Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-03-10 | firewall: T6071: truncate rule description field to 255 characters | Christian Breunig | |
2024-03-01 | smoketest: T6079: probe for duplicate IP address static-mapping | Christian Breunig | |
2024-02-29 | dhcp-server: T6079: Disable duplicate static-mappings on migration | sarthurdev | |
2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
T6001: add option to disable next-hop-tracking resolve-via-default | |||
2024-02-16 | T5150: rename smoketest config egb-igp-route-maps -> egp-igp-route-maps | Christian Breunig | |
EDB should be EGP for exterior gateway protocol | |||
2024-02-15 | Merge pull request #3012 from sarthurdev/T5993 | Christian Breunig | |
dhcpv6-server: T5993: Extend interface migrator to check VLAN/QinQ | |||
2024-02-14 | rpki: T6034: extend config migration testcase | Christian Breunig | |
2024-02-14 | dhcpv6-server: T5993: Extend interface migrator to check VLAN/QinQ | sarthurdev | |
Updates smoketest config to test migrator change | |||
2024-02-12 | rpki: T6034: Add missing sections to configtest | sarthurdev | |
2024-02-12 | rpki: T6024: add migration scripts from file based keys to PKI subsystem | Christian Breunig | |
2024-01-16 | Merge pull request #2834 from c-po/bgp-t5937 | Christian Breunig | |
bgp: T5937: fix migration script for IPv6 AFI peer-group | |||
2024-01-16 | bgp: T5937: fix migration script for IPv6 AFI peer-group | Christian Breunig | |
Migrate "bgp <ASN> neighbor <NEIGH> address-family ipv6-unicast peer-group" to "bgp neighbor <NEIGH> peer-group" | |||
2024-01-15 | ospf: T5936: when migrating passive interfaces set_tag() must be set | Christian Breunig | |
2024-01-14 | smoketest: config: azure: add snmpv3 monitoring used in original source of ↵ | Christian Breunig | |
this test | |||
2024-01-13 | dhcpv6: T3316: Move options to separate node and extend scopes | sarthurdev | |
* Also migrate `address-range` to `range` tag node for consistency with dhcpv4 server syntax | |||
2024-01-09 | https: T5902: remove virtual-host configuration | Christian Breunig | |
We have not seen the adoption of the https virtual-host CLI option. What it did? * Create multiple webservers each listening on a different IP/port (but in the same VRF) * All webservers shared one common document root * All webservers shared the same SSL certificates * All webservers could have had individual allow-client configurations * API could be enabled for a particular virtual-host but was always enabled on the default host This configuration tried to provide a full webserver via the CLI but VyOS is a router and the Webserver is there for an API or to serve files for a local-ui. Changes Remove support for virtual-hosts as it's an incomplete and thus mostly useless "thing". Migrate all allow-client statements to one top-level allow statement. | |||
2023-12-29 | smoketest: T5688: pppoe-server support multiple client-ip-pool subnets | Christian Breunig | |
2023-12-25 | snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp" | Christian Breunig | |
2023-12-09 | Merge pull request #1960 from sarthurdev/kea | Christian Breunig | |
dhcp: T3316: Migrate dhcp/dhcpv6 server to Kea | |||
2023-12-08 | smoketest: add a dialout router config with IPv6-PD and WireGuard from 1.3.4 | Christian Breunig | |
(cherry picked from commit 1f304a5b3b3698e11f3a497ca9c61b69ef94b26b) | |||
2023-12-08 | dhcp: T3316: Migrate dhcp/dhcpv6 server to Kea | sarthurdev | |
2023-11-21 | http: T5762: rename "virtual-host listen-port" -> "virtual-host port" | Christian Breunig | |
This complements commit f5e43b136 ("http: T5762: api: make API socket backend communication the one and only default") so we have a consistent port CLI node across VyOS components. | |||
2023-11-20 | http: T5762: api: make API socket backend communication the one and only default | Christian Breunig | |
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn backend server. https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests. While debugging those failing, it was uncovered, that uvicorn only listens on IPv4 connections vyos@vyos# netstat -tulnp | grep 8080 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN - As the CLI already has an option to move the API communication from an IP to a UNIX domain socket, the best idea is to make this the default way of communication, as we never directly talk to the API server but rather use the NGINX reverse proxy. | |||
2023-11-13 | igmp: T5736: migrate "protocols igmp" to "protocols pim" | Christian Breunig | |
IGMP and PIM are two different but related things. FRR has both combined in pimd. As we use get_config_dict() and FRR reload it is better to have both centrally stored under the same CLI node (as FRR does, too) to just "fire and forget" the commit to the daemon. "set protocols igmp interface eth1" -> "set protocols pim interface eth1 igmp" | |||
2023-10-22 | Merge pull request #2386 from c-po/vxlan-t5671 | Christian Breunig | |
vxlan: T5671: change port to IANA assigned default port | |||
2023-10-21 | smoketest: T2897: add basic cluster config | Christian Breunig | |
2023-10-20 | vxlan: T5671: change port to IANA assigned default port | Christian Breunig | |
Currently VyOS VXLAN implementation uses the Linux assigned port 8472 that predates the IANA assignment. As Most other vendors use the IANA assigned port, follow this guideline and use the new default port 4789. Existing configuration not defining an explicit port number will be migrated to the old default port number of 8472, keeping existing configurations work! | |||
2023-09-04 | conntrack: T4309: T4903: Refactor `system conntrack ignore` rule generation, ↵ | sarthurdev | |
add IPv6 support and firewall groups | |||
2023-08-12 | smoketest: T5465: add config migration test for VLAN interface | Christian Breunig | |
2023-05-08 | syslog: T2778: migrate to get_config_dict() | Christian Breunig | |
2023-04-30 | smoketest: remove ospf from bgp vrf config | Christian Breunig | |
2023-04-30 | smoketest: remove unsupported wlan from vrf-bgp-pppoe-underlay test config | Christian Breunig | |
2023-04-30 | smoketest: QEmu ethernet drivers only support ring-buffer size of 256 bytes | Christian Breunig | |
Commit 0a802d20c - ("smoketest: add config with VRF BGP instance") added a config from a VMware VM. When moving to QEmu we must reduce the network card ring-bufer size from 4096 -> 256, as the tests failed with: > Driver only supports a maximum RX ring-buffer size of "256" bytes! | |||
2023-04-29 | smoketest: add config with VRF BGP instance | Christian Breunig | |
Replica of a real network. BGP is realised inside a VRF. The BGP peering to the outside world is done via WireGuard that is backed by a PPPoE link - shiver! | |||
2023-04-13 | T5150: migrate CLI configs to new Kernel/Zebra route-map support | Christian Breunig | |
2023-02-11 | qos: T4284: migration script must ensure bandwidth is converted to lower case | Christian Breunig | |
tc acccepts the bandwidth value/unit pairs as lowercase - so does the VyOS CLI validator work, too. | |||
2023-01-06 | smoketest: T4284: drop redundant qos test config | Christian Poessinger | |
2023-01-06 | smoketest: qos: T4284: we do not need static routes in qos-basic test | Christian Poessinger | |
2023-01-05 | smoketest: qos: T4284: remove dscp from base config | Christian Poessinger | |
2023-01-02 | smoketest: T4284: remove qos from dialup-router-medium-vpn | Christian Poessinger | |
qos config migration is tested using qos-basic example config file. | |||
2023-01-01 | qos: T4284: migrate percentaged bandwidth to absolute value in bit/s | Christian Poessinger | |
2022-11-11 | smoketest: T4284: add basic QoS config to be loaded for migration | Christian Poessinger | |
2022-09-22 | ipoe: T4703: fix migration of vlan node for loca authenticated users | Christian Poessinger | |
2022-09-21 | ipoe: T4678: T4703: rewrite to get_config_dict() | Christian Poessinger | |
In addition to the rewrite to make use of get_config_dict() the CLI is slightly adjusted as specified in T4703. * Rename vlan-id and vlan-range to simply vlan * Rename network-mode to simply mode * Re-use existing common Jinja2 template for Accel-PPP which are shared with PPPoE and SSTP server. * Retrieve default values via defaultValue XML node | |||
2022-09-17 | pppoe-server: T4703: combine vlan-id and vlan-range into single CLI node | Christian Poessinger | |
The initial Accel-PPP PPPoE implementation used: set service pppoe-server interface <name> vlan-id <id> set service pppoe-server interface <name> vlan-range <start-stop> This is actually a duplicated CLI node. | |||
2022-08-29 | smoketest: config: drop almost empty https service test | Christian Poessinger | |
2022-08-28 | smoketest: T4643: bind sstp service to port 8443 | Christian Poessinger | |
2022-08-27 | smoketest: T4643: create individual configs fot https service and sstp vpn | Christian Poessinger | |
2022-08-27 | Revert "smoketest: T4643: Change openconnect default port" | Christian Poessinger | |
This reverts commit fa91f567b7b5f009aaaed569b3f5e5db4b638d39. | |||
2022-08-27 | Revert "smoketest: T4643: Delete vpn sstp from config as we have HTTP" | Christian Poessinger | |
This reverts commit c2fc87c02dd556dd1569ff2fd81c9e2485a80459. |