summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-12-15tacacs: T6613: dynamically build exclude_users list to avoid TACACS trafficChristian Breunig
There is no need to send local base OS accounts like root or daemon to the tacacs server. This will only make the CLI experience sluggish. Build up a dynamic list of user accounts to exclude from TACACS lookup.
2024-12-13Merge pull request #4222 from natali-rs1985/T6860Christian Breunig
op_mode: T6860: Display the EULA in "run show license"
2024-12-13Merge pull request #4176 from jestabro/vyconf-minimalJohn Estabrook
T6718: use the vyconf daemon for validation of set commands
2024-12-12Merge pull request #4232 from nvollmar/T6927Christian Breunig
T6927: adds option to set container name server
2024-12-12T6863: Fix default distance for PPPoE (#4229)Roman Khramshin
set `default-route-distance` to 1
2024-12-10T6927: add name server validationNicolas Vollmar
2024-12-10vyconf: T6718: use vy_set/delete in configsession and utilJohn Estabrook
2024-12-10vyconf: T6718: set log-fileJohn Estabrook
2024-12-10vyconf: T6718: start vyconfd from vyos-routerJohn Estabrook
Start vyconfd after migration.
2024-12-10vyconf: T6718: add reftree internal cacheJohn Estabrook
As we are generating the reference tree from the XML definitions during build, save an internal representation for vyconfd to load on startup.
2024-12-10vyconf: T6718: add boot configsJohn Estabrook
Add current config and failsafe for vyconfd to load on startup.
2024-12-10Merge pull request #4231 from natali-rs1985/T6368Christian Breunig
pki: T6368: Add ability for acme to listen on IPv6 addresses
2024-12-10pki: T6368: Add ability for acme to listen on IPv6 addressesNataliia Solomko
2024-12-09Merge pull request #4218 from nvollmar/T6927Christian Breunig
T6927: adds option to set container name server
2024-12-09T6927: adds option to set container name serverNicolas Vollmar
-add container check
2024-12-08T6927: adds option to set container name serverNicolas Vollmar
2024-12-08T6940: updated codeowners with user list to support sync (#4228)Vijayakumar A
* T6940: updated codeowners with user list to support sync * T6940: updated codeowners with user list to support sync --------- Co-authored-by: kumvijaya <kuvmijaya@gmail.com>
2024-12-06Merge pull request #4226 from jestabro/opt-arg-reference-treeDaniil Baturin
vyconf: T6718: add keyword default for change in libvyosconfig binding
2024-12-06vyconf: T6718: add keyword default for change in libvyosconfig bindingJohn Estabrook
Adjust signature of reference_tree_to_json for change in the ctypes binding.
2024-12-04Merge pull request #4220 from sever-sever/T6923Daniil Baturin
T6923: Add debian-security-mirror for package-smoketests
2024-12-04op_mode: T6860: Display the EULA in "run show license"Nataliia Solomko
2024-12-04T6923: Add debian-security-mirror for package-smoketestsViacheslav Hletenko
2024-12-03Merge pull request #4215 from sever-sever/T6917Daniil Baturin
T6917: fix RPS ethernet settings for CPUs with more than 32 cores
2024-12-02Merge pull request #4208 from lucasec/t6630Christian Breunig
T6630: ntp: fix timestamp nested under ptp
2024-12-02Merge pull request #4212 from c-po/T6926-sudoDaniil Baturin
sudo: T6926: remove spam messages to syslog
2024-12-02T6917: fix RPS ethernet settings for CPUs with more than 32 coresViacheslav Hletenko
The maximun value theat could be written for the 'rpc_cpu' is 4294967295 or 0xffffffff in the chunk splitted by commas
2024-12-02config-mgmt: T6925: return from verify function on config object None (#4213)John Estabrook
2024-12-01sudo: T6926: remove spam messages to syslogChristian Breunig
Right now every command that's executed via op-mode/conf-mode is logged with a session entry/exit and command execution into syslog. sudo[1082396]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1082388 /opt/vyatta/etc/config/archive/config.boot sudo[1082396]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082396]: pam_unix(sudo:session): session closed for user root sudo[1082399]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf sudo[1082399]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082399]: pam_unix(sudo:session): session closed for user root This heavily bloats remote logging services - remove the log entries
2024-12-01Merge pull request #4209 from natali-rs1985/T6770Christian Breunig
op_mode: T6770: Fix op command "show bridge vni"
2024-11-30Merge pull request #4205 from natali-rs1985/T6909Christian Breunig
op_mode: T6909: Move "show monitoring" and "show zebra" to "show monitoring frr"
2024-11-29Merge pull request #4204 from sarthurdev/T6809Simon
2024-11-28multicast: T6920: static multicast routing throws TypeError (#4210)Nataliia S.
2024-11-28T6906: IPoE-server add start-session option (#4206)Viacheslav Hletenko
Add the abbility to start IPoE session by unclassified-packet. It allows the cases when subscriber configures the address manually (static) and accel-ppp can start session on any packet. By default start session on DHCPv4 Discover packet. set service ipoe-server interface eth1 start-session unclassified-packet
2024-11-27op_mode: T6770: Fix op command "show bridge vni"Nataliia Solomko
2024-11-26op_mode: T6909: Move "show monitoring" and "show zebra" to "show monitoring frr"Nataliia Solomko
2024-11-26Merge pull request #4196 from natali-rs1985/T6872Christian Breunig
ipoe_server: T6872: Add the ability to configure LUA scripts and username
2024-11-26Merge pull request #4198 from sever-sever/T264Christian Breunig
T264: IPsec add base64 encoded secret-type feature
2024-11-25T6630: ntp: fix timestamp nested under ptpLucas Christian
2024-11-25Merge pull request #4203 from sarthurdev/T6692Simon
dhcp: T6692: Fix range options not present when `exclude` is used
2024-11-23avahi: T6908: add option to define max-cache entries (#4207)Christian Breunig
* avahi: T6908: reduce runtime overhead in smoketests by using setUpClass/tearDownClass * avahi: T6908: add option to define mdns-repeater max-cache entries Add CLI option to configure `cache-entries-max` entries in Avahi daemon configuration. Default value of 4096 for "cache-entries" CVLI node was retrieved from source code.
2024-11-22pki: T6809: Support system install of CA certificatessarthurdev
2024-11-21pki: T3642: Minimize `node_changed` codesarthurdev
2024-11-21dhcp: T6692: Fix range options not present when `exclude` is usedsarthurdev
Add smoketest to verify range options are present with `exclude`
2024-11-21T264: IPsec add base64 encoded secret-type featureViacheslav Hletenko
Add the ability to configure base64 encoded passwords for VPN IPSec site-to-site peers authentication psk PSK secret 'xxxxx==' authentication psk PSK secret-type <base64|plaintext>
2024-11-21ipoe_server: T6872: Add the ability to configure LUA scripts and usernameNataliia Solomko
2024-11-21Merge pull request #4202 from jestabro/drop-legacy-show-configuration-filesDaniil Baturin
op-mode: T6900: remove uninformative 'show configuration files'
2024-11-21T6806: Rework QoS Policy for HFSC Shaper (#4181)Roman Khramshin
- Removed default `m1` and `m2` values from interface definitions - Adjusted filter priorities for shapers - Fixed SFQ qdisc and HFSC class creation to fully support `m1`, `d`, and `m2` parameters - Added validation logic similar to VyOS 1.3 to improve error handling and user experience
2024-11-21T6796: QoS: match filter by interface(iif) (#4188)Roman Khramshin
2024-11-20op-mode: T6900: remove uninformative 'show configuration files'John Estabrook
The legacy node and behavior under 'show configuration files' is not useful as is; remove node and drop script to allow for a useful repurpose in the future.
2024-11-20Merge pull request #4201 from sarthurdev/T3397Simon
serial: T3397: Remove `--keep-baud` which could result in unexpected baud rate