summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
6 dayssnmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
6 daysMerge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
6 daysMerge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels
6 daysT7171: Add dstport option to GENEVE tunnelsNataliia Solomko
7 dayslldp: T7165: add support to enable only rx or tx on specific interfaceChristian Breunig
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable"
7 daysMerge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
7 daysMerge pull request #4363 from c-po/bridge-T7192Daniil Baturin
bridge: T7192: do not allow a member interface to be used multiple times
8 daysbridge: T7192: fix verify() to not allow member interface used multiple timesChristian Breunig
When configuring set interfaces bridge br10 member interface eth1 set interfaces bridge br20 member interface eth1 commit Checking the interface assignment afterwards shows 242: br20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 62:34:3a:8a:fe:49 brd ff:ff:ff:ff:ff:ff [edit] 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br20 state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:b3:cd:ba brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 The later addition wins and the CLI reports eth1 is assigned to br20 "master br20". A member interface can not be used multiple times.
8 daysbond: T7191: fix error message when member interface is used multiple timesChristian Breunig
Sharing the same physical interface among multiple bond interfaces causes information to be lost within the error message set interfaces bonding bond10 member interface eth1 set interfaces bonding bond10 member interface eth2 set interfaces bonding bond20 member interface eth1 set interfaces bonding bond20 member interface eth2 commit Results in: [ interfaces bonding bond10 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! [[interfaces bonding bond10]] failed [ interfaces bonding bond20 ] Can not add interface "eth1" to bond, it is already a member of bond "b"! It should infact output the full name of the bond interface.
9 dayscontainer: T7185: Allow tmpfs mounts within containersAlex W
12 daysT7182: use Config instead of ConfigTreeQuery for get_interface_dictJohn Estabrook
12 daysT7182: normalize formattingJohn Estabrook
13 daysMerge pull request #4348 from vyos/sever-sever-patch-1Christian Breunig
T7136: sflow check listen address for the vrf
13 daysMerge pull request #4350 from Embezzle/T7176Christian Breunig
firewall: T7176: Fix vyos-domain-resolver not respecting interval/cache configuration
13 daysMerge pull request #4347 from c-po/bgp-redistr-table-T7163Daniil Baturin
bgp: T7163: add CLI route-map and metric support for "redistribute table"
14 daysfirewall: T7176: Fix vyos-domain-resolver not respecting interval/cache ↵Alex W
configuration
14 daysT7136: sflow check listen address for the vrfsever-sever-patch-1Viacheslav Hletenko
Add check list to VRF address for the sFlow agent address
2025-02-13wlb: T4470: Support WLB op-mode commandssarthurdev
2025-02-13wlb: T4470: Migrate WAN load balancer to Python/XMLsarthurdev
2025-02-13bgp: T7163: add CLI route-map and metric support for "redistribute table"Christian Breunig
* set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute table <n> [metric <n>] [route-map <name>]
2025-02-12T7076: Fix for script that validates ethernet interfaceNataliia Solomko
2025-02-08netplug: T5103: only execute helper scripts on physical interfacesChristian Breunig
Helper scripts should only work on physical interfaces not on individual sub-interfaces. Moving e.g. a VLAN interface in/out a VRF will also trigger this script which should be prohibited - bail out early
2025-02-05Merge pull request #4305 from c-po/syslog-T6989Christian Breunig
syslog: T6989: convert old configuration format to "advanced"
2025-02-04defaults: T6989: provide single source of systemd servicesChristian Breunig
Some systemd services are re-used over multiple configuration files. Keep a single source of the real systemd names and only reference them by dictionary keys.
2025-02-04init: T6989: start syslog earlyChristian Breunig
2025-02-04syslog: T6989: add possibility to define VRF per remoteChristian Breunig
Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too.
2025-02-04Merge pull request #4327 from natali-rs1985/T7076Daniil Baturin
T7076: Add script to validate ethernet interface
2025-02-04T7076: Add script to validate ethernet interfaceNataliia Solomko
2025-02-03installer: T7102: download upgrade images to a random path in the root ↵Daniil Baturin
filesystem
2025-02-03syslog: T6989: rename "global" to "local"Christian Breunig
The previously "global" options actually were only relevant for the local logging to /var/log/messages.
2025-02-03syslog: T6989: move up "global marker" one level in CLIChristian Breunig
2025-02-03syslog: T6989: move up "global preserve-fqdn" one level in CLIChristian Breunig
Move "global preserve-fqdn" one CLI level up, as it relates to all logging targets (console, global and remote).
2025-02-03syslog: T6989: add new source-address CLI option for outgoing connectionsChristian Breunig
2025-02-03syslog: T6989: convert old configuration format to "advanced"Christian Breunig
2025-02-03syslog: T6989: rename "host" to "remote"Christian Breunig
2025-02-03syslog: T6989: remove CLI option for user terminal loggingChristian Breunig
Should be added as runtime option similar to "terminal monitor" known from other vendors.
2025-02-03syslog: T6989: remove "file" logging destinationChristian Breunig
2025-02-02Merge pull request #4298 from dmbaturin/T7036-upgrade-validation-improvementsChristian Breunig
installer: T7036: upgrade validation improvements
2025-01-31configd: T7119: fix misleading debug messagesJohn Estabrook
An artifact of T6899 included a report of 'error_code 1' on success: for consistency with shim error codes 1 == SUCCESS, however, the debug message is misleading and is here corrected.
2025-01-31configd: T7119: normalize formattingJohn Estabrook
2025-01-30installer: T7036: handle missing flavor and architecture data gracefullyDaniil Baturin
2025-01-30Merge pull request #4317 from Embezzle/T7087Christian Breunig
wireguard: T7087: Fix vyos-domain-resolver failing if no wireguard interfaces defined
2025-01-28installer: T7034: fail the upgrade if image flavors do not match (#4297)Daniil Baturin
2025-01-27haproxy: T7081: Support HTTP compression (#4314)Alex W
2025-01-26T6998: Remove vestigial helper and reformatIndrajit Raychaudhuri
2025-01-26T6998: dhcpy.py - fix datetime to be timezone awaremetron2
2025-01-25wireguard: T7087: Fix vyos-domain-resolver failing if no wireguard ↵Alex W
interfaces defined
2025-01-24Merge pull request #4200 from sskaje/T4930-1Daniil Baturin
T4930: Allow WireGuard peers via DNS hostname
2025-01-24Merge pull request #4216 from HollyGurza/T6641Daniil Baturin
T6641: Add vyos-network-event-logger Service
2025-01-23ntp: T6911: fix migration script to not allow empty "service ntp" CLI nodeChristian Breunig
With T3008 we moved from ntpd to chrony. This came with a restructuring of the CLI (mainly moving ntp out of system to services). In addition the definition of a server was made mandatory. The bug itself manifests at a more crucial point - config migration vyos-router[1265]: Migration script error: /opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2: [Errno 1] failed to run command: ['/opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2', '/opt/vyatta/etc/config/config.boot'] vyos-router[1265]: returned: - op: copy old_path: ['system', 'ntp'] new_path: ['service', 'ntp'] vyos-router[1265]: - op: delete path: ['system', 'ntp'] The fix is that we will no longer migrate an empty ntp CLI node from the old syntax to the new.