summaryrefslogtreecommitdiff
path: root/interface-definitions
AgeCommit message (Collapse)Author
2025-11-18Merge pull request #4845 from vyos/T7556Daniil Baturin
T7556: VPP add IPFIX collector configuration
2025-11-14T7556: VPP add IPFIX collector configurationViacheslav Hletenko
Add VPP IPFIX configuration commands: ``` set vpp ipfix active-timeout '8' set vpp ipfix collector 192.0.2.2 port '2055' set vpp ipfix collector 192.0.2.2 source-address '192.0.2.1' set vpp ipfix flowprobe-record 'l2' set vpp ipfix flowprobe-record 'l3' set vpp ipfix flowprobe-record 'l4' set vpp ipfix inactive-timeout '32' set vpp ipfix interface eth0 set vpp ipfix interface eth1 direction 'both' set vpp ipfix interface eth1 flow-variant 'ipv4' ```
2025-11-14Merge pull request #4846 from alexandr-san4ez/T6775-currentViacheslav Hletenko
bridge: T6775: The isolation option disappears after reboot
2025-11-12Merge pull request #4840 from natali-rs1985/T7872Viacheslav Hletenko
T7872: VPP XDP with rx-queue-size stuck
2025-11-12bridge: T6775: The isolation option disappears after rebootOleksandr Kuchmystyi
Previously, the bridge definition had priority 310 while ethernet interfaces used 318. This caused bridges to be built before their member interfaces were ready, resulting in missing or incomplete bridge configuration at boot. Increase bridge priority from 310 to 319 to ensure bridges are processed after base ethernet/VLAN interfaces and before higher‑level subsystems.
2025-11-11T7872: VPP XDP with rx-queue-size stuckNataliia Solomko
Queue sizes must be a power of two and between VLIB_FRAME_SIZE=256 and 65535 https://github.com/FDio/vpp/blob/d39cc2bd9374f9df7e42ad39bb9fb8e2531d3da8/src/plugins/af_xdp/device.c#L588-L608
2025-11-08pppoe: T7485: make xml leafNode address a multi-type nodeChristian Breunig
Commit fb9f2f3e950 ("pppoe: T7485: allow explicit request for CPE IPv6 address via IA_NA") introduced the CLI node definition for address dhcpv6, which at the time had only a single available option. Because of that, the node wasn't defined as <multi/> in the XML schema. However, the generic interface code expects address to be a <multi/> XML node, which is translated into a list in Python. This mismatch caused an error referencing the letter d, corresponding to the first character of dhcpv6.
2025-10-31T7849: ZBF allow to use wildcard interfaces as memberViacheslav Hletenko
Allow to use wildcard interfaces for zone-based firewall It should allow interfaces like ipoe*/pppoe*/l2tp*
2025-10-31T7849: Extend regex for constraint wildcard interfacesViacheslav Hletenko
Allow ipoe*, vpp and pod interfaceds
2025-10-30Merge pull request #4702 from nvollmar/T6686Daniil Baturin
T6686: adds container health checks
2025-10-29Merge pull request #4810 from bl0way/T7896-frr-profileChristian Breunig
T7896: Add frr profile selection
2025-10-29frr: T7896: Configure frr profile with 'system frr profile' commandbl0way
Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-10-28dhcp-server: T3936: Added support for DHCP Option 82 (#4665)cblackburn-igl
* dhcp-server: T3936: Added support for DHCP Option 82 This commit adds support in both the CLI and the underlying code for DHCP Option 82 to be used to filter/route DHCP address assignments. The primary use case for this is to support enterprise switches which can "tag" DHCP requests with physical real world informaiton such as which switch first saw the request and which port it originated from (known in this context as remote-id and circuit-id). Once client-classes have been defined they can be assigned to subnets or ranges so that only certain addresses get assigned to specific requests. There is also a corresponding documentation update which pairs with this code change. (cherry picked from commit 326b5e713cb363a2b9f69e2204c4ee2ccd9939bb) * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update interface-definitions/include/dhcp/dhcp-server-common-config.xml.i Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> --------- Co-authored-by: Daniil Baturin <daniil@baturin.org> Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com>
2025-10-28Merge pull request #4796 from natali-rs1985/T7938Daniil Baturin
T7938: VPP: Rewrite sFlow implementation
2025-10-27Merge pull request #4806 from alexandr-san4ez/T7906-currentChristian Breunig
haproxy: T7906: Probing of a port other than the one to which normal traffic is sent
2025-10-24haproxy: T7906: Probing of a port other than the one to which normal traffic ↵Oleksandr Kuchmystyi
is sent Add support for specifying a custom health check port for HAProxy backend servers. This allows health probes to target a dedicated endpoint - such as port 8080 - separate from normal traffic ports (e.g., 80 or 443).
2025-10-24syslog: T4251: Fix TLS enablement logic for syslogOleksandr Kuchmystyi
2025-10-23T6686: adds container health checksNicolas Vollmar
2025-10-21T7938: VPP: Rewrite sFlow implementationNataliia Solomko
Execute commands for vpp sflow with API calls. Use values for polling interval and sampling rate from 'system sflow'. Add op-mode command
2025-10-21Merge pull request #4783 from hedrok/T5942-failover-dhcp-gatewayDaniil Baturin
T5942: Make failover support dhcp-interface
2025-10-19kea: T7821: Use include for dhcp/dhcpv6 subnet-idsarthurdev
2025-10-19kea: T7821: Fix subnet-id accepted rangesarthurdev
'Subnet IDs must be greater than zero and less than 4294967295.'
2025-10-16Merge pull request #4781 from natali-rs1985/T7897Viacheslav Hletenko
T7897: VPP: fix rx-mode interrupt for XDP driver with workers
2025-10-14T5942: Make failover support dhcp-interfaceKyrylo Yatsenko
* Refactor XML a little: move common dhcp-interface properties to separate include file * Add failover support for dhcp-interface * Add test for DHCP in failover protocol
2025-10-14T7897: VPP: fix rx-mode interrupt for XDP driver with workersNataliia Solomko
Remove no-syscall-lock from CLI and enable this option if interrupt/adaptive mode is enabled and workers are configured. Also forbid interrupt mode for ixgbevf driver
2025-10-10dhcp-server: T7723: add DHCP Option 26 (interface MTU)Adam Greene
2025-10-09pppoe: T7485: allow explicit request for CPE IPv6 address via IA_NAChristian Breunig
2025-10-09pppoe: T7485: add DHCPv6 options to disable DNSNicolas Vandamme
Co-Authored-By: Christian Breunig <christian@breunig.cc>
2025-10-08T7803: Make failover route vrf-awareKyrylo Yatsenko
* Added 'protocol failover' to 'set vrf name': set vrf name red protocols failover route 10.11.0.110/32 next-hop 10.0.0.2 * Added vrf and interface to target: set ... next-hop 10.0.0.2 check target '10.120.0.21' vrf blue set ... next-hop 10.0.0.2 check target '10.120.0.21' interface eth1 Last two are needed when check VRF is not same as route VRF. In this case icmp can use any/both options, tcp requires `vrf` and arp requires `interface`
2025-10-06Revert "bgp: T7760: deprecate per bgp vrf instance system-as node"John Estabrook
This reverts commit d871fe9c4c65de87232802ed54b263c9b2824391.
2025-10-06Revert "bgp: T7760: remove per vrf instance system-as node"John Estabrook
This reverts commit 85fe32f0e1a91a47fe4a6d4a5cdd6ac516dcc3b9.
2025-10-03T7905: Add system login to config-syncViacheslav
Add the ability to sync system login between primary and secondary nodes ``` set service config-sync section system login ```
2025-10-02container: T7863: Add user-defined MAC option for containers (#4762)l0crian1
2025-09-30syslog: T4251: Add TLS support to syslogOleksandr Kuchmystyi
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes. This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
2025-09-25T7801: VPP fails to start with logging level set to 'Error'Nataliia Solomko
2025-09-23Merge pull request #4684 from c-po/bgp-vrf-system-asDaniil Baturin
bgp: T7760: remove per vrf instance system-as node
2025-09-22Merge pull request #4698 from l0crian1/fw-disable-conntrackDaniil Baturin
firewall: T7475: Add an option to disable conntrack for individual firewall chaisn
2025-09-22Merge pull request #4720 from roedie/T7820Viacheslav Hletenko
T7820: Add support for yescrypt encypted hashes
2025-09-18T7805: VPP remove unused 'default-hugepage-size' from memory section and ↵Nataliia Solomko
restrict page sizes in xml
2025-09-18Merge pull request #4708 from sarthurdev/T114Daniil Baturin
wlb: T114: Add firewall group support for WAN load balancer
2025-09-16Merge pull request #4688 from hedrok/T75-migration-to-ipt-netflowDaniil Baturin
T75: migrate from pmacct to ipt_NETFLOW
2025-09-16Merge pull request #4717 from c-po/no-ipv6-default-routeDaniil Baturin
dhcpv6: T7646: restore missing default route after upgrade
2025-09-16T75: migrate from pmacct to ipt_NETFLOWKyrylo Yatsenko
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW is iptales plugin * Remove specific and non-relevant pmacct options * Add ipt_NETFLOW options * Move 'interfaces' to 'netflow' tree * Support more flexible 'source-address' and 'source-interface' for each server instead of one source * Add migration script * Update op mode command 'show flow-accounting' * Update op mode command 'restart flow-accounting'
2025-09-15Merge pull request #4686 from l0crian1/container-macvlanDaniil Baturin
container: T7186: Add macvlan network type for containers
2025-09-14T7820: Add support for yescrypt encypted hashesSander Klein
Since Debian Bookworm and higher support this it should probably be added to VyOS as well. Author: roedie <github@roedie.nl>
2025-09-14route-map: T1124: Allow matching RPKI OVS extended community (#4699)l0crian1
- Added 'rpki-extcommunity' match condition - Added test to test_policy.py smoketest for rpki-extcommunity match
2025-09-14bgp: T6438: add solo option to peer-group config (#4706)l0crian1
- Added solo leafNode to peer-group config - Added solo.xml.i to reduce code duplication - Added solo option to peer-group smoketests
2025-09-13dhcpv6: T7646: restore missing default route after upgradeChristian Breunig
Commit de44c6aef249 ("interface: T7379: do not request SLAAC default route when only DHCPv6 is set") introduced a behavioral change while addressing an earlier issue fixed in e9fb2078d5ea ("interface: T7375: SLAAC assigned address is not cleared when removing SLAAC"). This change caused unintended connectivity loss after upgrading to VyOS 1.4.3. The underlying reason is that VyOS now requires explicit configuration to determine how IPv6 addressing and routing should be handled, rather than making assumptions: Requesting a DHCPv6 address alone will correctly assign an address. However, since the IPv6 default route is typically advertised via SLAAC (and not DHCPv6), SLAAC must also be explicitly enabled to receive the default route. Historically, this distinction was implicit and did not require additional configuration. To preserve backward compatibility, a configuration migrator has been added. It inspects existing configurations that only request a DHCPv6 address and automatically appends the required CLI node to also enable SLAAC, ensuring that the default route is restored after upgrade.
2025-09-10wlb: T114: Add firewall group support for WAN load balancersarthurdev
2025-09-10Merge pull request #4690 from natali-rs1985/T7757Viacheslav Hletenko
T7757: VPP Verify buffers for rx/tx queues
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-29 20:28:23 +0000