summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2024-11-25Merge pull request #4203 from sarthurdev/T6692Simon
dhcp: T6692: Fix range options not present when `exclude` is used
2024-11-21dhcp: T6692: Fix range options not present when `exclude` is usedsarthurdev
Add smoketest to verify range options are present with `exclude`
2024-11-21Merge pull request #4202 from jestabro/drop-legacy-show-configuration-filesDaniil Baturin
op-mode: T6900: remove uninformative 'show configuration files'
2024-11-21T6806: Rework QoS Policy for HFSC Shaper (#4181)Roman Khramshin
- Removed default `m1` and `m2` values from interface definitions - Adjusted filter priorities for shapers - Fixed SFQ qdisc and HFSC class creation to fully support `m1`, `d`, and `m2` parameters - Added validation logic similar to VyOS 1.3 to improve error handling and user experience
2024-11-21T6796: QoS: match filter by interface(iif) (#4188)Roman Khramshin
2024-11-20op-mode: T6900: remove uninformative 'show configuration files'John Estabrook
The legacy node and behavior under 'show configuration files' is not useful as is; remove node and drop script to allow for a useful repurpose in the future.
2024-11-20Merge pull request #4197 from jestabro/multipart-msg-outputDaniil Baturin
configd: T6899: use multipart message instead of extra exchange
2024-11-20T6790: QoS: Improve CAKE Policy (#4173)Roman Khramshin
- Fixed handling of flow isolation parameters. - Corrected support for `nat` and `nonat` in flow isolation. - Extended RTT values to cover the full range supported by `tc`. - Make migration script 2-to-3 qos
2024-11-19T6490: Allow creation of wireguard interfaces without requiring peers (#4194)sskaje
* T6490: Allow creation of wireguard interfaces without requiring peers
2024-11-19configd: T6899: use multipart message instead of extra exchangeJohn Estabrook
2024-11-18T6884: adds mtu option for container networksNicolas Vollmar
2024-11-15Merge pull request #4191 from HollyGurza/T6801Christian Breunig
T6801: QoS: Policy rate-control is broken by default
2024-11-15T6878: Stop conntrack logging servicekhramshinr
2024-11-14T6801: QoS: Policy rate-control is broken by defaultkhramshinr
- Fixed unhandled exception for policy rate-control without params
2024-11-08Merge pull request #4179 from natali-rs1985/T3501-currentDaniil Baturin
T3501: Allow using more than one tuned profile
2024-11-07Merge pull request #4151 from natali-rs1985/T6695Daniil Baturin
T6695: Machine-readable operational mode support for traceroute
2024-11-07T3501: Allow using more than one tuned profileNataliia Solomko
2024-10-24Merge pull request #4155 from HollyGurza/T4583Christian Breunig
T4583: Rewrite VRRP op-mode to vyos.opmode format
2024-10-21Merge branch 'current' into T6695Nataliia S.
2024-10-19Merge pull request #4165 from natali-rs1985/T4914-currentChristian Breunig
pki: T4914: Rewrite the PKI op mode in the new style
2024-10-18pki: T4914: reformat file by linter rulesNataliia Solomko
2024-10-18pki: T4914: Rewrite the PKI op mode in the new styleNataliia Solomko
2024-10-17T4583: Rewrite VRRP op-mode to vyos.opmode formatkhramshinr
2024-10-17T973: add basic frr_exporter implementation (#4150)Robert Göhler
2024-10-11T6695: normalize formattingNataliia Solomko
2024-10-11T6695: Machine-readable operational mode support for tracerouteNataliia Solomko
2024-10-11T6712: Add nonproduction banner (#4149)mergify[bot]
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io>
2024-10-09haproxy: T6745: Rename `reverse-proxy` to `haproxy`sarthurdev
2024-10-08Merge pull request #4128 from jestabro/commit-confirm-soft-rollbackJohn Estabrook
config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback
2024-10-07config-mgmt: T5976: move commit-confirm revert action to subnodeJohn Estabrook
2024-10-07Merge pull request #4124 from dmbaturin/T6740-set-to-config-converterJohn Estabrook
cli: T6740: add a converter from set commands to config
2024-10-07cli: T6740: set_tag on created paths and add parse step for orderingJohn Estabrook
Signed-off-by: Daniil Baturin <daniil@baturin.org>
2024-10-07Merge pull request #3938 from talmakion/feature/T6430-local-pbrChristian Breunig
pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs
2024-10-07pbr: T6430: Local IP rules routing into VRFs by nameAndrew Topp
* This is the `policy local-route*` part of T6430, manipulating ip rules, another PR covers firewall-backed `policy route*` for similar functionality * Local PBR (policy local-route*) can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase, extended to allow lookups in other address families (IPv6 in the new tests). verify_rules() is used by original pbr and new lpbr smoketests in this PR.
2024-10-07Merge pull request #4118 from c-po/acme-ca-certDaniil Baturin
pki: T6481: auto import ACME certificate chain into CLI
2024-10-06pki: T6481: auto import ACME certificate chain into CLIChristian Breunig
When using an ACME based certificate with VyOS we provide the necessary PEM files opaque in the background when using the internal tools. This however will not properly work with the CA chain portion, as the system is based on the "pki certificate <name> acme" CLI node of a certificate but CA chains reside under "pki ca". This adds support for importing the PEM data of a CA chain issued via ACME into the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by other daemons. Importing the chain only happens, when the chain was not already added manually by the user. ACME certificate chains that are automatically added to the CLI are all prefixed using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds a safeguard when the intermediate CA changes, the referenced name on the CLI stays consitent for any pending daemon updates.
2024-10-06Merge pull request #4131 from c-po/static-error-msgChristian Breunig
static: T4283: fix missing f'ormat string
2024-10-05op-mode: T6753: Fix json output for mtr / monitor traceroute (#4122)Nataliia S.
2024-10-05static: T4283: fix missing f'ormat stringChristian Breunig
This fixes the error message: Can not use both blackhole and reject for prefix "{prefix}"! Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an ICMP unreachable when matched")
2024-10-05config-mgmt: T5976: add option for commit-confirm to use 'soft' rollbackJohn Estabrook
Commit-confirm will restore a previous configuration if a confirmation is not received in N minutes. Traditionally, this was restored by a reboot into the last configuration on disk; add a configurable option to reload the last completed commit without a reboot. The default setting is to reboot.
2024-10-05config-mgmt: T5976: normalize formattingJohn Estabrook
2024-10-04Merge pull request #4110 from jestabro/distinct-apiChristian Breunig
http-api: T6736: move REST API to a node distinct from GraphQL API
2024-10-04Merge pull request #4121 from natali-rs1985/T6101-currentChristian Breunig
ipsec: T6101: Add validation for proposal option used in IKE group
2024-10-04Merge pull request #4048 from rebortg/node_exporterChristian Breunig
T973: add basic node_exporter implementation
2024-10-03T973: remove irrelevant standard valuesrebortg
2024-10-03cli: T6752: add a wrapper for the show command (#4111)Daniil Baturin
2024-10-03cli: T6740: add a converter from set commands to configDaniil Baturin
2024-10-03http-api: T6736: sanitize error message containing user inputJohn Estabrook
2024-10-02ipsec: T6101: Add validation for proposal option used in IKE groupNataliia Solomko
2024-09-30http-api: T6736: normalize formattingJohn Estabrook
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-11 05:32:34 +0000