vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)

Age	Commit message (Collapse)	Author
2022-04-25	vyos.configdict: T4391: enable get_interface_dict() ti be used with ↵	Christian Poessinger
	ConfigTreeQuery() When VyOS is booting and an interface is brought up (PPPoE) which requires a user callback script that is executed asynchronously when the interface is up we can not use Config(). The problem is, Config() is not available when the system starts and the initial commit is still processed. We need to move to ConfigTreeQuery() which was build for this exact same purpose. TO reduce side effects and also dependencies on the entire vyos.configdict library the set_level()/get_level() calls got eliminated from within the library. All calls to functions like: * get_removed_vlans() * is_node_changed() * leaf_node_changed() * is_mirror_intf() * ... Now require that the full config path to the node is passed.
2022-04-07	qos: T4284: support mirror and redirect on all interface types	Christian Poessinger

2022-03-21	qos: T4284: initial XML interface definitions for rewrite	Christian Poessinger

2021-08-09	ipsec: T3720: assigning vti secondary address caused interface in A/D state	Christian Poessinger

2021-06-28	ipsec: T1441: switch from vti to xfrm interfaces	Christian Poessinger
	XFRM interfaces are similar to VTI devices in their basic functionality but offer several advantages: * No tunnel endpoint addresses have to be configured on the interfaces. Compared to VTIs, which are layer 3 tunnel devices with mandatory endpoints, this resolves issues with wildcard addresses (only one VTI with wildcard endpoints is supported), avoids a 1:1 mapping between SAs and interfaces, and easily allows SAs with multiple peers to share the same interface. * Because there are no endpoint addresses, IPv4 and IPv6 SAs are supported on the same interface (VTI devices only support one address family). * IPsec modes other than tunnel are supported (VTI devices only support tunnel mode). * No awkward configuration via GRE keys and XFRM marks. Instead, a new identifier (XFRM interface ID) links policies and SAs with XFRM interfaces.
2021-06-04	vti: T3595: error out when adding VTI interface withouth IPSec	Christian Poessinger

2021-05-29	vti: T1579: only remove the interface when it exists	Christian Poessinger

2021-05-28	vti: ipsec: T2816: interfaces must be created using the vyos.ifconfig library	Christian Poessinger

2021-05-28	vti: T1579: implement Virtual Tunnel Interfaces using XML and Python	Christian Poessinger