summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-02-13wlb: T4470: Support WLB op-mode commandssarthurdev
2025-02-13wlb: T4470: Migrate WAN load balancer to Python/XMLsarthurdev
2025-02-12T7076: Fix for script that validates ethernet interfaceNataliia Solomko
2025-02-08netplug: T5103: only execute helper scripts on physical interfacesChristian Breunig
Helper scripts should only work on physical interfaces not on individual sub-interfaces. Moving e.g. a VLAN interface in/out a VRF will also trigger this script which should be prohibited - bail out early
2025-02-05Merge pull request #4305 from c-po/syslog-T6989Christian Breunig
syslog: T6989: convert old configuration format to "advanced"
2025-02-04defaults: T6989: provide single source of systemd servicesChristian Breunig
Some systemd services are re-used over multiple configuration files. Keep a single source of the real systemd names and only reference them by dictionary keys.
2025-02-04init: T6989: start syslog earlyChristian Breunig
2025-02-04syslog: T6989: add possibility to define VRF per remoteChristian Breunig
Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too.
2025-02-04Merge pull request #4327 from natali-rs1985/T7076Daniil Baturin
T7076: Add script to validate ethernet interface
2025-02-04T7076: Add script to validate ethernet interfaceNataliia Solomko
2025-02-03installer: T7102: download upgrade images to a random path in the root ↵Daniil Baturin
filesystem
2025-02-03syslog: T6989: rename "global" to "local"Christian Breunig
The previously "global" options actually were only relevant for the local logging to /var/log/messages.
2025-02-03syslog: T6989: move up "global marker" one level in CLIChristian Breunig
2025-02-03syslog: T6989: move up "global preserve-fqdn" one level in CLIChristian Breunig
Move "global preserve-fqdn" one CLI level up, as it relates to all logging targets (console, global and remote).
2025-02-03syslog: T6989: add new source-address CLI option for outgoing connectionsChristian Breunig
2025-02-03syslog: T6989: convert old configuration format to "advanced"Christian Breunig
2025-02-03syslog: T6989: rename "host" to "remote"Christian Breunig
2025-02-03syslog: T6989: remove CLI option for user terminal loggingChristian Breunig
Should be added as runtime option similar to "terminal monitor" known from other vendors.
2025-02-03syslog: T6989: remove "file" logging destinationChristian Breunig
2025-02-02Merge pull request #4298 from dmbaturin/T7036-upgrade-validation-improvementsChristian Breunig
installer: T7036: upgrade validation improvements
2025-01-31configd: T7119: fix misleading debug messagesJohn Estabrook
An artifact of T6899 included a report of 'error_code 1' on success: for consistency with shim error codes 1 == SUCCESS, however, the debug message is misleading and is here corrected.
2025-01-31configd: T7119: normalize formattingJohn Estabrook
2025-01-30installer: T7036: handle missing flavor and architecture data gracefullyDaniil Baturin
2025-01-30Merge pull request #4317 from Embezzle/T7087Christian Breunig
wireguard: T7087: Fix vyos-domain-resolver failing if no wireguard interfaces defined
2025-01-28installer: T7034: fail the upgrade if image flavors do not match (#4297)Daniil Baturin
2025-01-27haproxy: T7081: Support HTTP compression (#4314)Alex W
2025-01-26T6998: Remove vestigial helper and reformatIndrajit Raychaudhuri
2025-01-26T6998: dhcpy.py - fix datetime to be timezone awaremetron2
2025-01-25wireguard: T7087: Fix vyos-domain-resolver failing if no wireguard ↵Alex W
interfaces defined
2025-01-24Merge pull request #4200 from sskaje/T4930-1Daniil Baturin
T4930: Allow WireGuard peers via DNS hostname
2025-01-24Merge pull request #4216 from HollyGurza/T6641Daniil Baturin
T6641: Add vyos-network-event-logger Service
2025-01-23ntp: T6911: fix migration script to not allow empty "service ntp" CLI nodeChristian Breunig
With T3008 we moved from ntpd to chrony. This came with a restructuring of the CLI (mainly moving ntp out of system to services). In addition the definition of a server was made mandatory. The bug itself manifests at a more crucial point - config migration vyos-router[1265]: Migration script error: /opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2: [Errno 1] failed to run command: ['/opt/vyatta/etc/config-migrate/migrate/ntp/1-to-2', '/opt/vyatta/etc/config/config.boot'] vyos-router[1265]: returned: - op: copy old_path: ['system', 'ntp'] new_path: ['service', 'ntp'] vyos-router[1265]: - op: delete path: ['system', 'ntp'] The fix is that we will no longer migrate an empty ntp CLI node from the old syntax to the new.
2025-01-21T6895: Merge the hsflowd-based sFlow and uacctd-based sFlow (#4310)Nataliia S.
2025-01-21T6641: Add vyos-network-event-logger Servicekhramshinr
The service parses and logs network events for improved monitoring and diagnostics. Supported event types include: - `RTM_NEWROUTE`, `RTM_DELROUTE` - `RTM_NEWLINK`, `RTM_DELLINK` - `RTM_NEWADDR`, `RTM_DELADDR` - `RTM_NEWNEIGH`, `RTM_DELNEIGH`, `RTM_GETNEIGH` - `RTM_NEWRULE`, `RTM_DELRULE` Added operational mode commands for filtered log retrieval: - `show log network-event <event-type> <interface>`: Retrieve logs filtered by event type and interface. - `show interfaces <type> <name> event-log <event-type>`: Display interface-specific logs filtered by event type.
2025-01-20Merge pull request #4307 from indrajitr/kea-refactorChristian Breunig
dhcp: T7052: Refactor kea dhcp op-mode functions to vyos.kea
2025-01-19Merge pull request #4308 from indrajitr/kea-ctrl-agent-overrideChristian Breunig
dhcp: T5840: Merge systemd service overrides for kea-ctrl-agent
2025-01-19wireguard: T4930: fix dict key (-/_) when working with config dictChristian Breunig
Retrieving the config dict sets key_mangling(), thus we need to look for host_name instead of host-name.
2025-01-19wireguard: T4930: add mnemonic for WIREGUARD_REKEY_AFTER_TIMEChristian Breunig
WireGuard performs a handshake every WIREGUARD_REKEY_AFTER_TIME if data is being transmitted between the peers. If no data is transmitted, the handshake will not be initiated unless new data begins to flow. Each handshake generates a new session key, and the key is rotated at least every 120 seconds or upon data transmission after a prolonged silence.
2025-01-19wireguard: T4930: use common error message patternChristian Breunig
2025-01-19wireguard: T4930: allow peers via FQDNsskaje
* set interfaces wireguard wgXX peer YY hostname <fqdn>
2025-01-17nhrp: T2326: Fixed network-id migrationaapostoliuk
Fixed network-id migration. Every tunnel should have its own nhrp network-id.
2025-01-16ruff: T6583: Reformat to comply with code styleIndrajit Raychaudhuri
2025-01-16dhcp: T7052: Rename and simplify functions for consistencyIndrajit Raychaudhuri
2025-01-16dhcp: T7052: Refactor kea dhcp op-mode functions to vyos.keaIndrajit Raychaudhuri
Relocate the kea dhcp op-mode functions to kea helper functions in vyos.kea. This allows the functions to be reused by other scripts, not just op-mode wrappers. This moves the source of truth for the op-mode commands to the actual running kea instance, rather than VyOS config path. Also, apply some minor code cleanup and make some of the mappings consistent across the functions.
2025-01-16ruff: T6583: Reformat to comply with code styleIndrajit Raychaudhuri
2025-01-16dhcp: T5840: Merge systemd service overrides for kea-ctrl-agentIndrajit Raychaudhuri
Default systemd service for kea-ctrl-agent expects `/etc/kea/kea-api-password` which is not used in VyOS. The systemd unit override to remove the condition does not need to be in a separate (templated and dynamic) override file and can be merged into the existing static override file.
2025-01-13Merge pull request #4301 from sarthurdev/T7041Christian Breunig
kea: T7041: Check lease hostname string is not empty
2025-01-13Merge pull request #4217 from aapostoliuk/T2326-circinusChristian Breunig
nhrp: T2326: NHRP migration to FRR
2025-01-12kea: T7041: Check lease hostname string is not emptysarthurdev
2025-01-10T7042: drop use of inspect module in favor of ast for source analysisJohn Estabrook
This avoids importing the config mode script as a module, with requisite dependencies, which may be inconvenient.