Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-11-21 | T264: IPsec add base64 encoded secret-type feature | Viacheslav Hletenko | |
Add the ability to configure base64 encoded passwords for VPN IPSec site-to-site peers authentication psk PSK secret 'xxxxx==' authentication psk PSK secret-type <base64|plaintext> | |||
2024-11-14 | T6876: DHCP-server increase retries that Kea makes to open a socket | Viacheslav Hletenko | |
KEA DHCP-server sometimes could be in the race condition when an interface is not in the UP state. The server tries to open the socket 5 times with an interval of 5 seconds, then just starts as it is. In this case, users cannot get leases from the interface, which was in the DOWN state before starting KEA, but it is now in the UP state. Increase 'service-sockets-max-retries' from 5 to 60 | |||
2024-11-08 | Merge pull request #4185 from c-po/syslog-fixup | Daniil Baturin | |
syslog: T6858: bugfix remote syslog using TCP | |||
2024-11-08 | dhcp_server: T6031: DHCP Option Failures - windows-static-route (#4183) | Nataliia S. | |
In "option-def" parameter "record-types" field is an array of uint8 in format "<netmask>, <network-byte1>, <network-byte2>, <network-byte3>, <router-byte1>, <router-byte2>, <router-byte3>" where <network-byte3> with the value 0 is omitted, so the minimal length of array is 7 (e.g. for routing 10.1.0.0/16 via 10.1.6.4 "record-types": "16,10,1,10,1,6,4") | |||
2024-11-07 | syslog: T6858: bugfix remote syslog using TCP | Christian Breunig | |
Commit 042be39cc ("syslog: T5367: add format option to include timezone in message") added an invalid, outer if-statement when rendering the rsyslog configuration option for TCP. Remote hosts only got added when the format option "octet-counting" was defined in addition to the TCP protocol. This has been fix and now TCP transport is decoupled from octet-counting mode. | |||
2024-11-07 | Merge pull request #4151 from natali-rs1985/T6695 | Daniil Baturin | |
T6695: Machine-readable operational mode support for traceroute | |||
2024-10-27 | login: T6712: honor 80x25 terminal size for nonproduction banner messageT6712-motd-80-25-terminal | Christian Breunig | |
2024-10-21 | Merge branch 'current' into T6695 | Nataliia S. | |
2024-10-17 | T973: add basic frr_exporter implementation (#4150) | Robert Göhler | |
2024-10-11 | T6695: Machine-readable operational mode support for traceroute | Nataliia Solomko | |
2024-10-11 | T6712: Add nonproduction banner (#4149) | mergify[bot] | |
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io> | |||
2024-10-09 | haproxy: T6745: Rename `reverse-proxy` to `haproxy` | sarthurdev | |
2024-10-04 | Merge pull request #4048 from rebortg/node_exporter | Christian Breunig | |
T973: add basic node_exporter implementation | |||
2024-10-03 | T973: remove irrelevant standard values | rebortg | |
2024-10-02 | T6757: Openconnect: fix template for correct config parsing while ↵ | Nicolas Fort | |
configuring source address for radius authentication. | |||
2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
T6687: add fqdn support to nat rules. | |||
2024-09-24 | syslog: T6719: fix the behavior of "syslog global preserve-fqdn" | Nicolas Vollmar | |
2024-09-21 | T6630: ntp: move interface timestamping configuration under ptp node | Christian Breunig | |
2024-09-21 | T6630: ntp: rename ptp-transport to ptp and use defaultValue for port | Christian Breunig | |
2024-09-21 | T6630: ntp: add chrony "ntp over ptp" transport | Lucas Christian | |
2024-09-21 | T6630: ntp: add hardware timestamp offload | Lucas Christian | |
2024-09-21 | T6630: ntp: add "interleave" option | Lucas Christian | |
2024-09-18 | T973: add basic node_exporter implementation | rebortg | |
2024-09-16 | T6687: add fqdn support to nat rules. | Nicolas Fort | |
2024-09-12 | syslog: T5367: add format option to include timezone in message | Christian Breunig | |
Add CLI option to include the systems timezone in the syslog message sent to a collector. This can be enabled using: set system syslog host <hostname> format include-timezone | |||
2024-09-12 | Merge pull request #4021 from natali-rs1985/T6652-current | Daniil Baturin | |
openfabric: T6652: Add support for OpenFabric protocol | |||
2024-09-12 | Merge pull request #4041 from natali-rs1985/T6685-current | Daniil Baturin | |
pppoe-server: T6685: Add options to accept any and blank service names | |||
2024-09-12 | pppoe-server: T6685: Possibility of any services name or blank in pppoe | Nataliia Solomko | |
2024-09-11 | T6294: Service dns forwarding add the ability to configure ZonetoCache | khramshinr | |
2024-09-11 | Merge pull request #4023 from nvollmar/T6679 | Christian Breunig | |
T6679: add group option for nat66 | |||
2024-09-07 | T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | Alain Lamar | |
2024-09-04 | openfabric: T6652: Add support for OpenFabric protocol | Nataliia Solomko | |
OpenFabric is a routing protocol providing link-state routing with efficient flooding for topologies like spine-leaf networks. FRR implements OpenFabric in a daemon called fabricd | |||
2024-09-02 | T6679: add destination groups | Nicolas Vollmar | |
2024-09-02 | Merge pull request #4018 from nicolas-fort/T6647 | Daniil Baturin | |
T6647: firewall. Introduce patch for accepting invalid ARP and DHCP | |||
2024-08-28 | T6647: firewall. Introduce patch for accepting ARP and DHCP replies on ↵ | Nicolas Fort | |
stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. | |||
2024-08-27 | T6681: Add option for SLAAC to support suppress Interval Advertisement in RAs | Hikari Kongou | |
2024-08-20 | Merge pull request #3975 from lucasec/t6183 | Christian Breunig | |
T6183: interfaces openvpn: suppport specifying IP protocol version | |||
2024-08-20 | Merge pull request #3977 from natali-rs1985/T5743-current | Christian Breunig | |
T5743: HTTPS API ability to import PKI certificates | |||
2024-08-16 | T6659: suricata: use unique cluster_id per interface (#3992) | Lucas Christian | |
2024-08-16 | Merge pull request #3987 from natali-rs1985/T6649-current | Daniil Baturin | |
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces | |||
2024-08-15 | T6649: Accel-ppp separate vlan-mon from listen interfaces | Nataliia Solomko | |
2024-08-14 | T6636: firewall: fix firewall template in order to write logs for ↵ | Nicolas Fort | |
default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too | |||
2024-08-13 | T6183: interfaces openvpn: suppport specifying IP protocol version | Lucas Christian | |
2024-08-13 | T5743: HTTPS API ability to import PKI certificates | Nataliia Solomko | |
2024-08-05 | Merge pull request #3920 from fett0/T6555 | Christian Breunig | |
OPENVPN: T6555: add server-bridge options in mode server | |||
2024-08-04 | Merge pull request #3901 from nicolas-fort/T4072-extend-bridge-fwall | Christian Breunig | |
T4072: firewall extend bridge firewall | |||
2024-08-02 | T6619: Remove the remaining uses of per-protocol FRR configs (#3916) | Roman Khramshin | |
2024-08-02 | OPENVPN: T6555: fix name to bridge | fett0 | |
2024-08-02 | T4072: change same helpers in xml definitions; add notrack action for ↵ | Nicolas Fort | |
prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest | |||
2024-08-01 | T4072: firewall: extend firewall bridge smoketest | Nicolas Fort | |