Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-09-04 | conntrack: T4309: T4903: Refactor `system conntrack ignore` rule generation, ↵ | sarthurdev | |
add IPv6 support and firewall groups | |||
2023-08-12 | smoketest: T5465: add config migration test for VLAN interface | Christian Breunig | |
2023-05-08 | syslog: T2778: migrate to get_config_dict() | Christian Breunig | |
2023-04-30 | smoketest: remove ospf from bgp vrf config | Christian Breunig | |
2023-04-30 | smoketest: remove unsupported wlan from vrf-bgp-pppoe-underlay test config | Christian Breunig | |
2023-04-30 | smoketest: QEmu ethernet drivers only support ring-buffer size of 256 bytes | Christian Breunig | |
Commit 0a802d20c - ("smoketest: add config with VRF BGP instance") added a config from a VMware VM. When moving to QEmu we must reduce the network card ring-bufer size from 4096 -> 256, as the tests failed with: > Driver only supports a maximum RX ring-buffer size of "256" bytes! | |||
2023-04-29 | smoketest: add config with VRF BGP instance | Christian Breunig | |
Replica of a real network. BGP is realised inside a VRF. The BGP peering to the outside world is done via WireGuard that is backed by a PPPoE link - shiver! | |||
2023-04-13 | T5150: migrate CLI configs to new Kernel/Zebra route-map support | Christian Breunig | |
2023-02-11 | qos: T4284: migration script must ensure bandwidth is converted to lower case | Christian Breunig | |
tc acccepts the bandwidth value/unit pairs as lowercase - so does the VyOS CLI validator work, too. | |||
2023-01-06 | smoketest: T4284: drop redundant qos test config | Christian Poessinger | |
2023-01-06 | smoketest: qos: T4284: we do not need static routes in qos-basic test | Christian Poessinger | |
2023-01-05 | smoketest: qos: T4284: remove dscp from base config | Christian Poessinger | |
2023-01-02 | smoketest: T4284: remove qos from dialup-router-medium-vpn | Christian Poessinger | |
qos config migration is tested using qos-basic example config file. | |||
2023-01-01 | qos: T4284: migrate percentaged bandwidth to absolute value in bit/s | Christian Poessinger | |
2022-11-11 | smoketest: T4284: add basic QoS config to be loaded for migration | Christian Poessinger | |
2022-09-22 | ipoe: T4703: fix migration of vlan node for loca authenticated users | Christian Poessinger | |
2022-09-21 | ipoe: T4678: T4703: rewrite to get_config_dict() | Christian Poessinger | |
In addition to the rewrite to make use of get_config_dict() the CLI is slightly adjusted as specified in T4703. * Rename vlan-id and vlan-range to simply vlan * Rename network-mode to simply mode * Re-use existing common Jinja2 template for Accel-PPP which are shared with PPPoE and SSTP server. * Retrieve default values via defaultValue XML node | |||
2022-09-17 | pppoe-server: T4703: combine vlan-id and vlan-range into single CLI node | Christian Poessinger | |
The initial Accel-PPP PPPoE implementation used: set service pppoe-server interface <name> vlan-id <id> set service pppoe-server interface <name> vlan-range <start-stop> This is actually a duplicated CLI node. | |||
2022-08-29 | smoketest: config: drop almost empty https service test | Christian Poessinger | |
2022-08-28 | smoketest: T4643: bind sstp service to port 8443 | Christian Poessinger | |
2022-08-27 | smoketest: T4643: create individual configs fot https service and sstp vpn | Christian Poessinger | |
2022-08-27 | Revert "smoketest: T4643: Change openconnect default port" | Christian Poessinger | |
This reverts commit fa91f567b7b5f009aaaed569b3f5e5db4b638d39. | |||
2022-08-27 | Revert "smoketest: T4643: Delete vpn sstp from config as we have HTTP" | Christian Poessinger | |
This reverts commit c2fc87c02dd556dd1569ff2fd81c9e2485a80459. | |||
2022-08-26 | smoketest: T4643: Delete vpn sstp from config as we have HTTP | Viacheslav Hletenko | |
HTTP and sstp cannot work together and in the test config 1.4-rolling-202106290839 we didnot have configurable port for such services So we shoud delete sstp from this smoketest config test In fact it is never working at all 'smoketest/configs/pki-misc' It commits without errors before but in the real life we get 3 services (https openconnect sstp) that bound the same port | |||
2022-08-25 | smoketest: T4643: Change openconnect default port | Viacheslav Hletenko | |
Change openconnect port as both ocserv and sstp bind by default the same port 443 | |||
2022-07-07 | syslog: T4500: Remove max-size from rsyslog leaving rotation to logrotate | sarthurdev | |
After discussion with @zsdc this was decided the better long term fix * Removes hourly logrotate cron in favour of systemd timer override | |||
2022-07-05 | firewall: T2199: Fix migration when `icmpv6 type` is an integer | sarthurdev | |
2022-07-01 | openvpn: T4485: Add CRL to OpenVPN config test | sarthurdev | |
2022-06-29 | openvpn: T4485: Update PKI migrator to handle full CA chain migration | sarthurdev | |
* Also determines and maps to correct CA for migrated CRL | |||
2022-05-31 | smoketest: policy: T3976: add migratable config snippet | Christian Poessinger | |
2022-05-25 | configtest: T4382: no migration to 'bgp local-as' under vrf | John Estabrook | |
The migration script bgp/0-to-1 did not address 'protocols bgp ASN' -> 'protocols bgp local-as ASN' under a vrf. Move to configs.no-load for review on extending/adding a migration script. | |||
2022-05-25 | configtest: T4382: missing block in migration script vrf/0-to-1 | John Estabrook | |
The config vrf-basic reveals a missing block in the migration script vrf/0-to-1, moving 'next-hop-vrf' to 'vrf'. As this only exists in Sagitta, modify script 0-to-1. Also, fix the 'system nt' typo seen in vrf-ospf. | |||
2022-05-25 | configtest: T4382: inconsistent ipsec component version | John Estabrook | |
The pki-ipsec sagitta-era config contains 'vpn ipsec ipsec-interfaces interface eth0' with ipsec component version ipsec@6, however, this construction is successfully moved by migration script ipsec/5-to-6. Consequently, this must have been an error in translation of the config file. Note that this is unrelated to the corrected error regarding an empty 'ipsec-interfaces' node. Move config to configs.no-load for review. | |||
2022-05-25 | configtest: T4382: bgp_small_as has a nonsensical entry | John Estabrook | |
bgp_small_as contains set commands such as: 'protocols static route 10.0.0.0/8 MY-NAS distance 254' which would appear to have no meaning, in any VyOS version. Move to config.no-load for analysis. | |||
2022-05-25 | configtest: T4382: 'nat ... log' takes no 'enable' argument | John Estabrook | |
The component version in bgp-dmvpn-spoke is nat@5, however, 4-to-5 removes the boolean argument. It is confirmed that the migration script works correctly, hence, it must be a typo in translation; remove argument 'enable'. | |||
2022-05-25 | configtest: T4382: system@20 cannot have 'user level' (16-to-17) | John Estabrook | |
The config file isis-small has system@20, but 'user level' which was migrated in system/16-to-17; remove the line in the config, as there is no problem with the migration script in question. | |||
2022-05-25 | configtest: T4382: remove typo | John Estabrook | |
This is a typo in vrf-ospf: 'system nt' on the line before 'system ntp'. | |||
2022-05-05 | smoketest: do not auto-load big firewall config on smoketest | Christian Poessinger | |
This takes a very long time, but keep the config for manual runs | |||
2022-05-05 | policy: T4414: add support for route-map "as-path prepend last-as x" | Christian Poessinger | |
2022-04-30 | smoketest: import large firewall config from T1230 | Christian Poessinger | |
2022-04-29 | smoketest: add basic QoS configuration | Christian Poessinger | |
2022-04-28 | arp: T4397: change CLI syntax to support interface and VRF bound ARP entries | Christian Poessinger | |
* set protocols static arp interface eth0 address 192.0.2.1 mac 01:23:45:67:89:01 | |||
2022-04-25 | smoketest: config: T4397: add ARP entries for a second interface | Christian Poessinger | |
2022-04-25 | smoketest: config: T4397: add some static ARP entries | Christian Poessinger | |
2022-04-07 | ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
2022-03-06 | smoketest: config: add "recent" firewall rule to dialup-router | Christian Poessinger | |
2022-02-28 | ssh: T4273: bugfix cipher and key-exchange multi nodes | Christian Poessinger | |
After hardning the regex validator to be preceeded with ^ and ending with $ it was no longer possible to have a comma separated list as SSH ciphers. The migrations cript is altered to migrate the previous comma separated list to individual multi node entries - cipher and key-exchange always had been multinodes - so this just re-arranges some values and does not break CLI compatibility | |||
2022-01-17 | firewall: policy: T4178: Migrate and refactor tcp flags | sarthurdev | |
* Add support for ECN and CWR flags | |||
2022-01-11 | policy: T2199: Refactor policy route script for better error handling | sarthurdev | |
* Migrates all policy route references from `ipv6-route` to `route6` * Update test config `dialup-router-medium-vpn` to test migration of `ipv6-route` to `route6` |