| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-05-22 | nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel ↵ | Christian Breunig | |
| >=5.0 random - In kernel 5.0 and newer this is the same as fully-random. In earlier kernels the port mapping will be randomized using a seeded MD5 hash mix using source and destination address and destination port. https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454 | |||
| 2024-05-15 | T5756: L2TP RADIUS backup and weight settings | khramshinr | |
| 2024-05-11 | ethernet: T6306: add support for EVPN MH uplink/core tracking | Christian Breunig | |
| When all the underlay links go down the PE no longer has access to the VxLAN +overlay. To prevent blackholing of traffic the server/ES links are protodowned on the PE. A link can be setup for uplink tracking via the following configuration: set interfaces ethernet eth0 evpn uplink | |||
| 2024-05-07 | T6305: accept ipoe interfaces on firewall ruleset | Nicolas Fort | |
| 2024-05-01 | Merge pull request #3364 from natali-rs1985/T6234-current | Daniil Baturin | |
| pppoe-server: T6234: PPPoE-server pado-delay refactoring | |||
| 2024-04-30 | Merge pull request #3374 from aapostoliuk/T6273 | Christian Breunig | |
| T6273: Allowed the use of "-" and "_" in PPPoE access-concentrator name | |||
| 2024-04-30 | T6273: Allowed the use of "-" and "_" in PPPoE access-concentrator name | aapostoliuk | |
| Allowed the use of "-" and "_" in PPPoE access-concentrator name | |||
| 2024-04-29 | openconnect: T4982: Support defining minimum TLS version in openconnect VPN | Alex W | |
| 2024-04-25 | pppoe-server: T6234: PPPoE-server pado-delay refactoring | Nataliia Solomko | |
| 2024-04-25 | T6258: Add sysctl base-reachable-time for IPv6 | Viacheslav Hletenko | |
| Add abiilty to change `base_reachable_time_ms` option /proc/sys/net/ipv6/neigh/{ifname}/base_reachable_time_ms | |||
| 2024-04-23 | Merge pull request #3342 from fsdrw08/current | Christian Breunig | |
| T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy config | |||
| 2024-04-23 | T6226: add HAPROXY tcp-request related block to load-balancing reverse proxy ↵ | Windom WU | |
| config | |||
| 2024-04-22 | xml: T5738: fix typo in radius-additions.xml.i | André Luiz dos Santos | |
| 2024-04-15 | T5535: firewall: migrate command <set system ip disable-directed-broadcast> ↵ | Nicolas Fort | |
| to firewall global-optinos | |||
| 2024-04-13 | Merge pull request #3297 from HollyGurza/T6035 | Daniil Baturin | |
| qos: T6035: QoS policy shaper queue-type random-detect requires limit avpkt | |||
| 2024-04-12 | qos: T6035: QoS policy shaper queue-type random-detect requires limit avpkt | khramshinr | |
| Added params for configuration red on the shaper policy | |||
| 2024-04-09 | T6214: T6213: change constraint <alpha-numeric-hyphen-underscore-dot.xml.i> ↵ | Nicolas Fort | |
| in order to not allow string starting with dot character; use such constraint in firewall group definitions. | |||
| 2024-04-07 | Merge pull request #3265 from c-po/ethernet-mtu-T5862 | Daniil Baturin | |
| ethernet: T5862: default MTU is not acceptable in some environments | |||
| 2024-04-06 | container: T6208: rename "cap-add" CLI node to "capability" | Christian Breunig | |
| Containers have the ability to add Linux system capabilities to them, this is done using the "set container name <name> cap-add" command. The CLI node sounds off and rather should be "set container name <name> capability" instead as we use and pass a capability to a container and not add/invent new ones. | |||
| 2024-04-06 | xml: T5862: drop defaultValue from mtu-68-16000.xml.i - use individual values | Christian Breunig | |
| In order to lower the Ethernet default MTU we need to drop the common defaultValue from the XML mtu-68-16000.xml.i building block. Per interface default MTU is later overloaded by XML. | |||
| 2024-04-02 | Merge pull request #3229 from c-po/multi-vrf | Christian Breunig | |
| T6192: allow binding SSH to multiple VRF instances | |||
| 2024-04-01 | ssh: T6192: allow binding to multiple VRF instances | Christian Breunig | |
| Currently VyOS only supports binding a service to one individual VRF. It might become handy to have the services (initially it will be VRF, NTP and SNMP) be bound to multiple VRFs. Changed VRF from leafNode to multi leafNode with defaultValue: default - which is the name of the default VRF. | |||
| 2024-04-01 | xml: T5738: extend VRF building blocks with common constraint definition | Christian Breunig | |
| 2024-03-31 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
| 2024-03-29 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
| 2024-03-29 | bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
| 2024-03-29 | bgp: T6010: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
| 2024-03-28 | ipsec: T5606: T5871: Use multi node for CA certificates | sarthurdev | |
| This changes behaviour from fetching CA chain in PKI, to the user manually setting CA certificates. Prevents unwanted parent CAs existing in PKI from being auto-included as may not be desired/intended. | |||
| 2024-03-25 | T6171: migrate <set service dhcp-server failover> to <set service ↵ | Nicolas Fort | |
| dhcp-server high-availability>. | |||
| 2024-03-24 | xml: T5738: use common constraint include for container network | Christian Breunig | |
| 2024-03-20 | bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering | Christian Breunig | |
| Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType value of 0x88A8 is required. Reusing CLI command from VIF-S (QinQ) interfaces: set interfaces bridge br0 protocol 802.1ad | |||
| 2024-03-19 | Merge pull request #3131 from HollyGurza/T1871 | Christian Breunig | |
| qos: T1871: add MTU option when configure limiter traffic-policy | |||
| 2024-03-18 | qos: T1871: add MTU option when configure limiter traffic-policy | khramshinr | |
| add mtu to default and specified class update smoke test | |||
| 2024-03-12 | conntrack: T4022: add RTSP conntrack helper | Indrek Ardel | |
| 2024-03-10 | xml: T6098: relax description constraint to allow non-ascii characters | John Estabrook | |
| A restriction to ascii in the constraint disallowed earlier support for unicode bytes. | |||
| 2024-03-10 | dhcp-client: T6093: extend regex for client class-id's with DOT | Lucas | |
| The regex used is not working if the string contains dots. Originally authored by: Lucas <pinheirolucas@pm.me> | |||
| 2024-03-10 | xml: T5738: revert invalid change from lower character limit - 0 length must ↵ | Christian Breunig | |
| be allowed This reverts a change from commit a72ededa0 ("xml: T5738: lower maximum description to 255 characters") which incresaed the lower limit from 0 to 1. We actually require 0 length value for description nodes as introduced in commit 6eea12512e ("xml: T1579: allow zero length for description"). | |||
| 2024-03-10 | xml: T5738: lower maximum description to 255 characters | Christian Breunig | |
| e.g. Linux Kernel only supports 255 and not 256 characters for the ifalias field. | |||
| 2024-03-05 | xml: T5738: use generic-disable-node building block for "disable" CLI nodes | Christian Breunig | |
| Make the code more uniform and maintainable. | |||
| 2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
| 2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
| Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
| 2024-02-28 | dhcp-server: T6079: Increment Kea migrator versions | sarthurdev | |
| 2024-02-23 | pki: T3642: Fix typo in PKI includes | sarthurdev | |
| 2024-02-20 | T6050: Fixed descriptions of 'extended-scripts' commands in accel-ppp | aapostoliuk | |
| Removed word 'PPPoE' from descriptions in common template for all accel-ppp services. | |||
| 2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
| T6001: add option to disable next-hop-tracking resolve-via-default | |||
| 2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
| * set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default | |||
| 2024-02-15 | Merge pull request #3004 from aapostoliuk/T6029-circinus | Daniil Baturin | |
| T6029: Rewritten Accel-PPP services to an identical feature set | |||
| 2024-02-15 | T6029: Rewritten Accel-PPP services to an identical feature set | aapostoliuk | |
| Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. | |||
| 2024-02-14 | eigrp: T2472: improve code for later tests | Christian Breunig | |
| 2024-02-13 | Merge pull request #2987 from c-po/evpn-macvrf-soo | Christian Breunig | |
| bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | |||
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |