Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-11-14 | bridge: T3042: Better fix implementation errors | jack9603301 | |
In #601, I provided a basic patch. Under this patch, I rely on vif to detect the vlan id range that the bridge should flow through, which may lead to greater redundancy in the configuration, so I am considering detecting effective vlan filters In setting the range of vlan id that is required to flow through the bridge, I use set() to complete the deduplication of this vlan id and set it to the bridge uniformly (at the same time, I slightly modified the smoke test script) | |||
2020-11-13 | openvpn: T3051: fix smoketest | Christian Poessinger | |
After commit 943a4a50 ("openvpn: T3051: fix creation of ifconfig-pool for client communication") the smoketests had nod been adjusted correctly. This has been fixed. | |||
2020-11-13 | vyos.template: provide general is_ip(v4|v6) helpers | Christian Poessinger | |
We had two places were the is_ip, is_ipv4 and is_ipv6 helpers had been defined. All places now have been converged into vyos.template as they are used both in the Jinja2 templates and also in our scripts. | |||
2020-11-10 | bridge: T3042: Support VLAN filter and VLAN sub-interface on the bridge | jack9603301 | |
2020-11-07 | smoketest: tunnel: enable common MTU testcase | Christian Poessinger | |
2020-11-07 | smoketest: tunnel: add individual tunnel verification logic | Christian Poessinger | |
2020-11-06 | openvpn: T3051: fix multiple pushed routes to preconfigured clients | Christian Poessinger | |
2020-11-03 | wireless: T3042: move wifi-regulatory-domain into individual interface ↵ | Christian Poessinger | |
definition | |||
2020-11-03 | wireless: T3034: add WPA3 support | Christian Poessinger | |
2020-11-01 | smoketest: openvpn: remove debug code for faster test runs | Christian Poessinger | |
There have been leftovers to bypass testcases by simply just "return True" on most of the testcases. | |||
2020-11-01 | openvpn: T2994: re-add ifconfig-pool statement in server config | Christian Poessinger | |
Re-organize the template code and add addtitional Jinja2 filters for processing the ifconfig-pool statement. This reverts the changes from commit 7e546be9 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools"). | |||
2020-11-01 | openvpn: T2994: remove workarounds for individual ipv4 and ipv6 keys | Christian Poessinger | |
Remove workaround which split (local|remote)_address and also subnet keys into individual keys for the assigned IP address family (4/6). During template rendering check IP version by introducing new ipv4 and ipv6 Jinja2 filters {% if foo | ipv4 %} or {% if bar | ipv6 %} options. | |||
2020-10-31 | smoketest: openvpn: fix testcase for server statement | Christian Poessinger | |
After commit 7e546be921 ("openvpn: T2994: temporary revert to 1.2 crux behavior for client pools") also adjust the testcase to not expect the "nopool" statement on the server command. | |||
2020-10-31 | smoketest: openvpn: test server mode "replace-default-route" | Christian Poessinger | |
2020-10-30 | smoketest: openvpn: extend server verify() test with TLS auth keys | Christian Poessinger | |
2020-10-30 | smoketest: openvpn: test server mode verify() steps | Christian Poessinger | |
2020-10-30 | smoketest: openvpn: test site2site mode verify() steps | Christian Poessinger | |
2020-10-30 | smoketest: openvpn: test client mode verify() steps | Christian Poessinger | |
2020-10-30 | smoketest: ssh: add bond to vrf testcase | Christian Poessinger | |
Bind sshd to given VRF and check if it really runs in the VRF context. | |||
2020-10-29 | verify: T2587: allow MTU < 1280 when IPv6 is disabled on an interface | Christian Poessinger | |
2020-10-28 | smoketest: accel: T2631: check disable-accounting option | Christian Poessinger | |
2020-10-28 | vyos.util: T2995: rename vyos_dict_search() -> dict_search() | Christian Poessinger | |
Renamed using snippet below: ---------------------------- for file in $(find . -name "*.py") do sed -i "s/vyos_dict_search/dict_search/" $file done | |||
2020-10-19 | smoketest: openvpn: test VRF assignment | Christian Poessinger | |
2020-10-19 | smoketest: openvpn: ensure interfaces do not persist after deletion | Christian Poessinger | |
2020-10-18 | smoketest: openvpn: add server (P-t-MP) and site2site testcases | Christian Poessinger | |
2020-10-18 | openvpn: T2969: force creation of tunnel interfaces | Christian Poessinger | |
A lot of VyOS code requires the Kernel interface to be present in order to properly work and adjust the interface to the users CLI intends (alias, ipv6, vrf - just to name a few). OpenVPN - when run in client mode - only creates the interface (e.g. vtun1) when the connection to the OpenVPN server was successful. This can't be always the case due to e.g. software-updates or routing issues to the remote side. This will in the end result in a zombie OpenVPN client interface where some config items might not have been set when the interface finally comes up - imagine a wrong assigned VRF instance. By always creating the OpenVPN interface manuall we ensure that all the CLI settings are properly configured in the OS kernel. | |||
2020-10-18 | smoketest: openvpn: add initial client test | Christian Poessinger | |
2020-10-18 | smoketest: sstp: remove unused variable | Christian Poessinger | |
2020-10-17 | smoketest: add IPv6 option tests to BasicInterfaceTest | Christian Poessinger | |
2020-10-17 | sysctl-forwarding: T752: Add disable forwarding for ipv4 | sever-sever | |
2020-10-13 | pppoe-server: T2976: fix local-users default value retrieval from XML | Christian Poessinger | |
We must use XML node style (hyphen over underscore). | |||
2020-10-12 | smoketest: tftp-server: listen on dummy interface address rather then loopback | Christian Poessinger | |
2020-10-11 | smoketest: tftp-server: add initial testcases | Christian Poessinger | |
2020-10-11 | smoketest: nat: extend snat and add dnat test cases | Christian Poessinger | |
2020-10-11 | smoketest: nat: concentrate validation logic checks | Christian Poessinger | |
2020-10-05 | nat: T2951: use proper comments for source/destination logging | Christian Poessinger | |
For both source and destination NAT always the LOG name contained DST - which is definately false. This has been corrected to use SRC and DST on the appropriate rules. | |||
2020-10-04 | smoketest: ntp: T2944: fix "allowed-networks statement" test | Christian Poessinger | |
Remove duplicate localhost listen IP addresses. Commit ca61add5e7 ("ntp: T2944: By default do not listen port 123 on any address") explicitly added listen statements for localhost. | |||
2020-10-04 | sstp: T2960: migrate to get_config_dict() and reusable templates | Christian Poessinger | |
2020-10-04 | pppoe-server: T2953: rename CLI local-ip to gateway-address | Christian Poessinger | |
Required to get a common CLI for all services provided by Accel-PPP. Once the CLI for each service is consitent - Jinja2 templates can be reused together with get_config_dict(). | |||
2020-10-04 | sstp: T2953: migrate gateway-address, client-ip-settings to common level | Christian Poessinger | |
* move "network-settings gateway-address" to "gateway-address" * move "network-settings client-ip-settings" to "client-ip-pool" | |||
2020-10-03 | smoketest: sstp: pppoe: use common RADIUS tests | Christian Poessinger | |
2020-10-03 | smoketest: sstp: add basic tests | Christian Poessinger | |
2020-10-03 | smoketest: accel-ppp: prepare common base for multiple accel instance tests | Christian Poessinger | |
2020-10-03 | pppoe-server: T2956: make use of defaultValue list feature | Christian Poessinger | |
2020-10-01 | vlan: configdict: T2945: determine if vlan is part of bridge | Christian Poessinger | |
Every interface knows if it is part of a bridge or not - except a VLAN (VIF) interface. Also VLANs should be aware of its master bridge. Add a testcase to ensure when VIFs on an interface change the bridge does not loos one of it's members. | |||
2020-10-01 | macsec: T2023: use proper config path for source-interface on removal | Christian Poessinger | |
The config path is altered in get_interface_dict() to the base of the interface in question, e.g. 'interfaces macsec macsec1' - this must be reflected when calling othe methods of Config(). | |||
2020-10-01 | pppoe-server: T2936: move to get_config_dict() | Christian Poessinger | |
For easier configuration read in (CLI) validation and also template rendering it makes sense to drop the old, single implementation and move to the new, generic get_config_dict() approach. Recurring configuration parts like ip-pool, ipv6-pool and nameservers have also been split our into individual templates which will be included through Jinja2 - leading to a single-source of the template sections, too. | |||
2020-09-30 | wireguard: T2939: bugfix when removing individual peers | Christian Poessinger | |
When individual peers that have been removed got determined they have been added to the config dict as list instead of string - which broke the system plumbing commands as they can not handle a Python list. | |||
2020-09-26 | smoketest: platform: check for required virtio/vmxnet drivers | Christian Poessinger | |
2020-09-25 | dns: forwarding: T2921: migrate to get_config_dict() | Christian Poessinger | |