Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-11-01 | openvpn: T2994: re-add ifconfig-pool statement in server config | Christian Poessinger | |
Re-organize the template code and add addtitional Jinja2 filters for processing the ifconfig-pool statement. This reverts the changes from commit 7e546be9 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools"). | |||
2020-11-01 | openvpn: T2994: remove workarounds for individual ipv4 and ipv6 keys | Christian Poessinger | |
Remove workaround which split (local|remote)_address and also subnet keys into individual keys for the assigned IP address family (4/6). During template rendering check IP version by introducing new ipv4 and ipv6 Jinja2 filters {% if foo | ipv4 %} or {% if bar | ipv6 %} options. | |||
2020-10-31 | openvpn: T2994: temporary revert to 1.2 crux behavior for client pools | Christian Poessinger | |
2020-10-31 | openvpn: T2994: bugfix evaluating replace-default-route in template | Christian Poessinger | |
2020-10-30 | openvpn: T2994: migrate to get_config_dict() | Christian Poessinger | |
2020-10-29 | Merge pull request #587 from sever-sever/T2850 | Christian Poessinger | |
bgp: T2850: Fix FRR template for new bgp scheme | |||
2020-10-29 | bgp: T2850: Fix FRR template for new bgp scheme | sever-sever | |
2020-10-29 | T3029 Correct generated nginx content | Cédric Jeanneret | |
The redirection was using the wrong variable ($server_name), making the browser going to https://_ instead of the right variable. | |||
2020-10-27 | bgp: T2387: Fix XML sheme for new bgp and bgp.py handler | sever-sever | |
2020-10-21 | configd: T2582: exclude http-api.py to investigate regression | John Estabrook | |
2020-10-17 | Merge pull request #573 from sever-sever/T2938 | Christian Poessinger | |
conf-mode: T2938: Add format octet-counted for syslog | |||
2020-10-17 | syslog: T2938: Add format octet-counted for syslog conf-mode | sever-sever | |
2020-10-17 | Merge pull request #575 from DmitriyEshenko/ipoe-fix-issue01 | Christian Poessinger | |
ipoe-server: T2978: Add required proxy-arp by default | |||
2020-10-16 | ipoe-server: T2978: Add required proxy-arp by default | DmitriyEshenko | |
2020-10-15 | conf-mode: T915: Add mpls ldp explicit and holdtime commands | sever-sever | |
2020-10-11 | tftp-server: T2974: migrate to get_config_dict() | Christian Poessinger | |
2020-10-06 | pdns_recursor: T2964: Expose query-local-address to dns config. | Lucas Christian | |
In certain split DNS configurations, there is a need for more fine-grained control over the local address DNS forwarding uses to issue queries. The current pdns_recursor configuration allows the recursor to send queries from any available address on the interface the OS selects for the query, with no option to limit queries to a particular address or set of addresses. This commit exposes the `query-local-address` option in `recursor.conf` to users via the `service` `dns` `forwarding` `source-address` config node. If the parameter is unspecified, the default value of 0.0.0.0 (any IPv4 address) and :: (any IPv6 address) are used to match current behavior. Users who want more control can specify one or more IPv4 and IPv6 addresses to issue queries from. Per pdns_recursor docs, the recursor will load balance queries between any available addresses in the pools. Since IPv4 and IPv6 are different pools, note that specifying only one type of address will disable issuing queries for the other address family. | |||
2020-10-05 | Merge pull request #562 from lucasec/dhcpv6-stateless | Christian Poessinger | |
dhcpv6: T2961: support stateless dhcpv6 clients | |||
2020-10-05 | nat: T2951: use proper comments for source/destination logging | Christian Poessinger | |
For both source and destination NAT always the LOG name contained DST - which is definately false. This has been corrected to use SRC and DST on the appropriate rules. | |||
2020-10-04 | dhcpv6: T2961: support stateless dhcpv6 clients | Lucas Christian | |
This commit adds support for configuring the DHCPv6 server to serve "stateless" DHCPv6 clients (those that send an information-request message and do not request an address). The change introduces a `common-options` node at the `shared-network-name` level, which allows specifying options applicable to clients regardless of subnet assigned (or in the case of stateless clients, when no subnet is assigned). Parameters specified at the subnet level take precedence over those set at the shared-network level. Presently, only parameters that are meaningful to stateless clients have been exposed under `common-options`, as there is no precedent of exposing parameters at multiple levels under the current DHCPv4 or DHCPv6 configuration syntax. If desired, additional parameters could certainly be added with relative ease. | |||
2020-10-04 | sstp: T2960: migrate to get_config_dict() and reusable templates | Christian Poessinger | |
2020-10-04 | pppoe-server: T2953: prepare common chap-secrets file | Christian Poessinger | |
2020-10-04 | pppoe-server: T2953: rename CLI local-ip to gateway-address | Christian Poessinger | |
Required to get a common CLI for all services provided by Accel-PPP. Once the CLI for each service is consitent - Jinja2 templates can be reused together with get_config_dict(). | |||
2020-10-03 | smoketest: sstp: add basic tests | Christian Poessinger | |
2020-10-03 | pppoe-server: T2956: make use of defaultValue list feature | Christian Poessinger | |
2020-10-02 | Merge pull request #559 from sever-sever/T2944 | Christian Poessinger | |
ntp: T2944: By default do not listen port 123 on any address | |||
2020-10-01 | pppoe-server: T2936: move to get_config_dict() | Christian Poessinger | |
For easier configuration read in (CLI) validation and also template rendering it makes sense to drop the old, single implementation and move to the new, generic get_config_dict() approach. Recurring configuration parts like ip-pool, ipv6-pool and nameservers have also been split our into individual templates which will be included through Jinja2 - leading to a single-source of the template sections, too. | |||
2020-10-01 | ntp: T2944: By default do not listen port 123 on any address | sever-sever | |
2020-09-29 | vrrp: T2933: Add option virtual-address-excluded | sever-sever | |
2020-09-28 | pppoe-server: T2919: Add possibility change Called-Station-Id format | DmitriyEshenko | |
2020-09-26 | accel-ppp: T2918: Add accounting interim jitter option | sever-sever | |
2020-09-26 | accel-ppp: T2917: Add Preallocate NAS-port-id | sever-sever | |
2020-09-25 | dns: forwarding: T2921: migrate to get_config_dict() | Christian Poessinger | |
2020-09-24 | wireless: T2241: add "wds" CLI option | Christian Poessinger | |
2020-09-24 | dns: forwarding: T2921: template cleanup | Christian Poessinger | |
2020-09-22 | openvpn: T2906: tls-auth missing key direction | Marcus Hoff | |
2020-09-22 | openvpn: T2907: add 'none' encryption option to not encrypt any data | Marcus Hoff | |
2020-09-21 | wireless: T2887: help when searching hidden SSIDs in station mode | Christian Poessinger | |
2020-09-21 | wireless: T2887: hostapd: add bridge option | Christian Poessinger | |
2020-09-21 | smoketest: macsec: T2023: test MTU setting | Christian Poessinger | |
2020-09-20 | wwan: ifconfig: T2905: sync CLI nodes in dialup interfaces | Christian Poessinger | |
Both PPPoE and WWAN interfaces are dialer interfaces handled by ppp, but use different CLI nodes for the same functionality. PPPoE has "connect-on-demand" to initiate an "on-demand" dialing and WWAN uses "ondemand" for this purpose. Rename WWAN "ondemand" node to "connect-on-demand". | |||
2020-09-16 | wireless: T2887: add smoketest for hostapd | Christian Poessinger | |
2020-09-16 | wireless: T2887: hostapd template cleanup | Christian Poessinger | |
2020-09-16 | wireless: T2887: fix template renderint on ht and vht options | Christian Poessinger | |
2020-09-13 | ddclient: T2858: migrate to get_config_dict() | Christian Poessinger | |
2020-09-09 | openconnect: T2036: Move CLI commands under vpn openconnect | DmitriyEshenko | |
2020-09-03 | configd: T2582: exclude dhcp[v6]_server.py to investigate regression | John Estabrook | |
2020-09-01 | frr-template: T2850: Add BGP template for FRR | sever-sever | |
2020-08-31 | T2636: remove workarounds for get_config_dict() | Christian Poessinger | |
Now that b40c52682a256 ("config: T2636: get_config_dict() returns a list on multi node by default") is implemented the workarounds can be removed. | |||
2020-08-31 | configd: T2582: add scripts to include list for daemon | John Estabrook | |