Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-08-23 | [dummy] T1609 migrate to vyos.interfaceconfig, adding check ip-cidr, adding ↵ | DmitriyEshenko | |
vyos.interfaceconfig common ipv4/ipv6 functions | |||
2019-08-23 | [dummy] T1609 Fixing dummy interface state | DmitriyEshenko | |
2019-08-22 | T1606: change vyos-hostsd systemd target to avoid boot problems | John Estabrook | |
2019-08-21 | dummy: T1580: remove superfluous if statements | Christian Poessinger | |
2019-08-21 | bridge: T1556: remove superfluous if statements | Christian Poessinger | |
2019-08-21 | loopback: T1601: rewrite using XML/Python definitions | Christian Poessinger | |
2019-08-21 | T1598: redo host_name.py to use vyos-hostsd. | Daniil Baturin | |
2019-08-21 | T1598: clean up vyos-hostsd state dump on clean shutdown. | Daniil Baturin | |
2019-08-21 | T1598: improve autogenerated file comments. | Daniil Baturin | |
2019-08-20 | T1598: start vyos-hostsd before everything that may need it. | Daniil Baturin | |
2019-08-20 | T1598: initial implementation of the hosts keeper daemon. | Daniil Baturin | |
2019-08-20 | powerdns: T1595: remove 'listen-on' CLI option | Christian Poessinger | |
2019-08-20 | powerdns: T1595: add config migrator to remove 'listen-on' | Christian Poessinger | |
2019-08-20 | powerdns: T1524: support setting allow-from network | Christian Poessinger | |
Netmasks (both IPv4 and IPv6) that are allowed to use the server. The default allows access only from RFC 1918 private IP addresses. Due to the aggressive nature of the internet these days, it is highly recommended to not open up the recursor for the entire internet. Questions from IP addresses not listed here are ignored and do not get an answer. https://docs.powerdns.com/recursor/settings.html#allow-from Imagine an ISP network with non RFC1918 IP adresses - they can't make use of PowerDNS recursor. As of now VyOS hat allow-from set to 0.0.0.0/0 and ::/0 which created an open resolver. If there is no allow-from statement a config-migrator will add the appropriate nodes to the configuration, resulting in: service { dns { forwarding { allow-from 0.0.0.0/0 allow-from ::/0 cache-size 0 ignore-hosts-file listen-address 192.0.2.1 } } } | |||
2019-08-19 | dummy: T1580: rewrite in new style XML/Python | Christian Poessinger | |
2019-08-19 | openvpn: T1548: remove authy 2fa provider | Christian Poessinger | |
According to https://github.com/twilio/authy-openvpn commit 3e5dc73: > This plugin is no longer actively maintained. If you're interested in becoming a maintainer, we welcome forks of this project. In addition this plugin was always missing in the current branch ov VyOS and did not make it into VyOS 1.2 (crux) If 2FA for OpenVPN is required we should probably opt for Google Authenticator or if possible a U2F device. | |||
2019-08-18 | Merge pull request #106 from alkersan/current | Daniil Baturin | |
[op-mode] T1590 xml-style rewrite of 'show system' operations | |||
2019-08-18 | openvpn: T1548: support creating L2 bridges | Christian Poessinger | |
2019-08-17 | openvpn: T1548: fix generated topology statement for 'server point-to-point' | Christian Poessinger | |
2019-08-17 | openvpn: T1548: don't generate config if instance is disabled | Christian Poessinger | |
2019-08-17 | openvpn: T1548: fix generated client subnet mask for topology 'server' | Christian Poessinger | |
2019-08-17 | openvpn: T1548: widen generated folder permission to 755 | Christian Poessinger | |
2019-08-17 | openvpn: T1548: add description to generated config file | Christian Poessinger | |
2019-08-17 | openvpn: T1548: fix enable/disable of entire interface | Christian Poessinger | |
2019-08-17 | Merge pull request #107 from c-po/t1548-openvpn | Christian Poessinger | |
T1548 openvpn | |||
2019-08-17 | openvpn: T1548: remove debug output | Christian Poessinger | |
2019-08-17 | Merge pull request #102 from zdc/T1531 | Christian Poessinger | |
[hostname] T1531: Added hostname alias to 127.0.1.1 (Debian way) | |||
2019-08-17 | openvpn: T1548: add op-mode command for resetting client | Christian Poessinger | |
vyos@vyos:~$ run reset openvpn client client1 | |||
2019-08-17 | openvpn: T1548: fix file ownership of client configuration file | Christian Poessinger | |
2019-08-16 | openvpn: T1548: initial rewrite with XML and Python | Christian Poessinger | |
2019-08-16 | [op-mode] T1590 xml-style rewrite of 'show system' operations | Dmytro Aleksandrov | |
2019-08-14 | [bfd] T1183: Added validations and fixing bugs in BFD: | zsdc | |
* added validations for "source address IP" and "bfd peer IP" * added check for configuring multihop together with an interface name * fixed "show protocols bfd peer X" for peers with custom options | |||
2019-08-14 | [service https] T1443: add self-signed TLS certificate | John Estabrook | |
2019-08-14 | [service https] T1443: move https and api default data to vyos.defaults | John Estabrook | |
2019-08-13 | [hostname] T1531: Added hostname alias to 127.0.1.1 (Debian way) | zsdc | |
This change makes "dnsdomainname" and "hostname -f" operable | |||
2019-08-12 | Merge pull request #99 from zdc/feature-bfd | Christian Poessinger | |
[bfd] T1183: Added some new functionality and fixed bugs in BFD | |||
2019-08-10 | [snmp] T1575 Adding additional check for lspci | DmitriyEshenko | |
2019-08-09 | [bfd] T1183: Added some new functionality and fixed bugs in BFD: | zsdc | |
* added option "echo-mode" and "echo-interval" for BFD peers * added configuration check for usage "multihop" and "echo-mode" * added configuration check for denying deletion BFD peers, which are used in BGP configuration * fixed deleting/changing BFD peers with custom parameters (for example multihop, local-address, etc.) * deleted wrong skipping of configuration check for "shutdown" BFD peers | |||
2019-08-07 | [l2tp] T1566 ipv6 implementation | DmitriyEshenko | |
2019-08-07 | [service https] T1443: reset defaults on 'delete service https api' | John Estabrook | |
2019-08-07 | Validator: add file-exists as replacement to Vyatta check_file_in_config_dir | Christian Poessinger | |
Verify if a file exists or not on the system. Can be called by: <constraint> <validator name="file-exists" argument="--directory /config/auth"/> </constraint> The --directory option is used to ensure a given file path lies under this (mandatory) directory. A directory can be mandatory when the optional argument -e, --error is used. This will return '1' instead of '0'. | |||
2019-08-07 | Validator: rename cidr -> ip-cidr to match existing patterns | Christian Poessinger | |
2019-08-07 | Merge pull request #97 from c-po/bridge-fixes | Christian Poessinger | |
Bridge fixes | |||
2019-08-07 | [bridge] T1156: rename 'br_name' to 'intf' for indexing python dictionary ↵ | Christian Poessinger | |
interface name | |||
2019-08-07 | [bridge] T1156: add missing if statement in config-migration | Christian Poessinger | |
Fixes: Traceback (most recent call last): File "/opt/vyatta/etc/config-migrate/migrate/interfaces/0-to-1", line 27, in <module> for br in config.list_nodes(base): File "/usr/lib/python3/dist-packages/vyos/configtree.py", line 255, in list_nodes raise ConfigTreeError("Path [{}] doesn't exist".format(path_str)) vyos.configtree.ConfigTreeError: Path [b'interfaces bridge'] doesn't exist | |||
2019-08-05 | T1431: add showConfig operation to the HTTP API. | Daniil Baturin | |
2019-08-05 | [bridge] T1156: support adding interface addresses | Christian Poessinger | |
2019-08-04 | [bridge] T1156: remove helper script bridge_has_members.py | Christian Poessinger | |
Bridge member interface is now handled completely inside the bridge node and no longer spread accross different interface definitions. | |||
2019-08-04 | [bridge] T1156: rename igmp-snooping node to igmp | Christian Poessinger | |
2019-08-03 | [bridge] T1156: interfaces can be assigned to any one bridge only | Christian Poessinger | |