summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-08-11T5160: firewall refactor: fix regexep for connection-status. Create new file ↵Nicolas Fort
with common matcher for ipv4 and ipv6, and use include on all chains for all this comman matchers
2023-08-11T5160: firewall refactor: change default value for <default-action> from ↵Nicolas Fort
<drop> to <accept> if default-action is not specified in base chains
2023-08-11T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set ↵Nicolas Fort
firewall ipv6 name ...> . Also fix some unexpected behaviour with geoip.
2023-08-11T5160: firewall refactor: fix firewall template for correct rule parsing ↵Nicolas Fort
that contains fqnd and/or geo-ip in base chains. Fix mig script
2023-08-11T5160: firewal refactor: fix tabulation for geo-ip parsing code. Typo fix in ↵Nicolas Fort
firewall smoketest
2023-08-11T5160: T5250: while refactoring, fix reference column for op-mode command ↵Nicolas Fort
show_firewall_group.
2023-08-11T5160: firewall refactor: change firewall ip to firewall ipv4Nicolas Fort
2023-08-11T5160: firewall refactor. Update op-mode commands to new syntax.Nicolas Fort
2023-08-11T5160: firewall refactor: re-add missing code in template.py which was ↵Nicolas Fort
accidentaly removed. Update smokestest: remove zone test and fix test_sysfs test
2023-08-11T5160: firewall refactor: new cli structure. Add migration script and update ↵Nicolas Fort
smoketest
2023-08-11T5160: firewall refactor: new cli structure. Update jinja templates, python ↵Nicolas Fort
scripts and src firewall
2023-08-11T5160: firewall refactor: new cli structure. Update only all xmlNicolas Fort
2023-08-11Merge pull request #2147 from jestabro/remaining-defaultsViacheslav Hletenko
T5434: remove reamining calls to incorrect defaults
2023-08-11Merge pull request #2146 from dmbaturin/T5270-openvpn-dh-optionalChristian Breunig
openvpn: T5270: do not require classic DH params in any mode
2023-08-10T5319: remove defaults workarounds in vyos-domain-resolver.pyJohn Estabrook
2023-08-10T5434: use package specific cache in nosetestsJohn Estabrook
2023-08-10T5434: drop unneeded cache generation from old libJohn Estabrook
2023-08-10T5434: use get_defaults instead of defaultsJohn Estabrook
2023-08-10T5434: use auto-defaults in op-mode pki.pyJohn Estabrook
2023-08-10T5434: remove unneeded importJohn Estabrook
2023-08-10T5434: replace import of component_versionJohn Estabrook
2023-08-10xml: T5218: fix typo in component_versionJohn Estabrook
2023-08-10T5319: remove workaround in op-mode show_openconnect_otp.pyJohn Estabrook
2023-08-10Merge pull request #2140 from sever-sever/T5448Daniil Baturin
T5448: Add service zabbix-agent
2023-08-10openvpn: T5270: do not require classic DH params in any moreDaniil Baturin
Generate 'dh none' instead and let OpenVPN use ECDH
2023-08-10tunnel: T5223: clear GRE key id after deletionsrividya0208
2023-08-10Merge pull request #2144 from dmbaturin/T5271-openvpn-peer-fingerprintChristian Breunig
openvpn: T5271: add peer certificate fingerprint option
2023-08-09openvpn: T5271: add peer certificate fingerprint optionDaniil Baturin
2023-08-09Merge pull request #2143 from dmbaturin/T5273-cert-fingerprintViacheslav Hletenko
pki: T5273: add a certificate fingerprint command
2023-08-09pki: T5273: add a certificate fingerprint commandDaniil Baturin
2023-08-09T5448: Add service zabbix-agent version 2Viacheslav Hletenko
Add service zabbix-agent set service zabbix-agent directory '/config/zabbix/' set service zabbix-agent limits buffer-flush-interval '8' set service zabbix-agent limits buffer-size '120' set service zabbix-agent log debug-level 'warning' set service zabbix-agent log size '1' set service zabbix-agent server '192.0.2.5' set service zabbix-agent server-active 192.0.2.5 port '10051' set service zabbix-agent server-active 2001:db8::123
2023-08-09xml: T5452: catch lib errors in generate_cacheJohn Estabrook
2023-08-09Merge pull request #2141 from nicolas-fort/T5453Christian Breunig
T5453: nat66: fix nat66 which got broken after nat load-balance was introduced
2023-08-09T5453: nat66: exclude checks for nat load-balance when using ipv6 while ↵Nicolas Fort
parsing nat rules.
2023-08-09Merge pull request #2136 from jestabro/with-defaultsChristian Breunig
T5319: remove workarounds for incorrect defaults in config-mode scripts
2023-08-08Merge pull request #2138 from sever-sever/T4989Christian Breunig
T4989: QoS fix policer match mark
2023-08-08T4989: QoS fix policer match markViacheslav Hletenko
2023-08-08Merge pull request #2119 from nicolas-fort/T5014-dnatChristian Breunig
T5014: nat: add source and destination nat options for configuring lo…
2023-08-07rpki: T2044: add "reset rpki" op-mode commandChristian Breunig
2023-08-07dhcp: T5428: always release lease from default VRFChristian Breunig
Otherwise packet can be received in a VRF that was already deleted. Image of the following CLI commands: del interface ethernet eth0 address dhcp del interface ethernet eth0 vrf red del vrf name red VRF could be deleted even if dhclient release was not yet completely processed.
2023-08-07smoketest: remove duplicate CLI option for base interface testChristian Breunig
2023-08-07dhcp(v6): T5428: add proper return statements in set_dhcp(v6) methodsChristian Breunig
2023-08-07Merge pull request #2137 from nicolas-fort/T5446Christian Breunig
T5446: BGP: change <bgp paramater bestpath med> from node to leafNode
2023-08-07T5319: remove workarounds for defaults in vpp.pyJohn Estabrook
2023-08-07T5319: remove workarounds for defaults in vpn_openconnect.pyJohn Estabrook
2023-08-07T5319: remove workarounds for defaults in vpn_ipsec.pyJohn Estabrook
2023-08-07T5434: use auto-defaults in tftp_server.pyJohn Estabrook
2023-08-07T5319: remove workarounds for defaults in system-syslog.pyJohn Estabrook
2023-08-07T5319: remove workarounds for defaults in system_sflow.pyJohn Estabrook
2023-08-07T5434: use auto-defaults in system-option.pyJohn Estabrook