VyOS readthedocs (mirror of https://github.com/vyos/vyos-documentation.git) https://git.amelek.net/vyos/vyos-documentation.git/atom?h=mergify%2Fbp%2Fcircinus%2Fpr-2188 2026-08-18T13:10:45+00:00 2026-08-18T13:10:45+00:00 LiudmylaNad l.nadolina@vyos.io 2026-08-14T13:26:13+00:00 urn:sha1:a1b13ead85d1cda128f5dc8e8f25a0ec8a912f4a * docs: Update IPoE server page to VyOS 1.5 standards * Minor corrections * Update ipoe-server.md (cherry picked from commit 224cc62db7dfe735526b62396861a57ded7d7985) 2026-08-14T14:11:13+00:00 RC r.chopra@vyos.io 2026-08-14T14:11:13+00:00 urn:sha1:2895e506469794d3123362b6a662cd4e4968e5f6 * docs:T8598: Add IPv6 peer-IID secret configuration for calling-sid option * docs: T8598: Fix linter for PPoE, L2TP, PPTP and SSTP documentation * Clarify that VyOS uses accel-ppp-ng Co-authored-by: Viacheslav Hletenko <seversss265@gmail.com> --------- Co-authored-by: Daniil Baturin <daniil@baturin.org> Co-authored-by: Viacheslav Hletenko <seversss265@gmail.com> 2026-08-14T11:51:05+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-08-14T11:51:05+00:00 urn:sha1:b7c1808530db1eb358c31f8885c07bcd2a026154 docs: clarify Proxmox NoCloud seed ISO attachment 2026-08-11T14:51:23+00:00 Jeleel Muibi jeleel-muibi@users.noreply.github.com 2026-08-11T14:51:23+00:00 urn:sha1:cf0e12d055daa8ab43887f9a49e9bc26b7bf78a8 2026-08-06T13:00:50+00:00 Jeleel Muibi jeleel-muibi@users.noreply.github.com 2026-07-09T17:10:26+00:00 urn:sha1:236741be92c5ab415c645c43e0261c03853d92b0 2026-08-04T16:31:27+00:00 mergify[bot] 37929162+mergify[bot]@users.noreply.github.com 2026-08-04T16:31:27+00:00 urn:sha1:d563063cf2e8d02ef63b407759cca17951b83b3b * docs: update flowtable and ethernet/bonding documentation * Removing Netfilter word and add the identification of the interfaces to use FlowTables * Fixed warning from commit:c433e15 * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * Update docs/configuration/firewall/flowtables.md * cfgmc structure and sub-interface offload fixed * Fixed conflicts on flowtable documentation * revert ethernet.md and fixed the latest infos * added subsection to the checks section to show offloaded traffic for sub-interfaces * Final changes * Changed conntrack -L to VyOS command * Replacing new output description with VyOS command --------- (cherry picked from commit a0067e0fbc8c3bee2af6701b3542eb013146fcf8) Co-authored-by: jvela-dot <j.vela@vyos.io> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> 2026-08-04T16:30:27+00:00 mergify[bot] 37929162+mergify[bot]@users.noreply.github.com 2026-08-04T16:30:27+00:00 urn:sha1:2b7a3b9dcf3f3f38d8e9a211f83e9d0bf2184b0a * docs: Update Event handler page to VyOS 1.5 standards (#2130) * docs: Update Event handler page to VyOS 1.5 standards * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (cherry picked from commit d08dbfacca29aa1e9750468293dd00910ad775ee) * Use "event handler" styling in text and remove the mention of netplugd since it's replaced by vyos-netlinkd in rolling already Co-authored-by: Daniil Baturin <daniil@baturin.org> --------- Co-authored-by: LiudmylaNad <l.nadolina@vyos.io> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Daniil Baturin <daniil@vyos.io> Co-authored-by: Daniil Baturin <daniil@baturin.org> 2026-08-04T10:15:07+00:00 mergify[bot] 37929162+mergify[bot]@users.noreply.github.com 2026-08-04T10:15:07+00:00 urn:sha1:c0dd3eabe5da57f772f325896a3869c21c061954 * docs(DMVPN): T4667: Add firewall rule to prevent unencrypted GRE leaks In DMVPN the mGRE tunnel and the IPSec protecting it are handled independently, so GRE can be forwarded while no IPSec SA is active for a peer (e.g. while an SA is still being negotiated or after one expires), allowing unencrypted GRE to leave the router. This is inherent to combining GRE with IPSec and is common to DMVPN implementations in general. Add a "Protecting against unencrypted traffic leaks" section to the DMVPN reference page explaining the behaviour and recommending an output filter rule that drops GRE not matched by an outbound IPSec policy (ipsec match-none-out). Note that this disables unencrypted GRE on the node entirely, so coexisting plain GRE tunnels would stop working. Apply the same rule in the Dual HUB Dual Cloud example on the VyOS nodes. * docs(DMVPN): reflow DMVPN documentation for line length compliance Reformat the DMVPN guide and dual-hub dual-cloud example to wrap long lines and improve readability without changing the documented behavior or configuration guidance. --------- (cherry picked from commit 50acf8f188475b0554b99a739cb8ada12d51e77b) Co-authored-by: zdc <zdc@users.noreply.github.com> Co-authored-by: Daniil Baturin <daniil@baturin.org> 2026-08-04T09:44:24+00:00 mergify[bot] 37929162+mergify[bot]@users.noreply.github.com 2026-08-04T09:44:24+00:00 urn:sha1:f13db9802c284166a5ff02dfcd5679034b368d89 (cherry picked from commit 4631db6a1578550dd4c1410a8416575899f36936) Co-authored-by: John Estabrook <jestabro@vyos.io> 2026-08-03T13:40:49+00:00 John Estabrook jestabro@vyos.io 2026-08-03T13:40:49+00:00 urn:sha1:ab1fa1ec1699c1636f44ed52e05b37646c707887 vyos-api: fill automation API doc gaps (T9087–T9092) (backport #2152)