summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
2026-02-19vpp: T8261: Refactor resource settings into 'resource-allocation' sectionNataliia Solomko
2026-02-18Merge pull request #4961 from jvoss/srv6_encapsulationChristian Breunig
srv6: T6977: add srv6 encapsulation source-address
2026-02-18vpp: T8274: Remove dpdk-options section for num-* parametersOleksandr Kuchmystyi
Remove `dpdk-options` under `set vpp settings interface <ethN>` and move its child options to the interface level: - `num-rx-desc` - `num-rx-queues` - `num-tx-desc` - `num-tx-queues` Also remove `set vpp settings interface <ethN> dpdk-options promisc`.
2026-02-17Merge pull request #4996 from c-po/syslog-cleanupChristian Breunig
syslog: T8272: remove dead code from previous "file" logging support
2026-02-17syslog: T8272: remove dead code from previous "file" logging supportChristian Breunig
Commit 395e3cb72 ("syslog: T6989: remove 'file' logging destination") removed CLI support for custom file based logging targets. The code about logrotate was not removed and just stayed "dead". Dead code is removed by this commit.
2026-02-17Merge pull request #4993 from natali-rs1985/T8268Viacheslav Hletenko
vpp: T8268: Unify CPU settings into a single 'cpu-cores' node under 'resource-allocation'
2026-02-17vpp: T8268: Unify CPU settings into a single 'cpu-cores' node under ↵Nataliia Solomko
'resource-allocation' Replace legacy VPP CPU settings (main-core, skip-cores, workers, corelist-workers) with a single resource-allocation cpu-cores option. CPU assignment is now handled automatically: two cores are reserved for the system, the VPP main thread is placed on the first available core, and the remaining allocated cores are used as workers. This simplifies configuration and ensures consistent CPU allocation.
2026-02-16Merge pull request #4989 from c-po/lcd-mtc-s16209xDaniil Baturin
lcd: T8213: add support for MTC S16209x
2026-02-15srv6: T6977: add srv6 encapsulation source-addressJonathan Voss
2026-02-15vpp: T8258: Move `poll-sleep-usec` out of `unix` sectionOleksandr Kuchmystyi
Instead of `vpp settings unix poll-sleep-usec` use `vpp settings poll-sleep-usec`.
2026-02-14lcd: T8213: add support for MTC S16209xJadyn Emma Jäger
Implementation has been tested using a virtual serial pipe as I (Christian Breunig) did not find my hardware LCD display. You can easily do this via: $ sudo socat -d -d PTY,link=/dev/ttyS99,raw,echo=0 PTY,link=/tmp/serial,raw,echo=0 $ sudo cat /tmp/serial You will get a lot of control characters, but real information like the OS Kernel version will scroll through. Co-authored-by: Christian Breunig <christian@breunig.cc>
2026-02-13vpp: T8262: Refactor IPsec settings to use only 'ipsec-acceleration' flagNataliia Solomko
2026-02-13vpp: T8254: Move 'nat44' and 'settings nat44' sections to 'nat nat44'Nataliia Solomko
2026-02-13vpp: T8255: Changed logging level variable nameOleksandr Kuchmystyi
This commit changes logging settings naming: - before: `set vpp settings logging default-log-level <alert>` - after: `set vpp settings logging default-level <alert>`
2026-02-09T7756: Fix rsyslog configuration generationAdam Schultz
1.) Fix both syslog and logrotate writing /etc/logrotate.d/vyos-rsyslog - system_syslog.py generates /etc/logrotate.d/vyos-rsyslog-user for user file logrotate - system_logs.py generates /etc/logrotate.d/vyos-rsyslog using configured rotation parameters 2.) Fix /run/rsyslog/rsyslog.conf ignoring configured size for /var/log/messages - system_syslog.py retrieves "system logs" config to set rotation limits - default rotation size is now based on configuration defaults 3.) prifilt strings for rsyslog are modified to use override syntax (e.g. ";facility.none") when all is combined with other facilities to honor per facility user intent Smoke test changes: Commonize configuration of syslog facilities Check that prifilt is sane based on configured facilities (i.e. overides only present when required) Test wildcard (all) only, specific facility only, and wildcard + specific facility
2026-02-05Merge pull request #4949 from sarthurdev/geoip_refactorDaniil Baturin
geoip: T7926: T8049: Refactor geoip code and add MaxMind support
2026-01-30Merge pull request #4955 from natali-rs1985/T8202Viacheslav Hletenko
vpp: T8202: Remove XDP driver and options from CLI and config
2026-01-28vpp: T8202: Remove XDP driver and options from CLI and configNataliia Solomko
- Migration script removes 'driver' and 'xdp-options' nodes. - XDP logic is commented out in config verification and CLI tests, preserving code for future use. - The rest of XDP-related code remains untouched
2026-01-27T6734: Nginx disable software version reportingViacheslav Hletenko
2026-01-22Merge pull request #4942 from natali-rs1985/T8125Daniil Baturin
vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is configured as DHCP
2026-01-22Merge pull request #4947 from natali-rs1985/T8183Daniil Baturin
vpp: T8143: Incorrect mapping in IPFIX for bond interfaces
2026-01-21Merge pull request #4921 from hedrok/T7664-update-smoketest-scriptChristian Breunig
T7664: support FRR 10.5
2026-01-21vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is ↵Nataliia Solomko
configured as DHCP DHCP address cannot be assigned on VPP interfaces without enabling the 'ip4-dhcp-client-detect' feature
2026-01-21geoip: T7926: Refactor geoip handlingsarthurdev
* Move core logic to separate vyos.geoip module * Use a sqlite database for storing and querying address ranges by country * Remove downloaded geoip ranges once loaded into sqlite db * No longer rebuild geoip sets on each commit unless necessary * Allows for extensibility using other geoip data vendors
2026-01-17Merge pull request #4852 from scj643/ssh-fido2-optionsChristian Breunig
ssh: T7483: Add fido2 PubkeyAuthOptions
2026-01-16vpp: T8143: Incorrect mapping in IPFIX for bond interfacesNataliia Solomko
2026-01-15Merge pull request #4843 from Firefishy/T7101Daniil Baturin
T7101: Add hardware watchdog support via systemd
2026-01-15ssh: T7483: Add fido2 PubkeyAuthOptionsChloe Surett
2026-01-14T7101: Add support for hardware watchdog support via systemdGrant Slater
2026-01-12openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnelsOleksandr Kuchmystyi
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
2026-01-11Merge pull request #4938 from hedrok/T8158-fix-lsp-timersChristian Breunig
isis: T8158: fix lsp-timers
2026-01-09Merge pull request #4912 from hedrok/T8046-add-link-params-cliViacheslav Hletenko
T8046: traffic-engineering: support link-params
2026-01-09isis: T8158: fix lsp-timersKyrylo Yatsenko
There are three configuration values in VyOS isis XML: * lsp-gen-interval * lsp-refresh-interval * max-lsp-lifetime In FRR they have the following restrictions in yang model: * refresh-interval, default 900 * maximum-lifetime >= refresh-interval + 300 (350-65535), default 1200 * generation-interval < refresh-interval (1..120), default 30 When setting these values in separate steps we can get error e.g.: libyang: Must condition ". >= ../refresh-interval + 300" not satisfied. even when all restrictions are satisfied. To fix the issue: 1. Write default values in our XML. 2. Check these restrictions in protocol_isis.py 3. Use FRR command `lsp-timers` that sets all these values in one go
2026-01-09T8046: traffic-engineering: support link-paramsKyrylo Yatsenko
Add 'traffic-engineering' commands under 'protocols'. set protocols traffic-engineering admin-group ADMINGROUP bit-position 1 set protocols traffic-engineering interface INTERFACE admin-group ADMINGROUP set protocols traffic-engineering interface INTERFACE max-bandwidth 1280 set protocols traffic-engineering interface INTERFACE max-reservable-bandwidth 1280 Also add set protocols isis traffic-engineering export
2026-01-05Merge pull request #4618 from giga1699/T7635Viacheslav Hletenko
T7635: OpenConnect Certificate Authentication
2026-01-05Merge pull request #4929 from bilde2910/T8140Christian Breunig
router-advert: T8140: add captive portal support (RFC 8910)
2026-01-01router-advert: T8140: add captive portal support (RFC 8910)Marius Lindvall
Add support for captive portal identification in IPv6 router adverts as defined in RFC 8910. The value is a quoted URL pointing to an RFC 8908-compliant API endpoint.
2026-01-01T8138: add nat66 as dependent of firewall groupsMarius Lindvall
Add nat66 as a dependency of firewall groups, because nat66 may reference firewall groups via source-destination-group-ipv6.xml.i. The dependency is necessary to ensure a fresh nft ruleset is built when dependent groups are updated, so that the changes actually take effect in nat66 on commit. Add a smoketest to cover nft rulesets failing to update as a result of changes to dependent firewall groups. Original commit adding support for groups in nat66 is commit f96733dd.
2025-12-30T8133: BGP add local-rib feature for BMPViacheslav Hletenko
2025-12-30bgp: T7664: add 'no bgp reject-as-sets'Kyrylo Yatsenko
In FRR 10.5 'bgp reject-as-sets' became default (https://frrouting.org/release/10.5.0/): > BGP rejects AS_SET by default > Until 10.5.0, it was disabled by default, and since RFC 9774 was > published, we switched this on by default (to reject). Add 'no bgp reject-as-sets' when VyOS option reject_as_sets is not set.
2025-12-29T7635: OpenConnect Certificate AuthenticationGiga Murphy
2025-12-19T8010: Added the vyos_vpp plugin to the accel-pppd's templateAndrii Melnychenko
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
2025-12-18Merge pull request #4895 from natali-rs1985/T8082Viacheslav Hletenko
T8082: VPP fails to start with buffers page-size 1G
2025-12-14ssh: T8098: rename "ciphers" CLI node to "cipher"Christian Breunig
Follow VyOS CLI best practices for using singular whenever possible to build a CLI node. As we introduce a new migration 2 -> 3 for SSH we can correct this minor detail.
2025-12-11T8082: VPP fails to start with buffers page-size 1GNataliia Solomko
2025-12-09Merge pull request #4882 from sever-sever/T8011Viacheslav Hletenko
T8011: VPP fix log duplication in systemd journal
2025-12-04ipsec: T7594: Rename `respond` connection-type in IPSec peer settings to `trap`Oleksandr Kuchmystyi
The previous 'connection-type respond' option in IPsec site-to-site peers was misleading - instead of passively waiting for peer initiation, it would initiate negotiation when matching traffic appeared, potentially causing SA duplication and renegotiation loops.
2025-12-01T8011: VPP fix log duplication in systemd journalViacheslav Hletenko
Set the standard output/error to null to avoid log duplication. Starting the service as "nodaemon" seems cause of this behavior.
2025-11-28Merge pull request #4824 from alexandr-san4ez/T4251-currentViacheslav Hletenko
syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS checks
2025-11-27snmp: T8039: fix v3 trap targetsChristian Breunig
The generated Net-SNMP configuration for SNMPv3 trap-targets was fundamentally broken. Not only was the auth/priv type not written in uppercase letters, but also the ordering of transport protocol, IP(v6) address and port was wrong. To complete the issues above - IPv6 addresses did not get wrapped into mandatory [] brackets.
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-21 17:37:42 +0000