| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-08-09 | ipsec: T3720: assigning vti secondary address caused interface in A/D state | Christian Poessinger | |
| 2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
| 2021-08-06 | Revert "http-api: T2768: example using GraphQL for high-level config operations" | John Estabrook | |
| This reverts commit a2b959c50c96698da173b9c4720369a51442cc5c. | |||
| 2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
| 2021-08-06 | vyos.template: T2720: allow setting template directory | John Estabrook | |
| 2021-08-04 | configquery: T3402: remove restriction of query to active config | John Estabrook | |
| 2021-08-04 | configquery: T3402: fix imports | John Estabrook | |
| 2021-08-03 | configquery: T3402: add op-mode get_config_dict | John Estabrook | |
| 2021-08-03 | configquery: T3402: add class using configtree to list tag node values | John Estabrook | |
| The class ConfigTreeActiveQuery uses configtree to access tag node values; note that this will only report saved configuration data. | |||
| 2021-08-02 | l2tpv3: T1594: Fix timeout before set l2tpv3 interface | Viacheslav | |
| In some cases, we need to wait until local address is assigned. And only then l2tpv3 tunnel can be configured. For example when ipv6 address is in "tentative" state or we wait for some routing daemon/route for a remote address. | |||
| 2021-07-30 | vyos.util: drop custom implementations in favor of is_systemd_service_running() | Christian Poessinger | |
| Commit f520182b ("vyos.util: add is_systemd_service_running() helper function") added a new helper function that can be used to check if a systemd service is running. Drop all custom implementations in favor of this library call. | |||
| 2021-07-30 | vyos.util: add is_systemd_service_running() helper function | Christian Poessinger | |
| Test is a specified systemd service is actually running. Returns True if service is running, false otherwise. | |||
| 2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
| 2021-07-20 | ipsec: T1210: add op-mode command for macOS and iOS profile generation | Christian Poessinger | |
| generate ipsec mac-ios-profile <connection> remote <ip|fqdn> will generate a matching IPSec profile which can be loaded on an iOS device. | |||
| 2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
| 2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
| Also renames peer pubkey to public-key for consistency | |||
| 2021-07-17 | Merge pull request #927 from zdc/T3655-sagitta | Christian Poessinger | |
| VRF: T3655: proper connection tracking for VRFs | |||
| 2021-07-17 | VRF: T3655: proper connection tracking for VRFs | zsdc | |
| Currently, all VRFs share the same connection tracking table, which can lead to problems: - traffic leaks to a wrong VRF - improper NAT rules handling when multiple VRFs contain the same IP networks - stateful firewall rules issues The commit implements connection tracking zones support. Each VRF utilizes its own zone, so connections will never mix up. It also adds some restrictions to VRF names and assigned table numbers, because of nftables and conntrack requirements: - VRF name should always start from a letter (interfaces that start from numbers are not supported in nftables rules) - table number must be in the 100-65535 range because conntrack supports only 65535 zones | |||
| 2021-07-13 | T3679: Update the unexpected exception message | erkin | |
| 2021-07-13 | T3663: add a small sleep between polling for a new inotify event. | Daniil Baturin | |
| 2021-07-13 | T3663: use inotify-based watching in "show vrrp". | Daniil Baturin | |
| 2021-07-08 | T3663: add pre_hook argument to util.wait_for_inotify | Daniil Baturin | |
| When waiting for processes that don't take long, we need add an inotify watcher _before_ starting that process. The pre-hook arguments allows the user to pass a () -> () anonymous function to be called before adding a watch. | |||
| 2021-07-08 | T3663: fix the call to time.time() to match the new import scheme. | Daniil Baturin | |
| 2021-07-06 | ipsec: T2816: Migrate ipsec-settings.xml.in and charon.conf to vpn_ipsec.py | sarthurdev | |
| Also adds check for the charon socket instead of an arbitrary sleep() | |||
| 2021-07-05 | pki: ipsec: T3642: Fix issue with '.' being present in tag nodes, adds new ↵ | sarthurdev | |
| vyos.util method `dict_search_args` to allow for dot characters in keys. | |||
| 2021-07-05 | pki: T3642: Support for adding SANs on certificate requests | sarthurdev | |
| 2021-07-04 | Merge pull request #910 from sarthurdev/pki_ext | Christian Poessinger | |
| pki: T3642: Add standard extensions to generated certificates | |||
| 2021-07-04 | pki: T3642: Add standard extensions to generated certificates | sarthurdev | |
| 2021-07-04 | vyos.util: T3663: move inotify-based imports to function level | Christian Poessinger | |
| Keep the vyos.util function clean and not pull in the rest of the world when importing it. | |||
| 2021-07-04 | T3663: prerequisites for inotify-based watching implementations. | Daniil Baturin | |
| 2021-07-03 | ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string | Christian Poessinger | |
| 2021-07-02 | ipsec: T3656: T3659: Fix pass-through with ipv6. Fix op-mode ipsec commands. ↵ | sarthurdev | |
| Remove python3-crypto dependency. | |||
| 2021-07-01 | vyos.util: remove no longer needed copy_file helper method | Christian Poessinger | |
| The IPSec ceritifcate handling is now done by storing the CA key inside the running configuration. | |||
| 2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
| * 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
| 2021-07-01 | vyos.util: fix IsADirectoryError and SameFileError for copy_file | Christian Poessinger | |
| Commit 5303ec39 ("vyos.util: add new helper copy_file()") added a new helper function to copy a file from A -> B and create the destination directory if required. It did also throw an excpetion if the destination file already existed and consisted of the same file - this is now ignored and we always copy the source to the destination. | |||
| 2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
| 2021-06-28 | ipsec: T1441: switch from vti to xfrm interfaces | Christian Poessinger | |
| XFRM interfaces are similar to VTI devices in their basic functionality but offer several advantages: * No tunnel endpoint addresses have to be configured on the interfaces. Compared to VTIs, which are layer 3 tunnel devices with mandatory endpoints, this resolves issues with wildcard addresses (only one VTI with wildcard endpoints is supported), avoids a 1:1 mapping between SAs and interfaces, and easily allows SAs with multiple peers to share the same interface. * Because there are no endpoint addresses, IPv4 and IPv6 SAs are supported on the same interface (VTI devices only support one address family). * IPsec modes other than tunnel are supported (VTI devices only support tunnel mode). * No awkward configuration via GRE keys and XFRM marks. Instead, a new identifier (XFRM interface ID) links policies and SAs with XFRM interfaces. | |||
| 2021-06-27 | op-mode: bond: T2546: implement "show interface bond * slaves" command | Christian Poessinger | |
| Add implementation with XML and Python. | |||
| 2021-06-26 | vyos.util: add new helper copy_file() | Christian Poessinger | |
| Copy a file from A -> B but also support adjusting Bs file permissions and creation of Bs base directory if required. | |||
| 2021-06-23 | T3574: do not add constraintGroup property to xml cache | John Estabrook | |
| 2021-06-22 | vyos.ethtool: T3645: fix compatibility with latest ethtool version | Christian Poessinger | |
| Ethtool version used on Debian Bullseye changed the output format from 0 -> n/a. As we are only interested in the tx/rx keys we do not care about RX Mini/Jumbo. | |||
| 2021-06-21 | vyos.certbot: T3641: adjust to new python3-certbot-nginx API | Christian Poessinger | |
| 2021-06-21 | Python: T3641: adjust to changes in latest vesion of netifaces library | Christian Poessinger | |
| 2021-06-20 | Merge pull request #893 from erkin/T3628 | Christian Poessinger | |
| T3268: remote: Determine source address from given network interface | |||
| 2021-06-20 | T3268: remote: Determine source address from given network interface | erkin | |
| 2021-06-20 | Merge pull request #892 from erkin/T3563 | Christian Poessinger | |
| T3563: remote: Allow `paramiko.transport.Transport().close()` to automatically close the socket | |||
| 2021-06-20 | T3563: remote: Allow `paramiko.transport.Transport().close()` to ↵ | erkin | |
| automatically close the socket | |||
| 2021-06-18 | Merge pull request #883 from sever-sever/T3633 | Christian Poessinger | |
| ethernet: T3633: Add LRO offload | |||
| 2021-06-18 | Merge pull request #882 from erkin/current | Christian Poessinger | |
| T3356: remote: Use the local filename if the destination is a directory in SFTP transfers | |||
| 2021-06-17 | ethernet: T3633: Add LRO offload | Viacheslav | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |