Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-13 | T5928: Smoketest change firewall flowtable test to use VLAN | Viacheslav Hletenko | |
2024-02-13 | T5928: Change firewall priority to 319 | Viacheslav Hletenko | |
Change the firewall priority to 319, after interface ethernet configuration For example if we use VLANs and the vlan interface must be created before we can use it in the firewall/flowtable The current priority ``` 199 firewall 300 interfaces/dummy 300 interfaces/loopback 300 interfaces/virtual-ethernet 310 interfaces/bridge 310 interfaces/input 318 interfaces/ethernet ... ``` | |||
2024-02-13 | Merge pull request #2988 from c-po/pki-rpki-t6034 | Christian Breunig | |
rpki: T6034: move file based SSH keys for authentication to PKI subsystem | |||
2024-02-13 | Merge pull request #2997 from sarthurdev/T5993 | Christian Breunig | |
dhcpv6-server: T5993: Add subnet `interface` node, link subnet to locally connected interfaces | |||
2024-02-13 | dhcpv6-server: T5993: Add subnet `interface` node, link subnet to locally ↵ | sarthurdev | |
connected interfaces Prior dhcpd behaviour implicitly handled requests for locally connected subnets. Kea requires an explicit link between subnets and an interface. | |||
2024-02-12 | rpki: T6034: Add missing sections to configtest | sarthurdev | |
2024-02-12 | Merge pull request #2993 from sarthurdev/T5981 | Christian Breunig | |
ipsec: T5981: Strip '@' from migrated peer PKI name | |||
2024-02-12 | Merge pull request #2994 from c-po/init-T2044 | Christian Breunig | |
init: T2044: fix "binary operator expected" when two or more RPKI caches are defined | |||
2024-02-12 | init: T2044: fix "binary operator expected" when two or more RPKI caches are ↵ | Christian Breunig | |
defined Fix commit 9b8e11e07 ("init: T2044: only start rpki if cache is configured") which showed a disturbing error on tty0 after boot that a "binary operator expected" when checking for RPKI caches when multiple results got returned. | |||
2024-02-12 | rpki: T6024: add migration scripts from file based keys to PKI subsystem | Christian Breunig | |
2024-02-12 | rpki: T6034: remove OpenSSH keys from /run/frr when unloaded | Christian Breunig | |
2024-02-12 | pki: T6034: add dependencies to trigger rpki re-run on openssh key update | Christian Breunig | |
2024-02-12 | ipsec: T5981: Strip '@' from migrated peer name | sarthurdev | |
2024-02-12 | Merge pull request #2991 from nicolas-fort/T6019 | Christian Breunig | |
T6019: fix smoketest after upgrading nftables and libnftnl packages. | |||
2024-02-12 | T6019: fix smoketest after upgrading nftables and libnftnl packages. | Nicolas Fort | |
2024-02-11 | Merge pull request #2980 from c-po/srv6-T5849 | Daniil Baturin | |
srv6: T5849: add segment support to "protocols static route6" | |||
2024-02-11 | Merge pull request #2986 from c-po/bgp-t6010 | Daniil Baturin | |
bgp: T6010: support setting multiple values for neighbor path-attribute | |||
2024-02-11 | rpki: T6034: move SSH authentication keys to PKI subsystem | Christian Breunig | |
2024-02-11 | pki: T6034: add OpenSSH key support | Christian Breunig | |
set pki openssh rpki private key ... set pki openssh rpki public key ... set pki openssh rpki public type 'ssh-rsa' | |||
2024-02-11 | srv6: T5849: add segment support to "protocols static route6" | Christian Breunig | |
* set protocols static route6 <prefix> next-hop <address> segments 'x:x::x:x/y:y::y/z::z' * set protocols static route6 <prefix> interface <interface> segments 'x:x::x:x/y:y::y/z::z' | |||
2024-02-10 | bgp: T6010: support setting multiple values for neighbor path-attribute | Christian Breunig | |
2024-02-10 | Merge pull request #2983 from c-po/rpki-t6004 | Christian Breunig | |
rpki: T6004: add missing startup priority | |||
2024-02-10 | Merge pull request #2982 from c-po/pki-xml | Christian Breunig | |
xml: T5738: improve PKI building blocks for CLI | |||
2024-02-10 | rpki: T6004: add missing startup priority | Christian Breunig | |
2024-02-10 | xml: T5738: improve PKI building blocks for CLI | Christian Breunig | |
2024-02-09 | Merge pull request #2978 from sever-sever/T6028 | Christian Breunig | |
T6028: Fix QoS policy shaper wrong class_id_max and default_minor_id | |||
2024-02-09 | T6028: Fix QoS policy shaper wrong class_id_max and default_minor_id | Viacheslav Hletenko | |
The `class_id_max` is wrong due to `tmp.sort` of Strings If we have class 5 and class 10 we get sorted max value 5, expected 10 ``` >>> tmp = ['5', '10'] >>> tmp.sort() >>> tmp ['10', '5'] >>> >>> hex(5+1) '0x6' >>> >>> hex(10+1) '0xb' >>> ``` This way we get wrong default maximum class value: ``` tc qdisc replace dev eth1 root handle 1: htb r2q 444 default 6 ``` Expect: ``` tc qdisc replace dev eth1 root handle 1: htb r2q 444 default b ``` Fix this converting Strings to Integers and get max value. | |||
2024-02-09 | Merge pull request #2967 from sever-sever/T5703 | Daniil Baturin | |
T5703: Fix reapply QoS for connection-oriented interfaces | |||
2024-02-09 | T5703: Fix reapply QoS for connection-oriented interfaces | Viacheslav Hletenko | |
After `disconnect` and `connect` connection-oriented interfaces like PPPoE, QoS policy has to be reapplied | |||
2024-02-09 | Merge pull request #2975 from c-po/migrator-t5902 | Christian Breunig | |
https: T5902: fix migration of virtual-host port | |||
2024-02-09 | https: T5902: fix migration of virtual-host port | Christian Breunig | |
CLI source node is port and not listen-port. | |||
2024-02-08 | Merge pull request #2955 from c-po/rpki-T6023 | Christian Breunig | |
rpki: T6023: add support for CLI knobs expire-interval and retry-interval | |||
2024-02-08 | Merge pull request #2968 from natali-rs1985/T5685-current | Daniil Baturin | |
T5685: Keepalived VRRP prefix is not necessary for the virtual address | |||
2024-02-08 | T5685: Keepalived VRRP prefix is not necessary for the virtual address | Nataliia Solomko | |
2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
T5960: Rewritten authentication node in PPTP to a single view | |||
2024-02-08 | Merge pull request #2969 from sever-sever/T6026 | Daniil Baturin | |
T6026: QoS hide attempts to delete qdisc from devices | |||
2024-02-08 | Merge pull request #2507 from erkin/image-tools | Daniil Baturin | |
op-mode: T4038: Python rewrite of image tools | |||
2024-02-08 | T6026: QoS hide attempts to delete qdisc from devices | Viacheslav Hletenko | |
Hide unexpected output by attempts of deleting `qdisc` from interfaces [ qos ] Error: Cannot find specified qdisc on specified device. Error: Cannot delete qdisc with handle of zero. | |||
2024-02-07 | Merge pull request #2952 from c-po/vrf | Christian Breunig | |
vrf: T5973: module is now statically compiled into the kernel | |||
2024-02-07 | Merge pull request #2957 from c-po/bgp-T6024 | Christian Breunig | |
bgp: T6024: add additional missing FRR features | |||
2024-02-07 | Merge pull request #2959 from c-po/init-T2044-rpki-part-2 | Christian Breunig | |
init: T2044: only start rpki if cache is configured | |||
2024-02-07 | Merge pull request #2960 from c-po/current | Christian Breunig | |
xml: T302: replace references to Quagga with FRRouting | |||
2024-02-07 | xml: T302: replace references to Quagga with FRRouting | Christian Breunig | |
2024-02-07 | init: T2044: only start rpki if cache is configured | Christian Breunig | |
This extends commit 9199c87cf ("init: T2044: always start/stop rpki during system boot") to check the bootup configuration if an RPKI cache is defined. Only start RPKI if this is the case. | |||
2024-02-07 | Merge pull request #2944 from HollyGurza/T3843-current | Christian Breunig | |
vpn: T3843: l2tp configuration not cleared after delete | |||
2024-02-07 | bgp: T6024: add additional missing FRR features | Christian Breunig | |
* set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null> * set protocols bgp parameters allow-martian-nexthop * set protocols bgp parameters no-hard-administrative-reset" | |||
2024-02-07 | rpki: T6023: add support for CLI knobs expire-interval and retry-interval | Christian Breunig | |
2024-02-07 | Merge pull request #2953 from sever-sever/T6021 | Christian Breunig | |
T6021: Fix QoS shaper r2q calculation | |||
2024-02-07 | T5960: Rewritten authentication node in PPTP to a single view | aapostoliuk | |
Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. | |||
2024-02-07 | vrf: T5973: module is now statically compiled into the kernel | Christian Breunig | |
Always enable VRF strict_mode |