summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
9 daysMerge pull request #4227 from c-po/T6746-frr-10Christian Breunig
frr: upgrade to 10.2 and migrate protocols to unified FRRender class
9 daysfrr: T6746: add guard time after cli_commit() and before getFRRconfig()Christian Breunig
As vyos-configd will take care about the commit via FRRender class, and FRR needs to internally process the configuration we might read it back via vtysh "to fast". Add a 5 seconds guard timer after each cli_commit() and before calling getFRRconfig(). Guard timer is reset every time, cli_commit() is called.
9 daysbabel: T6746: remove superfluous "end" in daemon templateChristian Breunig
9 daysfrr: T6746: reference common daemon definition in vyos.frrenderChristian Breunig
Do not use custom daemon definitions like bgpd - re-use them from e.g. vyos.frrender.bgp_daemon
9 daysfrr: T6746: do not use FRRender apply() method when vyos-configd is runningChristian Breunig
9 dayssmoketest: T6746: add 2 second guard timer for getFRRconfig()Christian Breunig
Sometimes FRR needs some time after reloading the configuration to appear in vtysh. This is a workaround addiung a 2 second guard timer.
9 daysmulticast: T6746: migrate CLI to to mimic unicast IPv4 routes syntaxChristian Breunig
Consolidate "multicast interface-route" and "multicast route" under common "mroute <x.x.x.x/y>" CLI node.
9 daysrpki: T6746: FRRender needs to calculate SSH key pathChristian Breunig
9 daysfrr: T6746: remove superseeded vyos.frr moduleChristian Breunig
9 daysvrf: T6746: bugfix change of VNIChristian Breunig
VNI was always retrieved via effective configuration and not active configuration.
9 daysstatic: T6746: migrate BFD CLI nodesChristian Breunig
Migrate "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd multi-hop source <z.z.z.z> profile <NAME>" to: "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd profile bar" FRR supports only one source IP address per BFD multi-hop session. VyOS had CLI cupport for multiple source addresses which made no sense.
9 daysfrr: T6746: handle "system ip" and "system ipv6" with FRRender classChristian Breunig
FRR 10.2 will use "[no] ip forwarding" and "[no] ipv6 forwarding" to enable or disable IP(v6) forwarding. We no longer rely on sysctl as this was overridden by FRR later on. Remove code path for sysctl setting and solely rely on FRR.
9 daysconfigd: T6746: handle FRR config reload as last step in commitChristian Breunig
9 daysfrr: T6746: integrate FRRender class into vyos-configdChristian Breunig
When running under vyos-configd only a single apply() is done as last step in the commit algorithm. FRRender class address is provided via an attribute from vyos-configd process.
9 daysfrr: T6746: add default entry for config debug fileChristian Breunig
A lot of services have dynamic debug capabilities which will be turned on by creating a file in /tmp. These scripts have the path hardcoded and sometimes accross multiple places (bad). This commit introduces vyos.defaults.frr_debug_enable to get the path for the debug file from a single location.
9 daysop-mode: T6746: add CLI options to show/monitor log of vyos-configdChristian Breunig
This is pretty usefull to monitor what's going on under the hood Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "init"} Dec 08 15:27:34 vyos-configd[4324]: config session pid is 4400 Dec 08 15:27:34 vyos-configd[4324]: config session sudo_user is cpo Dec 08 15:27:34 vyos-configd[4324]: commit_scripts: ['protocols_babel', 'protocols_bfd', 'protocols_bgp'] Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_babel.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": false, "data": "/usr/libexec/vyos/conf_mode/protocols_bgp.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: Received message: {"type": "node", "last": true, "data": "/usr/libexec/vyos/conf_mode/protocols_bfd.py"} Dec 08 15:27:34 vyos-configd[4324]: Sending reply: error_code 1 with output Dec 08 15:27:34 vyos-configd[4324]: scripts_called: ['protocols_babel', 'protocols_bgp', 'protocols_bfd'] Dec 08 15:27:34 vyos-configd[4324]: FRR: Reloading configuration - tries: 1 Python class ID: 139842739583248 Debugging the new FRRender/vyos-config integration
9 daysDebian: T6746: restart vyos-configd on package installation - if runningChristian Breunig
9 daysmulticast: T6746: flatten CLI by merging "multicast route" to "mroute" CLI ↵Christian Breunig
tagNode This will save an entire level for the configuration and there is no need for a parent "multicast" node, as it will only have "route" as tagNode below. Move set protocols static multicast route <x.x.x.x/y> to: * set protocols static mroute <x.x.x.x/y>
9 daysfrr: T6747: migrate protocols to unified FRRender classChristian Breunig
With FRR 10.0 daemons started to be migrated to integrated FRR mgmtd and a northbound interface. This led to some drawbacks in the current state how changes to FRR are handled. The current implementation will use frr-reload.py and specifies excatly WHICH daemon needs a config update and will only replace this part inside FRR. With FRR10 and mgmtd when a partial configuration is sent to mgmtd, it will remove configuration parts from other daemons like bgpd or ospfd which have not yet been migrated to mgmtd. It's not possible to call frr-reload.py with daemon mgmtd - it will error out. This commit will also change the CLI for static routes: CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1" will be split into: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd source-address 1.1.1.1 * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop To make the XML blocks reusable, and comply with the FRR CLI - this was actually a wrong implementation from the beginning as you can not have multiple BFD source addresses. CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1 profile bar" is changed to: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd profile bar CLI commands "set protocols static multicast interface-route" is moved to: * set protocols static multicast route <x.x.x.x/x> interface To have an identical look and feel with regular static routes.
9 daysfrr: T6747: remove superfluous newlines from rendered templatesChristian Breunig
Drop newlines added by macro statement and Jinja2 comments. Jinja2 comments will be removed during package build on the shipped files.
9 daysospf: T6747: add retransmit-window CLI optionChristian Breunig
9 dayspim6: T6747: adjust template to new "router pim6" FRR CLIChristian Breunig
9 dayspim: T6747: adjust template to new "router pim" FRR CLIChristian Breunig
9 daysospf: T6747: fix deferred shutdown handlingChristian Breunig
Honor ospfd deferred shutdown when "max-metric router-lsa on-shutdown" is defined. https://github.com/FRRouting/frr/issues/17011
9 daysvrf: T6747: ensure VNIs are unique on the systemChristian Breunig
9 daysfrr: T6747: ensure there are no daemon leftovers in vtysh CLI after smoketestsChristian Breunig
9 daysfrr: T6747: make daemon definitions re-usable for both conf-mode and smoketestsChristian Breunig
9 daysrpki: T6747: adjust to new FRR cli interfaceChristian Breunig
9 daysDebian: T6746: bump required FRR version to >= 10.2Christian Breunig
9 daysMerge pull request #4238 from c-po/T6613-tacacsChristian Breunig
tacacs: T6613: dynamically build exclude_users list to avoid TACACS traffic
9 daysMerge pull request #4211 from natali-rs1985/T4214Daniil Baturin
static: T4214: Allow several dhcp-interfaces to the same static rote
9 daysMerge pull request #4219 from natali-rs1985/T6628Daniil Baturin
ipoe_server: T6628: Add option to assign static IP address to end users with local auth
9 daysT6934: Add preshared key for zabbix-agent monitoring servicekhramshinr
- Allow configure preshared key for zabbix-agent - Added op mode command for generatre random psk secret - Removed duplicate xml definition for psk settings Configure authentication mode: ``` # set service monitoring zabbix-agent authentication mode Possible completions: pre-shared-secret Use a pre-shared secret key ``` Configure PSK Settings: ``` # set service monitoring zabbix-agent authentication psk Possible completions: id ID for authentication secret pre-shared secret key ``` Generate Random PSK: ``` $ generate psk random Possible completions: <Enter> Execute the current command size Key size in bytes ```
10 daysMerge pull request #4239 from kumvijaya/currentChristian Breunig
T6940: added pr mirror sync caller workflows (revised)
10 daysT6940: added pr mirror sync caller workflows (revised), and cleaned up old ↵kumvijaya
workflows
10 daystacacs: T6613: dynamically build exclude_users list to avoid TACACS trafficChristian Breunig
There is no need to send local base OS accounts like root or daemon to the tacacs server. This will only make the CLI experience sluggish. Build up a dynamic list of user accounts to exclude from TACACS lookup.
12 daysMerge pull request #4222 from natali-rs1985/T6860Christian Breunig
op_mode: T6860: Display the EULA in "run show license"
12 daysMerge pull request #4176 from jestabro/vyconf-minimalJohn Estabrook
T6718: use the vyconf daemon for validation of set commands
12 daysT6918: Accept invalid PPPoE Session in stateful bridge firewall.opswill
13 daysMerge pull request #4232 from nvollmar/T6927Christian Breunig
T6927: adds option to set container name server
13 daysT6863: Fix default distance for PPPoE (#4229)Roman Khramshin
set `default-route-distance` to 1
2024-12-11op_mode: T6767: Check latest image version in VRF context for "add system ↵Nataliia Solomko
image latest vrf <name>"
2024-12-11T6790: QoS: Improve CAKE Policykhramshinr
- Fixed handling of flow isolation parameters. - Corrected support for `nat` and `nonat` in flow isolation. - Extended RTT values to cover the full range supported by `tc`.
2024-12-10T6927: add name server validationNicolas Vollmar
2024-12-10vyconf: T6718: use vy_set/delete in configsession and utilJohn Estabrook
2024-12-10vyconf: T6718: set log-fileJohn Estabrook
2024-12-10vyconf: T6718: start vyconfd from vyos-routerJohn Estabrook
Start vyconfd after migration.
2024-12-10vyconf: T6718: add reftree internal cacheJohn Estabrook
As we are generating the reference tree from the XML definitions during build, save an internal representation for vyconfd to load on startup.
2024-12-10vyconf: T6718: add boot configsJohn Estabrook
Add current config and failsafe for vyconfd to load on startup.
2024-12-10Merge pull request #4231 from natali-rs1985/T6368Christian Breunig
pki: T6368: Add ability for acme to listen on IPv6 addresses