summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-02-10xml: T5738: improve PKI building blocks for CLIChristian Breunig
(cherry picked from commit d4278cde2b153e163fe41e1bc461891397336bc3)
2024-02-09Merge pull request #2979 from vyos/mergify/bp/sagitta/pr-2978Christian Breunig
T6028: Fix QoS policy shaper wrong class_id_max and default_minor_id (backport #2978)
2024-02-09T6028: Fix QoS policy shaper wrong class_id_max and default_minor_idViacheslav Hletenko
The `class_id_max` is wrong due to `tmp.sort` of Strings If we have class 5 and class 10 we get sorted max value 5, expected 10 ``` >>> tmp = ['5', '10'] >>> tmp.sort() >>> tmp ['10', '5'] >>> >>> hex(5+1) '0x6' >>> >>> hex(10+1) '0xb' >>> ``` This way we get wrong default maximum class value: ``` tc qdisc replace dev eth1 root handle 1: htb r2q 444 default 6 ``` Expect: ``` tc qdisc replace dev eth1 root handle 1: htb r2q 444 default b ``` Fix this converting Strings to Integers and get max value. (cherry picked from commit 2e8fa45c7f0663549edd118622b3381e7c428b2e)
2024-02-09Merge pull request #2977 from vyos/mergify/bp/sagitta/pr-2967Christian Breunig
T5703: Fix reapply QoS for connection-oriented interfaces (backport #2967)
2024-02-09T5703: Fix reapply QoS for connection-oriented interfacesViacheslav Hletenko
After `disconnect` and `connect` connection-oriented interfaces like PPPoE, QoS policy has to be reapplied (cherry picked from commit ffc6dc28780f4d3e8c548f3709c7f3d17babda68)
2024-02-09Merge pull request #2974 from vyos/mergify/bp/sagitta/pr-2643Daniil Baturin
T5828: fix grub installation on arm64-efi machines (backport #2643)
2024-02-09Merge pull request #2976 from vyos/mergify/bp/sagitta/pr-2975Christian Breunig
https: T5902: fix migration of virtual-host port (backport #2975)
2024-02-09https: T5902: fix migration of virtual-host portChristian Breunig
CLI source node is port and not listen-port. (cherry picked from commit 63d53a17274349fd68defdbf9f7ce16be63fc9b1)
2024-02-09Merge pull request #2973 from vyos/mergify/bp/sagitta/pr-2950Christian Breunig
T5960: Rewritten authentication node in PPTP to a single view (backport #2950)
2024-02-09T5828: fix grub installation on arm64-efi machinesMathew McBride
Since the migration of GRUB handling to vyos-1x, the grub install sequence has hardcoded references to x86. Change the GRUB sequence so it can work on arm64 as well. (cherry picked from commit 37bd574c4e1f49b03f985c4293513ff7107ae82f)
2024-02-09T5960: Rewritten authentication node in PPTP to a single viewaapostoliuk
Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. (cherry picked from commit 018110200c9a82815dd5d0510f0732d7159c0d59)
2024-02-09Merge pull request #2972 from vyos/mergify/bp/sagitta/pr-2955Christian Breunig
rpki: T6023: add support for CLI knobs expire-interval and retry-interval (backport #2955)
2024-02-08rpki: T6023: add support for CLI knobs expire-interval and retry-intervalChristian Breunig
(cherry picked from commit 17894f6f5d97df7d3ac1cf37ce0e1a96b8fa8e8b)
2024-02-08Merge pull request #2970 from vyos/mergify/bp/sagitta/pr-2968Christian Breunig
T5685: Keepalived VRRP prefix is not necessary for the virtual address (backport #2968)
2024-02-08Merge pull request #2971 from vyos/mergify/bp/sagitta/pr-2969Christian Breunig
T6026: QoS hide attempts to delete qdisc from devices (backport #2969)
2024-02-08T6026: QoS hide attempts to delete qdisc from devicesViacheslav Hletenko
Hide unexpected output by attempts of deleting `qdisc` from interfaces [ qos ] Error: Cannot find specified qdisc on specified device. Error: Cannot delete qdisc with handle of zero. (cherry picked from commit 6dcb68ba5553ac94eb3a9da4a915999500b00ab2)
2024-02-08T5685: Keepalived VRRP prefix is not necessary for the virtual addressNataliia Solomko
(cherry picked from commit 1cb52f758cec78b9ac19f47448064b8e9e722b67)
2024-02-08Merge pull request #2964 from vyos/mergify/bp/sagitta/pr-2952Daniil Baturin
vrf: T5973: module is now statically compiled into the kernel (backport #2952)
2024-02-08Merge pull request #2963 from vyos/mergify/bp/sagitta/pr-2957Daniil Baturin
bgp: T6024: add additional missing FRR features (backport #2957)
2024-02-07Merge pull request #2962 from vyos/mergify/bp/sagitta/pr-2959Viacheslav Hletenko
init: T2044: only start rpki if cache is configured (backport #2959)
2024-02-07init: T2044: only start rpki if cache is configuredChristian Breunig
This extends commit 9199c87cf ("init: T2044: always start/stop rpki during system boot") to check the bootup configuration if an RPKI cache is defined. Only start RPKI if this is the case. (cherry picked from commit 9b8e11e078c42e3ae86ebfa45fec57336f25a0af)
2024-02-07vrf: T5973: module is now statically compiled into the kernelChristian Breunig
Always enable VRF strict_mode (cherry picked from commit 117fbcd6237b59f54f2c1c66986a8ce073808c84)
2024-02-07bgp: T6024: add additional missing FRR featuresChristian Breunig
* set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null> * set protocols bgp parameters allow-martian-nexthop * set protocols bgp parameters no-hard-administrative-reset" (cherry picked from commit fff6004d46c5b939800fc3e61fe2102224625c0d)
2024-02-07Merge pull request #2961 from vyos/mergify/bp/sagitta/pr-2960Christian Breunig
xml: T302: replace references to Quagga with FRRouting (backport #2960)
2024-02-07Merge pull request #2958 from vyos/mergify/bp/sagitta/pr-2944Christian Breunig
vpn: T3843: l2tp configuration not cleared after delete (backport #2944)
2024-02-07xml: T302: replace references to Quagga with FRRoutingChristian Breunig
(cherry picked from commit 1c882769cc0627cfc1ebf5ab7c338c6c474456da)
2024-02-07vpn: T3843: l2tp configuration not cleared after deletekhramshinr
vpn: T5926: IPSEC does not apply after l2tp configuration was changed added dependency between l2tp and ipsec conf added test for apply config to swanctl (cherry picked from commit e697ed1e7fd5c33f8082b2f4f96c42fc822ec9a5)
2024-02-07Merge pull request #2956 from vyos/mergify/bp/sagitta/pr-2953Christian Breunig
T6021: Fix QoS shaper r2q calculation (backport #2953)
2024-02-07T6021: Fix QoS shaper r2q calculationViacheslav Hletenko
The current calculation `r2q` is wrong as it uses `Floor division` but expecting `division` This way `math.ceil` calculate wrong value as we expect round a number upward to its nearest integer For example for speed 710 mbits expected value `444` but we get `443` ``` from math import ceil MAXQUANTUM = 200000 speed = 710000000 speed_bps = int(speed) // 8 >>> speed_bps // MAXQUANTUM 443 >>> speed_bps / MAXQUANTUM 443.75 >>> >>> >>> ceil(speed_bps // MAXQUANTUM) 443 >>> ceil(speed_bps / MAXQUANTUM) 444 >>> ``` (cherry picked from commit ce1035e1e8642bf740e2a21693a72fe2127b8f72)
2024-02-06Merge pull request #2948 from vyos/mergify/bp/sagitta/pr-2941Christian Breunig
image-tools: T6016: wait for umount in cleanup function (backport #2941)
2024-02-06Merge pull request #2947 from vyos/mergify/bp/sagitta/pr-2946Christian Breunig
T5921: Fix OpenConnect verify for local users (backport #2946)
2024-02-06image-tools: T6016: wait for umount in cleanup functionJohn Estabrook
(cherry picked from commit d80530c48a78dfeb55293494a257f6234b0ef76d)
2024-02-06T5921: Fix OpenConnect verify for local usersViacheslav Hletenko
Fix verify error for the VPN OpenConnect configuration with local authentication and without any user File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 94, in verify if not ocserv["authentication"]["local_users"]: KeyError: 'local_users' (cherry picked from commit 71644dfed63f6248525db3c3bc9493c059707a2a)
2024-02-06Merge pull request #2942 from srividya0208/debug-ipsecViacheslav Hletenko
op-mode:T6015:Fix for charon file generated by ipsec debug script
2024-02-06op-mode:T6015:Fix the charon file generated by ipsec debug scriptsrividya0208
2024-02-06Merge pull request #2939 from vyos/mergify/bp/sagitta/pr-2936Christian Breunig
rpki: T6011: known-hosts-file is no longer supported by FRR (backport #2936)
2024-02-06rpki: T6011: known-hosts-file is no longer supported by FRRChristian Breunig
(cherry picked from commit 586863bf3a9cb1dd1c0d74b628d00096b905740f)
2024-02-05Merge pull request #2938 from vyos/mergify/bp/sagitta/pr-2937John Estabrook
T6018: adjust smoketest for update to FastAPI web framework (backport #2937)
2024-02-05T6018: adjust smoketest for update to FastAPI web frameworkJohn Estabrook
(cherry picked from commit e1b63b9b1704a55ccbf75e7131651c85dd318107)
2024-02-03Merge pull request #2934 from vyos/mergify/bp/sagitta/pr-2932Christian Breunig
ipsec: T5998: add replay-windows setting (backport #2932)
2024-02-03ipsec: T5998: add replay-windows settingChristian Breunig
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> (cherry picked from commit 4d943d8fbf1253154897179b0e3ea2d93b898197)
2024-02-03Merge pull request #2933 from vyos/mergify/bp/sagitta/pr-2931Christian Breunig
configdict: T5894: preserve old behavior when dealing with PKI (backport #2931)
2024-02-03configdict: T5894: preserve old behavior when dealing with PKIChristian Breunig
Commit b152b5202 ("configdict: T5894: add get_config_dict() flag with_pki") added the generic PKI flag but if there was no PKI subsystem available in the configuration, no pki dict key ever manifested in the resulting dictionary requested by the caller. This is different to the old behavior (which each caller implementing the call itself) where there always was a pki key present - even if it was empty. This triggered a bug in the IPSec script Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 600, in <module> verify(ipsec) File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 372, in verify verify_pki_rsa(ipsec['pki'], rsa) ~~~~~^^^^^^^ KeyError: 'pki' As it wanted to verify keys, but there was no pki dictionary key available. This commit restores the previous behavior. (cherry picked from commit 9b56a86def674886721a367c02371f9da65c3fd3)
2024-02-02Merge pull request #2930 from vyos/mergify/bp/sagitta/pr-2748Christian Breunig
qos: T5848: Add triple-isolate option to CAKE policy config (backport #2748)
2024-02-02qos: T5848: improve flow-isolation help stringsChristian Breunig
(cherry picked from commit 762be96f45bb1d9705e45ff554ad483c9d4e10ff)
2024-02-02qos: T5848: Add triple-isolate option to CAKE policy configMatthew Kobayashi
(cherry picked from commit 61342083d7db8c30d015474fae5cb71f480487d8)
2024-02-02Merge pull request #2929 from vyos/mergify/bp/sagitta/pr-2927Viacheslav Hletenko
container: T5955: add uid/gid settings (backport #2927)
2024-02-02smoketest: T5955: verify container uid/gid settingChristian Breunig
(cherry picked from commit faa4c87d93c7808c6a4edd8eddd29049ec8ec3fa)
2024-02-02container: T5955: allow setting uid/gidPiotr Maksymiuk
(cherry picked from commit 52e9707a43290f5f826766e2c42c5f0db3c9adec)
2024-02-02Merge pull request #2928 from vyos/mergify/bp/sagitta/pr-2891Viacheslav Hletenko
T5971: Rewritten ppp options in accel-ppp services (backport #2891)
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-06 09:22:02 +0000