summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
6 dayssyslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
11 daysMerge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
11 dayswireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
12 dayspolicy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
13 daysMerge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
2025-02-24lldp: T7165: add support to enable only rx or tx on specific interfaceChristian Breunig
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable"
2025-02-24T7190: Add haproxy default timeout options configurableViacheslav Hletenko
Add the ability to configurate default timeout and frontend client timeout ``` set load-balancing haproxy service web timeout client '600' set load-balancing haproxy timeout check '4' set load-balancing haproxy timeout client '600' set load-balancing haproxy timeout connect '12' set load-balancing haproxy timeout server '120' ```
2025-02-20firewall: T7148: Bridge state-policy uses drop in place of rejectsarthurdev
2025-02-20Merge pull request #4353 from natali-rs1985/T5810Daniil Baturin
T5810: Add support for RPKI source ip
2025-02-20Merge pull request #4352 from natali-rs1985/T6628-fixChristian Breunig
T6628: IPoE-server rename "static-ip" to "ip-address" for local auth
2025-02-20Merge pull request #4356 from sarthurdev/wlb_pythonChristian Breunig
wlb: T4452: Use return for exclude statements
2025-02-19wlb: T4452: Use return for exclude statementssarthurdev
2025-02-19T5810: Add support for RPKI source ipNataliia Solomko
2025-02-19T6628: IPoE-server rename "static-ip" to "ip-address" for local authNataliia Solomko
2025-02-18Merge pull request #4347 from c-po/bgp-redistr-table-T7163Daniil Baturin
bgp: T7163: add CLI route-map and metric support for "redistribute table"
2025-02-13wlb: T4470: Support WLB op-mode commandssarthurdev
2025-02-13wlb: T4470: Migrate WAN load balancer to Python/XMLsarthurdev
2025-02-13bgp: T7163: add CLI route-map and metric support for "redistribute table"Christian Breunig
* set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute table <n> [metric <n>] [route-map <name>]
2025-02-13bgp: T7161: fix IPv4/IPv6 unicast AFI "redistribute table" commandChristian Breunig
Re-use existing XML constraint added via commit 8f6246da6 ("xml: T7161: provide re-usable building block for alternative routing tables") and add handy CLI completion helper. FRRouting supports redistribution of multiple non-main tables, thus make this a multi node in addition, too.
2025-02-11webproxy: T7057: Fixed 'domain-nocache' commandaapostoliuk
Fixed 'domain-nocache' command. Added config generation for this command.
2025-02-10syslog: T6989: update default system configuration with new CLI syntaxChristian Breunig
2025-02-04syslog: T6989: increase local log size form 256KiB -> 1MiBChristian Breunig
2025-02-04syslog: T6989: add possibility to define VRF per remoteChristian Breunig
Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too.
2025-02-03syslog: T6989: remove RepeatedMsgReduction configuration optionChristian Breunig
This is a feature that worked decades ago when logs were small and reviewed by a human, it fails badly on high volume logs processed by tools. https://www.rsyslog.com/doc/configuration/action/rsconf1_repeatedmsgreduction.html
2025-02-03syslog: T6989: rename "global" to "local"Christian Breunig
The previously "global" options actually were only relevant for the local logging to /var/log/messages.
2025-02-03syslog: T6989: move up "global marker" one level in CLIChristian Breunig
2025-02-03syslog: T6989: move up "global preserve-fqdn" one level in CLIChristian Breunig
Move "global preserve-fqdn" one CLI level up, as it relates to all logging targets (console, global and remote).
2025-02-03syslog: T6989: add new source-address CLI option for outgoing connectionsChristian Breunig
2025-02-03syslog: T6989: convert old configuration format to "advanced"Christian Breunig
2025-02-03syslog: T6989: rename "host" to "remote"Christian Breunig
2025-02-03syslog: T6989: remove CLI option for user terminal loggingChristian Breunig
Should be added as runtime option similar to "terminal monitor" known from other vendors.
2025-02-03syslog: T6989: remove "file" logging destinationChristian Breunig
2025-01-28Merge pull request #4318 from sskaje/T7089Daniil Baturin
T7089: Fix static route when using PPPoE default route
2025-01-28Merge pull request #4322 from aapostoliuk/T2326-fix-3-circinusDaniil Baturin
nhrp: T2326: Fixed jinja template to generate NHRP config
2025-01-27haproxy: T7081: Support HTTP compression (#4314)Alex W
2025-01-27nhrp: T2326: Fixed jinja template to generate NHRP configaapostoliuk
Removed an unnecessary command that caused an error when creating a configuration with VRF and NHRP.
2025-01-27T7089: Fix Indentationsskaje
2025-01-27T7089: Fix static route when using PPPoE default routesskaje
2025-01-21T6895: Merge the hsflowd-based sFlow and uacctd-based sFlow (#4310)Nataliia S.
2025-01-20telegraf: T7017: Telegraf should log at least info to a configured logging ↵ds
output (#4279) * T7017: Telegraf should have .info as input for syslog T7017: updating using vyos_defined keyword as suggested Co-authored-by: Christian Breunig <christian@breunig.cc> --------- Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-01-16dhcp: T5840: Merge systemd service overrides for kea-ctrl-agentIndrajit Raychaudhuri
Default systemd service for kea-ctrl-agent expects `/etc/kea/kea-api-password` which is not used in VyOS. The systemd unit override to remove the condition does not need to be in a separate (templated and dynamic) override file and can be merged into the existing static override file.
2025-01-13Merge pull request #4299 from c-po/radius-smoketestChristian Breunig
T7038: T7039: fix broken RADIUS IPv6 source address and add smoketests
2025-01-13Merge pull request #4217 from aapostoliuk/T2326-circinusChristian Breunig
nhrp: T2326: NHRP migration to FRR
2025-01-11radius: T7039: fix broken IPv6 source addressChristian Breunig
When configuring RADIUS to use IPv6 as connection to the server with an optional source-address set system login radius server 2001:db8::4 key '9LMVCtPYpG' set system login radius source-address '2001:db8::1' It will error out: pam_radius_auth(sshd:auth): Failed looking up source IP address [2001:db8::1] for server [2001:db8::4]:1812 (error=System error) The source address is not allowed to be in [] - thus the brackets need to be removed.
2025-01-09nhrp: T2326: NHRP migration to FRRaapostoliuk
NHRP migration to FRR
2025-01-09ddclient: T5791: Relocate process params to ExecStartIndrajit Raychaudhuri
Pull up all the global parameters controlling process behavior to systemd service. Also remove `syslog=yes`` as it is not needed with `exec` type service.
2025-01-06Merge pull request #4276 from indrajitr/ddclient-process-2025-01-04Daniil Baturin
ddclient: T5791: Keep ddclient.service in foreground
2025-01-06T6841: firewall: Fixed issues in ZBF when using VRFsaapostoliuk
Improve config parsing for ZBF when using VRFs and interfaces attached to VRFs
2025-01-06T6841: firewall: improve config parsing for ZBF when using VRFs and ↵Nicolas Fort
interfaces attached to VRFs
2025-01-06ddclient: T5791: Keep ddclient.service in foregroundIndrajit Raychaudhuri
Since the distributed ddclient.service is of type 'exec' now, avoid using process forking and let systemd manage the process directly.