summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2026-02-10vpp: T8250: Rewrite the CLI for ACL tcp-flagsNataliia Solomko
2026-02-10Merge pull request #4952 from natali-rs1985/T8182Nataliia S.
vpp: T8182: Disallow configuration of IPoE server on VPP interface
2026-02-10update-check: T7945: Improve reliability during early boot and error handlingOleksandr Kuchmystyi
During early boot not all resources are ready for HTTP request, so `vyos.version.get_remote_version` may fail once and the update check is then delayed for 12 hours, leaving the router unaware of updates. Fix by adding retries/backoff and improved error handling so transient startup network failures don't suppress update checks for the next interval.
2026-02-10vpp: T8182: Disallow configuration of IPoE server on VPP interfaceNataliia Solomko
2026-02-10vpp: T7811: Add rebind_gve_driver function for correct gve device handlingNataliia Solomko
2026-02-10dns: T7924: Fix dns-dynamic migration error when `service` path is missingOleksandr Kuchmystyi
Handle absent `service dns dynamic address <iface> service` nodes during 1-to-2 migration to prevent ConfigTreeError.
2026-02-09T7756: Fix rsyslog configuration generationAdam Schultz
1.) Fix both syslog and logrotate writing /etc/logrotate.d/vyos-rsyslog - system_syslog.py generates /etc/logrotate.d/vyos-rsyslog-user for user file logrotate - system_logs.py generates /etc/logrotate.d/vyos-rsyslog using configured rotation parameters 2.) Fix /run/rsyslog/rsyslog.conf ignoring configured size for /var/log/messages - system_syslog.py retrieves "system logs" config to set rotation limits - default rotation size is now based on configuration defaults 3.) prifilt strings for rsyslog are modified to use override syntax (e.g. ";facility.none") when all is combined with other facilities to honor per facility user intent Smoke test changes: Commonize configuration of syslog facilities Check that prifilt is sane based on configured facilities (i.e. overides only present when required) Test wildcard (all) only, specific facility only, and wildcard + specific facility
2026-02-09http-api: T8235: Use asyncio lock to prevent deadlock in config-file handlerNavneetBarwal-RA
The HTTPS API config-file handler previously used a blocking threading.Lock in an async FastAPI endpoint, which can block the event loop and make the API unresponsive under concurrent load. This commit replaces the blocking lock with an asyncio.Lock to serialize config operations without blocking async execution, resolving the reported deadlock when concurrent /config-file load operations occur. The behavior of run_in_threadpool and background task scheduling remains consistent with prior logic, so the handler preserves existing commit and commit-confirm semantics.
2026-02-05Merge pull request #4949 from sarthurdev/geoip_refactorDaniil Baturin
geoip: T7926: T8049: Refactor geoip code and add MaxMind support
2026-02-03Merge pull request #4919 from alexandr-san4ez/T7730-currentDaniil Baturin
interfaces: T7730: Add interrupt coalescing settings for Ethernet interfaces
2026-02-03Merge pull request #4965 from natali-rs1985/T8207Nataliia S.
vpp: T8207: Enable ip6-icmp-ra-punt feature on interfaces with DHCPv6 address configured
2026-02-03Merge pull request #4964 from c-po/progress-barChristian Breunig
utils: T8018: add unbuffered output support to popen()
2026-02-03Merge pull request #4953 from alexandr-san4ez/T7090-currentViacheslav Hletenko
http-api: T7090: Implement background configure operations for REST API
2026-02-03vpp: T8207: Enable ip6-icmp-ra-punt feature on interfaces with DHCPv6 ↵Nataliia Solomko
address configured
2026-02-02op-mode: T8018: disable buffered output when adding container imagesChristian Breunig
2026-01-30Merge pull request #4955 from natali-rs1985/T8202Viacheslav Hletenko
vpp: T8202: Remove XDP driver and options from CLI and config
2026-01-29Merge pull request #4951 from c-po/broken-pipeJohn Estabrook
op-mode: T8154: fix tcpdump KeyboardInterrupt on Ctrl+C
2026-01-28vpp: T8202: Remove XDP driver and options from CLI and configNataliia Solomko
- Migration script removes 'driver' and 'xdp-options' nodes. - XDP logic is commented out in config verification and CLI tests, preserving code for future use. - The rest of XDP-related code remains untouched
2026-01-28http-api: T7090: Implement background configure operations for REST APIOleksandr Kuchmystyi
Large config commits (`service config-sync`) can block the REST API request path and sometimes must be deferred (e.g., when changing `service https`). This commit introduces an in-memory background operation manager that queues (FIFO) full configure operations (commands + commit/commit-confirm) as single jobs, tracks status/result, and exposes active operations via `/retrieve/background-operations`.
2026-01-27Merge pull request #4956 from sever-sever/T7866John Estabrook
T7866: Fix not all CPUs have model name key
2026-01-27Merge pull request #4945 from natali-rs1985/T8143John Estabrook
pppoe-server: T8143: Set 'vpp-cp' option automatically if interface is in VPP
2026-01-27T7866: Fix not all CPUs have model name keyViacheslav Hletenko
Not all platrorms have the `Model` key in the output of the /proc/cpuinfo Use `unknown` if we cannot detect it
2026-01-22Merge pull request #4942 from natali-rs1985/T8125Daniil Baturin
vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is configured as DHCP
2026-01-22op-mode: T8154: fix tcpdump KeyboardInterrupt on Ctrl+CChristian Breunig
2026-01-22T8154: make catch_broken_pipe decorator to common vyos.utils.io functionChristian Breunig
This adds the capability to make it re-usable in other code paths.
2026-01-22Merge pull request #4947 from natali-rs1985/T8183Daniil Baturin
vpp: T8143: Incorrect mapping in IPFIX for bond interfaces
2026-01-22ethtool: T7730: Add configuration coalesce for interfaceOleksandr Kuchmystyi
This change introduces CLI support for configuring network interface interrupt coalescing parameters via `netlink`. Note: Not all NIC drivers support interrupt coalescing. On unsupported interfaces, `netlink` returns an error and the VyOS commit will fail.
2026-01-21Merge pull request #4921 from hedrok/T7664-update-smoketest-scriptChristian Breunig
T7664: support FRR 10.5
2026-01-21vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is ↵Nataliia Solomko
configured as DHCP DHCP address cannot be assigned on VPP interfaces without enabling the 'ip4-dhcp-client-detect' feature
2026-01-21geoip: T8049: Add MaxMind database supportsarthurdev
2026-01-21geoip: T7926: Refactor geoip handlingsarthurdev
* Move core logic to separate vyos.geoip module * Use a sqlite database for storing and querying address ranges by country * Remove downloaded geoip ranges once loaded into sqlite db * No longer rebuild geoip sets on each commit unless necessary * Allows for extensibility using other geoip data vendors
2026-01-19pppoe-server: T8143: Set 'vpp-cp' option automatically if interface is in VPPNataliia Solomko
2026-01-16vpp: T8143: Incorrect mapping in IPFIX for bond interfacesNataliia Solomko
2026-01-16T8187: fix watchdog timeout validation if kernel min/max timeout are zeroGrant Slater
2026-01-15Merge pull request #4843 from Firefishy/T7101Daniil Baturin
T7101: Add hardware watchdog support via systemd
2026-01-15Merge pull request #4923 from alexandr-san4ez/T7633-currentChristian Breunig
openvpn: T7633: Add support for `data-ciphers-fallback` in site-to-site tunnels
2026-01-14T7101: Add support for hardware watchdog support via systemdGrant Slater
2026-01-13Merge pull request #4939 from c-po/vrf-pbrViacheslav Hletenko
vrf: T8169: prevent deletion if instance referenced in policy based routing
2026-01-12T7664: ip protocol 'kernel' etc removedKyrylo Yatsenko
In FRR 10.5 ip protocols * connected * kernel * local * table * table-direct are removed. First three in fb8e399e4f66d09780f176fbecb99168089e64eb, table* in 7fd030504be060387694e8a2af7f19ddd7dee39d. In `ip protocols`, `ipv6 protocols` and `vrf` VyOS supports * connected * kernel * table Remove these from CLI, add migration scripts, update tests.
2026-01-12T8170: VPP fix IPFIX op-mode commands if VPP is not configuredViacheslav Hletenko
Fix the VPP op-mode commands traceback errror for the IPFIX feature if VPP is not configured
2026-01-12openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnelsOleksandr Kuchmystyi
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
2026-01-11Merge pull request #4938 from hedrok/T8158-fix-lsp-timersChristian Breunig
isis: T8158: fix lsp-timers
2026-01-10vrf: T8169: prevent deletion if instance referenced in policy based routingChristian Breunig
Check if the VRF which is about to be removed is referenced in any PBR rule, where any is one or more of route, route6, local-route or local-route6.
2026-01-09Merge pull request #4912 from hedrok/T8046-add-link-params-cliViacheslav Hletenko
T8046: traffic-engineering: support link-params
2026-01-09isis: T8158: fix lsp-timersKyrylo Yatsenko
There are three configuration values in VyOS isis XML: * lsp-gen-interval * lsp-refresh-interval * max-lsp-lifetime In FRR they have the following restrictions in yang model: * refresh-interval, default 900 * maximum-lifetime >= refresh-interval + 300 (350-65535), default 1200 * generation-interval < refresh-interval (1..120), default 30 When setting these values in separate steps we can get error e.g.: libyang: Must condition ". >= ../refresh-interval + 300" not satisfied. even when all restrictions are satisfied. To fix the issue: 1. Write default values in our XML. 2. Check these restrictions in protocol_isis.py 3. Use FRR command `lsp-timers` that sets all these values in one go
2026-01-09T8046: traffic-engineering: support link-paramsKyrylo Yatsenko
Add 'traffic-engineering' commands under 'protocols'. set protocols traffic-engineering admin-group ADMINGROUP bit-position 1 set protocols traffic-engineering interface INTERFACE admin-group ADMINGROUP set protocols traffic-engineering interface INTERFACE max-bandwidth 1280 set protocols traffic-engineering interface INTERFACE max-reservable-bandwidth 1280 Also add set protocols isis traffic-engineering export
2026-01-08Merge pull request #4887 from alexandr-san4ez/T8022-currentDaniil Baturin
ipsec: T8022: Fix invalid automatic `dynamic` prefix assignment for transport mode tunnels
2026-01-08Merge pull request #4920 from natali-rs1985/T7098Daniil Baturin
T7098: Fix VPP MTU misconfiguration
2026-01-06Merge pull request #4935 from giga1699/T8146Daniil Baturin
T8146: Confirm the key when config encryption is configured without TPM
2026-01-06T8153: pppoe: send RS for IPv6 autoconf on link-upMiaosen Wang
Co-authored-by: Christian Breunig <christian@breunig.cc>
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-15 21:50:26 +0000