summaryrefslogtreecommitdiff
path: root/interface-definitions
AgeCommit message (Collapse)Author
2025-09-23Merge pull request #4684 from c-po/bgp-vrf-system-asDaniil Baturin
bgp: T7760: remove per vrf instance system-as node
2025-09-22Merge pull request #4698 from l0crian1/fw-disable-conntrackDaniil Baturin
firewall: T7475: Add an option to disable conntrack for individual firewall chaisn
2025-09-22Merge pull request #4720 from roedie/T7820Viacheslav Hletenko
T7820: Add support for yescrypt encypted hashes
2025-09-18T7805: VPP remove unused 'default-hugepage-size' from memory section and ↵Nataliia Solomko
restrict page sizes in xml
2025-09-18Merge pull request #4708 from sarthurdev/T114Daniil Baturin
wlb: T114: Add firewall group support for WAN load balancer
2025-09-16Merge pull request #4688 from hedrok/T75-migration-to-ipt-netflowDaniil Baturin
T75: migrate from pmacct to ipt_NETFLOW
2025-09-16Merge pull request #4717 from c-po/no-ipv6-default-routeDaniil Baturin
dhcpv6: T7646: restore missing default route after upgrade
2025-09-16T75: migrate from pmacct to ipt_NETFLOWKyrylo Yatsenko
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW is iptales plugin * Remove specific and non-relevant pmacct options * Add ipt_NETFLOW options * Move 'interfaces' to 'netflow' tree * Support more flexible 'source-address' and 'source-interface' for each server instead of one source * Add migration script * Update op mode command 'show flow-accounting' * Update op mode command 'restart flow-accounting'
2025-09-15Merge pull request #4686 from l0crian1/container-macvlanDaniil Baturin
container: T7186: Add macvlan network type for containers
2025-09-14T7820: Add support for yescrypt encypted hashesSander Klein
Since Debian Bookworm and higher support this it should probably be added to VyOS as well. Author: roedie <github@roedie.nl>
2025-09-14route-map: T1124: Allow matching RPKI OVS extended community (#4699)l0crian1
- Added 'rpki-extcommunity' match condition - Added test to test_policy.py smoketest for rpki-extcommunity match
2025-09-14bgp: T6438: add solo option to peer-group config (#4706)l0crian1
- Added solo leafNode to peer-group config - Added solo.xml.i to reduce code duplication - Added solo option to peer-group smoketests
2025-09-13dhcpv6: T7646: restore missing default route after upgradeChristian Breunig
Commit de44c6aef249 ("interface: T7379: do not request SLAAC default route when only DHCPv6 is set") introduced a behavioral change while addressing an earlier issue fixed in e9fb2078d5ea ("interface: T7375: SLAAC assigned address is not cleared when removing SLAAC"). This change caused unintended connectivity loss after upgrading to VyOS 1.4.3. The underlying reason is that VyOS now requires explicit configuration to determine how IPv6 addressing and routing should be handled, rather than making assumptions: Requesting a DHCPv6 address alone will correctly assign an address. However, since the IPv6 default route is typically advertised via SLAAC (and not DHCPv6), SLAAC must also be explicitly enabled to receive the default route. Historically, this distinction was implicit and did not require additional configuration. To preserve backward compatibility, a configuration migrator has been added. It inspects existing configurations that only request a DHCPv6 address and automatically appends the required CLI node to also enable SLAAC, ensuring that the default route is restored after upgrade.
2025-09-10wlb: T114: Add firewall group support for WAN load balancersarthurdev
2025-09-10Merge pull request #4690 from natali-rs1985/T7757Viacheslav Hletenko
T7757: VPP Verify buffers for rx/tx queues
2025-09-09bgp: T7760: remove per vrf instance system-as nodeChristian Breunig
VyOS 1.5 and onwards will no longer have the following CLI node available: set vrf name <name> protocols bgp system-as <asn>
2025-09-09bgp: T7760: deprecate per bgp vrf instance system-as nodeChristian Breunig
Originating from the bug in T7665. To avoid potential issues down the line - and given that there's no compelling technical reason to retain the system-as CLI node under per-VRF BGP configuration, which cannot be achieved through alternative means - the maintainers have collectively decided to deprecate the following command: set vrf name <name> protocols bgp system-as <asn> Starting with VyOS 1.4.4, this CLI command will be considered deprecated. While it will still be accepted, it will no longer have any operational effect. A deprecation warning will be displayed at commit time, indicating that the BGP ASN from the global BGP configuration is now used instead. A migration script will handle the transition and perform the following actions: * Ensure a global BGP configuration exists; if not, initialize one. * Iterate over all configured VRFs to determine whether a BGP instance exists * For any insance, update the configuration to use the global system-as and apply the local-as ASN no-prepend replace-as option on all affected neighbors to preserve existing behavior. * If a neighbor is already configured with a local-as directive, that neighbor will be excluded from the migration process, as it already follows a custom configuration. * Add allowas-in per neighbor option. Required to not deny prefix received updates due to as-path contains our own global ASN.
2025-09-09Merge pull request #4682 from aapostoliuk/T7722-currentJohn Estabrook
isis: T7722: Added interface fast-reroute configuration commands
2025-09-09T7757: VPP add auto calculation of buffer-per-numa parameter as defaultNataliia Solomko
2025-09-05Firewall: T7475: Disable conntrack per firewall chainl0crian1
- Added command to disable conntrack per firewall chain - Added test_disable_conntrack_per_chain function to smoketest
2025-09-05T7757: VPP Verify buffers for rx/tx queuesNataliia Solomko
2025-09-04T7366: Firewall rules allow empty nodesl0crian1
Added checks in the verify_rule() function of firewall.py for empty nodes. Added migration script 19-to-20 to remove empty nodes from the config.
2025-08-28container: T7186: Add macvlan network type for containersl0crian1
Modified: - interface-definitions/container.xml.in: - Add macvlan network type - Add gateway option - python/vyos/utils/network.py: - Add gen_mac function to generate mac address - smoketest/scripts/cli/test_container.py: - Add test for container network types - src/conf_mode/container.py: - Add support for macvlan network type - Add gateway option
2025-08-28Merge pull request #4674 from dmbaturin/op-mode-permissionsDaniil Baturin
op-mode: T7745: add a CLI for operator user command permissions
2025-08-28isis: T7722: Added interface fast-reroute configuration commandsaapostoliuk
Added interface fast-reroute configuration commands
2025-08-26op-mode: T7745: add a CLI for operator user command permissionsDaniil Baturin
2025-08-23T7743: PPPoE-server add option for VPP control planeViacheslav
Enable PPPoE control-plane integration with VPP, add configurable option: - set service pppoe-server interface eth1 vpp-cp ``` interface=eth1,vpp-cp=true ```
2025-08-19Merge pull request #4647 from natali-rs1985/T7678Daniil Baturin
T7678: Move "vpp settings host-resources" to "system option resource-limits"
2025-08-19T7678: Change node name to resource-limitsNataliia Solomko
2025-08-19Merge pull request #4508 from davi2367/vrf-dhcpDaniil Baturin
kea: T6211: add VRF support for KEA dhcp server
2025-08-19Merge pull request #4659 from sarthurdev/T7715Daniil Baturin
haproxy: T7715: Add rule matching on subdomains
2025-08-19haproxy: T7715: Move duplicate domain nodes into includesarthurdev
2025-08-19Merge branch 'current' into T7678Nataliia S.
2025-08-15kea: T6211: add VRF support for KEA dhcp serverDavid Vølker
2025-08-14T7716: VPP: Change defaults and add a warning about maximum routes count for ↵Nataliia Solomko
current configuration
2025-08-13haproxy: T7715: Add rule matching on subdomainssarthurdev
2025-08-13T7678: Remove host-resources from CLINataliia Solomko
It will be configured in section "system option host-resources"
2025-08-13T7678: Move "vpp settings host-resources" to "system option host-resources"Nataliia Solomko
2025-08-12Merge pull request #4650 from sever-sever/T7697Daniil Baturin
T7697: Merge vyos-vpp repo into vyos-1x
2025-08-11Merge pull request #4645 from l0crian1/add-vni-map-descriptionChristian Breunig
vxlan: T7468: add VLAN-to-VNI mapping description
2025-08-07T7697: Merge remote-tracking branch 'vpp/current' into vyos-1xViacheslav
2025-08-04vxlan: T7468: add VLAN-to-VNI mapping descriptionl0crian1
2025-08-04T7686: Add MAC address to dummy interfacel0crian1
Added ability for user-defined MAC address for dummy interfaces.
2025-07-31VPP: T7175: Add sFlow conf mode CLI and startup template (#32)KyleM
* VPP: T7175 Added conf mode CLI for VPP sflow plugin and updated VPP template to include plugin. * VPP: T7175: Conf mode CLI and startup template. * T7175: VPP fix sFlow verify use vpp enstead of enable_vpp * T7175: VPP add sFlow smoketest * T7175: VPP remove unused config_changed variable --------- Co-authored-by: Viacheslav <v.gletenko@vyos.io>
2025-07-28T7639: use common naming style for "Segment-Routing" over "Segment Routing"Christian Breunig
Multiple styles were used - streamline this to make it look more professional.
2025-07-28isis: T7639: add SRv6 locator supportfett0
2025-07-28ipsec: T7593: Add dynamic prefix for local and remote traffic selectorsOleksandr Kuchmystyi
In case when there is no local/remote prefix configured in a tunnel settings, a protocol configured for such tunnel is ignored. The correct way to generate the configuration is to set the prefix to `dynamic` if it was not set. The correct config for the described case is: ``` local_ts = dynamic[gre/] remote_ts = dynamic[gre/] ```
2025-07-25T7175: VPP move sflow vpp option under server to sort commandsViacheslav
2025-07-24T7175: Added VPP optionKyle McClammy
2025-07-24T7658: T7656: Changes for max-map-count parameter (#53)Nataliia S.
* T7658: Increase max-map-count interval and default value to linux default Also input a warning instead of ConfigError in case of "host-resources max-map-count" didn't pass the verification * T7656: Clarify warning message for max-map-count option verification
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-24 08:21:38 +0000