| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-09-30 | Merge pull request #4112 from c-po/policy-T6751 | Daniil Baturin | |
| policy: T6751: add missing completion helpers for community-list | |||
| 2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
| T6687: add fqdn support to nat rules. | |||
| 2024-09-30 | policy: T6751: add missing completion helpers for community-list | Christian Breunig | |
| Add all missing, well-known values for the community-list regex. | |||
| 2024-09-24 | Merge pull request #3966 from lucasec/t6630 | Daniil Baturin | |
| T6630: ntp: support hardware timestamp offload and other mechanisms to improve accuracy | |||
| 2024-09-21 | T6630: ntp: move interface timestamping configuration under ptp node | Christian Breunig | |
| 2024-09-21 | T6630: ntp: rename ptp-transport to ptp and use defaultValue for port | Christian Breunig | |
| 2024-09-21 | T6630: ntp: add chrony "ntp over ptp" transport | Lucas Christian | |
| 2024-09-21 | T6630: ntp: add hardware timestamp offload | Lucas Christian | |
| 2024-09-21 | T6630: ntp: add "interleave" option | Lucas Christian | |
| 2024-09-21 | lldp: T6727: add missing input validation for interface names | Christian Breunig | |
| There is no input CLI validation on the interface name passed to the LLDP service. | |||
| 2024-09-19 | Merge pull request #4061 from c-po/syslog-T5367 | Daniil Baturin | |
| syslog: T5367: add format option to include timezone in message | |||
| 2024-09-16 | T6687: add fqdn support to nat rules. | Nicolas Fort | |
| 2024-09-15 | bond: T6709: add EAPoL support | Christian Breunig | |
| 2024-09-12 | syslog: T5367: add format option to include timezone in message | Christian Breunig | |
| Add CLI option to include the systems timezone in the syslog message sent to a collector. This can be enabled using: set system syslog host <hostname> format include-timezone | |||
| 2024-09-12 | Merge pull request #4046 from nvollmar/T6703 | Christian Breunig | |
| T6703: Adds option to configure AMD pstate driver | |||
| 2024-09-12 | Merge pull request #4021 from natali-rs1985/T6652-current | Daniil Baturin | |
| openfabric: T6652: Add support for OpenFabric protocol | |||
| 2024-09-12 | Merge pull request #4041 from natali-rs1985/T6685-current | Daniil Baturin | |
| pppoe-server: T6685: Add options to accept any and blank service names | |||
| 2024-09-12 | pppoe-server: T6685: Possibility of any services name or blank in pppoe | Nataliia Solomko | |
| 2024-09-12 | Merge pull request #4032 from dvlogic/Allow_Container_DNS_Disable | Christian Breunig | |
| T6701: Added ability to disable the container DNS plugin | |||
| 2024-09-11 | T6703: shorten help description | Nicolas Vollmar | |
| 2024-09-11 | T6703: Adds option to configure AMD pstate driver | Nicolas Vollmar | |
| 2024-09-11 | T6294: Service dns forwarding add the ability to configure ZonetoCache | khramshinr | |
| 2024-09-11 | Merge pull request #4023 from nvollmar/T6679 | Christian Breunig | |
| T6679: add group option for nat66 | |||
| 2024-09-11 | Merge pull request #4028 from alainlamar/T6693 | Christian Breunig | |
| T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | |||
| 2024-09-11 | container: T6701: add support to disable container network DNS support | Dave Vogel | |
| Add ability to set the container network with a disable-dns setting to disable the DNS plugin that is on be default. set container network <network> no-name-server | |||
| 2024-09-10 | T6698: firewall: add matcher for vlan type. (#4027) | Nicolás Fort | |
| 2024-09-07 | T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | Alain Lamar | |
| 2024-09-04 | openfabric: T6652: Add support for OpenFabric protocol | Nataliia Solomko | |
| OpenFabric is a routing protocol providing link-state routing with efficient flooding for topologies like spine-leaf networks. FRR implements OpenFabric in a daemon called fabricd | |||
| 2024-09-02 | T6679: add destination groups | Nicolas Vollmar | |
| 2024-09-02 | Merge pull request #4018 from nicolas-fort/T6647 | Daniil Baturin | |
| T6647: firewall. Introduce patch for accepting invalid ARP and DHCP | |||
| 2024-08-28 | T6647: firewall. Introduce patch for accepting ARP and DHCP replies on ↵ | Nicolas Fort | |
| stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. | |||
| 2024-08-27 | T6681: Add option for SLAAC to support suppress Interval Advertisement in RAs | Hikari Kongou | |
| 2024-08-20 | Merge pull request #3975 from lucasec/t6183 | Christian Breunig | |
| T6183: interfaces openvpn: suppport specifying IP protocol version | |||
| 2024-08-16 | Merge pull request #3987 from natali-rs1985/T6649-current | Daniil Baturin | |
| ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces | |||
| 2024-08-15 | T5794: change firewall priority in oder to be loaded after all interfaces. | nicolas | |
| 2024-08-15 | T6649: Accel-ppp separate vlan-mon from listen interfaces | Nataliia Solomko | |
| 2024-08-13 | T6183: interfaces openvpn: suppport specifying IP protocol version | Lucas Christian | |
| 2024-08-12 | T6648: dhcpv6-server: align stateless DHCPv6 options with stateful | Lucas Christian | |
| 2024-08-05 | firewall: T4694: fix GRE key include path in XML | Christian Breunig | |
| 2024-08-05 | Merge branch 'current' into feature/T4694/gre-match-fields | Christian Breunig | |
| 2024-08-05 | Merge pull request #3920 from fett0/T6555 | Christian Breunig | |
| OPENVPN: T6555: add server-bridge options in mode server | |||
| 2024-08-04 | firewall: T4694: Adding GRE flags & fields matches to firewall rules | Andrew Topp | |
| * Only matching flags and fields used by modern RFC2890 "extended GRE" - this is backwards-compatible, but does not match all possible flags. * There are no nftables helpers for the GRE key field, which is critical to match individual tunnel sessions (more detail in the forum post) * nft expression syntax is not flexible enough for multiple field matches in a single rule and the key offset changes depending on flags. * Thus, clumsy compromise in requiring an explicit match on the "checksum" flag if a key is present, so we know where key will be. In most cases, nobody uses the checksum, but assuming it to be off or automatically adding a "not checksum" match unless told otherwise would be confusing * The automatic "flags key" check when specifying a key doesn't have similar validation, I added it first and it makes sense. I would still like to find a workaround to the "checksum" offset problem. * If we could add 2 rules from 1 config definition, we could match both cases with appropriate offsets, but this would break existing FW generation logic, logging, etc. * Added a "test_gre_match" smoketest | |||
| 2024-08-02 | OPENVPN: T6555: fix name to bridge | fett0 | |
| 2024-08-02 | T4072: change same helpers in xml definitions; add notrack action for ↵ | Nicolas Fort | |
| prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest | |||
| 2024-08-01 | T6570: firewall: add global-option to configure sysctl parameter for ↵ | Nicolas Fort | |
| enabling/disabling sending traffic from bridge layer to ipvX layer | |||
| 2024-08-01 | T4072: firewall: extend firewall bridge capabilities, in order to include ↵ | Nicolas Fort | |
| new chains, priorities, and firewall groups | |||
| 2024-08-01 | Merge pull request #3221 from lucasec/t5873 | Christian Breunig | |
| T5873: ipsec remote access VPN: support VTI interfaces. | |||
| 2024-07-31 | OPENVPN: T6555: add server-bridge options in mode server | fett0 | |
| 2024-07-31 | T5657: Add VRF support for zabbix-agent | Viacheslav Hletenko | |
| To start the service under VRF requires starting under User=root otherwise it had issues with cgroups | |||
| 2024-07-30 | pbr: T6430: Allow forwarding into VRFs by name as well as route table IDs | Andrew Topp | |
| * PBR can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Added a simple accessor (get_vrf_table_id) for runtime mapping a VRF name to table ID, based on vyos.ifconfig.interface._set_vrf_ct_zone(). It does not replace that usage, as it deliberately does not handle non-VRF interface lookups (would fail with a KeyError). * Added route table ID lookup dict, global route table and VRF table defs to vyos.defaults. Table ID references have been updated in code touched by this PR. * Added a simple smoketest to validate 'set vrf' usage in PBR rules | |||
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |
path: root/interface-definitions