summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
24 hoursMerge pull request #4385 from markh0338/show-bgp-vpn-rdHEADcurrentChristian Breunig
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table
2 daysMerge pull request #4389 from natali-rs1985/T7242Daniil Baturin
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP
2 daysipsec: T7242: Add check for encryption algorithms that do not work with VPPNataliia Solomko
4 daysMerge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verifyViacheslav Hletenko
T7219: Add check for remote and group command to verify
4 daysMerge pull request #4321 from sskaje/T7092Daniil Baturin
T7092: Add Container Registry Mirror
4 daysT7219: Add check for remote and group command to verifyoniko94
4 daysT7092: Change validators: regex to host-name|address + port + pathsskaje
4 daysT7092: Update interface-definitions/container.xml.insskaje
Co-authored-by: Daniil Baturin <daniil@baturin.org>
4 daysMerge pull request #4388 from jestabro/cleanup-libvyosconfig-buildViacheslav Hletenko
T5400: clean up directory as needed before local build of libvyosconfig
5 daysT5400: clean up directory as needed before local build of libvyosconfigJohn Estabrook
5 daysMerge pull request #4386 from c-po/syslog-T7229Daniil Baturin
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets
7 dayssmoketest: T7229: add syslog test to verify source-address for remoteChristian Breunig
7 dayssyslog: T7229: advanced format should not have IPv6 addresses in [] bracketsChristian Breunig
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error
7 daysT7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn tableMark Hayes
8 dayslogin: T6712: add newline after motd warning messageChristian Breunig
8 daysMerge pull request #4382 from c-po/ipsec-ios-profile-fixesChristian Breunig
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile
9 daysipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profileChristian Breunig
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed.
9 daysipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be setChristian Breunig
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now.
9 daysMerge pull request #4381 from c-po/ipsec-opmode-profileChristian Breunig
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
9 daysMerge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpointChristian Breunig
T4406: Add public API endpoint to display information
9 daysipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedErrorChristian Breunig
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
9 daysT4406: Add public API endpoint to display informationoniko94
10 daysMerge pull request #4378 from jestabro/libvyosconfig-buildJohn Estabrook
T5400: Move libvyosconfig build out of the Docker image
11 daysMerge pull request #4377 from vyos/syslog-typos-T6989Christian Breunig
syslog: T6989: fix typos and add option to disable MARK
11 daysT5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
11 daysMerge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
11 daysGitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
11 dayssyslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
11 dayssyslog: T6989: fix validator range to match completion helperChristian Breunig
13 daysMerge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
14 daysRevert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
2025-02-27Merge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
2025-02-27Merge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
2025-02-27Merge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
2025-02-27T7204: Container add capability MKNODViacheslav Hletenko
2025-02-27Merge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
2025-02-26policy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
2025-02-26T7118: Added the ability to redistribute NHRP routes to other protocolsaapostoliuk
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS
2025-02-26policy: T7116: migrate legacy use of "internet" as a well-known community nameAndrew Topp
This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4.
2025-02-26policy: T7116: remove completions & constraints for unsupported community ↵Andrew Topp
"internet"
2025-02-26Merge pull request #4368 from vyos/c-po-patch-1Christian Breunig
GitHub: T6707: define smoketest ISO retention-days to 2
2025-02-26GitHub: T6707: only do package integration tests on main repositoryc-po-patch-1Christian Breunig
2025-02-26GitHub: T6707: define smoketest ISO retention-days to 2Christian Breunig
2025-02-25snmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
2025-02-25Merge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
2025-02-25Merge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels