summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-09-13bonding: T2877: support configuration of minimum number of active linksChristian Poessinger
Specifies the minimum number of links that must be active before asserting carrier. It is similar to the Cisco EtherChannel min-links feature. This allows setting the minimum number of member ports that must be up (link-up state) before marking the bond device as up (carrier on). This is useful for situations where higher level services such as clustering want to ensure a minimum number of low bandwidth links are active before switchover. This option only affects 802.3ad mode. The default value is 0. This will cause carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator. Note that, because an aggregator cannot be active without at least one available link, setting this option to 0 or to 1 has the exact same effect.
2020-09-13ddclient: T2858: migrate to get_config_dict()Christian Poessinger
2020-09-13qat: T2857: add very limited smoketestChristian Poessinger
2020-09-13qat: T2857: cleanup configuration scriptChristian Poessinger
2020-09-13configd: T2582: add .gitignoreChristian Poessinger
2020-09-13Revert "Debian: T2843: drop wireguard-modules dependency with kernel 5.8"Christian Poessinger
This reverts commit bd076f694a763991a0b0d3a7bb0fa5d194d56d7c.
2020-09-13vyos.util: add missing ConfigError import in check_kmod()Christian Poessinger
2020-09-13ifconfig: T2863: only use IPv6 link-local address if interface has MAC addressChristian Poessinger
With VyOS 1.2 the default WireGuard behavior is used. This means that when a WireGuard interface is added to the system, there is no "MAC" address - also there is no IPv6 link-local address assigned by the Kernel to this particular interface. With implementation of T2653 all interfaces now receive an IPv6 address - which is also valid for WireGuard interfaces - unfortunately this logic relies on the interface MAC address - and as there is none, the link-local address will be always the same. The logic behind is coded here [1]. We generate an IPv6 link-local address even when there is no "MAC" address. The behavior/functionality (as with VyOS 1.2) must be restored to not have a link-local IPv6 address at all. Any user can add any IPv6 link-local address manually by issuing: set interfaces wireguard wg01 address fe80::ff:1/64. Change vyos.ifconfig.add_ipv6_eui64_address to only add the EUI64-based link-local address if a MAC address is available. [1] https://github.com/vyos/vyos-1x/blob/3077158391ceee4ce04c27dec33f629529727c36/python/vyos/ifconfig/interface.py#L468
2020-09-10Merge pull request #543 from srividya0208/log_changeDaniil Baturin
show log:T2872:"Show log" options for nat and openvpn got inter-mixed
2020-09-10show log:T2872:"Show log" for nat and openvpn got inter-mixedroot
The possible completion of the "show log" shows only nat and the description shows for openvpn. Corrected the duplicate entry
2020-09-10Merge pull request #542 from sever-sever/T2856Christian Poessinger
op-mode: T2856: Fix broken pipe in show version all
2020-09-10op-mode: T2856: Fix broken pipe in show version allsever-sever
2020-09-09Merge pull request #541 from DmitriyEshenko/1x-cur-openconnectChristian Poessinger
openconnect: T2036: Move CLI commands under vpn openconnect
2020-09-09openconnect: T2036: Move CLI commands under vpn openconnectDmitriyEshenko
2020-09-03smoketest: kernel: try loading Intel QAT driversChristian Poessinger
2020-09-03configd: T2582: exclude dhcp[v6]_server.py to investigate regressionJohn Estabrook
2020-09-02Merge pull request #538 from sever-sever/T2850_bgp_templateChristian Poessinger
frr-template: T2850: Add BGP template for FRR
2020-09-01xml: T2849: vyos.xml.defaults should return a list on multi nodesJohn Estabrook
2020-09-01frr-template: T2850: Add BGP template for FRRsever-sever
2020-09-01T2636: ssh: add smoketest for XML defaultValue nodeChristian Poessinger
2020-09-01Merge pull request #537 from sever-sever/T2846Daniil Baturin
op-mode: T2846: Fix show ip route longer-prefixes
2020-09-01op-mode: T2846: Fix show ip route longer-prefixessever-sever
2020-08-31T2636: remove workarounds for get_config_dict()Christian Poessinger
Now that b40c52682a256 ("config: T2636: get_config_dict() returns a list on multi node by default") is implemented the workarounds can be removed.
2020-08-31Merge pull request #535 from jestabro/vyos-configdJohn Estabrook
configd: T2582: vyos config script daemon configd: T2582: add scripts to include list for daemon configd: T2808: add smoketest to ensure script consistency with daemon configd: T2582: add utility to safely add/remove items from include file configd: T2582: add shim var to node.def configd: T2582: inject shim env variable into configsession configd: T2582: add shim as config daemon client configd: T2582: add mkjson for use by shim configd: T2582: add config daemon and supporting files
2020-08-31configd: T2582: add scripts to include list for daemonJohn Estabrook
2020-08-31configd: T2808: add smoketest to ensure script consistency with daemonJohn Estabrook
2020-08-31configd: T2582: add utility to safely add/remove items from include fileJohn Estabrook
2020-08-31configd: T2582: add shim var to node.defJohn Estabrook
2020-08-31configd: T2582: inject shim env variable into configsessionJohn Estabrook
ConfigSession needs to have required env vars manully injected; add the shim definition env var to the list, if config daemon is active.
2020-08-31configd: T2582: add shim as config daemon clientJohn Estabrook
2020-08-31configd: T2582: add mkjson for use by shimJohn Estabrook
(https://github.com/Jacajack/mkjson.git)
2020-08-31configd: T2582: add config daemon and supporting filesJohn Estabrook
2020-08-30Debian: T2843: drop wireguard-modules dependency with kernel 5.8Christian Poessinger
2020-08-30https: add simple smoketest to check nginx config integrityJohn Estabrook
2020-08-30nat: T2814: nftables module for NAT has been renamedChristian Poessinger
Depending on the underlaying Kernel version load the corresponding Kernel module.
2020-08-30Merge pull request #536 from jestabro/T2636John Estabrook
config: T2636: get_config_dict() returns a list on multi node by default
2020-08-30config: T2636: get_config_dict() returns a list on multi node by defaultJohn Estabrook
Unless no_multi_convert is True, a single valued multi node will be returned as a list by get_config_dict(). Modification of Thomas Mangin's version.
2020-08-30WireGuard: T2842: switch to binary package from buster-backportsChristian Poessinger
2020-08-30Merge pull request #534 from sever-sever/T2833Christian Poessinger
rip: T2833: Fix distribute-list filter
2020-08-28nat: T2813: translation address is mandatory if rule is not excludedChristian Poessinger
2020-08-28T2836: show system integrity brokenhagbard
2020-08-27Debian: set proper changelog versionChristian Poessinger
2020-08-27Merge branch 'master' of github.com:vyos/vyos-smoketest into ↵Christian Poessinger
vyos-smoketest-integration (T2832) * 'master' of github.com:vyos/vyos-smoketest: (153 commits) pppoe-server: test some more values lcd: adjust to cli changes lcd: adapt test to new CLI design pppoe-server: initial smoketest with local and radius auth pppoe: validate dhcpv6 client will be started wireless: validate hostapd/wpa_supplicant is running pppoe: sync to new dhcpv6-pd cli anyconnect: T2812: add basic testing ethernet: check interface disable state router-advert: check 'infinity' option in script logic ssh: config file is now volatile (moved to /run) ipv6: link-local: test address assignment on interfaces router-advert: add initial test mdns-repeater: add basic test pseudo-ethernet: extend smoketests with VIFs l2tpv3: add initial interface test wireless: use library function for loading kernel modules ethernet: test "ip" subtree of interface for e.g. ARP settings pppoe: use assertEqual() service: bcast-relay: add initial tests ...
2020-08-27rip: T2833: Fix distribute-list filtersever-sever
2020-08-26pppoe-server: T2829: migrate 'ppp-options mppe' to leafNodeChristian Poessinger
2020-08-26https: T2830: update to use get_config_dictJohn Estabrook
2020-08-26pppoe-server: test some more valuesChristian Poessinger
2020-08-26pppoe-server: bugfix MPPE node definitionChristian Poessinger
PPPoE server supports setting the MPPE preferences, it is implemented as node with leafNodes for require, prefer and deny. This will render a wrong AccelPPP configuration as it will be "None" if specified. pppoe-server { ppp-options { mppe { deny require } } } instead it must be: pppoe-server { ppp-options { mppe require } }
2020-08-26Merge pull request #533 from runborg/T2826Daniil Baturin
T2826: frr: frr python lib error in replace_section
2020-08-25T2826: frr: frr python lib error in replace_sectionRunar Borge
because of a bug in frr.py the default before_re will not be working. it is by default without a group, but will be used in a match that needs a group. The whole string could be matched in the group, so the fix is easy to implement.