Age | Commit message (Collapse) | Author | |
---|---|---|---|
4 days | Merge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verify | Viacheslav Hletenko | |
T7219: Add check for remote and group command to verify | |||
4 days | Merge pull request #4321 from sskaje/T7092 | Daniil Baturin | |
T7092: Add Container Registry Mirror | |||
4 days | T7219: Add check for remote and group command to verify | oniko94 | |
4 days | T7092: Change validators: regex to host-name|address + port + path | sskaje | |
4 days | T7092: Update interface-definitions/container.xml.in | sskaje | |
Co-authored-by: Daniil Baturin <daniil@baturin.org> | |||
4 days | Merge pull request #4388 from jestabro/cleanup-libvyosconfig-build | Viacheslav Hletenko | |
T5400: clean up directory as needed before local build of libvyosconfig | |||
5 days | T5400: clean up directory as needed before local build of libvyosconfig | John Estabrook | |
5 days | Merge pull request #4386 from c-po/syslog-T7229 | Daniil Baturin | |
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets | |||
7 days | smoketest: T7229: add syslog test to verify source-address for remote | Christian Breunig | |
7 days | syslog: T7229: advanced format should not have IPv6 addresses in [] brackets | Christian Breunig | |
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error | |||
8 days | login: T6712: add newline after motd warning message | Christian Breunig | |
8 days | Merge pull request #4382 from c-po/ipsec-ios-profile-fixes | Christian Breunig | |
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile | |||
9 days | ipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profile | Christian Breunig | |
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed. | |||
9 days | ipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be set | Christian Breunig | |
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now. | |||
9 days | Merge pull request #4381 from c-po/ipsec-opmode-profile | Christian Breunig | |
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError | |||
9 days | Merge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpoint | Christian Breunig | |
T4406: Add public API endpoint to display information | |||
9 days | ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError | Christian Breunig | |
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode' | |||
9 days | T4406: Add public API endpoint to display information | oniko94 | |
10 days | Merge pull request #4378 from jestabro/libvyosconfig-build | John Estabrook | |
T5400: Move libvyosconfig build out of the Docker image | |||
11 days | Merge pull request #4377 from vyos/syslog-typos-T6989 | Christian Breunig | |
syslog: T6989: fix typos and add option to disable MARK | |||
11 days | T5400: add local build of libvyosconfig to Makefile | John Estabrook | |
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile. | |||
11 days | Merge pull request #4379 from vyos/c-po-patch-1 | Christian Breunig | |
GitHub: T5400: evaluate OPAM environment before package build | |||
11 days | GitHub: T5400: evaluate OPAM environment before package build | Christian Breunig | |
11 days | syslog: T6989: add option do disable "MARK"syslog-typos-T6989 | Christian Breunig | |
New CLI command set system syslog marker disable | |||
11 days | syslog: T6989: fix validator range to match completion helper | Christian Breunig | |
13 days | Merge pull request #4376 from jameskr97/current | Daniil Baturin | |
Revert "wireguard: T4930: remove pylint W0611: unused import" | |||
14 days | Revert "wireguard: T4930: remove pylint W0611: unused import" | James Roberts | |
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23. | |||
2025-02-27 | Merge pull request #4237 from indrajitr/hostd-update | Viacheslav Hletenko | |
T6948: Keep DHCP server leases in sync with hostd records | |||
2025-02-27 | Merge pull request #4374 from sever-sever/T7204 | Daniil Baturin | |
T7204: Container add capability MKNOD | |||
2025-02-27 | Merge pull request #4369 from natali-rs1985/T7166 | Daniil Baturin | |
wireguard: T7166: Call vxlan dependency if interface exist | |||
2025-02-27 | wireguard: T7166: Call vxlan dependency if interface exist | Nataliia Solomko | |
2025-02-27 | Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-community | Christian Breunig | |
policy: T7116: Remove unsupported use of BGP community "internet" | |||
2025-02-27 | Merge pull request #4372 from aapostoliuk/T7118-circinus | Christian Breunig | |
T7118: Added the ability to redistribute NHRP routes to other protocols | |||
2025-02-27 | T7204: Container add capability MKNOD | Viacheslav Hletenko | |
2025-02-27 | Merge pull request #4373 from aapostoliuk/T7158-circinus | Christian Breunig | |
policy: T7158: Added match source-vrf to route-map | |||
2025-02-26 | wlb: T7196: Migrate interface wildcards to nftables format | Simon | |
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function | |||
2025-02-26 | policy: T7158: Added match source-vrf to route-map | aapostoliuk | |
Added match source-vrf to route-map | |||
2025-02-26 | T7118: Added the ability to redistribute NHRP routes to other protocols | aapostoliuk | |
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS | |||
2025-02-26 | policy: T7116: migrate legacy use of "internet" as a well-known community name | Andrew Topp | |
This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4. | |||
2025-02-26 | policy: T7116: remove completions & constraints for unsupported community ↵ | Andrew Topp | |
"internet" | |||
2025-02-26 | Merge pull request #4368 from vyos/c-po-patch-1 | Christian Breunig | |
GitHub: T6707: define smoketest ISO retention-days to 2 | |||
2025-02-26 | GitHub: T6707: only do package integration tests on main repositoryc-po-patch-1 | Christian Breunig | |
2025-02-26 | GitHub: T6707: define smoketest ISO retention-days to 2 | Christian Breunig | |
2025-02-25 | snmp: T7180: Fixed verification of engineid in snmpv3 (#4366) | aapostoliuk | |
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string. | |||
2025-02-25 | Merge pull request #4365 from c-po/lldp-t7165 | Daniil Baturin | |
lldp: T7165: add support to enable only rx/tx on specific interfaces | |||
2025-02-25 | Merge pull request #4364 from natali-rs1985/T7171 | Daniil Baturin | |
T7171: Add dstport option to GENEVE tunnels | |||
2025-02-25 | T7171: Add dstport option to GENEVE tunnels | Nataliia Solomko | |
2025-02-24 | lldp: T7165: add support to enable only rx or tx on specific interface | Christian Breunig | |
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable" | |||
2025-02-24 | Merge pull request #4360 from sever-sever/T7190 | Christian Breunig | |
T7190: Add haproxy default timeout options configurable | |||
2025-02-24 | Merge pull request #4362 from c-po/bond-T7191 | Daniil Baturin | |
bond: T7191: fix error message when member interface is used multiple times |