summaryrefslogtreecommitdiff
path: root/docs/configuration
AgeCommit message (Collapse)Author
2024-04-16T6242: reverse-proxy: Document new backend option ssl no-verifyAlex W
(cherry picked from commit 6703aeb43338c901f794e6e28affe5bdee3e4a1e) # Conflicts: # docs/configuration/loadbalancing/reverse-proxy.rst
2024-04-09Fix indentation in RPKI document (tabs to spaces)Antonios Chariton (daknob)
(cherry picked from commit ea0fe640b495458d9f2391a66bfaea2dedf54ffe)
2024-04-09Refresh RPKI DocumentAntonios Chariton (daknob)
- Rephrase introduction slightly - Replace GoRTR w/ StayRTR (official CF deprecation and assignment of succesor) - Add rpki-client (probably the best software to use with StayRTR) - Remove RIPE RPKI Validator (deprecated) - Replace RIPE's instructions (deprecated) with NLnet Labs' - Update ROA coverage metrics (yay for 20% -> 60% ROA coverage!) - Add missing Oxford comma - Replace RIPE's deprecated test with Cloudflare's (cherry picked from commit 5befda2a24e29e6579b5c1ce17b57bac6969f28d)
2024-04-09Merge pull request #1374 from vyos/mergify/bp/sagitta/pr-1367Robert Göhler
Failover - Slight rephrase of initial summary paragraph. (backport #1367)
2024-04-09Failover - Slight rephrase of initial summary paragraph.Chrisc-c-c
(cherry picked from commit 7f25bd580e990a23f2fccfacc09d1522121109df)
2024-04-09Fixed minor typo in loopback.rstChrisc-c-c
(cherry picked from commit 334f4a036533f8748a899d51be0fdc39ea26aba5)
2024-04-07Merge pull request #1360 from vyos/mergify/bp/sagitta/pr-1352Christian Breunig
conntrack-sync: T1244: Support for StartupResync in conntrackd (backport #1352)
2024-04-07conntrack-sync: T1244: Support for StartupResync in conntrackdNataliia Solomko
(cherry picked from commit 2b32a2e134ec4dcb1a574fd405147aeb9644abdb)
2024-04-07Fix mistake in RPKI documentation about the use of TLSAntonios Chariton (daknob)
HTTP is not used for RPKI information, the RTR protocol is used, which works on top of plain TCP. Although some implementations can use TLS, VyOS (and FRR) do not support it, and use either plain TCP or SSH. (cherry picked from commit edbf8846059a9f3e2d5a6bdf8227f97f5d79da4f)
2024-04-07conntrack-sync: T1244: Support for StartupResync in conntrackdNataliia Solomko
(cherry picked from commit f4e6d33a06e6125419900723ae7dc02fe264059d) # Conflicts: # docs/configuration/service/conntrack-sync.rst
2024-04-07Firewall: Fix typo "addtion" -> "addition"Davide Beatrici
(cherry picked from commit a55f214ab44253a444a958be4975e143ab5d83d4)
2024-04-07container: T6208: rename "cap-add" CLI node to "capability"Christian Breunig
(cherry picked from commit d33a54f084ebf2c1632031bdf0122a0c7f72066a)
2024-04-04openvpn option: "--client-cert-not-required" is not acceeptedsrividya0208
(cherry picked from commit 95a666510d1fdc685d20c7e6ed88654b438c0ac5)
2024-03-25T5614: extend ipv4 firewall documentation on conntrack-helper matchingGinko (Giggum)
2024-03-21bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filteringChristian Breunig
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType value of 0x88A8 is required. Reusing CLI command from VIF-S (QinQ) interfaces: set interfaces bridge br0 protocol 802.1ad (cherry picked from commit a7f2e520cbf8b24ccb5e266b5d4c739588aed48e)
2024-03-17policy: T6129: add route-map option "as-path exclude all"Christian Breunig
(cherry picked from commit d578921431ba8c9eb5f7bbd7531b667e465cc2c5)
2024-03-17radvd: T6118: add nat64prefix support RFC8781Christian Breunig
(cherry picked from commit 7611b9be992c29bc0919072cc7df7519afa0b441)
2024-03-07T6020:vrrp health-check script not applied correctly in keepalived.confkhramshinr
New path was added to sync-group config tree (cherry picked from commit 25b9e5f1ff2aaffb40a03b2c6e20327e39c41eba)
2024-03-06Fixed line wrapping for previous PR #1313Ginko (Giggum)
2024-03-06Rewrote Dynamic DNS documentation/examples to align with T5791Ginko (Giggum)
2024-03-05backport all firewall based documentationrebortg
2024-03-05Merge pull request #1309 from vyos/mergify/bp/sagitta/pr-1300Robert Göhler
Rewritten the SSTP server documentation (backport #1300)
2024-03-05Update sstp.rstRobert Göhler
2024-03-05Rewritten the PPTP server documentationaapostoliuk
Fully rewritten PPTP server documentation. (cherry picked from commit 8cb0070b51edf550189a9ccf5f1a92bf537c3572)
2024-03-05Rewritten the SSTP server documentationaapostoliuk
Fully rewritten SSTP server documentation. (cherry picked from commit d71c4607fa0c330a3c6269811b2126a25ceb91f7) # Conflicts: # docs/configuration/vpn/sstp.rst
2024-03-05T2447: add configurable kernel boot option 'disable-power-saving'Christian Breunig
Lower available CPU C states to a minimum if this option set. This will set Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1". (cherry picked from commit f0324d8a03c0c0cd7ed250b722ca4a2aff55f617)
2024-03-03ipv6: improve PPPoE and RA examplesChristian Breunig
(cherry picked from commit 62b36a812a922ad6fc17f636bba029e463f35d49)
2024-02-28Fixing IPoE and PPPoE documentationaapostoliuk
Fixing IPoE and PPPoE documentation (cherry picked from commit 7f9b031aeffeeb48201c7d51df71fc58191b4138)
2024-02-27Rewritten the IPoE server documentationaapostoliuk
Fully rewritten IPoE server documentation. (cherry picked from commit 2c3553ef8828748fdbd4938f758e6bfb6170f869)
2024-02-27ipsec: add IKEv2 road-warrior documentationChristian Breunig
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-26Rewritten the PPPoE server documentationaapostoliuk
Fully rewritten PPPoE server documentation. (cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
2024-02-26Rewritten the L2TP documentationaapostoliuk
Rewritten the L2TP documentation Added the example 'PPPoE over L2TP' to blueprints (cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
2024-02-24container: add missing CLI command definitionsChristian Breunig
(cherry picked from commit 3bac18ee5271e5af0ee6a200e0a04b8c6bfe07bd)
2024-02-17login: T5972: add possibility to disable individual local user accountsChristian Breunig
(cherry picked from commit e6b534942b8eaedfc3a6290f97d0040e61179b79)
2024-02-16T6001: add option to disable next-hop-tracking resolve-via-default in VRF ↵Christian Breunig
context (cherry picked from commit abaf9814502b931fa81b4af9b3953880825b57f4)
2024-02-16T6001: add option to disable next-hop-tracking resolve-via-defaultChristian Breunig
(cherry picked from commit 7a6cc0cf0ff081b4367c212821c7bf125bbb7427)
2024-02-14Added information related to root-partition-auto-resizerebortg
(cherry picked from commit e50b510c0c5c980047bd77775a0c4d763aaa838b)
2024-02-14fix a forgotten "set"cfouche
(cherry picked from commit c9c5ac5cc8f74f2f20d72cd42a4d84e7d280e407)
2024-02-12srv6: T5849: add segment support to "protocols static route6"Christian Breunig
(cherry picked from commit c857be8ce1474b56711db76170ab7494771c2202)
2024-02-08rpki: T6023: add support for CLI knobs expire-interval and retry-intervalChristian Breunig
(cherry picked from commit 6b8c81855959b0b3c9e12530eecd9ba6ca25ad8e)
2024-02-08Merge pull request #1269 from vyos/mergify/bp/sagitta/pr-1267Robert Göhler
bgp: T6024: add additional missing FRR features (backport #1267)
2024-02-08T5971: Added PPP options documentationaapostoliuk
Added PPP options documentation (cherry picked from commit dd3537443d71b8a5481ad0e8fb1a8e4edd0ecb71)
2024-02-07bgp: T6024: add additional missing FRR featuresChristian Breunig
(cherry picked from commit 64d4513bc06a4ba610221442ba7e590470beb86d)
2024-02-02Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261Robert Göhler
container: T5955: set uid/gid for container (backport #1261)
2024-02-02Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250Robert Göhler
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
2024-02-02container: T5955: set uid/gid for containerPiotr Maksymiuk
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
2024-02-02T5979: add configurable kernel boot option 'disable-mitigations'Christian Breunig
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
2024-02-02Changed IPv6 pool documentation in accel-ppp servicesaapostoliuk
Changed IPv6 pool documentation in accel-ppp services to named IPv6 pools. https://vyos.dev/T5865 (cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
2024-02-01dns forwarding: T5687: Implement ECS settings for PowerDNS recursorkhramshinr
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
2024-01-30Adding first documentation regarding IDS and FastNetMon. Also a brief ↵Nicolas Fort
configuration example is provided. (cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)