| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-03-18 | T6136: add error checks when using dynamic firewall groups | Nicolas Fort | |
| 2024-03-16 | Merge pull request #3112 from Ingramz/add-rtsp-2 | Christian Breunig | |
| conntrack: T4022: add RTSP conntrack helper | |||
| 2024-03-16 | Merge pull request #3132 from sever-sever/T6121 | Christian Breunig | |
| T6121: Extend service config-sync to new sections | |||
| 2024-03-15 | T6090: fix policy route migration script. Ensure that tcp flags migration ↵ | Nicolas Fort | |
| occurs also if only <policy route> is defined. | |||
| 2024-03-15 | T6121: Extend service config-sync to new sections | Viacheslav Hletenko | |
| Extend `service config-sync` with new sections: - LeafNodes: pki, policy, vpn, vrf (syncs the whole sections) - Nodes: interfaces, protocols, service (syncs subsections) In this cae the Node allows to uses the next level section i.e subsection For example any of the subsection of the node `interfaces`: - set service config-sync section interfaces pseudo-ethernet - set service config-sync section interfaces virtual-ethernet Example of the config: ``` set service config-sync mode 'load' set service config-sync secondary address '192.0.2.1' set service config-sync secondary key 'xxx' set service config-sync section firewall set service config-sync section interfaces pseudo-ethernet set service config-sync section interfaces virtual-ethernet set service config-sync section nat set service config-sync section nat66 set service config-sync section protocols static set service config-sync section pki set service config-sync section vrf ``` | |||
| 2024-03-13 | Merge pull request #3125 from c-po/radvd-T6118 | Daniil Baturin | |
| radvd: T6118: add nat64prefix support RFC8781 | |||
| 2024-03-13 | Merge pull request #3126 from zdc/T4548-circinus | Christian Breunig | |
| grub: T4548: Fixed GRUB configuration files order | |||
| 2024-03-13 | grub: T4548: Fixed configuration files order | zsdc | |
| To iterate files on ext* file systems GRUB reads their inodes one by one, ignoring names. This breaks our configuration logic that relies on proper loading order. This commit adds a helper `sort_inodes()` that needs to be used whenever GRUB configuration files are created. It recreates files, changing their inodes in a way where inodes order matches alphabetical order. | |||
| 2024-03-12 | radvd: T6118: add nat64prefix support RFC8781 | Christian Breunig | |
| Add support for pref64 option, as defined in RFC8781. The prefix valid lifetime must not be smaller than the "interface interval max" definition which defaults to 600. set service router-advert interface eth1 nat64prefix 64:ff9b::/96 | |||
| 2024-03-12 | conntrack: T4022: add RTSP conntrack helper | Indrek Ardel | |
| 2024-03-12 | Merge pull request #3123 from sarthurdev/T5080_order | Christian Breunig | |
| conntrack: T5080: Fix rule order for applied conntrack modules | |||
| 2024-03-12 | conntrack: T5080: Fix rule order for applied conntrack modules | sarthurdev | |
| 2024-03-11 | T5872: re-write exit hook to always regenerate config | Lucas Christian | |
| 2024-03-10 | T6114: fix broken migration dhcpv6-server 4-to-5 | Lucas Christian | |
| 2024-03-10 | T5872: further fixes to ipsec dhcp exit hook | Lucas Christian | |
| 2024-03-10 | T5872: fix ipsec dhclient exit hook | Lucas Christian | |
| 2024-03-10 | T5872: ipsec remote access VPN: support dhcp-interface. | Lucas Christian | |
| 2024-03-10 | Merge pull request #3113 from c-po/firewall-T6071 | Daniil Baturin | |
| firewall: T6071: truncate rule description field to 255 characters | |||
| 2024-03-10 | firewall: T6071: truncate rule description field to 255 characters | Christian Breunig | |
| 2024-03-09 | Merge pull request #3106 from sarthurdev/T6102 | Daniil Baturin | |
| dhcp: T6102: Fix clear DHCP lease op-mode | |||
| 2024-03-07 | Merge pull request #2966 from HollyGurza/T6020 | Daniil Baturin | |
| vrrp: T6020: vrrp health-check script not applied correctly | |||
| 2024-03-07 | Merge pull request #1740 from sarthurdev/tpm_luks | Daniil Baturin | |
| config: T4919: Add support for encrypted config with TPM | |||
| 2024-03-07 | config: T4919: Support copying encrypted volumes during install | sarthurdev | |
| Re-implements https://github.com/vyos/vyatta-cfg-system/pull/194 | |||
| 2024-03-07 | config: T4919: mount/unmount encrypted config on VyOS start/stop | sarthurdev | |
| Re-implements https://github.com/vyos/vyatta-cfg/pull/54 | |||
| 2024-03-07 | config: T4919: Add support for encrypted config file with TPM | sarthurdev | |
| 2024-03-06 | dhcp: T6102: Fix clear DHCP lease op-mode | sarthurdev | |
| * Add `clear dhcpv6-server lease` * Standardize using vyos.opmode | |||
| 2024-03-06 | Merge pull request #3088 from nicolas-fort/T6075 | Daniil Baturin | |
| T6075: firewall and NAT: check if interface-group exists when using them in firewall|nat rules. | |||
| 2024-03-06 | Merge pull request #3085 from Apachez-/T6096 | Christian Breunig | |
| T6096: Config commits are not synced properly because 00vyos-sync is deleted by vyos-router | |||
| 2024-03-05 | Merge pull request #3089 from jestabro/allocate-under-lock | John Estabrook | |
| http-api: T6069: fix allocation outside of thread lock | |||
| 2024-03-05 | T2447: add configurable kernel boot option 'disable-power-saving' | Christian Breunig | |
| Lower available CPU C states to a minimum if this option set. This will set Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1". | |||
| 2024-03-05 | http-api: T6069: fix allocation outside of thread lock | John Estabrook | |
| 2024-03-05 | T6075: firewall and NAT: check if interface-group exists when using them in ↵ | Nicolas Fort | |
| firewall|nat rules. | |||
| 2024-03-04 | T6096: Config commits are not synced properly because 00vyos-sync is deleted ↵ | Apachez | |
| by vyos-router | |||
| 2024-03-04 | Merge pull request #3079 from sever-sever/T6084 | Daniil Baturin | |
| T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | |||
| 2024-03-04 | T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | Viacheslav Hletenko | |
| If we have any `vpn ipsec` and `protocol nhrp` configuration we get the empty configuration file `/run/opennhrp/opennhrp.conf` after rebooting the system. Use config dependency instead of the old `resync_nhrp` function fixes this issue | |||
| 2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
| 2024-03-02 | ospf: T5717: sync code with ospfv3 implementation | Christian Breunig | |
| 2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
| Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
| 2024-03-01 | Merge pull request #3061 from sarthurdev/T6079_current | Christian Breunig | |
| dhcp-server: T6079: Disable duplicate static-mappings on migration | |||
| 2024-03-01 | smoketest: T6079: probe for duplicate IP address static-mapping | Christian Breunig | |
| 2024-03-01 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
| Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
| 2024-02-29 | Merge pull request #2659 from jestabro/remove-trivial-redundancies | John Estabrook | |
| configdep: T5839: remove trivially redundant config dependency calls | |||
| 2024-02-29 | Merge pull request #3056 from natali-rs1985/T5504-current | Christian Breunig | |
| T5504: Keepalived VRRP ability to set more than one peer-address | |||
| 2024-02-29 | Merge pull request #3060 from c-po/banner | Daniil Baturin | |
| banner: T6077: implement ASCII contest winner default logo | |||
| 2024-02-29 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
| Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
| 2024-02-29 | dhcp-server: T6079: Disable duplicate static-mappings on migration | sarthurdev | |
| 2024-02-28 | dhcp-server: T6079: Increment Kea migrator versions | sarthurdev | |
| 2024-02-28 | configdep: T5660: remove global redundancies under vyos-configd | John Estabrook | |
| 2024-02-28 | banner: T6077: implement ASCII contest winner default logo | Christian Breunig | |
| Implement VyOS ASCII art contest winners logo as the default for our MOTD | |||
| 2024-02-28 | Merge pull request #3055 from sarthurdev/T6073 | Christian Breunig | |
| vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required | |||
