Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-08 | container: T4000: use unique storage for container image | Christian Poessinger | |
Do no longer store container images which are pulled from any registry to /config/containers. Instead save them to a unified location that is the same accross all images on the system: /usr/lib/live/mount/persistence/container/storage Reason for this change is, while living under /config/containers a VyOS image upgrade copied all downloaded container images to the new image - doubling the used space per image on every upgrade. With the new location the images are all the same for every VyOS image running. Container userdata can still be stored under /config and copied to a newer image making rollbacks still efficient. | |||
2022-05-08 | container: T4353: fix conf-mode script name | Christian Poessinger | |
2022-05-08 | policy: evpn: T3739: support "set evpn gateway-ip" | Christian Poessinger | |
2022-05-06 | ipsec: T4353: use "" quotes on road-warrior id | Christian Poessinger | |
2022-05-05 | Merge pull request #1312 from sever-sever/T4410 | Christian Poessinger | |
monitoring: T4410: Add telegraf output Plugin http for Splunk | |||
2022-05-05 | policy: T4414: add support for route-map "as-path prepend last-as x" | Christian Poessinger | |
2022-05-05 | monitoring: T4410: Add telegraf output Plugin http for Splunk | Viacheslav Hletenko | |
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x' | |||
2022-05-03 | monitoring: T4315: Add telegraf output plugin prometheus-client | Viacheslav Hletenko | |
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client | |||
2022-05-02 | ipsec: T4353: bugfix template extension | Christian Poessinger | |
2022-05-02 | T2216: file is called container.py | Christian Poessinger | |
2022-05-01 | accel-ppp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | http: api: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-logs: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | openconnect: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | syslog: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | igmp-proxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | pppoe: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | nhrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: zone: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lcd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-options: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | ids: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | router-advert: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | mdns-repeater: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | ipsec: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrf: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | login: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | telegraf: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | serial-console: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | webproxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | flow-accounting: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | snmp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lldp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | tftp-server: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | container: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conserver: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conntrackd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conntrack: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | bcast-relay: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-29 | T2216: containers need to be added via "add container image" in advance ↵ | Christian Poessinger | |
before using them | |||
2022-04-28 | system-proxy: T1741: migrate to get_config_dict() | Christian Poessinger | |
2022-04-26 | dhcp: T4389: fix vendor name, it is ubiquiti with an i, not yx | Christian Poessinger | |
2022-04-26 | Merge pull request #1300 from sever-sever/T4210 | Christian Poessinger | |
nat: T4210: Fix template for negated ports | |||
2022-04-25 | vpn-ipsec: T4398: Fix unexpected passthrough policy for peer | Viacheslav Hletenko | |
Set default passtrough list to None to prevent unexpected policy for peers with not overplapped local and remote prefixes | |||
2022-04-25 | nat: T4210: Fix template for negated ports | Viacheslav Hletenko | |
2022-04-22 | dhcp: T4389: add vendor option support for Ubiquity Unifi controller | Christian Poessinger | |
vyos@vyos# show service dhcp-server shared-network-name LAN { subnet 172.18.201.0/24 { default-router 172.18.201.1 name-server 172.18.201.2 range 0 { start 172.18.201.101 stop 172.18.201.109 } vendor-option { ubiquity { unifi-controller 172.16.100.1 } } } } | |||
2022-04-22 | dhcpv6: T4357: rename vsio -> vendor-option | Christian Poessinger | |