summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
4 daysMerge pull request #4381 from c-po/ipsec-opmode-profileChristian Breunig
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
4 daysMerge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpointChristian Breunig
T4406: Add public API endpoint to display information
4 daysipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedErrorChristian Breunig
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
4 daysT4406: Add public API endpoint to display informationoniko94
5 daysMerge pull request #4378 from jestabro/libvyosconfig-buildJohn Estabrook
T5400: Move libvyosconfig build out of the Docker image
6 daysMerge pull request #4377 from vyos/syslog-typos-T6989Christian Breunig
syslog: T6989: fix typos and add option to disable MARK
6 daysT5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
6 daysMerge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
6 daysGitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
6 dayssyslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
6 dayssyslog: T6989: fix validator range to match completion helperChristian Breunig
8 daysMerge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
8 daysRevert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
10 daysMerge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
11 daysMerge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
11 daysMerge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
11 dayswireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
11 daysMerge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
11 daysMerge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
11 daysT7204: Container add capability MKNODViacheslav Hletenko
11 daysMerge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
11 dayswlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
11 dayspolicy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
12 daysT7118: Added the ability to redistribute NHRP routes to other protocolsaapostoliuk
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS
12 dayspolicy: T7116: migrate legacy use of "internet" as a well-known community nameAndrew Topp
This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4.
12 dayspolicy: T7116: remove completions & constraints for unsupported community ↵Andrew Topp
"internet"
12 daysMerge pull request #4368 from vyos/c-po-patch-1Christian Breunig
GitHub: T6707: define smoketest ISO retention-days to 2
12 daysGitHub: T6707: only do package integration tests on main repositoryc-po-patch-1Christian Breunig
12 daysGitHub: T6707: define smoketest ISO retention-days to 2Christian Breunig
13 dayssnmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
13 daysMerge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
13 daysMerge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels
13 daysT7171: Add dstport option to GENEVE tunnelsNataliia Solomko
13 dayslldp: T7165: add support to enable only rx or tx on specific interfaceChristian Breunig
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable"
14 daysMerge pull request #4360 from sever-sever/T7190Christian Breunig
T7190: Add haproxy default timeout options configurable
14 daysMerge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
14 daysMerge pull request #4363 from c-po/bridge-T7192Daniil Baturin
bridge: T7192: do not allow a member interface to be used multiple times
14 daysT7190: Add haproxy default timeout options configurableViacheslav Hletenko
Add the ability to configurate default timeout and frontend client timeout ``` set load-balancing haproxy service web timeout client '600' set load-balancing haproxy timeout check '4' set load-balancing haproxy timeout client '600' set load-balancing haproxy timeout connect '12' set load-balancing haproxy timeout server '120' ```
14 daysMerge pull request #4358 from Embezzle/T7185Viacheslav Hletenko
container: T7185: Allow tmpfs mounts within containers
2025-02-23bridge: T7192: fix verify() to not allow member interface used multiple timesChristian Breunig
When configuring set interfaces bridge br10 member interface eth1 set interfaces bridge br20 member interface eth1 commit Checking the interface assignment afterwards shows 242: br20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 62:34:3a:8a:fe:49 brd ff:ff:ff:ff:ff:ff [edit] 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br20 state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:b3:cd:ba brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 The later addition wins and the CLI reports eth1 is assigned to br20 "master br20". A member interface can not be used multiple times.
2025-02-23bond: T7191: fix error message when member interface is used multiple timesChristian Breunig
Sharing the same physical interface among multiple bond interfaces causes information to be lost within the error message set interfaces bonding bond10 member interface eth1 set interfaces bonding bond10 member interface eth2 set interfaces bonding bond20 member interface eth1 set interfaces bonding bond20 member interface eth2 commit Results in: [ interfaces bonding bond10 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! [[interfaces bonding bond10]] failed [ interfaces bonding bond20 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! It should infact output the full name of the bond interface.
2025-02-22container: T7185: Allow tmpfs mounts within containersAlex W
2025-02-22Merge pull request #4357 from sarthurdev/T7148Christian Breunig
firewall: T7148: Bridge state-policy uses drop in place of reject
2025-02-22Merge pull request #4359 from sarthurdev/T7187Viacheslav Hletenko
haproxy: T7187: Fix typo in op-mode filename
2025-02-22haproxy: T7187: Fix typo in op-mode XML filesarthurdev
2025-02-20firewall: T7148: Bridge state-policy uses drop in place of rejectsarthurdev
2025-02-20Merge pull request #4353 from natali-rs1985/T5810Daniil Baturin
T5810: Add support for RPKI source ip
2025-02-20Merge pull request #4351 from markh0338/int-group-container-validationChristian Breunig
firewall: T7177: Update interface-name constraint to allow "pod-" interface names
2025-02-20Merge pull request #4352 from natali-rs1985/T6628-fixChristian Breunig
T6628: IPoE-server rename "static-ip" to "ip-address" for local auth
2025-02-20Merge pull request #4356 from sarthurdev/wlb_pythonChristian Breunig
wlb: T4452: Use return for exclude statements
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-10 07:30:17 +0000