vyos-documentation.git/docs/configuration, branch mergify/bp/circinus/pr-2136

docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks (#2136)

2026-07-10T15:35:14+00:00

* docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks In DMVPN the mGRE tunnel and the IPSec protecting it are handled independently, so GRE can be forwarded while no IPSec SA is active for a peer (e.g. while an SA is still being negotiated or after one expires), allowing unencrypted GRE to leave the router. This is inherent to combining GRE with IPSec and is common to DMVPN implementations in general. Add a "Protecting against unencrypted traffic leaks" section to the DMVPN reference page explaining the behaviour and recommending an output filter rule that drops GRE not matched by an outbound IPSec policy (ipsec match-none-out). Note that this disables unencrypted GRE on the node entirely, so coexisting plain GRE tunnels would stop working. Apply the same rule in the Dual HUB Dual Cloud example on the VyOS nodes. Co-authored-by: Daniil Baturin * docs(DMVPN): reflow DMVPN documentation for line length compliance Reformat the DMVPN guide and dual-hub dual-cloud example to wrap long lines and improve readability without changing the documented behavior or configuration guidance. --------- Co-authored-by: Daniil Baturin (cherry picked from commit 50acf8f188475b0554b99a739cb8ada12d51e77b)

bgp: T6573: add input/output queue limit CLI commands (#2123)

2026-07-01T10:22:33+00:00

(cherry picked from commit 9ad380fb7a1b122a605c7562124085e3200e30f0) Co-authored-by: Christian Breunig

DOCS: Backport 2117 (Revise Console server page) to Circinus (#2121)

2026-07-01T10:19:31+00:00

* DOCS: Backport 2117 (Revise Console server page) to Circinus * Update console-server.md

docs: Update TFTP server page to VyOS 1.5 standards (#2119) (#2122)

2026-06-30T10:12:47+00:00

* docs: Update TFTP server page to VyOS 1.5 standards * Update tftp-server.md (cherry picked from commit 8be9ced92fdc2b12b16aae9e438884acfd387faf) Co-authored-by: LiudmylaNad

docs: Update Config sync page to VyOS 1.5 standards (#2113) (#2114)

2026-06-23T10:25:32+00:00

* docs: Update Config sync page to VyOS 1.5 standards * Minor corrections * Update config-sync.md * Apply suggestion from @github-actions[bot] * Apply suggestion from @github-actions[bot] --------- (cherry picked from commit 228149f1a1d824b968b565f82c3ee73eb7ba489c) Co-authored-by: LiudmylaNad Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

syslog_update_T8983

2026-06-16T21:00:22+00:00

traffic-engineering: backport from rolling (#2104)

2026-06-16T09:00:42+00:00

Revert "docs: Update Traffic Engineering page to VyOS 1.5 standards (#2066) (…" (#2095)

2026-06-09T10:27:26+00:00

This reverts commit 6b88b233b56e7231fbdf0ed4644f741cf634b9ba.

docs: Update RPKI page to VyOS 1.5 standards (#2061) (#2093)

2026-06-09T10:21:38+00:00

* docs: Update RPKI page to VyOS 1.5 standards * Update rpki.md * Update rpki.md (cherry picked from commit 5d631ab0628d6b3266b14a7d25ad9e7b66035636) Co-authored-by: LiudmylaNad

docs: Update Traffic Engineering page to VyOS 1.5 standards (#2066) (#2092)

2026-06-09T10:18:32+00:00

* docs: Update Traffic Engineering page to VyOS 1.5 standards * Update traffic-engineering.md * Update traffic-engineering.md (cherry picked from commit 361ea4841449956af979eb24a0b4e2f869d6ebf2) # Conflicts: # docs/configuration/protocols/traffic-engineering.md Co-authored-by: LiudmylaNad