Age | Commit message (Collapse) | Author |
|
(cherry picked from commit a90809e213bb10aa17223687fe8a965050959869)
|
|
(cherry picked from commit 425f78ff306d941f645adad763bbdfa68e6a41c2)
|
|
(cherry picked from commit 5dcb6b771106df130b4884867dc28bd685b64e40)
|
|
(cherry picked from commit 38cae97177191ad6876a4ce7afb4f53b21bf746c)
|
|
(cherry picked from commit 1b61973b9143aa8a04cc7c857ec567fa962e4e43)
|
|
FRR build tracks the rtrlib and libyang version, so only one place is needed to
build to sources.
(cherry picked from commit 6ff4b31c4a75583424edd0deb479d1dacc42d6b3)
|
|
(cherry picked from commit dbf7e47a27537a9c298afd665244b7bc2b6cf5f6)
|
|
(cherry picked from commit 5978fd1df855d163436e4e9108a32bc2d1157af4)
|
|
Generic driver for Hyper-V VMBus is required in Hyper-V environments for direct
access to network devices from userspace.
(cherry picked from commit 999ccad3f8ed35b18eff4cdf6baba6b1b3e87af0)
|
|
(cherry picked from commit fbe43ddcc2ee4a132a135bca688c533a4e9fab15)
|
|
The ixgbe driver did not support the 1000BASE-BX standard so for example FS.com
SFP-GE-BX 1310/1490nm 10km transceiver received an unsupported module error even
with allow_unsupported_sfp enabled.
To solve this problem I created a patch that was accepted by Linux upstream
(https://github.com/torvalds/linux/commit/1b43e0d20f2d007ec4c124b0deaa848ff8d61f4a)
so starting from kernel 6.9 the ixgbe driver will have 1000BASE-BX support,
however VyOS uses the out of tree driver so it is necessary to backport the patch.
(cherry picked from commit a44647f0982f2a6b7a78af80f82e1c650ab0b11e)
|
|
(cherry picked from commit 28c08a784ebdddfe56d8d33b4f28b147ad0a5265)
|
|
(cherry picked from commit 4417986365472fd9055b12309ba49d88272db04c)
|
|
Fix CVE-2023-48795: (terrapin attack)
The SSH transport protocol with certain OpenSSH extensions allows remote
attackers to bypass integrity checks such that some packets are omitted (from
the extension negotiation message), and a client and server may consequently
end up with a connection for which some security features have been downgraded
or disabled, aka a Terrapin attack.
(cherry picked from commit b17befe2e4e914f3f604bcfa1843f75519d46a4d)
|
|
Bump the `hsflowd` version to `v2.0.55-1`
Fixed and extended PCAP capabilities for not hardware/bridge
interfaces (like GRE tunnel interface).
It fixes crashes the daemon if you use tunnel interfaces
```
hsflowd[9160]: PCAP: tun0 has no supported datalink encapsulaton
hsflowd[9160]: Received signal 11
hsflowd[9160]: SIGSEGV, faulty address is (nil)
```
The correct commit fix in https://github.com/sflow/host-sflow/commit/62346aa67240ced0fb16b6725f16d8fa40eaea60
Updated version starts the hsflowd without issues
(cherry picked from commit eb05b77bac542dca906b25f647117c7566380cf2)
|
|
is undefined
This extends an else path with the logic from commit ea7d59a4b ("ixgbe: T6155:
always enable allow_unsupported_sfp for all NICs by default")
(cherry picked from commit 70ac747b2889757e35ac2a90fd77cda9d4b97ebd)
|
|
In-tree vs. Out-Of-Tree drivers differ in the way how unsupported transceivers
are defined (uint vs array of int) for the Kernel module parameters.
This results in:
kernel: ixgbe 0000:5e:00.0: failed to initialize because an unsupported SFP+ module type was detected.
kernel: ixgbe 0000:5e:00.0: Reload the driver after installing a supported module.
kernel: ixgbe 0000:5e:00.0: removed PHC on eth6
This patch always enables unsupported SFP+ modules as wo do anyway from
the userspace but only for the first port.
(cherry picked from commit ea7d59a4bf64a854be04ccf7566e1cf95d4e09a8)
|
|
radvd: T6118: add custom build support with recent source version
|
|
Packages got backported from current, but we need to select the proper pipeline
version from sagitta branch.
|
|
(cherry picked from commit ed79a9fa939fdba80eb004a79989153d51eeea88)
|
|
(cherry picked from commit 016809208da4d5500734f275d544463d8122bbd1)
|
|
(cherry picked from commit d93cb288d7d6bb16afad0df727f012837123a47e)
|
|
This reverts commit 60d16e494958bfe4a43048ee3a7f63fd57600875.
We already use iproute2 6.7 from Debian Bookworm Backports
(cherry picked from commit c56d76986f9efa05c4348401e7cdd05073aed2e7)
|
|
(cherry picked from commit fb31cf3412437f417870c28e9aaba66dc9144aff)
|
|
(cherry picked from commit 60d16e494958bfe4a43048ee3a7f63fd57600875)
|
|
(cherry picked from commit 1ba64f600c3578f7d63d1fc242f2088bf86e3605)
|
|
(cherry picked from commit f56b09145f9faeed061fb42f484acca226bfd914)
|
|
This reverts commit 795d890d6570036753e8c03616d38a7f3f692dfe.
|
|
libnftnl and nftables version.
(cherry picked from commit b31f5fe934bcb37534d49acdb5f7756bf05422e8)
|
|
(cherry picked from commit a4ef86ab2095f5a4dc2e9061dedbeacde4ac8606)
|
|
T6014: Bump keepalived version to 2.2.8-1 (backport #493)
|
|
Latest stable/9.0 FRR branch has an updated version of frr-reload.py which
is more strict on the commands to remove from the running config. This resulted
in some issues in the codebase of FRR which are addressed in the attached patches
and are pending for upstream integration.
(cherry picked from commit 798b95eb9776486aed874346869a8238383c18f6)
|
|
(cherry picked from commit 8b89929fdae6fac454c072c4f29b8a4f338365ba)
|
|
(cherry picked from commit 8e2cfd669941d815004cc424b182ae373867b690)
|
|
(cherry picked from commit 9376117efbe5022ece7942cf5e3e9606ca6586bf)
|
|
(cherry picked from commit ea4d2746ae77ce7e20eb1b65e5508332f1a42e8e)
|
|
This fixes commit 0f80a22b5 ("T5619: Add out-of-tree Intel ixgbe driver") to
work with the latest 6.6 code base.
For more information see
https://lore.kernel.org/lkml/f90837d0-810e-5772-7841-28d47c44d260@intel.com
(cherry picked from commit 36065ae874e170f3f60829b0b5348119b7e15e9a)
|
|
(cherry picked from commit 738ce141fb1c5cf77832bb93e21029b882910921)
|
|
(cherry picked from commit 6c6fe821de20eaf18640285587e960726c1ea39b)
|
|
(cherry picked from commit c910d5843ac4f7f96d9cb2d9c564f7fe8587c50f)
|
|
(cherry picked from commit 13a2c6ad63478ee575e33dc389e50e9d409db948)
|
|
(cherry picked from commit bf211f4558c2799d4258c4225d4d795064a52fd7)
|
|
(cherry picked from commit eb1a10558717239f2025737ee4e56dd01cba4355)
|
|
Add kernel modules for Hyper-V
Based on user reviews the following settings must be made:
```
CONFIG_CONNECTOR=y
CONFIG_HYPERV_UTILS=m
```
(cherry picked from commit 6f6e826977bd59947a660c9131ffeaf41d01d4bb)
|
|
(cherry picked from commit cc04a75932345ba37e4e18f82ae3f85330cedf68)
|
|
(cherry picked from commit e6701712e12189506e49be8c0e25c52a2b1325a1)
|
|
(cherry picked from commit 4e3fded1daa95cd0119af736ab15c79de494816d)
|
|
Mellanox/NVIDIA NICs require Infiniband support for proper communication with
user space, which is used by tools like DPDK.
This commit enables Infiniband with user access support and adds it to
`mlx4`/`mlx5`.
(cherry picked from commit 0a5b69b8472ce1b39f5a6f8af575aeecd459c34f)
|
|
(cherry picked from commit 68744626ea2650259a4d8daad528542556bb6188)
|
|
(cherry picked from commit f5d50b520313622a12feceb7b5f7ea4d1db6e96d)
|