Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-05-19 | dmvpn: nhrp: T4434: secret length can not exceed 8 characters | Christian Poessinger | |
2022-05-13 | Merge pull request #1320 from sever-sever/T4408 | Christian Poessinger | |
sshguard: T4408: Add service ssh dynamic-protection | |||
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-12 | conntrack: T3535: use "reload-or-restart" from systemd | Christian Poessinger | |
2022-05-12 | vrrp: T3944: use "reload-or-restart" over individual code paths | Christian Poessinger | |
systemd has its internal reload or restart logic - we do not need to programm it on our own. | |||
2022-05-12 | container: T2216: use warning over exception when container image does not exist | Christian Poessinger | |
2022-05-12 | Revert "NHRP : T4399: fix issues restart nhrp when add or del tunnel" | Viacheslav Hletenko | |
This reverts commit d1455f936ca721633fcc04d5c84169b4ccf2f447. New spokes can't register on hub with 'reload-or-restart' option And requires option 'restart' for opennhrp.service | |||
2022-05-07 | vrf: T4419: support to disable IP forwarding within a given VRF | Christian Poessinger | |
2022-05-06 | bgp: T4385: verify() peer-group in interface based neighbors | Christian Poessinger | |
2022-05-05 | monitoring: T4410: Add telegraf output Plugin http for Splunk | Viacheslav Hletenko | |
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x' | |||
2022-05-03 | monitoring: T4315: Add telegraf output plugin prometheus-client | Viacheslav Hletenko | |
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client | |||
2022-05-01 | accel-ppp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | http: api: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-logs: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | openconnect: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | syslog: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | igmp-proxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | pppoe: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | nhrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: zone: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lcd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrrp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | firewall: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | system-options: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | ids: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | router-advert: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | mdns-repeater: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | ipsec: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | vrf: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | login: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | telegraf: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | serial-console: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | webproxy: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | flow-accounting: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | snmp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | lldp: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | tftp-server: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | container: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conserver: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conntrackd: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | conntrack: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-05-01 | bcast-relay: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-29 | T2216: containers need to be added via "add container image" in advance ↵ | Christian Poessinger | |
before using them | |||
2022-04-28 | system-proxy: T1741: migrate to get_config_dict() | Christian Poessinger | |
2022-04-28 | arp: T4397: change CLI syntax to support interface and VRF bound ARP entries | Christian Poessinger | |
* set protocols static arp interface eth0 address 192.0.2.1 mac 01:23:45:67:89:01 | |||
2022-04-27 | NHRP : T4399: fix issues restart nhrp when add or del tunnel | fett0 | |
2022-04-25 | vpn-ipsec: T4398: Fix unexpected passthrough policy for peer | Viacheslav Hletenko | |
Set default passtrough list to None to prevent unexpected policy for peers with not overplapped local and remote prefixes | |||
2022-04-25 | vyos.configdict: T4391: enable get_interface_dict() ti be used with ↵ | Christian Poessinger | |
ConfigTreeQuery() When VyOS is booting and an interface is brought up (PPPoE) which requires a user callback script that is executed asynchronously when the interface is up we can not use Config(). The problem is, Config() is not available when the system starts and the initial commit is still processed. We need to move to ConfigTreeQuery() which was build for this exact same purpose. TO reduce side effects and also dependencies on the entire vyos.configdict library the set_level()/get_level() calls got eliminated from within the library. All calls to functions like: * get_removed_vlans() * is_node_changed() * leaf_node_changed() * is_mirror_intf() * ... Now require that the full config path to the node is passed. | |||
2022-04-25 | arp: T4397: migrate to get_config_dict() | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: use variable for systemd service name | Christian Poessinger | |