: add per VNI advertise-default-gw, advertise-svi-ip optionsChristian Poessinger
2021-02-14smoketest: bfd: add initial testChristian Poessinger
2021-02-14bgp: T2844: add IPv4 disable-send-community supportChristian Poessinger
2021-02-14bgp: T2387: route-reflector-client is only supported for iBGP peersChristian Poessinger
2021-02-14bgp: T2387: bugfix missing options not added to FRRChristian Poessinger
The following options were not represented in the Jinja2 template: - port - advertisement-interval - strict-capability-match In addition the smoketests have been extended to support IPv6 neighbors, too.
2021-02-14bgp: T3308: add graceful-shutdown optionChristian Poessinger
2021-02-14bgp: T1513: make vni a multi nodeChristian Poessinger
2021-02-14bgp: xml: add valueHelp for peer-group definitionChristian Poessinger
2021-02-13bgp: T2387: bgp_neighbor macro should access address family dict with items()Christian Poessinger
2021-02-13bgp: T1513: extend supported evpn support/cli optionsChristian Poessinger
Add CLI options for: - advertise-pip - rt-auto-derive - flooding - rd - route-target
2021-02-13smoketest: rpki: extend tests with IPv6 caching serversChristian Poessinger
2021-02-13smoketest: bcast-relay: no need to commit() in setUp()Christian Poessinger
2021-02-13smoketest: rpki: remove failfast settingChristian Poessinger
2021-02-12Merge pull request #731 from varesa/T3307-fix-dnatChristian Poessinger
nat: T3307: fix destination nat generation
2021-02-12nat: T3307: fix destination nat generationEsa Varemo
Fix destination NAT template trying to map source->translation instead of destination->translation. Fixes https://phabricator.vyos.net/T3307
2021-02-11ospfv3: T3267: move interface specific options to "protocols ospfv3"Christian Poessinger
2021-02-11ripng: T3281: move interface specific options to "protocols ripng"Christian Poessinger
2021-02-11ripng: T3281: move common parts into Jinja2 includeChristian Poessinger