Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-12-06 | firewall: T2199: Migrate firewall to XML/Python | sarthurdev | |
2021-08-22 | Makefile: T3165: do not allow empty node.def files for op-mode commands | Christian Poessinger | |
Commit 99440fc0 ("Makefile: fix logic to detect empty "node.def" files") disabled the detection of empty node.def files for op-mode commands. The generation of a duplicate and thus empty node.def file is not prohibited by commit 17b5ac14 ("T3165: op-mode: prevent override of populated node.def file with empty content") and thus the check is re-enabled! | |||
2021-08-21 | pppoe: T3090: migrate to vyos.ifconfig library to use the full potential | Christian Poessinger | |
Now that MSS clamping is done on the "per-interface" level the entire PPPoE stuff would have needed to get a full copy in GNU BASH for this or, participate in the common library. Add a new PPP ip-up script named 99-vyos-pppoe-callback which will call the vyos.ifconfig.PPPoEIf.update() function to configure everything as done with all other interfaces. This removes duplicated code for VRF assignment and route installation when a PPPoE interface is brought up or down. | |||
2021-08-19 | Revert "xml: T1962: Add script to process syntaxVersion tags during build" | John Estabrook | |
This reverts commit 0ecc2c26f7ac939e4e23c14f5027ac7592c25761. | |||
2021-07-25 | ipsec: T1210: add RADIUS authentication for remote-access IKEv2 VPN | Christian Poessinger | |
set vpn ipsec remote-access connection rw authentication client-mode 'eap-radius' set vpn ipsec remote-access connection rw authentication id '192.0.2.1' set vpn ipsec remote-access connection rw authentication server-mode 'x509' set vpn ipsec remote-access connection rw authentication x509 ca-certificate 'CAcert_Class_3_Root' set vpn ipsec remote-access connection rw authentication x509 certificate 'vyos' set vpn ipsec remote-access connection rw esp-group 'ESP-RW' set vpn ipsec remote-access connection rw ike-group 'IKE-RW' set vpn ipsec remote-access connection rw local-address '192.0.2.1' set vpn ipsec remote-access connection rw pool 'ra-rw-ipv4' set vpn ipsec remote-access connection rw unique 'never' set vpn ipsec remote-access pool ra-rw-ipv4 name-server '192.0.2.2' set vpn ipsec remote-access pool ra-rw-ipv4 prefix '192.168.22.0/24' set vpn ipsec remote-access radius nas-identifier 'fooo' set vpn ipsec remote-access radius server 172.16.100.10 key 'secret' | |||
2021-07-14 | vyos-1x-vmware: T3681: don't bytecompile ether-resume.py | Yun Zheng Hu | |
Exclude /vmware-tools/scripts/ from bytecompilation to avoid the `__pycache__` directory being created. | |||
2021-06-22 | T3644: build: replace GCC preprocessor with a Python script for template ↵ | Lulu Cathrinus Grimalkin | |
expansions | |||
2021-06-20 | xml: Make GCC preprocessor ignore C(++)-style comments | erkin | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-25 | firewall: T3568: add XML definitions for firewall | Viacheslav Hletenko | |
Add XML for configuration mode firewall. Used for future rewriting it to Python style. | |||
2021-05-20 | sysctl: T3565: initial implementation in XML and Python | Christian Poessinger | |
migrate from old vyatta-cfg-system / Perl implementation. | |||
2021-04-17 | policy: T2425: re-implement "policy" tree from vyatta-cfg-quagga in XML/Python | Christian Poessinger | |
2021-04-02 | Makefile: fix logic to detect empty "node.def" files | Christian Poessinger | |
Commit 5b22ebae ("T3170: check if any generated node.def files are empty") added an initial test to find empty node.def files created by build-command-templates or build-command-op-templates. The problem was that GNU find always returns 0, thus the condition to bail out on error was always met. This has been corrected to return false on hits only. | |||
2021-04-02 | Makefile: T1579: do not remove interfaces "node.def" file anymore | Christian Poessinger | |
... this has been migrated to vyos-1x. | |||
2021-04-02 | Merge pull request #672 from dmbaturin/check-for-empty-nodes | Christian Poessinger | |
T3170: check if any generated node.def files are empty. | |||
2021-02-15 | conf-mode: T2425: Add XML for policy-lists | sever-sever | |
2021-02-11 | ospfv3: T3267: move interface specific options to "protocols ospfv3" | Christian Poessinger | |
2021-02-10 | Makefile: remove "interfaces ip" node as all components have been migrated | Christian Poessinger | |
... from vyatta-cfg-quagga to vyos-1x | |||
2021-02-10 | ripng: T3281: migrate to get_config_dict() and FRR reload | Christian Poessinger | |
2021-02-06 | Debian: only build XDP for amd64 architecture | Christian Poessinger | |
2021-02-05 | route: static: T2450: provide full protocol support in XML and Python with ↵ | Christian Poessinger | |
new CLI | |||
2021-02-05 | vrf: T2450: provide full protocol support in XML and Python with new CLI | Christian Poessinger | |
2021-02-02 | Merge branch 'current' into T3282 | Christian Poessinger | |
2021-02-02 | conf-mode: T3282: Add XML for protocol RIPng | sever-sever | |
2021-02-02 | conf-mode: T3280: Add XML for protocols static | sever-sever | |
2021-02-01 | vrf: T3278: Add XML for conf-mode | sever-sever | |
2021-01-29 | rpki: T3255: provide full protocol support in XML and Python | Christian Poessinger | |
This commit provides the implementation of the OSPF CLI with a Jinja2 template that is loaded by FRR reload. | |||
2021-01-26 | rpki: T3256: Add XML for protocol rpki conf-mode | sever-sever | |
2021-01-24 | ospfv3: T3244: provide full protocol support in XML and Python | Christian Poessinger | |
This commit provides the implementation of the OSPFv3 (IPv6) CLI with a Jinja2 template that is loaded by FRR reload. It also contains some initial smoketests. There is yet no verify() implementation! | |||
2021-01-24 | ospfv3: T3245: Add XML for ospfv3 conf-mode | sever-sever | |
2021-01-23 | ospf: T3236: provide full protocol support in XML and Python | Christian Poessinger | |
This commit provides the implementation of the OSPF CLI with a Jinja2 template that is loaded by FRR reload. It also contains some initial smoketests. There is yet no verify() implementation! | |||
2021-01-21 | Merge pull request #691 from sever-sever/T3236 | Christian Poessinger | |
ospf: T3236: Add XML for new format ospf conf-mode | |||
2021-01-21 | xml: T2910: add override script to Makefile | John Estabrook | |
2021-01-21 | ospf: T3236: Add XML for new format ospf conf-mode | sever-sever | |
2021-01-20 | ospf: add skeleton for new XML/Python based implementation | Christian Poessinger | |
2021-01-15 | Revert "T3165: use a separate file for "base" CLI nodes." | Daniil Baturin | |
2021-01-14 | bgp: T2174: enable new implementation | Christian Poessinger | |
2021-01-14 | Merge pull request #673 from dmbaturin/separate-base-nodes | Christian Poessinger | |
T3165: use a separate file for "base" CLI nodes. | |||
2021-01-10 | xml: op-mode: add preprocessor support as known from configuration mode | Christian Poessinger | |
2021-01-07 | T3165: use a separate file for "base" CLI nodes. | Daniil Baturin | |
2021-01-07 | T3170: check if any generated node.def files are empty. | Daniil Baturin | |
2021-01-04 | op-mode: T3178: add basic "show ipv6 ospfv3" commands | Christian Poessinger | |
- show ipv6 ospfv3 area - show ipv6 ospfv3 border-routers - show ipv6 ospfv3 interface - show ipv6 ospfv3 linkstate - show ipv6 ospfv3 neighbor - show ipv6 ospfv3 redistribute - show ipv6 ospfv3 route | |||
2021-01-02 | op-mode: T3178: add "show ipv6 route" commands | Christian Poessinger | |
2021-01-02 | op-mode: T3178: add "show ipv6 access-list|ripng" commands | Christian Poessinger | |
2020-12-29 | bgp: T3158: op-mode: move show ipv6 bgp to new XML format | Jan-Philipp Benecke | |
2020-12-19 | xdp: T2666: switch to example code provided by xdp-tutorial | Christian Poessinger | |
2020-12-17 | xdp: T2666: initial XDP (generic mode) forwarding support | Christian Poessinger | |
The CLI command 'set interfaces ethernet <interface> offload-options xdp" enables the XDP generic mode on the given interface. vyos@vyos:~$ show interfaces ethernet eth1 eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 xdpgeneric/id:151 qdisc mq state DOWN group default qlen 1000 link/ether 00:50:56:bf:ef:aa brd ff:ff:ff:ff:ff:ff inet6 fe80::250:56ff:febf:efaa/64 scope link tentative valid_lft forever preferred_lft forever Description: fooa XDP code is thankfully copied from [1], thank you for this nice tutorial. NOTE: this is an experimental feature which might break your forwarding/filtering. [1]: https://medium.com/swlh/building-a-xdp-express-data-path-based-peering-router-20db4995da66 | |||
2020-12-10 | vti: T3123: Fix missed ip-ipv6 node options | Viacheslav Hletenko | |
2020-12-04 | Makefile: fix comment | Christian Poessinger | |
2020-12-04 | vyos.ifconfig: T1579: migrate "ip source-validation" option from ↵ | Christian Poessinger | |
vyatta-cfg-quagga |