Age | Commit message (Collapse) | Author | |
---|---|---|---|
4 days | firewall: T7148: Bridge state-policy uses drop in place of reject | sarthurdev | |
4 days | Merge pull request #4353 from natali-rs1985/T5810 | Daniil Baturin | |
T5810: Add support for RPKI source ip | |||
4 days | Merge pull request #4352 from natali-rs1985/T6628-fix | Christian Breunig | |
T6628: IPoE-server rename "static-ip" to "ip-address" for local auth | |||
4 days | Merge pull request #4356 from sarthurdev/wlb_python | Christian Breunig | |
wlb: T4452: Use return for exclude statements | |||
5 days | wlb: T4452: Use return for exclude statements | sarthurdev | |
5 days | T5810: Add support for RPKI source ip | Nataliia Solomko | |
5 days | T6628: IPoE-server rename "static-ip" to "ip-address" for local auth | Nataliia Solomko | |
6 days | Merge pull request #4347 from c-po/bgp-redistr-table-T7163 | Daniil Baturin | |
bgp: T7163: add CLI route-map and metric support for "redistribute table" | |||
11 days | wlb: T4470: Support WLB op-mode commands | sarthurdev | |
11 days | wlb: T4470: Migrate WAN load balancer to Python/XML | sarthurdev | |
11 days | bgp: T7163: add CLI route-map and metric support for "redistribute table" | Christian Breunig | |
* set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute table <n> [metric <n>] [route-map <name>] | |||
11 days | bgp: T7161: fix IPv4/IPv6 unicast AFI "redistribute table" command | Christian Breunig | |
Re-use existing XML constraint added via commit 8f6246da6 ("xml: T7161: provide re-usable building block for alternative routing tables") and add handy CLI completion helper. FRRouting supports redistribution of multiple non-main tables, thus make this a multi node in addition, too. | |||
13 days | webproxy: T7057: Fixed 'domain-nocache' command | aapostoliuk | |
Fixed 'domain-nocache' command. Added config generation for this command. | |||
14 days | syslog: T6989: update default system configuration with new CLI syntax | Christian Breunig | |
2025-02-04 | syslog: T6989: increase local log size form 256KiB -> 1MiB | Christian Breunig | |
2025-02-04 | syslog: T6989: add possibility to define VRF per remote | Christian Breunig | |
Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too. | |||
2025-02-03 | syslog: T6989: remove RepeatedMsgReduction configuration option | Christian Breunig | |
This is a feature that worked decades ago when logs were small and reviewed by a human, it fails badly on high volume logs processed by tools. https://www.rsyslog.com/doc/configuration/action/rsconf1_repeatedmsgreduction.html | |||
2025-02-03 | syslog: T6989: rename "global" to "local" | Christian Breunig | |
The previously "global" options actually were only relevant for the local logging to /var/log/messages. | |||
2025-02-03 | syslog: T6989: move up "global marker" one level in CLI | Christian Breunig | |
2025-02-03 | syslog: T6989: move up "global preserve-fqdn" one level in CLI | Christian Breunig | |
Move "global preserve-fqdn" one CLI level up, as it relates to all logging targets (console, global and remote). | |||
2025-02-03 | syslog: T6989: add new source-address CLI option for outgoing connections | Christian Breunig | |
2025-02-03 | syslog: T6989: convert old configuration format to "advanced" | Christian Breunig | |
2025-02-03 | syslog: T6989: rename "host" to "remote" | Christian Breunig | |
2025-02-03 | syslog: T6989: remove CLI option for user terminal logging | Christian Breunig | |
Should be added as runtime option similar to "terminal monitor" known from other vendors. | |||
2025-02-03 | syslog: T6989: remove "file" logging destination | Christian Breunig | |
2025-01-28 | Merge pull request #4318 from sskaje/T7089 | Daniil Baturin | |
T7089: Fix static route when using PPPoE default route | |||
2025-01-28 | Merge pull request #4322 from aapostoliuk/T2326-fix-3-circinus | Daniil Baturin | |
nhrp: T2326: Fixed jinja template to generate NHRP config | |||
2025-01-27 | haproxy: T7081: Support HTTP compression (#4314) | Alex W | |
2025-01-27 | nhrp: T2326: Fixed jinja template to generate NHRP config | aapostoliuk | |
Removed an unnecessary command that caused an error when creating a configuration with VRF and NHRP. | |||
2025-01-27 | T7089: Fix Indentation | sskaje | |
2025-01-27 | T7089: Fix static route when using PPPoE default route | sskaje | |
2025-01-21 | T6895: Merge the hsflowd-based sFlow and uacctd-based sFlow (#4310) | Nataliia S. | |
2025-01-20 | telegraf: T7017: Telegraf should log at least info to a configured logging ↵ | ds | |
output (#4279) * T7017: Telegraf should have .info as input for syslog T7017: updating using vyos_defined keyword as suggested Co-authored-by: Christian Breunig <christian@breunig.cc> --------- Co-authored-by: Christian Breunig <christian@breunig.cc> | |||
2025-01-16 | dhcp: T5840: Merge systemd service overrides for kea-ctrl-agent | Indrajit Raychaudhuri | |
Default systemd service for kea-ctrl-agent expects `/etc/kea/kea-api-password` which is not used in VyOS. The systemd unit override to remove the condition does not need to be in a separate (templated and dynamic) override file and can be merged into the existing static override file. | |||
2025-01-13 | Merge pull request #4299 from c-po/radius-smoketest | Christian Breunig | |
T7038: T7039: fix broken RADIUS IPv6 source address and add smoketests | |||
2025-01-13 | Merge pull request #4217 from aapostoliuk/T2326-circinus | Christian Breunig | |
nhrp: T2326: NHRP migration to FRR | |||
2025-01-11 | radius: T7039: fix broken IPv6 source address | Christian Breunig | |
When configuring RADIUS to use IPv6 as connection to the server with an optional source-address set system login radius server 2001:db8::4 key '9LMVCtPYpG' set system login radius source-address '2001:db8::1' It will error out: pam_radius_auth(sshd:auth): Failed looking up source IP address [2001:db8::1] for server [2001:db8::4]:1812 (error=System error) The source address is not allowed to be in [] - thus the brackets need to be removed. | |||
2025-01-09 | nhrp: T2326: NHRP migration to FRR | aapostoliuk | |
NHRP migration to FRR | |||
2025-01-09 | ddclient: T5791: Relocate process params to ExecStart | Indrajit Raychaudhuri | |
Pull up all the global parameters controlling process behavior to systemd service. Also remove `syslog=yes`` as it is not needed with `exec` type service. | |||
2025-01-06 | Merge pull request #4276 from indrajitr/ddclient-process-2025-01-04 | Daniil Baturin | |
ddclient: T5791: Keep ddclient.service in foreground | |||
2025-01-06 | T6841: firewall: Fixed issues in ZBF when using VRFs | aapostoliuk | |
Improve config parsing for ZBF when using VRFs and interfaces attached to VRFs | |||
2025-01-06 | T6841: firewall: improve config parsing for ZBF when using VRFs and ↵ | Nicolas Fort | |
interfaces attached to VRFs | |||
2025-01-06 | ddclient: T5791: Keep ddclient.service in foreground | Indrajit Raychaudhuri | |
Since the distributed ddclient.service is of type 'exec' now, avoid using process forking and let systemd manage the process directly. | |||
2025-01-04 | Merge pull request #4271 from nvollmar/T6994 | Christian Breunig | |
T6994: Add textfile collector config option | |||
2025-01-02 | telegraf: T6477: adjusting "metric_name_label" indentation in config template | ds | |
2025-01-02 | Merge pull request #4263 from jvoss/srv6_locator_format | Daniil Baturin | |
srv6: T6984: add locator format configuration | |||
2025-01-02 | T6994: Add textfile collector config option | Nicolas Vollmar | |
2024-12-31 | T6949: adds blackbox exporter (#4255) | Nicolas Vollmar | |
* T6949: adds blackbox exporter * T6949: adds basic config generation * T6949: extract shared module config options * T6949: switch to ipv4/6 literals * T6949: moves config file to /run * T6949: adds dns query name option * T6949: adds dns query type values * T6949: adds blackbox exporter to debian/control | |||
2024-12-30 | srv6: T6984: add locator format configuration | Jonathan Voss | |
2024-12-23 | Merge pull request #4234 from takehaya/T6013-trusted-ca-keys | Christian Breunig | |
T6013: Add support for configuring TrustedUserCAKeys for ssh service |