summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2026-03-20validators: T8384: ipv6-eui64-prefix: unhandled exception on eui-64 address ↵Nataliia Solomko
validation
2026-03-19vyos-netlinkd: T8047: replace netplugdChristian Breunig
Implementing a daemon that listens for netlink messages in Python was discussed for many years. This is a proof-of-concept implementation how we can listen for netlink messages and process them in Python. Python 3.10 minimum is required due to the use of case statements which mimics C-style switch/case instructions. Add example: set interfaces ethernet eth1 vif 21 address dhcp set interfaces ethernet eth1 vif 21 address dhcpv6 commit If network cable is unplugged: vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e vyos-netlinkd[12681]: Stopping dhclient@eth3.10.service... vyos-netlinkd[12681]: Stopping dhcp6c@eth3.10.service... If cable is plugged back in: vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=UP, mac=00:50:56:b3:9d:8e vyos-netlinkd[12681]: Restarting dhclient@eth3.10.service... vyos-netlinkd[12681]: Restarting dhcp6c@eth3.10.service...
2026-03-19Merge pull request #5064 from natali-rs1985/T8352Christian Breunig
T8352: VPP add op-mode commands to show bonding interfaces
2026-03-19T8188: Preserve static IPv4 addresses flushed by dhclientNataliia Solomko
When dhclient renews/rebinds a lease, it calls "ip -4 addr flush dev <interface>". This removes ALL IPv4 addresses, including static addresses configured via VyOS (e.g., "set interfaces ethernet eth0 address 192.168.1.1/24"). The updated hook logic now intercepts the "ip -4 addr flush" command and replaces it with a selective flush that only removes addresses marked as "dynamic" by the kernel. DHCP-assigned addresses have the "dynamic" flag set automatically.
2026-03-19Merge pull request #5063 from c-po/tshark-removeChristian Breunig
op-mode: T8400: remove calls to tshark binary for PCAP files
2026-03-19Merge pull request #5065 from natali-rs1985/T8396Christian Breunig
T8396: VPP op-mode "show interfaces vpp" missing ipv6 address
2026-03-19T8395: VPP add op-mode command for 'show mode'Nataliia Solomko
2026-03-18T8396: VPP op-mode "show interfaces vpp" missing ipv6 addressNataliia Solomko
2026-03-18T8352: VPP add op-mode commands to show bonding interfacesNataliia Solomko
2026-03-18Merge pull request #5041 from alexandr-san4ez/T8315-currentDaniil Baturin
vpp: T8315: Add support for configuring unsupported NICs and update compatible list
2026-03-18Merge pull request #5047 from natali-rs1985/T8230Nataliia S.
vpp: T8230: Add support for PPPoE on bonding interfaces
2026-03-18vpp: T8315: Add support for configuring unsupported NICs and update ↵Oleksandr Kuchmystyi
compatible list Introduce `set vpp settings unsupported nics <pci-id>` and `set vpp settings unsupported drivers <driver>` to permit VPP activation on hardware not present in the validated NIC list. Update current compatible list.
2026-03-18op-mode: T8400: remove calls to tshark binary for PCAP filesChristian Breunig
The tshark binary might not be installed in every image, thus this command is not only gambling if it will work or not, it will also bloat the image if installed. PCAP files should be properly revisited on a workstation and not on a NOS (Network Operating System).
2026-03-18T8399: move connectivity/overlap checks inside subnet loopAlex Kudentsov
2026-03-17Merge pull request #5060 from alexk37/fix-macsec-source-interfaceJohn Estabrook
T8397: macsec: fix source-interface change
2026-03-17vpp: T8230: Add support for PPPoE on bonding interfacesNataliia Solomko
2026-03-17T8397: macsec: fix source-interface updateAlex Kudentsov
2026-03-17vpp: T8393: Remove xconnect interfaces with bonding member interfaceNataliia Solomko
2026-03-16Merge pull request #5056 from natali-rs1985/T8353Viacheslav Hletenko
T8353: Raise DataUnavailable if no VPP LACP interfaces are configured
2026-03-16Merge pull request #5049 from natali-rs1985/T8368Daniil Baturin
vpp: T8368: Features nat44 and cgnat should not use the same interfaces
2026-03-16T8353: Raise DataUnavailable if no VPP LACP interfaces are configuredNataliia Solomko
2026-03-15Merge pull request #5043 from sarthurdev/geoip_opmodeChristian Breunig
geoip: T5405: T6768: Add VRF support and `system name-server` check
2026-03-13geoip: T6768: Add system name-server checksarthurdev
2026-03-13vpp: T8368: Features nat44 and cgnat should not use the same interfacesNataliia Solomko
2026-03-12Merge pull request #5029 from c-po/openvpn-t8304John Estabrook
openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des instead
2026-03-12Merge pull request #5028 from natali-rs1985/T8342Daniil Baturin
vpp: T8342: Add verification of members for bond and bridge interfaces
2026-03-12Merge pull request #5035 from hedrok/T8186-fix-netflow-v5Christian Breunig
T8186: netflow: disable IPv6 for netflow protocol version 5
2026-03-12Merge pull request #5021 from alexandr-san4ez/T8276-currentDaniil Baturin
vpp: T8276: Add verification for virtual interfaces in PPPoE server configuration
2026-03-12vpp: T8276: Add verification for virtual interfaces in PPPoE server ↵Oleksandr Kuchmystyi
configuration - Implemented `verify_virtual_interface_exists` function to check for existing interfaces. - Enhanced error handling for non-existent virtual interfaces in VPP mapping. - Modified test cases to validate changes regarding PPPoE with subinterfaces.
2026-03-11T8269: add option to silence output of individual validatorsJohn Estabrook
2026-03-11T8371: VPP add op-mode command show runtimeViacheslav Hletenko
2026-03-09T8292: `service: ndp-proxy: validate prefix mode/interface settings correctly`Miaosen Wang
Switch `verify()` to validate the real config tree (`interface -> prefix`) instead of non-existent `rule` nodes. This enforces: - `mode interface` requires `prefix ... interface` - non-`interface` modes must not set `prefix ... interface` - referenced interface exists when `mode` is `interface`
2026-03-07T8186: netflow: disable IPv6 for protocol version5Kyrylo Yatsenko
2026-03-06openvpn: T8304: site-to-site VPN requires either cipher or data-ciphers-fallbackChristian Breunig
2026-03-06openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des insteadChristian Breunig
This extends the CLI migration from commit 941c5adfaca2c7 ("openvpn: T5634: Remove support for insecure DES and Blowfish ciphers") by not only deleting insecure DES and Blowfish ciphers, but providing an alternative (3DES). If no cipher is defined, this will result in OpenVPN service not starting at all, as the implicit defined BF-CBC cipher is no longer supported by OpenSSL 3.0.0.
2026-03-06vpp: T8354: Move 'ignore-kernel-routes' option out of resource-allocation ↵Nataliia Solomko
section
2026-03-06Merge pull request #5030 from c-po/op-mode-cli-verifyChristian Breunig
opmode: T8343: implement common verify_cli_exists() helper
2026-03-05T7513: CGNAT show exclude rules- all protocol value fixRitika Chopra
2026-03-05opmode: T8343: implement common verify_cli_exists() helperChristian Breunig
Instead of re-defining a per module helper which verifies that a given CLI path exists during execution, rather create a generic representation which takes a CLI path (list) as argument with an optional error message to display on the CLI. This is the initial implementation of the generic helper with some migrations for VPP, WireGuard and Wireless interfaces. More opmode scripts should follow.
2026-03-05Merge pull request #4967 from alexandr-san4ez/T8215-currentChristian Breunig
tech-support: T8215: Extend tech-support archive and report generation
2026-03-05vpp: T8342: Add verification of members for bond and bridge interfacesNataliia Solomko
2026-03-04Merge pull request #5026 from natali-rs1985/T8339Christian Breunig
vpp: T8339: Cleanup vpp interfaces and kernel-interfaces after migration
2026-03-04Merge pull request #4962 from jvoss/srv6_isisChristian Breunig
isis: T6978: add IS-IS SRv6 node-msd configuration
2026-03-04Merge pull request #5025 from natali-rs1985/T8340Christian Breunig
vpp: T8340: Remove vif option from vxlan interface
2026-03-04Merge pull request #5006 from ritika0313/T7513-CGNAT-exclude-rule-vyos-1xViacheslav Hletenko
T7513: vyos-1x: CGNAT Exclude Rule CLI support
2026-03-04isis: T6978: add IS-IS SRv6 node-msd configurationJonathan Voss
Co-Authored-by: Christian Breunig <christian@breunig.cc>
2026-03-04vpp: T8340: Remove vif option from vxlan interfaceNataliia Solomko
2026-03-04vpp: T8339: Cleanup vpp interfaces and kernel-interfaces after migrationNataliia Solomko
2026-03-04Merge pull request #5024 from natali-rs1985/T8328Viacheslav Hletenko
vpp: T8328: Migrate xconnect interface to 'interfaces vpp xconnect'
2026-03-04vpp: T8328: Migrate xconnect interface to 'interfaces vpp xconnect'Nataliia Solomko
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-18 16:02:51 +0000