summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
10 daysstatic: T6746: migrate BFD CLI nodesChristian Breunig
Migrate "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd multi-hop source <z.z.z.z> profile <NAME>" to: "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd profile bar" FRR supports only one source IP address per BFD multi-hop session. VyOS had CLI cupport for multiple source addresses which made no sense.
10 daysfrr: T6746: handle "system ip" and "system ipv6" with FRRender classChristian Breunig
FRR 10.2 will use "[no] ip forwarding" and "[no] ipv6 forwarding" to enable or disable IP(v6) forwarding. We no longer rely on sysctl as this was overridden by FRR later on. Remove code path for sysctl setting and solely rely on FRR.
10 daysconfigd: T6746: handle FRR config reload as last step in commitChristian Breunig
10 daysfrr: T6746: integrate FRRender class into vyos-configdChristian Breunig
When running under vyos-configd only a single apply() is done as last step in the commit algorithm. FRRender class address is provided via an attribute from vyos-configd process.
10 daysfrr: T6746: add default entry for config debug fileChristian Breunig
A lot of services have dynamic debug capabilities which will be turned on by creating a file in /tmp. These scripts have the path hardcoded and sometimes accross multiple places (bad). This commit introduces vyos.defaults.frr_debug_enable to get the path for the debug file from a single location.
10 daysop-mode: T6746: add CLI options to show/monitor log of vyos-configdChristian Breunig
This is pretty usefull to monitor what's going on under the hood Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "init"} Dec 08 15:27:34 vyos-configd[4324]: config session pid is 4400 Dec 08 15:27:34 vyos-configd[4324]: config session sudo_user is cpo Dec 08 15:27:34 vyos-configd[4324]: commit_scripts: ['protocols_babel', 'protocols_bfd', 'protocols_bgp'] Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_babel.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_bgp.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": true, "data": "/usr/libexec/vyos/conf_mode/protocols_bfd.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: scripts_called: ['protocols_babel', 'protocols_bgp', 'protocols_bfd'] Dec 08 15:27:34 vyos-configd[4324]: FRR: Reloading configuration - tries: 1 Python class ID: 139842739583248 Debugging the new FRRender/vyos-config integration
10 daysDebian: T6746: restart vyos-configd on package installation - if runningChristian Breunig
10 daysmulticast: T6746: flatten CLI by merging "multicast route" to "mroute" CLI ↵Christian Breunig
tagNode This will save an entire level for the configuration and there is no need for a parent "multicast" node, as it will only have "route" as tagNode below. Move set protocols static multicast route <x.x.x.x/y> to: * set protocols static mroute <x.x.x.x/y>
10 daysfrr: T6747: migrate protocols to unified FRRender classChristian Breunig
With FRR 10.0 daemons started to be migrated to integrated FRR mgmtd and a northbound interface. This led to some drawbacks in the current state how changes to FRR are handled. The current implementation will use frr-reload.py and specifies excatly WHICH daemon needs a config update and will only replace this part inside FRR. With FRR10 and mgmtd when a partial configuration is sent to mgmtd, it will remove configuration parts from other daemons like bgpd or ospfd which have not yet been migrated to mgmtd. It's not possible to call frr-reload.py with daemon mgmtd - it will error out. This commit will also change the CLI for static routes: CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1" will be split into: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd source-address 1.1.1.1 * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop To make the XML blocks reusable, and comply with the FRR CLI - this was actually a wrong implementation from the beginning as you can not have multiple BFD source addresses. CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1 profile bar" is changed to: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd profile bar CLI commands "set protocols static multicast interface-route" is moved to: * set protocols static multicast route <x.x.x.x/x> interface To have an identical look and feel with regular static routes.
10 daysfrr: T6747: remove superfluous newlines from rendered templatesChristian Breunig
Drop newlines added by macro statement and Jinja2 comments. Jinja2 comments will be removed during package build on the shipped files.
10 daysospf: T6747: add retransmit-window CLI optionChristian Breunig
10 dayspim6: T6747: adjust template to new "router pim6" FRR CLIChristian Breunig
10 dayspim: T6747: adjust template to new "router pim" FRR CLIChristian Breunig
10 daysospf: T6747: fix deferred shutdown handlingChristian Breunig
Honor ospfd deferred shutdown when "max-metric router-lsa on-shutdown" is defined. https://github.com/FRRouting/frr/issues/17011
10 daysvrf: T6747: ensure VNIs are unique on the systemChristian Breunig
10 daysfrr: T6747: ensure there are no daemon leftovers in vtysh CLI after smoketestsChristian Breunig
10 daysfrr: T6747: make daemon definitions re-usable for both conf-mode and smoketestsChristian Breunig
10 daysrpki: T6747: adjust to new FRR cli interfaceChristian Breunig
10 daysDebian: T6746: bump required FRR version to >= 10.2Christian Breunig
10 daysMerge pull request #4238 from c-po/T6613-tacacsChristian Breunig
tacacs: T6613: dynamically build exclude_users list to avoid TACACS traffic
10 daysMerge pull request #4211 from natali-rs1985/T4214Daniil Baturin
static: T4214: Allow several dhcp-interfaces to the same static rote
10 daysMerge pull request #4219 from natali-rs1985/T6628Daniil Baturin
ipoe_server: T6628: Add option to assign static IP address to end users with local auth
11 daysMerge pull request #4239 from kumvijaya/currentChristian Breunig
T6940: added pr mirror sync caller workflows (revised)
11 daysT6940: added pr mirror sync caller workflows (revised), and cleaned up old ↵kumvijaya
workflows
12 daystacacs: T6613: dynamically build exclude_users list to avoid TACACS trafficChristian Breunig
There is no need to send local base OS accounts like root or daemon to the tacacs server. This will only make the CLI experience sluggish. Build up a dynamic list of user accounts to exclude from TACACS lookup.
13 daysMerge pull request #4222 from natali-rs1985/T6860Christian Breunig
op_mode: T6860: Display the EULA in "run show license"
13 daysMerge pull request #4176 from jestabro/vyconf-minimalJohn Estabrook
T6718: use the vyconf daemon for validation of set commands
2024-12-12Merge pull request #4232 from nvollmar/T6927Christian Breunig
T6927: adds option to set container name server
2024-12-12T6863: Fix default distance for PPPoE (#4229)Roman Khramshin
set `default-route-distance` to 1
2024-12-10T6927: add name server validationNicolas Vollmar
2024-12-10vyconf: T6718: use vy_set/delete in configsession and utilJohn Estabrook
2024-12-10vyconf: T6718: set log-fileJohn Estabrook
2024-12-10vyconf: T6718: start vyconfd from vyos-routerJohn Estabrook
Start vyconfd after migration.
2024-12-10vyconf: T6718: add reftree internal cacheJohn Estabrook
As we are generating the reference tree from the XML definitions during build, save an internal representation for vyconfd to load on startup.
2024-12-10vyconf: T6718: add boot configsJohn Estabrook
Add current config and failsafe for vyconfd to load on startup.
2024-12-10Merge pull request #4231 from natali-rs1985/T6368Christian Breunig
pki: T6368: Add ability for acme to listen on IPv6 addresses
2024-12-10pki: T6368: Add ability for acme to listen on IPv6 addressesNataliia Solomko
2024-12-09Merge pull request #4218 from nvollmar/T6927Christian Breunig
T6927: adds option to set container name server
2024-12-09T6927: adds option to set container name serverNicolas Vollmar
-add container check
2024-12-08T6927: adds option to set container name serverNicolas Vollmar
2024-12-08T6940: updated codeowners with user list to support sync (#4228)Vijayakumar A
* T6940: updated codeowners with user list to support sync * T6940: updated codeowners with user list to support sync --------- Co-authored-by: kumvijaya <kuvmijaya@gmail.com>
2024-12-06Merge pull request #4226 from jestabro/opt-arg-reference-treeDaniil Baturin
vyconf: T6718: add keyword default for change in libvyosconfig binding
2024-12-06vyconf: T6718: add keyword default for change in libvyosconfig bindingJohn Estabrook
Adjust signature of reference_tree_to_json for change in the ctypes binding.
2024-12-04Merge pull request #4220 from sever-sever/T6923Daniil Baturin
T6923: Add debian-security-mirror for package-smoketests
2024-12-04op_mode: T6860: Display the EULA in "run show license"Nataliia Solomko
2024-12-04T6923: Add debian-security-mirror for package-smoketestsViacheslav Hletenko
2024-12-04ipoe_server: T6628: Add option to assign static IP address to end usersNataliia Solomko
2024-12-03Merge pull request #4215 from sever-sever/T6917Daniil Baturin
T6917: fix RPS ethernet settings for CPUs with more than 32 cores
2024-12-02Merge pull request #4208 from lucasec/t6630Christian Breunig
T6630: ntp: fix timestamp nested under ptp
2024-12-02Merge pull request #4212 from c-po/T6926-sudoDaniil Baturin
sudo: T6926: remove spam messages to syslog