vyos-documentation.git/docs/configuration/interfaces, branch secure-boot-updates

Merge pull request #2259 from vyos/T9354

2026-10-14T15:50:51+00:00

T9354: document "reconnect interface" operational command

openvpn: T9386: AEAD fallback ciphers can't be used with shared-secret-key

2026-10-09T13:41:29+00:00

Note that "encryption data-ciphers-fallback" only takes CBC ciphers together with "shared-secret-key".

Merge pull request #2324 from mandelbitdev/T9370-openvpn-chacha20poly1305

2026-10-07T18:05:14+00:00

openvpn: T9370: document the chacha20poly1305 data cipher

2026-10-01T13:45:07+00:00

Add chacha20poly1305 to "encryption data-ciphers" and "encryption data-ciphers-fallback".

openvpn: T9364: document the mtu option

2026-09-28T19:56:15+00:00

Document "interfaces openvpn mtu", its 1420 bytes default with DCO and its constraints.

T9354: document "reconnect interface" operational command

2026-09-25T19:15:00+00:00

PPPoE, SSTP client and WWAN interfaces can now be restarted with a single command which survives the loss of the CLI session, so it can be issued over the very interface being reconnected. The WWAN page gained the connect and disconnect commands as well - they have always been available there, but were only documented for PPPoE and SSTP. The command is also exposed by the HTTP API through a dedicated endpoint, which replaces the "reset connection" path that was previously used for this.

data-ciphers-fallback must required for s2s (#2235)

2026-09-11T12:42:09+00:00

Merge pull request #1865 from alexandr-san4ez/T8540-current

2026-06-23T10:39:53+00:00

pseudo-ethernet: T8540: Add anycast-gateway support for EVPN

2026-05-13T08:33:32+00:00

Introduce 'anycast-gateway' option for pseudo-ethernet interfaces. When set, a local FDB entry is installed on the parent bridge to prevent the shared anycast MAC from leaking over the VXLAN overlay.

chore: remove RST swap mechanism, archive rst-*.rst under docs/_rst_legacy/

2026-05-10T14:19:31+00:00

The swap mechanism (RST-as-fallback for migrated MD pages) is dormant — docs/_rst_overrides.txt has been empty since the MyST flip trio (#1899/#1900/#1901) landed in May 2026. The mechanism's surface area (scripts/swap_sources.py, its 245-line test, RTD pre/post hooks, Makefile glue, conf.py dynamic loader) is dead weight, and the rst-*.rst shadows scattered across the source tree cause Context7's parser to misclassify the project as RST. Changes: - Move 253 rst-*.rst shadow files into docs/_rst_legacy/ preserving subdirectory structure. They remain in the repo for reference; Sphinx excludes the folder via exclude_patterns; Context7 excludes it via excludeFolders. - Strip swap_sources.py invocation from docs/Makefile (swap/restore targets, : swap deps, trap chains). - Strip jobs: pre_build/post_build block from .readthedocs.yml. - Strip rst-*.rst exclude entry and the _md_exclude.txt loader from docs/conf.py; replace with a single _rst_legacy exclude. - Delete scripts/swap_sources.py, tests/test_swap_sources.py, docs/_rst_overrides.txt. - Update context7.json: add docs/_rst_legacy to excludeFolders; fix stale "Branch current tracks…" rule to "Branch rolling tracks…" (default branch was renamed 2026-05-10). - Update AGENTS.md: drop the "RST override mechanism" section and the test-runner snippet for the deleted test; describe _rst_legacy as archive only. Verified: sphinx-build -b html with --keep-going produces identical warning set (68 unique), identical sitemap entry count (257), identical llms.txt entry count (22), zero rst-* URLs in any artifact. 🤖 Generated by [robots](https://vyos.io)