717 Commits

Author SHA1 Message Date
Christian Breunig
42fe1f06e7
Merge pull request #1435 from vyos/mergify/bp/sagitta/pr-1434
Firewall: add documentation for dynamic firewall groups. (backport #1434)
2024-05-10 14:24:22 +02:00
Nicolas Vollmar
fd4b7ff7fc
firewall: add missing interface name node 2024-05-10 14:23:31 +02:00
Nicolas Vollmar
dab2e1af9d firewall: T5729: remove obsolete enable and correct interface name
(cherry picked from commit a2c982709a765a007926e7af3c0d4e55310ab3b9)
2024-05-10 12:19:58 +00:00
Nataliia Solomko
8b85ad80c6 sstp: T4393: Add support to configure host-name (SNI)
(cherry picked from commit 30af00bd7f3b97e5aed539f42fbfc6eaa5535158)
2024-05-10 12:17:42 +00:00
Nicolas Fort
734c3d98f3 Firewall: add documentation for dynamic firewall groups.
(cherry picked from commit 245e133042b160ca9f28b4be13d2b5c8e0edba70)
2024-05-10 09:56:40 +00:00
Robert Göhler
f9eb141c15
Merge pull request #1431 from vyos/mergify/bp/sagitta/pr-1426
config-sync: adding initial user documentation for this feature (backport #1426)
2024-05-08 22:36:22 +02:00
Ginko
f20289325a config-sync: adding initial user documentation
(cherry picked from commit 07ae4323b3731061854e386bd53af5749862f031)
2024-05-08 20:35:00 +00:00
Nicolas Vollmar
903df8ede4 State correct rule on first reply
(cherry picked from commit 166d87e92df0b5bd6a8c57023a914086e296fd3f)
2024-05-08 20:34:08 +00:00
srividya0208
d6019e8c51 Modified old option from 'enable-default-log' to new one 'default-log'
(cherry picked from commit 0e98fdb64154011850ba5705b9c6f8e74868c955)
2024-05-06 19:27:47 +00:00
Nicolas Vollmar
2ceaae52ec Remove inexisting config option from example
(cherry picked from commit e29a23c2cae671c1097429774d918ead1faeb889)
2024-05-06 07:32:59 +02:00
aapostoliuk
5516a01b20 Fixed examples in accel-ppp services in IPv6 section
Fixed examples in accel-ppp services in IPv6 section

(cherry picked from commit 899acac204ba39b6d092ebc389e435a669d39258)
2024-05-05 20:48:34 +00:00
Aidan Gibson
8e80443bca Update ntp.rst
"leaf seond" -> leaf second

*.pool.ntp.org -> time*.vyos.net

(cherry picked from commit a21eeaaf10f126579c430710675f6c25d781df35)
2024-05-05 20:45:34 +00:00
André Luiz dos Santos
87b75d3e7e Update host-name.rst
(cherry picked from commit 4819f7129249039c0b3de6625f484b30b6e951b8)
2024-04-23 18:42:35 +00:00
Daniil Baturin
d4d837d67e
Merge pull request #1384 from vyos/mergify/bp/sagitta/pr-1383
T6242: reverse-proxy: Document new backend option ssl no-verify (backport #1383)
2024-04-19 13:47:52 +02:00
Robert Göhler
ae1e612783
Merge pull request #1395 from vyos/mergify/bp/sagitta/pr-1390
ethernet: Add details about LRO/GRO (backport #1390)
2024-04-18 14:49:11 +02:00
Matthew Kobayashi
022ecd9b04 ethernet: Add details about LRO/GRO
(cherry picked from commit 0130485ced95e2d79ae27b77d8a5591469cfec46)
2024-04-18 12:48:30 +00:00
Matthew Kobayashi
281965e052 traffic-policy: Add CAKE documentation
(cherry picked from commit 99a3b2a3ac2b58615346a5c02811dc40e7247f48)
2024-04-18 12:46:26 +00:00
rebortg
deb44d8856 fix several build warnings and errors 2024-04-16 21:58:21 +02:00
Alex W
df877ff5af T6242: reverse-proxy: Document new backend option ssl no-verify
(cherry picked from commit 6703aeb43338c901f794e6e28affe5bdee3e4a1e)

# Conflicts:
#	docs/configuration/loadbalancing/reverse-proxy.rst
2024-04-16 18:35:31 +00:00
Antonios Chariton (daknob)
3e64005907 Fix indentation in RPKI document (tabs to spaces)
(cherry picked from commit ea0fe640b495458d9f2391a66bfaea2dedf54ffe)
2024-04-09 19:27:16 +00:00
Antonios Chariton (daknob)
9f115d1957 Refresh RPKI Document
- Rephrase introduction slightly
- Replace GoRTR w/ StayRTR (official CF deprecation and assignment of succesor)
- Add rpki-client (probably the best software to use with StayRTR)
- Remove RIPE RPKI Validator (deprecated)
- Replace RIPE's instructions (deprecated) with NLnet Labs'
- Update ROA coverage metrics (yay for 20% -> 60% ROA coverage!)
- Add missing Oxford comma
- Replace RIPE's deprecated test with Cloudflare's

(cherry picked from commit 5befda2a24e29e6579b5c1ce17b57bac6969f28d)
2024-04-09 19:27:16 +00:00
Robert Göhler
bba2a85660
Merge pull request #1374 from vyos/mergify/bp/sagitta/pr-1367
Failover - Slight rephrase of initial summary paragraph. (backport #1367)
2024-04-09 21:22:29 +02:00
Chrisc-c-c
62e8dbba0b Failover - Slight rephrase of initial summary paragraph.
(cherry picked from commit 7f25bd580e990a23f2fccfacc09d1522121109df)
2024-04-09 19:21:15 +00:00
Chrisc-c-c
12eea1750d Fixed minor typo in loopback.rst
(cherry picked from commit 334f4a036533f8748a899d51be0fdc39ea26aba5)
2024-04-09 19:21:12 +00:00
Christian Breunig
af29c78e41
Merge pull request #1360 from vyos/mergify/bp/sagitta/pr-1352
conntrack-sync: T1244: Support for StartupResync in conntrackd (backport #1352)
2024-04-07 16:25:16 +02:00
Nataliia Solomko
d2a3af453e conntrack-sync: T1244: Support for StartupResync in conntrackd
(cherry picked from commit 2b32a2e134ec4dcb1a574fd405147aeb9644abdb)
2024-04-07 16:24:47 +02:00
Antonios Chariton (daknob)
9fe4b8a936 Fix mistake in RPKI documentation about the use of TLS
HTTP is not used for RPKI information, the RTR protocol is used, which works on
top of plain TCP. Although some implementations can use TLS, VyOS (and FRR) do
not support it, and use either plain TCP or SSH.

(cherry picked from commit edbf8846059a9f3e2d5a6bdf8227f97f5d79da4f)
2024-04-07 16:21:59 +02:00
Nataliia Solomko
dd9c1a052f conntrack-sync: T1244: Support for StartupResync in conntrackd
(cherry picked from commit f4e6d33a06e6125419900723ae7dc02fe264059d)

# Conflicts:
#	docs/configuration/service/conntrack-sync.rst
2024-04-07 14:20:58 +00:00
Davide Beatrici
2723690178 Firewall: Fix typo "addtion" -> "addition"
(cherry picked from commit a55f214ab44253a444a958be4975e143ab5d83d4)
2024-04-07 14:18:55 +00:00
Christian Breunig
4bc89c76b5 container: T6208: rename "cap-add" CLI node to "capability"
(cherry picked from commit d33a54f084ebf2c1632031bdf0122a0c7f72066a)
2024-04-07 14:17:51 +00:00
srividya0208
f9203543fc openvpn option: "--client-cert-not-required" is not acceepted
(cherry picked from commit 95a666510d1fdc685d20c7e6ed88654b438c0ac5)
2024-04-04 10:06:41 +00:00
Ginko (Giggum)
27970f7a20 T5614: extend ipv4 firewall documentation on conntrack-helper matching 2024-03-25 10:50:42 -04:00
Christian Breunig
2f773ca216 bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType
value of 0x88A8 is required.

Reusing CLI command from VIF-S (QinQ) interfaces:
  set interfaces bridge br0 protocol 802.1ad

(cherry picked from commit a7f2e520cbf8b24ccb5e266b5d4c739588aed48e)
2024-03-21 13:43:36 +00:00
Christian Breunig
8bb38d5112 policy: T6129: add route-map option "as-path exclude all"
(cherry picked from commit d578921431ba8c9eb5f7bbd7531b667e465cc2c5)
2024-03-17 17:21:07 +00:00
Christian Breunig
d903bbc543 radvd: T6118: add nat64prefix support RFC8781
(cherry picked from commit 7611b9be992c29bc0919072cc7df7519afa0b441)
2024-03-17 08:21:54 +00:00
khramshinr
659a95161c T6020:vrrp health-check script not applied correctly in keepalived.conf
New path was added to sync-group config tree

(cherry picked from commit 25b9e5f1ff2aaffb40a03b2c6e20327e39c41eba)
2024-03-07 16:26:18 +00:00
Ginko (Giggum)
0f413beec1 Fixed line wrapping for previous PR #1313 2024-03-06 13:51:09 -05:00
Ginko (Giggum)
5a6aa7506d Rewrote Dynamic DNS documentation/examples to align with T5791 2024-03-06 13:15:26 -05:00
rebortg
7385cfe0d4 backport all firewall based documentation 2024-03-05 21:51:37 +01:00
Robert Göhler
951c56bce1
Merge pull request #1309 from vyos/mergify/bp/sagitta/pr-1300
Rewritten the SSTP server documentation (backport #1300)
2024-03-05 21:41:40 +01:00
Robert Göhler
26d5585bf8
Update sstp.rst 2024-03-05 21:38:12 +01:00
aapostoliuk
0316ea57c6 Rewritten the PPTP server documentation
Fully rewritten PPTP server documentation.

(cherry picked from commit 8cb0070b51edf550189a9ccf5f1a92bf537c3572)
2024-03-05 20:27:59 +00:00
aapostoliuk
fb9775d571 Rewritten the SSTP server documentation
Fully rewritten SSTP server documentation.

(cherry picked from commit d71c4607fa0c330a3c6269811b2126a25ceb91f7)

# Conflicts:
#	docs/configuration/vpn/sstp.rst
2024-03-05 20:27:58 +00:00
Christian Breunig
7943e5513c T2447: add configurable kernel boot option 'disable-power-saving'
Lower available CPU C states to a minimum if this option set. This will set
Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1".

(cherry picked from commit f0324d8a03c0c0cd7ed250b722ca4a2aff55f617)
2024-03-05 19:35:49 +00:00
Christian Breunig
4263ff840a ipv6: improve PPPoE and RA examples
(cherry picked from commit 62b36a812a922ad6fc17f636bba029e463f35d49)
2024-03-03 10:01:23 +01:00
aapostoliuk
e4d66ef8e3 Fixing IPoE and PPPoE documentation
Fixing IPoE and PPPoE documentation

(cherry picked from commit 7f9b031aeffeeb48201c7d51df71fc58191b4138)
2024-02-28 21:28:26 +00:00
aapostoliuk
7952a12917 Rewritten the IPoE server documentation
Fully rewritten IPoE server documentation.

(cherry picked from commit 2c3553ef8828748fdbd4938f758e6bfb6170f869)
2024-02-27 20:22:27 +00:00
Christian Breunig
e30e9608d6 ipsec: add IKEv2 road-warrior documentation
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
bb1abfb3fb Rewritten the PPPoE server documentation
Fully rewritten PPPoE server documentation.

(cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
2024-02-26 21:32:01 +00:00
aapostoliuk
859a9ee449 Rewritten the L2TP documentation
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints

(cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
2024-02-26 20:02:52 +00:00