vyos-documentation.git/docs, branch circinus

docs: update flowtable and ethernet/bonding documentation (#2106) (#2155)

2026-08-04T16:31:27+00:00

* docs: update flowtable and ethernet/bonding documentation * Removing Netfilter word and add the identification of the interfaces to use FlowTables * Fixed warning from commit:c433e15 * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * cfgmc structure and sub-interface offload fixed * Fixed conflicts on flowtable documentation * revert ethernet.md and fixed the latest infos * added subsection to the checks section to show offloaded traffic for sub-interfaces * Final changes * Changed conntrack -L to VyOS command * Replacing new output description with VyOS command --------- (cherry picked from commit a0067e0fbc8c3bee2af6701b3542eb013146fcf8) Co-authored-by: jvela-dot Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

docs: Update Event handler page to VyOS 1.5 standards (backport #2130) (#2156)

2026-08-04T16:30:27+00:00

* docs: Update Event handler page to VyOS 1.5 standards (#2130) * docs: Update Event handler page to VyOS 1.5 standards * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (cherry picked from commit d08dbfacca29aa1e9750468293dd00910ad775ee) * Use "event handler" styling in text and remove the mention of netplugd since it's replaced by vyos-netlinkd in rolling already Co-authored-by: Daniil Baturin --------- Co-authored-by: LiudmylaNad Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Daniil Baturin Co-authored-by: Daniil Baturin

docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks (#2136) (#2144)

2026-08-04T10:15:07+00:00

* docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks In DMVPN the mGRE tunnel and the IPSec protecting it are handled independently, so GRE can be forwarded while no IPSec SA is active for a peer (e.g. while an SA is still being negotiated or after one expires), allowing unencrypted GRE to leave the router. This is inherent to combining GRE with IPSec and is common to DMVPN implementations in general. Add a "Protecting against unencrypted traffic leaks" section to the DMVPN reference page explaining the behaviour and recommending an output filter rule that drops GRE not matched by an outbound IPSec policy (ipsec match-none-out). Note that this disables unencrypted GRE on the node entirely, so coexisting plain GRE tunnels would stop working. Apply the same rule in the Dual HUB Dual Cloud example on the VyOS nodes. * docs(DMVPN): reflow DMVPN documentation for line length compliance Reformat the DMVPN guide and dual-hub dual-cloud example to wrap long lines and improve readability without changing the documented behavior or configuration guidance. --------- (cherry picked from commit 50acf8f188475b0554b99a739cb8ada12d51e77b) Co-authored-by: zdc Co-authored-by: Daniil Baturin

vyos-api: clarify comment regarding commit failure and partial commits (#2178) (#2180)

2026-08-04T09:44:24+00:00

(cherry picked from commit 4631db6a1578550dd4c1410a8416575899f36936) Co-authored-by: John Estabrook

Merge pull request #2157 from vyos/mergify/bp/circinus/pr-2152

2026-08-03T13:40:49+00:00

vyos-api: fill automation API doc gaps (T9087–T9092) (backport #2152)

docs(Installation): Remove outdated portal link and Proxmox/KVM cloud… (backport #2176) (#2179)

2026-07-31T11:30:58+00:00

* docs(Installation): Remove outdated portal link and Proxmox/KVM cloud-init note (Manual backport of Liudmyla's original for rolling) * Break long lines in install.md to pass the linter check --------- Co-authored-by: Daniil Baturin

docs: exclude superpowers/ from the Sphinx build (#2167)

2026-07-28T09:14:14+00:00

`docs/superpowers/` holds Claude Code plugin-generated internal design specs and plans, not user documentation. Adding `superpowers` to `exclude_patterns` guards against Sphinx ever picking the directory up and publishing it should it reappear in the source tree. Guard only — the content itself was already removed in 3ab97e71 and abb8be5b. (cherry picked from commit a9dc16aac2a7e7a6e5e4bb1c19897b3d707ba4d1) Co-authored-by: Yuriy Andamasov

vyos-api: T9087: T9092: apply review feedback (line length, retry safety)

2026-07-21T13:09:02+00:00

Convert the multi-field-node table to wrapped list items per the 80-char docs guideline, and rework the bulk-apply bullet to reconcile state before retrying after a timeout instead of recommending blind retries. Co-Authored-By: Claude Fable 5 (cherry picked from commit 2510eefadc8e7520e7f85f45a2b29fdab634474a)

vyos-api: T9087: tighten firewall same-request wording (review feedback)

2026-07-21T13:09:02+00:00

Only port/port-group require protocol in the same request; description alone is fine on an existing rule but fails on a rule no request has created yet. Co-Authored-By: Claude Fable 5 (cherry picked from commit 9e90088827c53f8d61e82e2e29910a9346009e87)

vyos-api: T9092: add bulk configuration guidance

2026-07-21T13:09:02+00:00

Batch sizing, geoip/remote-group commit cost, the 1 MB request-body-size-limit, and commit-confirm as a remote safety net. Co-Authored-By: Claude Fable 5 (cherry picked from commit af04731c74b0383bc36c66addd6cc22ba41c55e0)