Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-03-17 | policy: T6129: add route-map option "as-path exclude all" | Christian Breunig | |
Remove all AS numbers from the AS_PATH of the BGP path's NLRI. set policy route-map <name> rule <rule> set as-path exclude all | |||
2024-03-12 | radvd: T6118: add nat64prefix support RFC8781 | Christian Breunig | |
Add support for pref64 option, as defined in RFC8781. The prefix valid lifetime must not be smaller than the "interface interval max" definition which defaults to 600. set service router-advert interface eth1 nat64prefix 64:ff9b::/96 | |||
2024-03-10 | Merge pull request #3113 from c-po/firewall-T6071 | Daniil Baturin | |
firewall: T6071: truncate rule description field to 255 characters | |||
2024-03-10 | xml: T5738: lower maximum description to 255 characters | Christian Breunig | |
e.g. Linux Kernel only supports 255 and not 256 characters for the ifalias field. | |||
2024-03-07 | Merge pull request #2966 from HollyGurza/T6020 | Daniil Baturin | |
vrrp: T6020: vrrp health-check script not applied correctly | |||
2024-03-07 | snmp: T2998: SNMP v3 oid "exclude" option fix | Nataliia Solomko | |
2024-03-05 | T6061: fix rule parsing when connection-status is used | Nicolas Fort | |
2024-03-04 | Merge pull request #3078 from c-po/ospfv3-isis-T6087 | Daniil Baturin | |
ospfv3: T6087: add support to redistribute IS-IS routes | |||
2024-03-04 | Merge pull request #3077 from c-po/ethtool | Daniil Baturin | |
vyos.ethtool: T6083: use JSON input data #2 | |||
2024-03-04 | T6086: NAT: fix nat rules when using source-groups and translation address ↵ | Nicolas Fort | |
is a network. | |||
2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
2024-03-03 | smoketest: T4977: ospf: include babel in redistribution tests | Christian Breunig | |
2024-03-03 | vyos.ethtool: T6083: use JSON input data for ethernet interface flow-control ↵ | Christian Breunig | |
settings | |||
2024-03-02 | Merge pull request #3073 from c-po/ospfv3-redistribution-T5717 | Christian Breunig | |
ospfv3: allow metric and metric-type on redistributed routes | |||
2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
2024-03-01 | vyos.ethtool: T6083: use JSON input data for ring-buffer methods | Christian Breunig | |
2024-03-01 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-29 | Merge pull request #3056 from natali-rs1985/T5504-current | Christian Breunig | |
T5504: Keepalived VRRP ability to set more than one peer-address | |||
2024-02-29 | T5504: Added smoketest for multiple peer addresses | Nataliia Solomko | |
2024-02-29 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-27 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
required | |||
2024-02-27 | smoketest: T5160: Deduplicate nftables verify functions to testcase class, ↵ | sarthurdev | |
remove obsolete imports | |||
2024-02-25 | dhcp-server: T6063: Add `ignore-client-id` to relax client identifier checks ↵ | sarthurdev | |
for leases | |||
2024-02-18 | smoketest: T6043: proper cleanup after testcase | Christian Breunig | |
This extends commit dbe8c613b ("bridge: T6043: do not call vxlan dependency if interface does not exist (yet)") with a proper cleanup of additional interfaces created during the testrun. | |||
2024-02-17 | bridge: T6043: do not call vxlan dependency if interface does not exist (yet) | Christian Breunig | |
In order to keep the proper priority list during system startup and on initial setup/commit for this feature the dependent VXLAN code should not be called, if the interface in question does not exist (yet). | |||
2024-02-17 | Merge pull request #3019 from c-po/login-T5972 | Christian Breunig | |
login: T5972: add possibility to disable individual local user accounts | |||
2024-02-16 | login: T5972: add possibility to disable individual local user accounts | Christian Breunig | |
* set system login user <name> disable | |||
2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
T6001: add option to disable next-hop-tracking resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default in VRF ↵ | Christian Breunig | |
context * set vrf name <name> ip nht no-resolve-via-default * set vrf name <name> ipv6 nht no-resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
* set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default | |||
2024-02-15 | Merge pull request #3004 from aapostoliuk/T6029-circinus | Daniil Baturin | |
T6029: Rewritten Accel-PPP services to an identical feature set | |||
2024-02-15 | T6029: Rewritten Accel-PPP services to an identical feature set | aapostoliuk | |
Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. | |||
2024-02-15 | eigrp: T2472: remove smoketest | Christian Breunig | |
Commit 0eb4168aa ("eigrp: T2472: improve code for later tests") added a basic smoketest for EIGRP, which is also run by the CI hence not having a +x bit at all. This just deletes the basic smoketest testing for ASN and EIGRP router-id. We can revert it once it's fixed in FRR upstream. https://github.com/FRRouting/frr/pull/14765 | |||
2024-02-14 | eigrp: T2472: improve code for later tests | Christian Breunig | |
2024-02-13 | T6019: Fix smoketest test_system_conntrack custom timeout | Viacheslav Hletenko | |
After updateing netfilter in the commit https://github.com/vyos/vyos-build/commit/b31f5fe934bcb37534d49acdb5f7756bf05422e8 The nftables format for conntrack timeouts is different. Fix this. | |||
2024-02-13 | Merge pull request #2999 from sever-sever/T5928 | Christian Breunig | |
T5928: Change firewall priority to 319 | |||
2024-02-13 | Merge pull request #2987 from c-po/evpn-macvrf-soo | Christian Breunig | |
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | |||
2024-02-13 | T5928: Smoketest change firewall flowtable test to use VLAN | Viacheslav Hletenko | |
2024-02-13 | Merge pull request #2988 from c-po/pki-rpki-t6034 | Christian Breunig | |
rpki: T6034: move file based SSH keys for authentication to PKI subsystem | |||
2024-02-13 | dhcpv6-server: T5993: Add subnet `interface` node, link subnet to locally ↵ | sarthurdev | |
connected interfaces Prior dhcpd behaviour implicitly handled requests for locally connected subnets. Kea requires an explicit link between subnets and an interface. | |||
2024-02-12 | pki: T6034: add dependencies to trigger rpki re-run on openssh key update | Christian Breunig | |
2024-02-12 | T6019: fix smoketest after upgrading nftables and libnftnl packages. | Nicolas Fort | |
2024-02-11 | Merge pull request #2980 from c-po/srv6-T5849 | Daniil Baturin | |
srv6: T5849: add segment support to "protocols static route6" | |||
2024-02-11 | rpki: T6034: move SSH authentication keys to PKI subsystem | Christian Breunig | |
2024-02-11 | bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | Christian Breunig | |
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2 domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originated from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs set protocols bgp address-family l2vpn-evpn mac-vrf soo | |||
2024-02-11 | srv6: T5849: add segment support to "protocols static route6" | Christian Breunig | |
* set protocols static route6 <prefix> next-hop <address> segments 'x:x::x:x/y:y::y/z::z' * set protocols static route6 <prefix> interface <interface> segments 'x:x::x:x/y:y::y/z::z' | |||
2024-02-10 | bgp: T6010: support setting multiple values for neighbor path-attribute | Christian Breunig | |
2024-02-08 | Merge pull request #2955 from c-po/rpki-T6023 | Christian Breunig | |
rpki: T6023: add support for CLI knobs expire-interval and retry-interval | |||
2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
T5960: Rewritten authentication node in PPTP to a single view | |||
2024-02-07 | Merge pull request #2952 from c-po/vrf | Christian Breunig | |
vrf: T5973: module is now statically compiled into the kernel |