summaryrefslogtreecommitdiff
path: root/smoketest
AgeCommit message (Collapse)Author
8 daysMerge pull request #4360 from sever-sever/T7190Christian Breunig
T7190: Add haproxy default timeout options configurable
8 daysMerge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
8 daysT7190: Add haproxy default timeout options configurableViacheslav Hletenko
Add the ability to configurate default timeout and frontend client timeout ``` set load-balancing haproxy service web timeout client '600' set load-balancing haproxy timeout check '4' set load-balancing haproxy timeout client '600' set load-balancing haproxy timeout connect '12' set load-balancing haproxy timeout server '120' ```
9 daysbridge: T7192: fix verify() to not allow member interface used multiple timesChristian Breunig
When configuring set interfaces bridge br10 member interface eth1 set interfaces bridge br20 member interface eth1 commit Checking the interface assignment afterwards shows 242: br20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 62:34:3a:8a:fe:49 brd ff:ff:ff:ff:ff:ff [edit] 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br20 state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:b3:cd:ba brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 The later addition wins and the CLI reports eth1 is assigned to br20 "master br20". A member interface can not be used multiple times.
9 daysbond: T7191: fix error message when member interface is used multiple timesChristian Breunig
Sharing the same physical interface among multiple bond interfaces causes information to be lost within the error message set interfaces bonding bond10 member interface eth1 set interfaces bonding bond10 member interface eth2 set interfaces bonding bond20 member interface eth1 set interfaces bonding bond20 member interface eth2 commit Results in: [ interfaces bonding bond10 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! [[interfaces bonding bond10]] failed [ interfaces bonding bond20 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! It should infact output the full name of the bond interface.
12 daysfirewall: T7148: Bridge state-policy uses drop in place of rejectsarthurdev
12 daysMerge pull request #4353 from natali-rs1985/T5810Daniil Baturin
T5810: Add support for RPKI source ip
12 daysMerge pull request #4351 from markh0338/int-group-container-validationChristian Breunig
firewall: T7177: Update interface-name constraint to allow "pod-" interface names
13 daysT5810: Add support for RPKI source ipNataliia Solomko
13 daysfirewall: T7177: update interface-name.xml.i constraint and smoketest to ↵Mark
support pod interfaces from containers
13 daysT6628: IPoE-server rename "static-ip" to "ip-address" for local authNataliia Solomko
14 daysMerge pull request #4347 from c-po/bgp-redistr-table-T7163Daniil Baturin
bgp: T7163: add CLI route-map and metric support for "redistribute table"
2025-02-18Merge pull request #4108 from sarthurdev/wlb_pythonViacheslav Hletenko
wlb: T4470: Migrate WAN Load Balancer to XML/Python
2025-02-17T6906: IPoE-server smoke test for start-session optionNataliia Solomko
2025-02-13wlb: T4470: Migrate WAN load balancer to Python/XMLsarthurdev
2025-02-13bgp: T7163: add CLI route-map and metric support for "redistribute table"Christian Breunig
* set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute table <n> [metric <n>] [route-map <name>]
2025-02-13bgp: T7161: fix IPv4/IPv6 unicast AFI "redistribute table" commandChristian Breunig
Re-use existing XML constraint added via commit 8f6246da6 ("xml: T7161: provide re-usable building block for alternative routing tables") and add handy CLI completion helper. FRRouting supports redistribution of multiple non-main tables, thus make this a multi node in addition, too.
2025-02-11webproxy: T7057: Fixed 'domain-nocache' commandaapostoliuk
Fixed 'domain-nocache' command. Added config generation for this command.
2025-02-06Merge pull request #4335 from c-po/T5103Christian Breunig
vyos.ifconfig: T5103: force dhclient restart on VRF change
2025-02-05vyos.ifconfig: T7135: only restart DHCPv6 client if neededChristian Breunig
Previously the DHCPv6 client was restarted on any change to the interface, including changes only to the interface description. Re-use pattern from IPv4 DHCP to only restart the DHCP client if necessary.
2025-02-05smoketest: T2326: remove NHRP pylint W0611: unused importChristian Breunig
2025-02-05vyos.ifconfig: T5103: force dhclient restart on VRF changeChristian Breunig
Moving an interface in, out or between VRFs will not re-install the received default route. This is because the dhclient binary is not restarted in the new VRF. Dhclient itself will report an error like: "receive_packet failed on eth0.10: Network is down". Take the return value of vyos.ifconfig.Interface().set_vrf() into account to forcefully restart the DHCP client process and optain a proper lease.
2025-02-04smoketest: T6989: extend cli_set() signature to pass CLI node valueChristian Breunig
2025-02-04syslog: T6989: increase local log size form 256KiB -> 1MiBChristian Breunig
2025-02-04syslog: T6989: add possibility to define VRF per remoteChristian Breunig
Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too.
2025-02-03syslog: T6989: rename "global" to "local"Christian Breunig
The previously "global" options actually were only relevant for the local logging to /var/log/messages.
2025-02-03syslog: T6989: move up "global marker" one level in CLIChristian Breunig
2025-02-03syslog: T6989: move up "global preserve-fqdn" one level in CLIChristian Breunig
Move "global preserve-fqdn" one CLI level up, as it relates to all logging targets (console, global and remote).
2025-02-03syslog: T6989: convert old configuration format to "advanced"Christian Breunig
2025-02-03syslog: T6989: rename "host" to "remote"Christian Breunig
2025-01-27haproxy: T7081: Support HTTP compression (#4314)Alex W
2025-01-24Merge pull request #4200 from sskaje/T4930-1Daniil Baturin
T4930: Allow WireGuard peers via DNS hostname
2025-01-24Merge pull request #4216 from HollyGurza/T6641Daniil Baturin
T6641: Add vyos-network-event-logger Service
2025-01-24smoketest: T6911: remove ssh/lldp from basic-vyos-no-ntp config load testChristian Breunig
Change some values from the defaults in the used smoketest config for basic-vyos-no-ntp to make it a litte bit more interesting for the underlaying config load subsystem.
2025-01-24smoketest: T6911: fix wrong router-id in loaded config validationChristian Breunig
An errornous OSPF router-id slipped through in the config load test validation.
2025-01-23ntp: T6911: fix migration script to not allow empty "service ntp" CLI nodeChristian Breunig
With T3008 we moved from ntpd to chrony. This came with a restructuring of the CLI (mainly moving ntp out of system to services). In addition the definition of a server was made mandatory. The bug itself manifests at a more crucial point - config migration vyos-router[1265]: Migration script error: /opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2: [Errno 1] failed to run command: ['/opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2', '/opt/vyatta/etc/config/config.boot'] vyos-router[1265]: returned: - op: copy old_path: ['system', 'ntp'] new_path: ['service', 'ntp'] vyos-router[1265]: - op: delete path: ['system', 'ntp'] The fix is that we will no longer migrate an empty ntp CLI node from the old syntax to the new.
2025-01-21T6895: Merge the hsflowd-based sFlow and uacctd-based sFlow (#4310)Nataliia S.
2025-01-21T6641: Add vyos-network-event-logger Servicekhramshinr
The service parses and logs network events for improved monitoring and diagnostics. Supported event types include: - `RTM_NEWROUTE`, `RTM_DELROUTE` - `RTM_NEWLINK`, `RTM_DELLINK` - `RTM_NEWADDR`, `RTM_DELADDR` - `RTM_NEWNEIGH`, `RTM_DELNEIGH`, `RTM_GETNEIGH` - `RTM_NEWRULE`, `RTM_DELRULE` Added operational mode commands for filtered log retrieval: - `show log network-event <event-type> <interface>`: Retrieve logs filtered by event type and interface. - `show interfaces <type> <name> event-log <event-type>`: Display interface-specific logs filtered by event type.
2025-01-19smoketest: T4930: add wireguard testcase for peer host-nameChristian Breunig
2025-01-19smoketest: T4930: derive WireGuard test cases from BasicInterfaceTestChristian Breunig
2025-01-13Merge pull request #4299 from c-po/radius-smoketestChristian Breunig
T7038: T7039: fix broken RADIUS IPv6 source address and add smoketests
2025-01-13Merge pull request #4217 from aapostoliuk/T2326-circinusChristian Breunig
nhrp: T2326: NHRP migration to FRR
2025-01-11smoketest: T7038: add freeradius container to live validate login via RADIUSChristian Breunig
RADIUS is pretty sensible to its configuration. Instead of manual testing, extend the smoketest platform to ship a freeradius container and perform logins against a locally running freeradius server in a container.
2025-01-09Merge pull request #4283 from indrajitr/ddclient-update-20250106Christian Breunig
ddclient: T5791: Relocate process params to ExecStart
2025-01-09nhrp: T2326: NHRP migration to FRRaapostoliuk
NHRP migration to FRR
2025-01-09ddclient: T5791: Relocate process params to ExecStartIndrajit Raychaudhuri
Pull up all the global parameters controlling process behavior to systemd service. Also remove `syslog=yes`` as it is not needed with `exec` type service.
2025-01-09smoketest: T7033: nat source group test should use an existing interfaceChristian Breunig
2025-01-08smoketest: T6841: fix config tests which validate migration scriptsChristian Breunig
This complements commit dda428fc4 ("T6841: firewall: migrate existing VRF in zone based firewall") which provides the new configuration files after CLI was migrated.
2025-01-07smoketest: T7023: add tac_plus container to live validate login (#4285)Christian Breunig
* smoketest: T7023: unify container image loading * smoketest: T7023: add tac_plus container to live validate login TACACS is pretty sensible to its configuration. Instead of manual testing, extend the smoketest platform to ship a tac_plus container and perform logins against a locally running tac_plus server in a container. The login username/password and TACACS shared secret is generated randomly on the fly for every testcase.
2025-01-06configd: T6747: use one long-lived instance of FRRender (#4274)Christian Breunig
* smoketest: T6747: call wait after commit() only for FRR related tests Commit 702a60a8de28 ("smoketest: T6746: wait after commit() until frr-reload is no longer running") added a guard timeout for every commit executed via CLI smoketests. This commit changes the bahavior to only add the guard timeout for FRR related testscases. This improves the overall smoketest time. * configd: T6747: use one long-lived instance of FRRender Previously there was one FRRender() instance per config session. This resulted in re-rendering the FRR configuration every time a new config session was created. Example: vyos@vyos:~$ configure vyos@vyos# set interfaces dummy dum0 description foo vyos@vyos# commit vyos@vyos# exit vyos@vyos:~$ configure vyos@vyos# set interfaces dummy dum0 description bar vyos@vyos# commit vyos@vyos# exit In the past this caused a re-render of the FRR configuration as the delta check added in commit ec80c75d6776 ("frrender: T6746: only re-render FRR config if config_dict did change") evaluated to false, as it operated on a new instance of the FRRender class. With this change there is no FRR re-render, as there is nothing to update in FRR.