| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
New CLI
```
set vpp nat44 static rule 10 outside-interface 'eth0'
set vpp nat44 static rule 10 inside-interface 'eth1'
set vpp nat44 static rule 10 external address 192.168.122.10
set vpp nat44 static rule 10 external port 6545 # optional
set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all"
set vpp nat44 static rule 10 local address 100.64.0.10
set vpp nat44 static rule 10 local port 64010 # optional
```
|
|
T7292: add Python module client library for vyconfd
|
|
|
|
Working on T7273 revealed that when committing the following CLI config
"set interfaces vxlan vxlan0 parameters neighbor-suppress" the CLI level
queried via conf.get_level() was at ['interfaces', 'vxlan'].
This had the side effect that queries on the configuration like:
conf.exists(['protocols', 'bgp']) returned False, as it would look accidently
at the level: ['interfaces', 'vxlan', 'protocols', 'bgp']
This error was there from the beginning of the FRRender class implementation.
|
|
|
|
|
|
|
|
* T7283: VPP add static NAT support
Add static mapping NAT implementation
```
set vpp nat44 static rule 10 outbound-interface 'eth0'
set vpp nat44 static rule 10 inbound-interface 'eth1'
set vpp nat44 static rule 10 destination address 192.168.122.10 # optional, if not set outbound interface ip address is used
set vpp nat44 static rule 10 destination port 6545 # optional
set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all"
set vpp nat44 static rule 10 translation address 100.64.0.10
set vpp nat44 static rule 10 translation port 64010 # optional
```
* Improve help strings (Daniil Baturin)
---------
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
|
|
T7278: Remove cracklib hack from postconfig script template
|
|
|
|
|
|
T7189: VPP source of the tunnel interface should be checked and configured
|
|
Previously the parser would ignore lines beginning with '//', however
this is unnecessarily restrictive. Pass only config information to
parser, as the version string is saved separately for reconstruction on
render.
|
|
T7181: VPP add initial source NAT implentation
|
|
T7121: Set up communication vyconfd to vyos-commitd
|
|
|
|
|
|
The vyconfd configuration file contains socket name, canonical
directories, and file names shared with vyos-commitd.
|
|
|
|
The internal cache is used as a faster replacement to parsing the active
and proposed configs on initialization of a commit session.
|
|
|
|
|
|
Changed priority for VPP interfaces: all VPP interfaces must be configured after Ethernet interfaces
|
|
libvyosconfig is both a build and a run dependency of vyos-1x.
Satisfying the build dependency within the Docker image requires
coordination of updates to vyos-build/libvyosconfig/vyos-1x on any
changes to the library; simplify this process by moving the build to a
step of the vyos-1x Makefile.
|
|
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
|
|
T6948: Keep DHCP server leases in sync with hostd records
|
|
Allow to configure VPP loopback interface as BVI interface
In the VPP a bridge-domain is the L2 bridge and does not have
its own interface
Loopback is required if we want to ping from/to the bridge.
```
set vpp interfaces bridge br10 member interface lo23 bvi
```
|
|
T7171: Add dstport option to GENEVE tunnels
|
|
|
|
T7077: Verify VPP memory default-hugepage-size
T7079: Verify VPP memory main-heap-page-size
T7080: Verify VPP statseg page-size
get available hugepage sizes
align memory main-heap-size by page size
validate host_resources max_map_count
|
|
|
|
Add initial source NAT implementation
```
set vpp nat44 source inbound-interface 'eth2'
set vpp nat44 source outbound-interface 'eth1'
set vpp nat44 source translation address '192.0.2.1-192.0.2.2'
```
Add initial simple implementation of the source NAT
In the future, we'll extend it to the rules if it is possible to do
via VPP API
|
|
WireGuardOperational().show_interface() method"
This reverts commit 98414a69f0018915ac999f51975618dd5fbe817d.
|
|
Add helpers:
- `kea_add_lease` to add a lease to the running kea server
- `kea_get_domain_from_subnet_id` to get the domain name
from subnet id
Also, enrich leases with domain name from subnet id
|
|
|
|
|
|
Always stop the DHCP client process to clean up routes within the VRF where the
process was originally started. There is no need to add a condition to only
call the method if "address dhcp" was defined, as this is handled inside
set_dhcp(v6) by only stopping if the daemon is running.
DHCP client process restart will be handled later on once the interface is
moved to the new VRF.
|
|
T6058: Fix popen command wrapper handling
|
|
Ensure `wrapper` is only prepended to `command` when it is non-empty
|
|
vyos.ifconfig: T5103: force dhclient restart on VRF change
|
|
|
|
An optional argument vrf_changed was added to the function signature but it
was not put to use. We only need to restart DHCP client on add_addr().
|
|
Previously the DHCPv6 client was restarted on any change to the interface,
including changes only to the interface description. Re-use pattern from IPv4
DHCP to only restart the DHCP client if necessary.
|
|
|
|
Moving an interface in, out or between VRFs will not re-install the received
default route. This is because the dhclient binary is not restarted in the new
VRF. Dhclient itself will report an error like: "receive_packet failed on
eth0.10: Network is down".
Take the return value of vyos.ifconfig.Interface().set_vrf() into account to
forcefully restart the DHCP client process and optain a proper lease.
|
|
syslog: T6989: convert old configuration format to "advanced"
|
|
Some systemd services are re-used over multiple configuration files. Keep a
single source of the real systemd names and only reference them by dictionary
keys.
|
