summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-04-25router-advert: T7389: Duplicate prefix safeguardRyan Zuwala
Change autoignoreprefixes config template and add smoketests
2025-04-24Merge pull request #4469 from KawaiiNetworks/currentDaniil Baturin
bgp: T7220: Add the option to disable enforce-first-as at peer level
2025-04-24Merge pull request #4414 from markh0338/op-fw-dyn-grpsDaniil Baturin
T7282: op-mode: show firewall group filtering and tab completion update
2025-04-24Merge pull request #4442 from srividya0208/T7316Daniil Baturin
T7316: Add MTU validation for interfaces with MTU less then 1200
2025-04-24T7220: Add the option to disable enforce-first-as at peer levelcanoziia
2025-04-23router-advert: T7380: Implement auto-ignore-prefix syntax for router ↵Ryan Zuwala
advertisements (#4463)
2025-04-23Merge pull request #4465 from MattKobayashi/T6253Christian Breunig
dhclient: T6253: Respect `no-default-route`
2025-04-23Merge pull request #4467 from c-po/ipv6-nd-fixesChristian Breunig
interface: T4627: not every interface type supports IPv6 interface-identifiers
2025-04-23interface: T4627: not every interface type supports IPv6 interface-identifiersChristian Breunig
Turns out commit b124f0b3b ("interface: T4627: support IPv6 Interface Identifier (token) for SLAAC") uncovered a wrong assumption in VyOS that every interface type in use always supports SLAAC and IPv6-ND (neighbor discovery). This is not true for WireGuard, Tunnel and VTI interfaces, thus do not provide that CLI option. In addition SLAAC support should be removed for those interface types in a future PR.
2025-04-23Merge pull request #4460 from c-po/systemd-syslogViacheslav Hletenko
syslog: T7367: ensure rsyslog is registered as default systemd syslog service
2025-04-23Merge pull request #4461 from c-po/slaac-removalViacheslav Hletenko
interface: T7375: cleanup SLAAC assigned address and default route after removing SLAAC CLI configuration
2025-04-22Merge pull request #4419 from sskaje/T5636Daniil Baturin
geoip: T5636: Add geoip for policy route/route6
2025-04-22Merge pull request #4392 from symysak/T4627Daniil Baturin
interface: T4627: support setting of IPv6 Interface Identifier(Token)
2025-04-22Merge pull request #4444 from l0crian1/T7322-fix-allowed-vlanDaniil Baturin
bridge: T7322: fix slow performance of allowed vlan
2025-04-22Merge pull request #4466 from aapostoliuk/T7383-rollingDaniil Baturin
ospf: T7383: Fixed unconfigured redistribution of nhrp into ospf
2025-04-22T6773: RFC-2136 support for Kea DHCP4 server (#4153)Alex Bukharov
2025-04-22interface: T7379: do not request SLAAC default route when only DHCPv6 is setChristian Breunig
When an interface runs in DHCPv6 only mode, there is no reason to have a default installed that was received via SLAAC. If SLAAC is needed, it should be turned on explicitly. This bug was only triggered during system boot where a DHCPv6 client address and a default route to a link-local address was shown in the system. If DHCPv6 was enabled only on an interface while VyOS was already running - no default route got installed.
2025-04-22sysctl: T7379: always disable IPv6 autoconf and accept_ra during startupChristian Breunig
2025-04-22interface: T7375: routes received via SLAAC are not cleared on exitChristian Breunig
When using SLAAC for IPv6 addresses we will also receive a default route via a RA (Router Advertisement). When we disable SLAAC on a interface the Linux Kernel does not automatically flush all addresses nor the routes received. The Kernel wait's until the addresses/prefixes/routes expire using their lifestime setting. When removing SLAAC from an interface, also remove the auto generated IPv6 address and both the default router received and the connected IP prefix of the SLAAC advertisement.
2025-04-22interface: T7375: remove superfluous "ifname = self.ifname" assignmentChristian Breunig
We can reference "self.ifname" in any Python f-ormatted string directly. No need for an interim temporary variable.
2025-04-22interface: T7375: SLAAC assigned address is not cleared when removing SLAACChristian Breunig
2025-04-22T7282: op-mode: update op-mode template build script to concatenate with ; ↵Mark Hayes
instead of &&
2025-04-22T7282: op-mode: update firewall completion paths to include all group typesMark Hayes
2025-04-22T7282: op-mode: update firewall.py for proper group filteringMark Hayes
2025-04-22ospf: T7383: Fixed unconfigured redistribution of nhrp into ospfaapostoliuk
Fixed unconfigured redistribution of nhrp into ospf.
2025-04-22dhclient: T6253: Respect `no-default-route`Matthew Kobayashi
2025-04-20Merge pull request #4462 from kumvijaya/currentChristian Breunig
T7334: pr mirror trigger workflow added with label creation permission for default github token
2025-04-20T7334: pr mirror trigger workflow added with label creation permission for ↵kumvijaya
default github token
2025-04-18interface: T4627: support IPv6 Interface Identifier (token) for SLAACYoshiaki Suyama
Add common IPv6 CLI option (use ethernet as example): set interfaces ethernet eth0 ipv6 address interface-identifier Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-04-18syslog: T7367: use generic systemd syslog.service over rsyslog.serviceChristian Breunig
2025-04-18syslog: T7367: ensure rsyslog is registered as default systemd syslog serviceChristian Breunig
Systemd states: The default syslog implementation should make syslog.service a symlink to itself, so that this socket activates the right actual syslog service.
2025-04-18firewall: T7370: Add conntrack log commands (#4459)l0crian1
* firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * Fix capitalization --------- Co-authored-by: l0crian1 <ryan.claridge13@gmail.com> Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-04-18Merge pull request #4458 from l0crian1/t7369-allow-state-policy-log-opDaniil Baturin
firewall: T7369: Match global state policies in show firewall
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-17Merge pull request #4446 from sever-sever/T7343Daniil Baturin
T7343: IPsec add traffic-selector handling for VTI interfaces
2025-04-17Merge pull request #4454 from c-po/dhcp6c-orderDaniil Baturin
dhcpv6-client: T6113: add proper startup/shutdown order for systemd units
2025-04-17T7343: IPsec add traffic-selector handling for VTI interfacesViacheslav Hletenko
Allow to set traffic-selector for VTI interfaces We can set several local and remote IPv4 and IPv6 prefixes ``` set vpn ipsec site-to-site peer P1 vti traffic-selector local prefix 0.0.0.0/0 set vpn ipsec site-to-site peer P1 vti traffic-selector local prefix :/0 set vpn ipsec site-to-site peer P1 vti traffic-selector remote prefix 192.0.2.0/24 ```
2025-04-17firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-16firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-15dhcpv6-client: T6113: add proper startup/shutdown order for systemd unitsChristian Breunig
When running dhcp6c on top of a PPPoE interface, properly honor the dependency chain with systemd. On shutdown we need to stop the wide-dhcpv6-client prior to shutting down the ppp portion of the interface.
2025-04-15grub: T7327: honor "system option kernel" settings during image upgradeChristian Breunig
When performing an image upgrade and Linux Kernel command-line option that should be passed via GRUB to the Linux Kernel are missing on the first boot. This is because when generating the GRUB command-line via the op-mode scripts the CLI nodes defining the options are not honored. This commit re-implements the code-path in op-mode which generates the strings passed via GRUB to the Linux Kernel command-line. NOTE: If (for a yet unknown reason) a Kernel command-line option string changes during a major - or minor - upgrade of the Linux Kernel, we will need to adapt that logic and possibly call a helper from within the NEW updated image rootfs. Thus we can ship future information back into the past like the "Grays Sports Almanac" from Back to the Future Part II.
2025-04-15op-mode: T7327: drop superfluous "sudo" for "show system image"Christian Breunig
2025-04-15Merge pull request #4412 from sarthurdev/kea_2.6Daniil Baturin
kea: T7281: Add ping-check, use built-in option for classless static routes
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-15Merge pull request #4449 from c-po/netplug-T7353Daniil Baturin
T7353: T7360: netplug: behavior change 1.3.8 -> 1.4 when interface with DHCP address looses carrier
2025-04-15Merge pull request #4445 from jestabro/vyconf-configsessionJohn Estabrook
T7321: Replace legacy operations in configsession.py with vyconf client operations
2025-04-15T7321: update commit hashe for replace configsession legacy operationsJohn Estabrook
2025-04-14netplug: T7360: DHCPv6 address is not cleared when interface goes oper-downChristian Breunig
When an interface goes down - e.g. cable unplugged - the DHCPv6 assigned IPv6 address is not removed from said interface. We should provide the same behavior as with IPv4. IPv6 address should be removed and dhcpv6 client restarted once the interface goes operational up again.
2025-04-14netplug: T7353: bugfix DHCP client not stopped when interface goes downChristian Breunig
The initial rewrite of vyos-netplug-dhcp-client by me tried to outsmart the DHCP client implementation by re-using vyos.ifconfig.Interface(). This added a regression where an interface loosing it's carrier no longer deconfigured it's IP address. This was a change in behavior form VyOS 1.3. In addition a bug is fixed as when a VLANs interface parent looses it's carrier we now also stop the DHCP client process. This script is now back to simply starting/stopping the DHCP client process.
2025-04-14kea: T7310: add support for RFC-5417 (option 138) (#4430)David Vølker
* dhcp-server: T7310: add support for option 138 CAPWAP AC to KEA * kea: T7310: Update data/templates/dhcp-server/kea-dhcp4.conf.j2 Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> * kea: T7310: Update python/vyos/kea.py Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> * kea: T7310: add smoketest for capwap-ac-v4 * kea: T7310: Update python/vyos/kea.py Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com> --------- Co-authored-by: David Vølker <davvol@davvol.dk> Co-authored-by: Simon <965089+sarthurdev@users.noreply.github.com>
generated by cgit v1.2.3 (git 2.39.1) at 2025-12-31 11:55:41 +0000