summaryrefslogtreecommitdiff
path: root/src/conf_mode
AgeCommit message (Collapse)Author
2025-04-22T6773: RFC-2136 support for Kea DHCP4 server (#4153)Alex Bukharov
2025-04-18syslog: T7367: use generic systemd syslog.service over rsyslog.serviceChristian Breunig
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-16firewall: T7358: add offload option to global state policyl0crian1
Since the jump to the global state chain is inserted before all rules, it wasn't possible to use offload with the global state policies This commit adds a new chain for offloaded traffic in the forward chain and jumps to that chain. Please enter the commit message for your changes. Lines starting
2025-04-15grub: T7327: honor "system option kernel" settings during image upgradeChristian Breunig
When performing an image upgrade and Linux Kernel command-line option that should be passed via GRUB to the Linux Kernel are missing on the first boot. This is because when generating the GRUB command-line via the op-mode scripts the CLI nodes defining the options are not honored. This commit re-implements the code-path in op-mode which generates the strings passed via GRUB to the Linux Kernel command-line. NOTE: If (for a yet unknown reason) a Kernel command-line option string changes during a major - or minor - upgrade of the Linux Kernel, we will need to adapt that logic and possibly call a helper from within the NEW updated image rootfs. Thus we can ship future information back into the past like the "Grays Sports Almanac" from Back to the Future Part II.
2025-04-15Merge pull request #4412 from sarthurdev/kea_2.6Daniil Baturin
kea: T7281: Add ping-check, use built-in option for classless static routes
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-15T7364: Fixing no error when config is set to a peer group directlyLandry JUGE
2025-04-14T7364: Fixing Route reflector client check not working for peer-groupHanarion
2025-04-14ids: T7241: remove Fastnetmon from the base systemDaniil Baturin
It will eventually be moved to an addon
2025-04-14kea: T7281: No longer uses control agent for HAsarthurdev
2025-04-13T7355: cleanup unused Python3 importsChristian Breunig
Some unused import statements sneaked into the codebase. This is about cleaning them up
2025-04-10mtu_value: T7316:commit validation for interfaces when mtu configured <1200srividya0208
2025-04-10Merge pull request #4410 from sskaje/T7277Christian Breunig
dns: T7277: fix service/dns/forwarding/dhcp not parsed
2025-04-08T7315: Change CLI fot VPP NAT (#25)Nataliia S.
New CLI ``` set vpp nat44 static rule 10 outside-interface 'eth0' set vpp nat44 static rule 10 inside-interface 'eth1' set vpp nat44 static rule 10 external address 192.168.122.10 set vpp nat44 static rule 10 external port 6545 # optional set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all" set vpp nat44 static rule 10 local address 100.64.0.10 set vpp nat44 static rule 10 local port 64010 # optional ```
2025-04-02T7290: Fix VPN IPsec log level processingViacheslav Hletenko
Fix the IPsec log level option processing set vpn ipsec log level '2' Render Jinja2 template to generate correct log for IPsec for the file /etc/strongswan.d/charon-systemd.conf
2025-04-01T7283: VPP add static NAT support (#24)Nataliia S.
* T7283: VPP add static NAT support Add static mapping NAT implementation ``` set vpp nat44 static rule 10 outbound-interface 'eth0' set vpp nat44 static rule 10 inbound-interface 'eth1' set vpp nat44 static rule 10 destination address 192.168.122.10 # optional, if not set outbound interface ip address is used set vpp nat44 static rule 10 destination port 6545 # optional set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all" set vpp nat44 static rule 10 translation address 100.64.0.10 set vpp nat44 static rule 10 translation port 64010 # optional ``` * Improve help strings (Daniil Baturin) --------- Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-04-01Merge pull request #4428 from dmbaturin/T7159-conditional-nonproduction-bannerChristian Breunig
login: T7159: limit the "not a production version" to dev builds
2025-03-31login: T7159: limit the "not a production version" to dev buildsDaniil Baturin
(as in, display it only if the build_type version data field is not "release")
2025-03-30pki: T7299: race condition for acme requested certificates / CA chainChristian Breunig
When using the VyOS internal PKI subsystem to request a certificate using ACME, the issuer CA is not automatically imported in the PKI subsystem on the first run due to a race condition. Issue is fixed by adding all newly requested and granted ACME certificates to the list of ACME certificates "on disk" which are used to extract the issuing CA certificate.
2025-03-28geoip: T5636: Add geoip for policy route/route6sskaje
2025-03-25Merge pull request #4413 from oniko94/fix/T7278-fix-cracklib-dep-buildJohn Estabrook
T7278: Remove cracklib hack from postconfig script template
2025-03-25T7278: Remove cracklib hack from postinstall script templateoniko94
2025-03-23dns: T7277 fix service/dns/forwarding/dhcp not parsedsskaje
2025-03-21firewall: T5493: Implement remote-groupAlex W
2025-03-20Merge pull request #23 from natali-rs1985/T7189Daniil Baturin
T7189: VPP source of the tunnel interface should be checked and configured
2025-03-18Merge pull request #16 from sever-sever/T7181Daniil Baturin
T7181: VPP add initial source NAT implentation
2025-03-18bgp: T7157: Allow using route-maps for VRF route leaking in BGP (#4404)aapostoliuk
* bgp: T7157: Allow using route-maps for VRF route leaking in BGP Added the possibility of using route-map in route leaking. * Improve the constraint error message --------- Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-03-18T6353: Add password strength check and user warningoniko94
2025-03-17console-server: T7217: generate Dropbear SSH keys if they do not existDaniil Baturin
2025-03-13ipsec: T7242: Add check for encryption algorithms that do not work with VPPNataliia Solomko
2025-03-12T7189: VPP source of the tunnel interface should be checked and configuredNataliia Solomko
Changed priority for VPP interfaces: all VPP interfaces must be configured after Ethernet interfaces
2025-03-11Merge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verifyViacheslav Hletenko
T7219: Add check for remote and group command to verify
2025-03-11Merge pull request #4321 from sskaje/T7092Daniil Baturin
T7092: Add Container Registry Mirror
2025-03-11T7219: Add check for remote and group command to verifyoniko94
2025-03-11T7092: Change validators: regex to host-name|address + port + pathsskaje
2025-02-28Merge pull request #21 from HollyGurza/T7200Viacheslav Hletenko
T7200: Reduce memory size usage for vpp smoke tests
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27T7202: VPP allow to bridge bonding interfacesViacheslav Hletenko
Allow to bridge bonding interfaces: ``` set vpp interfaces bonding bond0 member interface 'eth1' set vpp interfaces bridge br10 member interface bond0 ```
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
2025-02-26T7200: Reduce memory size usage for vpp smoke testskhramshinr
add more memory validation
2025-02-26vd-275: Add loopback bvi interface for a bridge memberViacheslav Hletenko
Allow to configure VPP loopback interface as BVI interface In the VPP a bridge-domain is the L2 bridge and does not have its own interface Loopback is required if we want to ping from/to the bridge. ``` set vpp interfaces bridge br10 member interface lo23 bvi ```
2025-02-25snmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
2025-02-25Merge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels
2025-02-25T7171: Add dstport option to GENEVE tunnelsNataliia Solomko
2025-02-24Merge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
2025-02-24Merge pull request #4363 from c-po/bridge-T7192Daniil Baturin
bridge: T7192: do not allow a member interface to be used multiple times
2025-02-23bridge: T7192: fix verify() to not allow member interface used multiple timesChristian Breunig
When configuring set interfaces bridge br10 member interface eth1 set interfaces bridge br20 member interface eth1 commit Checking the interface assignment afterwards shows 242: br20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 62:34:3a:8a:fe:49 brd ff:ff:ff:ff:ff:ff [edit] 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br20 state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:b3:cd:ba brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 The later addition wins and the CLI reports eth1 is assigned to br20 "master br20". A member interface can not be used multiple times.
2025-02-23bond: T7191: fix error message when member interface is used multiple timesChristian Breunig
Sharing the same physical interface among multiple bond interfaces causes information to be lost within the error message set interfaces bonding bond10 member interface eth1 set interfaces bonding bond10 member interface eth2 set interfaces bonding bond20 member interface eth1 set interfaces bonding bond20 member interface eth2 commit Results in: [ interfaces bonding bond10 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! [[interfaces bonding bond10]] failed [ interfaces bonding bond20 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! It should infact output the full name of the bond interface.
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-22 09:55:57 +0000