summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
11 daysT5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
11 daysMerge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
11 daysGitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
13 daysMerge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
14 daysRevert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
2025-02-27Merge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
2025-02-27Merge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
2025-02-27Merge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
2025-02-27T7204: Container add capability MKNODViacheslav Hletenko
2025-02-27Merge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
2025-02-26policy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
2025-02-26T7118: Added the ability to redistribute NHRP routes to other protocolsaapostoliuk
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS
2025-02-26policy: T7116: migrate legacy use of "internet" as a well-known community nameAndrew Topp
This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4.
2025-02-26policy: T7116: remove completions & constraints for unsupported community ↵Andrew Topp
"internet"
2025-02-26Merge pull request #4368 from vyos/c-po-patch-1Christian Breunig
GitHub: T6707: define smoketest ISO retention-days to 2
2025-02-26GitHub: T6707: only do package integration tests on main repositoryc-po-patch-1Christian Breunig
2025-02-26GitHub: T6707: define smoketest ISO retention-days to 2Christian Breunig
2025-02-25snmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
2025-02-25Merge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
2025-02-25Merge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels
2025-02-25T7171: Add dstport option to GENEVE tunnelsNataliia Solomko
2025-02-24lldp: T7165: add support to enable only rx or tx on specific interfaceChristian Breunig
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable"
2025-02-24Merge pull request #4360 from sever-sever/T7190Christian Breunig
T7190: Add haproxy default timeout options configurable
2025-02-24Merge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
2025-02-24Merge pull request #4363 from c-po/bridge-T7192Daniil Baturin
bridge: T7192: do not allow a member interface to be used multiple times
2025-02-24T7190: Add haproxy default timeout options configurableViacheslav Hletenko
Add the ability to configurate default timeout and frontend client timeout ``` set load-balancing haproxy service web timeout client '600' set load-balancing haproxy timeout check '4' set load-balancing haproxy timeout client '600' set load-balancing haproxy timeout connect '12' set load-balancing haproxy timeout server '120' ```
2025-02-24Merge pull request #4358 from Embezzle/T7185Viacheslav Hletenko
container: T7185: Allow tmpfs mounts within containers
2025-02-23bridge: T7192: fix verify() to not allow member interface used multiple timesChristian Breunig
When configuring set interfaces bridge br10 member interface eth1 set interfaces bridge br20 member interface eth1 commit Checking the interface assignment afterwards shows 242: br20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 62:34:3a:8a:fe:49 brd ff:ff:ff:ff:ff:ff [edit] 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br20 state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:b3:cd:ba brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 The later addition wins and the CLI reports eth1 is assigned to br20 "master br20". A member interface can not be used multiple times.
2025-02-23bond: T7191: fix error message when member interface is used multiple timesChristian Breunig
Sharing the same physical interface among multiple bond interfaces causes information to be lost within the error message set interfaces bonding bond10 member interface eth1 set interfaces bonding bond10 member interface eth2 set interfaces bonding bond20 member interface eth1 set interfaces bonding bond20 member interface eth2 commit Results in: [ interfaces bonding bond10 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! [[interfaces bonding bond10]] failed [ interfaces bonding bond20 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! It should infact output the full name of the bond interface.
2025-02-22container: T7185: Allow tmpfs mounts within containersAlex W
2025-02-22Merge pull request #4357 from sarthurdev/T7148Christian Breunig
firewall: T7148: Bridge state-policy uses drop in place of reject
2025-02-22Merge pull request #4359 from sarthurdev/T7187Viacheslav Hletenko
haproxy: T7187: Fix typo in op-mode filename
2025-02-22haproxy: T7187: Fix typo in op-mode XML filesarthurdev
2025-02-20firewall: T7148: Bridge state-policy uses drop in place of rejectsarthurdev
2025-02-20Merge pull request #4353 from natali-rs1985/T5810Daniil Baturin
T5810: Add support for RPKI source ip
2025-02-20Merge pull request #4351 from markh0338/int-group-container-validationChristian Breunig
firewall: T7177: Update interface-name constraint to allow "pod-" interface names
2025-02-20Merge pull request #4352 from natali-rs1985/T6628-fixChristian Breunig
T6628: IPoE-server rename "static-ip" to "ip-address" for local auth
2025-02-20Merge pull request #4356 from sarthurdev/wlb_pythonChristian Breunig
wlb: T4452: Use return for exclude statements
2025-02-19Merge pull request #4354 from jestabro/netplug-configChristian Breunig
T7182: use Config instead of ConfigTreeQuery for get_interface_dict
2025-02-19wlb: T4452: Use return for exclude statementssarthurdev
2025-02-19Merge pull request #4355 from c-po/fix-wireguard-op-mode-T7123Christian Breunig
T7123: Revert "wireguard: T4930: drop unused WireGuardOperational().show_interface() method"
2025-02-19Revert "wireguard: T4930: drop unused ↵Christian Breunig
WireGuardOperational().show_interface() method" This reverts commit 98414a69f0018915ac999f51975618dd5fbe817d.
2025-02-19T7182: use Config instead of ConfigTreeQuery for get_interface_dictJohn Estabrook
2025-02-19T7182: normalize formattingJohn Estabrook
2025-02-19T5810: Add support for RPKI source ipNataliia Solomko
2025-02-19firewall: T7177: update interface-name.xml.i constraint and smoketest to ↵Mark
support pod interfaces from containers