summaryrefslogtreecommitdiff
path: root/interface-definitions
AgeCommit message (Collapse)Author
11 daysMerge pull request #4217 from aapostoliuk/T2326-circinusChristian Breunig
nhrp: T2326: NHRP migration to FRR
2025-01-09nhrp: T2326: NHRP migration to FRRaapostoliuk
NHRP migration to FRR
2025-01-09Merge pull request #4293 from indrajitr/haproxy-backend-completionChristian Breunig
haproxy: T5222: Enable backend completion in service ruleset
2025-01-09Merge pull request #4294 from indrajitr/xml-reuse-rexexpChristian Breunig
xml: T5738: Reuse predefined regex constraint
2025-01-09xml: T5738: Reuse predefined regex constraintIndrajit Raychaudhuri
2025-01-09haproxy: T5222: Enable backend completion in service rulesetIndrajit Raychaudhuri
Enable completion for backend in haproxy service ruleset like so: ``` set load-balancing haproxy service NAME rule 10 set backend ```
2025-01-08xml: T7029: allow wildcard in include directiveJohn Estabrook
2025-01-06T6841: firewall: re-use existing generic-interface-multi.xml.i XML building ↵Christian Breunig
block
2025-01-06T6841: firewall: Fixed issues in ZBF when using VRFsaapostoliuk
Improve config parsing for ZBF when using VRFs and interfaces attached to VRFs
2025-01-06T6841: firewall: improve config parsing for ZBF when using VRFs and ↵Nicolas Fort
interfaces attached to VRFs
2025-01-04Merge pull request #4271 from nvollmar/T6994Christian Breunig
T6994: Add textfile collector config option
2025-01-02Merge pull request #4263 from jvoss/srv6_locator_formatDaniil Baturin
srv6: T6984: add locator format configuration
2025-01-02T6994: Add textfile collector config optionNicolas Vollmar
2024-12-31T6949: adds blackbox exporter (#4255)Nicolas Vollmar
* T6949: adds blackbox exporter * T6949: adds basic config generation * T6949: extract shared module config options * T6949: switch to ipv4/6 literals * T6949: moves config file to /run * T6949: adds dns query name option * T6949: adds dns query type values * T6949: adds blackbox exporter to debian/control
2024-12-30srv6: T6984: add locator format configurationJonathan Voss
2024-12-30xml: T5738: De-duplicate 'openssh' tagNodeIndrajit Raychaudhuri
Interface definition for pki has redundant `tagNode` for `openssh`. Remove the redundant one.
2024-12-26Merge pull request #4251 from c-po/xml-cleanupChristian Breunig
xml: T5738: re-use XML building blocks for interfaces as much as possible
2024-12-24T6944: adds option to enable switchdev mode on ethernet interfaceNicolas Vollmar
2024-12-23xml: T5738: re-use XML building blocks for interfaces as much as possibleChristian Breunig
Change XML definitions to re-use already existing building blocks, or merge two building block sinto one (e.g. static route interfaces).
2024-12-23Merge pull request #4234 from takehaya/T6013-trusted-ca-keysChristian Breunig
T6013: Add support for configuring TrustedUserCAKeys for ssh service
2024-12-23Merge pull request #4247 from sever-sever/T6936Daniil Baturin
T6936: PPPoE-server add option combined to interface
2024-12-23T6013: Add support for configuring TrustedUserCAKeys in SSH service with ↵Takeru Hayasaka
local and remote CA keys
2024-12-20Merge pull request #4242 from nvollmar/T6953Christian Breunig
T6953: merges node and frr exporter under prometheus section
2024-12-20T6936: PPPoE-server add option combined to interfaceViacheslav Hletenko
Add option 'combined', it allows to listen to PPP requests on both VLANs and the base parent interface (wihtout tag) Before it was impossible to do it from our CLI set service pppoe-server interface eth1 combined set service pppoe-server interface eth1 vlan '10-122'
2024-12-19T6953: add migration for old configurationNicolas Vollmar
2024-12-19T6953: merges node and frr exporter under prometheus sectionNicolas Vollmar
2024-12-18Merge pull request #4233 from HollyGurza/T6934Christian Breunig
T6934: Add preshared key for zabbix-agent monitoring service
2024-12-18Merge pull request #4223 from HollyGurza/T6874Christian Breunig
T6874: [QoS] Add class filter by ether
2024-12-18Merge pull request #4236 from opswill/currentDaniil Baturin
T6918: Accept invalid PPPoE Session in stateful bridge firewall.
2024-12-18T6874: [QoS] Add class filter by etherkhramshinr
Implement a command to configure QoS policy filters by ether properties. The supported match types include: - Destination: Specify the Ethernet destination address. - Protocol: Define the Ethernet protocol. - Source: Set the Ethernet source address. `set qos policy <type> <name> class <id> match <match-id> ether <destination|protocol|source> <val>`
2024-12-17T6918: Fix punctuationopswill
Co-authored-by: Daniil Baturin <daniil@baturin.org>
2024-12-16static: T6746: migrate BFD CLI nodesChristian Breunig
Migrate "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd multi-hop source <z.z.z.z> profile <NAME>" to: "set protocols static route <x.x.x.x/x> next-hop <y.y.y.y> bfd profile bar" FRR supports only one source IP address per BFD multi-hop session. VyOS had CLI cupport for multiple source addresses which made no sense.
2024-12-16multicast: T6746: flatten CLI by merging "multicast route" to "mroute" CLI ↵Christian Breunig
tagNode This will save an entire level for the configuration and there is no need for a parent "multicast" node, as it will only have "route" as tagNode below. Move set protocols static multicast route <x.x.x.x/y> to: * set protocols static mroute <x.x.x.x/y>
2024-12-16frr: T6747: migrate protocols to unified FRRender classChristian Breunig
With FRR 10.0 daemons started to be migrated to integrated FRR mgmtd and a northbound interface. This led to some drawbacks in the current state how changes to FRR are handled. The current implementation will use frr-reload.py and specifies excatly WHICH daemon needs a config update and will only replace this part inside FRR. With FRR10 and mgmtd when a partial configuration is sent to mgmtd, it will remove configuration parts from other daemons like bgpd or ospfd which have not yet been migrated to mgmtd. It's not possible to call frr-reload.py with daemon mgmtd - it will error out. This commit will also change the CLI for static routes: CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1" will be split into: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd source-address 1.1.1.1 * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop To make the XML blocks reusable, and comply with the FRR CLI - this was actually a wrong implementation from the beginning as you can not have multiple BFD source addresses. CLI command "set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd multi-hop source 1.1.1.1 profile bar" is changed to: * set protocols static route 10.0.0.0/8 next-hop 1.2.3.4 bfd profile bar CLI commands "set protocols static multicast interface-route" is moved to: * set protocols static multicast route <x.x.x.x/x> interface To have an identical look and feel with regular static routes.
2024-12-16ospf: T6747: add retransmit-window CLI optionChristian Breunig
2024-12-16Merge pull request #4211 from natali-rs1985/T4214Daniil Baturin
static: T4214: Allow several dhcp-interfaces to the same static rote
2024-12-16Merge pull request #4219 from natali-rs1985/T6628Daniil Baturin
ipoe_server: T6628: Add option to assign static IP address to end users with local auth
2024-12-16T6934: Add preshared key for zabbix-agent monitoring servicekhramshinr
- Allow configure preshared key for zabbix-agent - Added op mode command for generatre random psk secret - Removed duplicate xml definition for psk settings Configure authentication mode: ``` # set service monitoring zabbix-agent authentication mode Possible completions: pre-shared-secret Use a pre-shared secret key ``` Configure PSK Settings: ``` # set service monitoring zabbix-agent authentication psk Possible completions: id ID for authentication secret pre-shared secret key ``` Generate Random PSK: ``` $ generate psk random Possible completions: <Enter> Execute the current command size Key size in bytes ```
2024-12-13T6918: Accept invalid PPPoE Session in stateful bridge firewall.opswill
2024-12-12T6863: Fix default distance for PPPoE (#4229)Roman Khramshin
set `default-route-distance` to 1
2024-12-10Merge pull request #4231 from natali-rs1985/T6368Christian Breunig
pki: T6368: Add ability for acme to listen on IPv6 addresses
2024-12-10pki: T6368: Add ability for acme to listen on IPv6 addressesNataliia Solomko
2024-12-08T6927: adds option to set container name serverNicolas Vollmar
2024-12-04ipoe_server: T6628: Add option to assign static IP address to end usersNataliia Solomko
2024-12-02Merge pull request #4208 from lucasec/t6630Christian Breunig
T6630: ntp: fix timestamp nested under ptp
2024-11-29Merge pull request #4204 from sarthurdev/T6809Simon
2024-11-29static: T4214: Allow several dhcp-interfaces to the same static roteNataliia Solomko
2024-11-28T6906: IPoE-server add start-session option (#4206)Viacheslav Hletenko
Add the abbility to start IPoE session by unclassified-packet. It allows the cases when subscriber configures the address manually (static) and accel-ppp can start session on any packet. By default start session on DHCPv4 Discover packet. set service ipoe-server interface eth1 start-session unclassified-packet
2024-11-26Merge pull request #4196 from natali-rs1985/T6872Christian Breunig
ipoe_server: T6872: Add the ability to configure LUA scripts and username
2024-11-26Merge pull request #4198 from sever-sever/T264Christian Breunig
T264: IPsec add base64 encoded secret-type feature