summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-12-19T5791: Modify ddclient smoketest for reliabilityIndrajit Raychaudhuri
Instead of checking for the existence of a PID file, check if the process is running by name.
2024-12-18Merge pull request #4233 from HollyGurza/T6934Christian Breunig
T6934: Add preshared key for zabbix-agent monitoring service
2024-12-18Merge pull request #4225 from natali-rs1985/T6767Christian Breunig
op_mode: T6767: Check latest image version in VRF context for "add system image latest vrf <name>"
2024-12-18Merge pull request #4223 from HollyGurza/T6874Christian Breunig
T6874: [QoS] Add class filter by ether
2024-12-18Merge pull request #4236 from opswill/currentDaniil Baturin
T6918: Accept invalid PPPoE Session in stateful bridge firewall.
2024-12-18Merge branch 'frr-10' into currentChristian Breunig
* frr-10: op-mode: T6746: add "show log frr" and "monitor log frr" commands frrender: T6746: do not render candidate FRR config to running FRR config file path frrender: T6746: ensure there are no empty lines in the rendered FRR configuration bgp: T6746: remove debug code
2024-12-18T6874: [QoS] Add class filter by etherkhramshinr
Implement a command to configure QoS policy filters by ether properties. The supported match types include: - Destination: Specify the Ethernet destination address. - Protocol: Define the Ethernet protocol. - Source: Set the Ethernet source address. `set qos policy <type> <name> class <id> match <match-id> ether <destination|protocol|source> <val>`
2024-12-17op-mode: T6746: add "show log frr" and "monitor log frr" commandsChristian Breunig
2024-12-17frrender: T6746: do not render candidate FRR config to running FRR config ↵Christian Breunig
file path
2024-12-17frrender: T6746: ensure there are no empty lines in the rendered FRR ↵Christian Breunig
configuration
2024-12-17bgp: T6746: remove debug codeChristian Breunig
2024-12-17Merge pull request #4175 from HollyGurza/T6800Christian Breunig
T6799: QoS: Improve Priority-Queue Policy
2024-12-17Merge pull request #4240 from greenman1969/T6950Daniil Baturin
service-dns-dynamic: T6950: fix migration script logic for missing addresses
2024-12-16T6950: Added if statement to check if the address key is definedGage Greenhouse
2024-12-17T6918: Fix punctuationopswill
Co-authored-by: Daniil Baturin <daniil@baturin.org>
2024-12-16Merge pull request #4227 from c-po/T6746-frr-10Christian Breunig
frr: upgrade to 10.2 and migrate protocols to unified FRRender class
2024-12-16frr: T6746: add guard time after cli_commit() and before getFRRconfig()Christian Breunig
As vyos-configd will take care about the commit via FRRender class, and FRR needs to internally process the configuration we might read it back via vtysh "to fast". Add a 5 seconds guard timer after each cli_commit() and before calling getFRRconfig(). Guard timer is reset every time, cli_commit() is called.
2024-12-16babel: T6746: remove superfluous "end" in daemon templateChristian Breunig
2024-12-16frr: T6746: reference common daemon definition in vyos.frrenderChristian Breunig
Do not use custom daemon definitions like bgpd - re-use them from e.g. vyos.frrender.bgp_daemon
2024-12-16frr: T6746: do not use FRRender apply() method when vyos-configd is runningChristian Breunig
2024-12-16smoketest: T6746: add 2 second guard timer for getFRRconfig()Christian Breunig
Sometimes FRR needs some time after reloading the configuration to appear in vtysh. This is a workaround addiung a 2 second guard timer.
2024-12-16multicast: T6746: migrate CLI to to mimic unicast IPv4 routes syntaxChristian Breunig
Consolidate "multicast interface-route" and "multicast route" under common "mroute <x.x.x.x/y>" CLI node.
2024-12-16rpki: T6746: FRRender needs to calculate SSH key pathChristian Breunig
2024-12-16frr: T6746: remove superseeded vyos.frr moduleChristian Breunig
2024-12-16vrf: T6746: bugfix change of VNIChristian Breunig
VNI was always retrieved via effective configuration and not active configuration.
2024-12-16static: T6746: migrate BFD CLI nodesChristian Breunig
Migrate "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd multi-hop source <z.z.z.z> profile <NAME>" to: "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd profile bar" FRR supports only one source IP address per BFD multi-hop session. VyOS had CLI cupport for multiple source addresses which made no sense.
2024-12-16frr: T6746: handle "system ip" and "system ipv6" with FRRender classChristian Breunig
FRR 10.2 will use "[no] ip forwarding" and "[no] ipv6 forwarding" to enable or disable IP(v6) forwarding. We no longer rely on sysctl as this was overridden by FRR later on. Remove code path for sysctl setting and solely rely on FRR.
2024-12-16configd: T6746: handle FRR config reload as last step in commitChristian Breunig
2024-12-16frr: T6746: integrate FRRender class into vyos-configdChristian Breunig
When running under vyos-configd only a single apply() is done as last step in the commit algorithm. FRRender class address is provided via an attribute from vyos-configd process.
2024-12-16frr: T6746: add default entry for config debug fileChristian Breunig
A lot of services have dynamic debug capabilities which will be turned on by creating a file in /tmp. These scripts have the path hardcoded and sometimes accross multiple places (bad). This commit introduces vyos.defaults.frr_debug_enable to get the path for the debug file from a single location.
2024-12-16op-mode: T6746: add CLI options to show/monitor log of vyos-configdChristian Breunig
This is pretty usefull to monitor what's going on under the hood Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "init"} Dec 08 15:27:34 vyos-configd[4324]: config session pid is 4400 Dec 08 15:27:34 vyos-configd[4324]: config session sudo_user is cpo Dec 08 15:27:34 vyos-configd[4324]: commit_scripts: ['protocols_babel', 'protocols_bfd', 'protocols_bgp'] Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_babel.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_bgp.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": true, "data": "/usr/libexec/vyos/conf_mode/protocols_bfd.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: scripts_called: ['protocols_babel', 'protocols_bgp', 'protocols_bfd'] Dec 08 15:27:34 vyos-configd[4324]: FRR: Reloading configuration - tries: 1 Python class ID: 139842739583248 Debugging the new FRRender/vyos-config integration
2024-12-16Debian: T6746: restart vyos-configd on package installation - if runningChristian Breunig
2024-12-16multicast: T6746: flatten CLI by merging "multicast route" to "mroute" CLI ↵Christian Breunig
tagNode This will save an entire level for the configuration and there is no need for a parent "multicast" node, as it will only have "route" as tagNode below. Move set protocols static multicast route <x.x.x.x/y> to: * set protocols static mroute <x.x.x.x/y>
2024-12-16frr: T6747: migrate protocols to unified FRRender classChristian Breunig
With FRR 10.0 daemons started to be migrated to integrated FRR mgmtd and a northbound interface. This led to some drawbacks in the current state how changes to FRR are handled. The current implementation will use frr-reload.py and specifies excatly WHICH daemon needs a config update and will only replace this part inside FRR. With FRR10 and mgmtd when a partial configuration is sent to mgmtd, it will remove configuration parts from other daemons like bgpd or ospfd which have not yet been migrated to mgmtd. It's not possible to call frr-reload.py with daemon mgmtd - it will error out. This commit will also change the CLI for static routes: CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1" will be split into: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd source-address 1.1.1.1 * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop To make the XML blocks reusable, and comply with the FRR CLI - this was actually a wrong implementation from the beginning as you can not have multiple BFD source addresses. CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1 profile bar" is changed to: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd profile bar CLI commands "set protocols static multicast interface-route" is moved to: * set protocols static multicast route <x.x.x.x/x> interface To have an identical look and feel with regular static routes.
2024-12-16frr: T6747: remove superfluous newlines from rendered templatesChristian Breunig
Drop newlines added by macro statement and Jinja2 comments. Jinja2 comments will be removed during package build on the shipped files.
2024-12-16ospf: T6747: add retransmit-window CLI optionChristian Breunig
2024-12-16pim6: T6747: adjust template to new "router pim6" FRR CLIChristian Breunig
2024-12-16pim: T6747: adjust template to new "router pim" FRR CLIChristian Breunig
2024-12-16ospf: T6747: fix deferred shutdown handlingChristian Breunig
Honor ospfd deferred shutdown when "max-metric router-lsa on-shutdown" is defined. https://github.com/FRRouting/frr/issues/17011
2024-12-16vrf: T6747: ensure VNIs are unique on the systemChristian Breunig
2024-12-16frr: T6747: ensure there are no daemon leftovers in vtysh CLI after smoketestsChristian Breunig
2024-12-16frr: T6747: make daemon definitions re-usable for both conf-mode and smoketestsChristian Breunig
2024-12-16rpki: T6747: adjust to new FRR cli interfaceChristian Breunig
2024-12-16Debian: T6746: bump required FRR version to >= 10.2Christian Breunig
2024-12-16Merge pull request #4238 from c-po/T6613-tacacsChristian Breunig
tacacs: T6613: dynamically build exclude_users list to avoid TACACS traffic
2024-12-16Merge pull request #4211 from natali-rs1985/T4214Daniil Baturin
static: T4214: Allow several dhcp-interfaces to the same static rote
2024-12-16Merge pull request #4219 from natali-rs1985/T6628Daniil Baturin
ipoe_server: T6628: Add option to assign static IP address to end users with local auth
2024-12-16T6934: Add preshared key for zabbix-agent monitoring servicekhramshinr
- Allow configure preshared key for zabbix-agent - Added op mode command for generatre random psk secret - Removed duplicate xml definition for psk settings Configure authentication mode: ``` # set service monitoring zabbix-agent authentication mode Possible completions: pre-shared-secret Use a pre-shared secret key ``` Configure PSK Settings: ``` # set service monitoring zabbix-agent authentication psk Possible completions: id ID for authentication secret pre-shared secret key ``` Generate Random PSK: ``` $ generate psk random Possible completions: <Enter> Execute the current command size Key size in bytes ```
2024-12-15Merge pull request #4239 from kumvijaya/currentChristian Breunig
T6940: added pr mirror sync caller workflows (revised)
2024-12-15T6940: added pr mirror sync caller workflows (revised), and cleaned up old ↵kumvijaya
workflows
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 10:33:58 +0000