Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-07-20 | route-map: T4542: match prefix-len BGP notice | goodNETnick | |
2022-07-19 | smoketest: telegraf: use generic service availability check | Christian Poessinger | |
2022-07-18 | macsec: T4537: support online ciper and source-interface re-configuration | Christian Poessinger | |
2022-07-18 | macsec: T4537: allow 32-byte keys for gcm-aes-256 | Christian Poessinger | |
2022-07-18 | bgp: T4490: check peer-group for AFI/SAFI before issuing warning | Christian Poessinger | |
Commit 6cffe2aa82 ("bgp: T4490: Add informational message for peer withour AFI") only checked if an address-family is configured under the neighbor statement. This is not enough as the AFI can also be specified via a peer-group. Add a new verify_afi() helper that checks both the neighbor and the assigned peer-group. | |||
2022-07-18 | Merge pull request #1407 from sever-sever/T4523 | Christian Poessinger | |
conntrack: T4523: Extend conntrack output direciton, mark, zone | |||
2022-07-17 | login: T4536: add all accounts to frr group | Christian Poessinger | |
2022-07-17 | Merge pull request #1417 from sever-sever/T3435 | Christian Poessinger | |
op-mode: T3435: Fix SNAT any address and DNAT port dict check | |||
2022-07-17 | op-mode: T3435: Fix SNAT any address and DNAT port dict check | Viacheslav Hletenko | |
If SNAT source address in not exists use 'any' Add check if 'port' exists in dictionary | |||
2022-07-15 | smoketest: component_version: print details on failure | John Estabrook | |
2022-07-15 | monitoring: T4411: add monitoring-version.xml.i to component-versions | John Estabrook | |
When adding a new component version file, one must also include the file in xml-component-version.xml.in | |||
2022-07-15 | Merge pull request #1414 from sever-sever/T4532 | Christian Poessinger | |
netflow: T4532: replace dot and colons to dash | |||
2022-07-15 | smoketest: T4532: Update smoketest flow-accounting | Viacheslav Hletenko | |
2022-07-15 | netflow: T4532: replace dot and colons to dash | Viacheslav Hletenko | |
Fix for IPv6 netflow_plugin name When we use IPv6 uacctd.conf doesnt expect coluns in the plugin name. Replace dots and colons to dash. | |||
2022-07-15 | interfaces: T4525: interfaces can not be member of a bridge/bond and a VRF | Christian Poessinger | |
2022-07-15 | bond: T4525: fix adding member interface to bond after removing VRF | Christian Poessinger | |
When removing a VRF from an ethernet interface and adding the interface to a bond in the same commit led to an OSError: [Errno 16] Device or resource busy! | |||
2022-07-15 | vyos.configdict(): T4228: is_member() must return member interface config dict | Christian Poessinger | |
This extends commit 39157912 ("vyos.configdict(): T4228: is_member() must use the "real" hardware interface") and returns the config dict of the used member interfaces. | |||
2022-07-15 | bond: bridge: T4534: error out if member interface is assigned to a VRF instance | Christian Poessinger | |
It makes no sense to enslave an interface to a bond or a bridge device if it is bound to a given VRF. If VRFs should be used - the encapuslating/master interface should be part of the VRF. Error out if the member interface is part of a VRF. | |||
2022-07-14 | Merge pull request #1413 from DaniilHarun/current | Christian Poessinger | |
interface: T4056: Fix unexpected delete tc qdisc | |||
2022-07-14 | interface: T4056: Fix unexpected delete tc qdisc | DaniilHarun | |
2022-07-13 | Merge pull request #1411 from srividya0208/T4493 | Christian Poessinger | |
op-mode: T4493: Incorrect completion help of "show bgp neighbors" | |||
2022-07-13 | op-mode: T4493: Incorrect completion help of "show bgp neighbors" | srividya0208 | |
the operational command "show bgp neighbors" is common for ipv4 and ipv6 so "IPv4" keyword in the help description might mislead. | |||
2022-07-12 | Merge pull request #1409 from sever-sever/T4257 | Christian Poessinger | |
vrf: T4527: Prevent to create VRF with reserved names | |||
2022-07-12 | vrf: T4527: Prevent to create VRF with reserved names | Viacheslav Hletenko | |
VRF names: "add, all, broadcast, default, delete, dev, get, inet, mtu, link, type, vrf" are reserved and cannot be used for vrf name | |||
2022-07-11 | conntrack: T4523: Extend conntrack output direciton, mark, zone | Viacheslav Hletenko | |
Extent op-mode "show conntrack table ipv4" Add ability to see direction of flow: origianl - "Original src", "Original dst" reply - "Reply src", "Reply dst" Add "mark" and "zone" options | |||
2022-07-11 | smoketest: bridge: also test QinQ bridge member interfaces | Christian Poessinger | |
2022-07-11 | vyos.configdict(): T4228: is_member() must split VLAN interfaces | Christian Poessinger | |
Commit 39157912 ("vyos.configdict(): T4228: is_member() must use the "real" hardware interface") added a bugfix on calling is_member() to retrieve the real physical information about an interface. It did not include a code path to also split up VLAN interfaces. This has been fixed. | |||
2022-07-10 | bond: T4522: add ability to specify mii monitor interval via CLI | Christian Poessinger | |
Linux Kernel supports to specify the MII link monitoring frequency in milliseconds. This determines how often the link state of each slave is inspected for link failures. A value of zero disables MII link monitoring. A value of 100 is a good starting point. The default value is 100. set interfaces bonding bond0 mii-mon-interval <n> | |||
2022-07-10 | smoketest: bond: remove second instance of layer2+3 hash-policy test | Christian Poessinger | |
2022-07-10 | vyos.configdict(): T4228: is_member() must use the "real" hardware interface | Christian Poessinger | |
When is_member() is inspecting the bridge/Bond member interfaces it must work with the real interface (e.g. eth1) under the "ethernet" node and not work on the "member interface eth1" CLI tree, that makes no sense at all. | |||
2022-07-10 | bond: T1557: re-add miimon configuration - lost in translation | Christian Poessinger | |
2022-07-10 | bond: T4521: ARP monitor interval is not configured despite set via CLI | Christian Poessinger | |
The code path for changing the interval is never executed. | |||
2022-07-10 | smoketest: bond: add testcase for conflicting bridge member | Christian Poessinger | |
A bond member can not also be used as a member of a bridge interface. | |||
2022-07-10 | smoketest: bond: add testcase for source-interface re-use | Christian Poessinger | |
A bond member is not allowed to also be used as a source interface for e.g. PPPoE or MACsec. | |||
2022-07-09 | Merge pull request #1405 from sever-sever/T4499 | Daniil Baturin | |
nat: T4499: Fix NAT not showing a single flow entry | |||
2022-07-09 | nat: T4499: Fix NAT not showing a single flow entry | Viacheslav Hletenko | |
We must change dictionary if we get only onle flow entry I.e one NAT record With single entry we get: OrderedDict([('meta', xxx])) We expect: [OrderedDict([('meta', xxx]))] | |||
2022-07-09 | Makefile: T4515: change from negative logic to positive logic | Christian Poessinger | |
2022-07-09 | ip: T4517: drop forwarding from CLI "system ip ↵ | Christian Poessinger | |
disable-directed-broadcast-forwarding" | |||
2022-07-09 | ip: T4517: add option to enable directed broadcast forwarding | Yuxiang Zhu | |
Directed broadcast is described in rfc1812#section-5.3.5.2 and rfc2644. By default Linux kernel doesn't forward directed broadcast packets unless both of `/proc/sys/net/ipv4/conf/all/bc_forwarding` and `/proc/sys/net/ipv4/conf/$iface/bc_forwarding` are set to 1. | |||
2022-07-09 | telegraf: T4515: we do not ship telegraf on arm64 builds - remove CLI ↵ | Christian Poessinger | |
definitions | |||
2022-07-09 | Merge pull request #1404 from sever-sever/T4145 | Christian Poessinger | |
conntrack: T4145: Add show conntrack table ipv4 | |||
2022-07-09 | conntrack: T4145: Add show conntrack table ipv4 | Viacheslav Hletenko | |
After firewall rewriting, we lost the ability to show conntrack table as it used old code Rewrite and add it to XML/Python | |||
2022-07-08 | Merge pull request #1401 from sever-sever/T4411 | Christian Poessinger | |
monitoring: T4411: Migrate influxdb options to influxdb node | |||
2022-07-07 | smoketest: T4411: Add influxdb node | Viacheslav Hletenko | |
2022-07-07 | Merge pull request #1397 from sever-sever/T4503 | Christian Poessinger | |
op-mode: T4503: Prevent restart service if commit in progress | |||
2022-07-07 | monitoring: T4411: Migrate influxdb options to influxdb node | Viacheslav Hletenko | |
As we have specific configuration for each plugin: set service monitoring telegraf xxx - azure-data-explorer - prometheus-client - splunk We should to move configuration that related to influxdb under influxdb node Replace: set service monitoring telegraf - authentication xxx - bucket xxx - port xxx - url To: set service monitoring telegraf influxdb xxx | |||
2022-07-07 | op-mode: T4503: Prevent restart service if commit in progress | Viacheslav Hletenko | |
Prevent op-mode scripts from restarting services if commit in progress | |||
2022-07-07 | op-mode: T3457: rename "mon log colored" -> "mon log color" | Christian Poessinger | |
2022-07-07 | dns: op-mode: T2488: retrieve log info from journalctl | Christian Poessinger | |
2022-07-07 | dns: T4509: improve 6to4 error message | Christian Poessinger | |