<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-documentation.git/docs/configexamples, branch T9496-secure-boot-add-image</title>
<subtitle>VyOS readthedocs (mirror of https://github.com/vyos/vyos-documentation.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-documentation.git/atom?h=T9496-secure-boot-add-image</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-documentation.git/atom?h=T9496-secure-boot-add-image'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/'/>
<updated>2026-10-22T12:22:59+00:00</updated>
<entry>
<title>Merge pull request #2349 from omnom62/ansible-blueprints-upgrade</title>
<updated>2026-10-22T12:22:59+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2026-10-22T12:22:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=fdf23a8c4741147aa8bbedf4a4b50a0d3ff4c5b1'/>
<id>urn:sha1:fdf23a8c4741147aa8bbedf4a4b50a0d3ff4c5b1</id>
<content type='text'>
docs: Ansible example - upgrades with vyos.blueprints</content>
</entry>
<entry>
<title>docs: suppress Tunnelbroker address lint false positives (#2267)</title>
<updated>2026-10-20T11:59:28+00:00</updated>
<author>
<name>Eli Sterling</name>
<email>eli@eliware.org</email>
</author>
<published>2026-10-20T11:59:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=d14b026f5e38b37e7464ea6b721b26b84f304015'/>
<id>urn:sha1:d14b026f5e38b37e7464ea6b721b26b84f304015</id>
<content type='text'>
</content>
</entry>
<entry>
<title>docs: Ansible example - upgrades with the vyos.blueprints collection</title>
<updated>2026-10-18T01:44:23+00:00</updated>
<author>
<name>omnom62</name>
<email>omnom62@outlook.com</email>
</author>
<published>2026-10-16T11:06:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=509f70682f4a1d20615c876beb1ae81590ff2344'/>
<id>urn:sha1:509f70682f4a1d20615c876beb1ae81590ff2344</id>
<content type='text'>
</content>
</entry>
<entry>
<title>docs: Ansible example - wrap to 80 columns, shorten an existing heading</title>
<updated>2026-10-16T00:48:39+00:00</updated>
<author>
<name>omnom62</name>
<email>omnom62@outlook.com</email>
</author>
<published>2026-10-16T00:48:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=e358a865aaf6098321b6da27a6d01c3525427754'/>
<id>urn:sha1:e358a865aaf6098321b6da27a6d01c3525427754</id>
<content type='text'>
</content>
</entry>
<entry>
<title>docs: Ansible example - backups with the vyos.blueprints collection</title>
<updated>2026-10-16T00:29:09+00:00</updated>
<author>
<name>omnom62</name>
<email>omnom62@outlook.com</email>
</author>
<published>2026-10-16T00:29:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=e760e830ed88e6008d421d7005bd1cd3930b3cd4'/>
<id>urn:sha1:e760e830ed88e6008d421d7005bd1cd3930b3cd4</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Merge pull request #2139 from jeleel-muibi/docs-gcp-ha-vpn-bgp-example</title>
<updated>2026-09-04T08:58:21+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2026-09-04T08:58:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=15b5c64acd0bb7ce35241013d1f393309fa9a29e'/>
<id>urn:sha1:15b5c64acd0bb7ce35241013d1f393309fa9a29e</id>
<content type='text'>
docs: add Google Cloud HA VPN BGP example</content>
</entry>
<entry>
<title>docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks (#2136)</title>
<updated>2026-07-10T15:33:10+00:00</updated>
<author>
<name>zdc</name>
<email>zdc@users.noreply.github.com</email>
</author>
<published>2026-07-10T15:33:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=50acf8f188475b0554b99a739cb8ada12d51e77b'/>
<id>urn:sha1:50acf8f188475b0554b99a739cb8ada12d51e77b</id>
<content type='text'>
* docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks

In DMVPN the mGRE tunnel and the IPSec protecting it are handled
independently, so GRE can be forwarded while no IPSec SA is active for a
peer (e.g. while an SA is still being negotiated or after one expires),
allowing unencrypted GRE to leave the router. This is inherent to
combining GRE with IPSec and is common to DMVPN implementations in
general.

Add a "Protecting against unencrypted traffic leaks" section to the DMVPN
reference page explaining the behaviour and recommending an output filter
rule that drops GRE not matched by an outbound IPSec policy
(ipsec match-none-out). Note that this disables unencrypted GRE on the
node entirely, so coexisting plain GRE tunnels would stop working.

Apply the same rule in the Dual HUB Dual Cloud example on the VyOS nodes.

Co-authored-by: Daniil Baturin &lt;daniil@baturin.org&gt;

* docs(DMVPN): reflow DMVPN documentation for line length compliance

Reformat the DMVPN guide and dual-hub dual-cloud example to wrap
long lines and improve readability without changing the documented
behavior or configuration guidance.

---------

Co-authored-by: Daniil Baturin &lt;daniil@baturin.org&gt;</content>
</entry>
<entry>
<title>docs: clarify Google Cloud peer gateway wording</title>
<updated>2026-07-09T19:27:52+00:00</updated>
<author>
<name>Jeleel Muibi</name>
<email>jeleel-muibi@users.noreply.github.com</email>
</author>
<published>2026-07-09T19:27:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=7662f4c3684fbc684228e0bda2ef4594f49a0e9a'/>
<id>urn:sha1:7662f4c3684fbc684228e0bda2ef4594f49a0e9a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>docs: disable IPsec route autoinstall in GCP example</title>
<updated>2026-07-09T19:25:14+00:00</updated>
<author>
<name>Jeleel Muibi</name>
<email>jeleel-muibi@users.noreply.github.com</email>
</author>
<published>2026-07-09T19:25:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=6c3f55ab592927fdbe67739b33707eac02d2f57e'/>
<id>urn:sha1:6c3f55ab592927fdbe67739b33707eac02d2f57e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>docs: refine Google Cloud VPN example</title>
<updated>2026-07-09T19:21:55+00:00</updated>
<author>
<name>Jeleel Muibi</name>
<email>jeleel-muibi@users.noreply.github.com</email>
</author>
<published>2026-07-09T19:21:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-documentation.git/commit/?id=367585ea4de297f375c30424b78dd9dedab09874'/>
<id>urn:sha1:367585ea4de297f375c30424b78dd9dedab09874</id>
<content type='text'>
</content>
</entry>
</feed>
