700 Commits

Author SHA1 Message Date
Christian Breunig
8e2932ebb4 pki: T5886: add support for ACME protocol (LetsEncrypt) 2024-01-05 22:55:37 +01:00
Christian Breunig
05215848a5 system: T5877: Shorten system domain-search config path
Documentation pdate for https://github.com/vyos/vyos-1x/pull/2718
2023-12-30 10:45:14 +01:00
Robert Göhler
cf1aa9900e
Merge pull request #1208 from nicolas-fort/conntrack-timeout
Conntrack timeout
2023-12-28 11:46:05 +01:00
Robert Göhler
b8bad89976
Merge pull request #1209 from fett0/http-security-headers
ocserv: add http-security-headers documentation
2023-12-28 11:39:17 +01:00
fett0
5933ffbe44 ocserv: add http-security-headers documentation 2023-12-27 16:37:24 -03:00
Nicolas Fort
3c4d9ec2e9 System Conntrack: update commands for timeout rules; update commands for ignore rules, since both ipv4 and ipv6 rules are supported. 2023-12-27 07:45:07 -03:00
Nicolas Fort
0893ca769b dhcp-server: update docs for op-mode command <show dhcp server leases> 2023-12-27 06:52:57 -03:00
Daniil Baturin
29162702a2
Merge pull request #988 from trilom/master
updating network name to reflect new limitation from 11 to 9
2023-12-26 12:54:42 +00:00
Christian Breunig
5e60a59962
Merge pull request #1203 from nicolas-fort/flowtabe-docs
Add configuration commands and brief example of firewall Flowtables. …
2023-12-26 13:21:27 +01:00
Nicolas Fort
0c5e77aea5 Add configuration commands and brief example of firewall Flowtables. Also re-add commands for firewall state policies, which now can eb found under <global-options> section 2023-12-26 08:55:02 -03:00
Viacheslav Hletenko
fd3073eef7 Add system update-check example
Add an example of online checking for updates
```
set system update-check auto-check
set system update-check url <url>
```
2023-12-25 17:23:32 +02:00
Christian Breunig
0ed155b055 snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp" 2023-12-25 09:14:05 +01:00
Christian Breunig
4aeedc96c2 frr: T4020: document multiple per daemon config knobs 2023-12-15 07:37:18 +01:00
Robert Göhler
c99f6c0180
Merge pull request #1179 from sever-sever/nat64
NAT64: Add example of configuration for NAT64
2023-12-11 20:24:23 +01:00
Robert Göhler
f05f2e2b73
Merge pull request #1178 from aapostoliuk/T5688-2-circinus
sstp: T5688: Fixed 'client-ip-pool' configuration in the example
2023-12-11 20:17:59 +01:00
Viacheslav Hletenko
9a049c0070 NAT64: Add example of configuration for NAT64
Add a simple description and example of NAT64
2023-12-08 20:49:54 +02:00
aapostoliuk
f8e26888b9 sstp: T5688: Fixed 'client-ip-pool' configuration in the example
Fixed 'client-ip-pool' configuration in the example
2023-12-08 10:53:21 +02:00
Robert Göhler
4144d78284
Merge pull request #1176 from aapostoliuk/T5688-circunis
accel-ppp: T5688: Changing CLI to create client address pool
2023-12-07 14:17:00 +01:00
Robert Göhler
3c101fedf3
Merge pull request #1175 from nicolas-fort/FWL_UPDATE
Firewall: update firewall bridge docs, and general diagram.
2023-12-07 14:04:52 +01:00
Robert Göhler
cfe60a5644
Merge pull request #1174 from srividya0208/minor_errors
"show ipv6 bgp" command is not available so replaced with show bgp ipv6
2023-12-07 13:45:01 +01:00
Robert Göhler
3a7c582daa
Merge pull request #1173 from aapostoliuk/T4704-circinus
policy: T4704: Added set metric (MED) to (+/-)rtt in route-map
2023-12-07 13:43:36 +01:00
Nicolas Fort
6e545b86f8 Firewall: update firewall bridge docs, and general diagram. Add minor fix to ipv4 firewall doc, and update ipv6 2023-12-06 08:37:44 -03:00
aapostoliuk
1096cbcf95 accel-ppp: T5688: Changing CLI to create client address pool
Changing CLI to create client address pool
2023-12-05 17:30:16 +02:00
srividya0208
4761be6a44 "show ipv6 bgp" command is not available so replaced with show bgp ipv6 2023-12-04 06:24:36 -05:00
aapostoliuk
a78504e95c policy: T4704: Added set metric (MED) to (+/-)rtt in route-map
Added set metric (MED) to (+/-)rtt in route-map
2023-12-04 11:20:52 +02:00
Cheeze_It
b4b3fb12e2 Add ISIS fast reroute documentation
Adding basic descriptions of ISIS fast reroute documentation. Sadly it's sparse because FRR didn't really document it very deeply. But we'll get more as time goes on.
2023-12-03 15:08:55 -07:00
Christian Breunig
0429c31788 vpn: update site2site VTI example 2023-12-02 20:54:27 +01:00
rebortg
d4d3efe7fb fix build and ref warnings 2023-11-30 10:26:50 +01:00
Robert Göhler
7e8c713d45
Merge pull request #1162 from nicolas-fort/RemoveLegacy
Firewall: Remove <Legacy> firewall documentation from current branch.…
2023-11-29 22:12:17 +01:00
Nicolas Fort
165d180109 Firewall: Remove <Legacy> firewall documentation from current branch. 1.5 was born with new firewall structure, so no need to include this information. 2023-11-27 07:20:56 -03:00
Christian Breunig
5953d6f697 ipsec: gre: use dummy interface in example over loopback 2023-11-24 21:29:42 +01:00
Robert Göhler
9a7daff149
Merge pull request #1160 from tooeffayy/circinus-mdns-example-fix
Fix mDNS documentation to correct Example issue
2023-11-23 20:48:26 +01:00
Christian Breunig
f8c2d48a4d
Merge pull request #1155 from vyos/t5753-vxlan-vnifilter
vxlan: T5753: add support for VNI filtering
2023-11-22 11:06:00 +01:00
Christian Breunig
2e3510f988 http: T5762: rename "virtual-host listen-port" -> "virtual-host port" 2023-11-22 11:05:25 +01:00
tooeffayy
9cec1113fd Fix mDNS documentation to correct Example issue 2023-11-21 18:05:15 -05:00
Robert Göhler
ca33735cfc
Merge pull request #1156 from greenpsi/wireguard-pki-update
Update wireguard pki command syntax
2023-11-21 20:37:51 +01:00
Christian Breunig
12ffd3e638 http: T5762: api: make API socket backend communication the one and only default
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn
backend server.

https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests.

While debugging those failing, it was uncovered, that uvicorn only listens on
IPv4 connections

vyos@vyos# netstat -tulnp | grep 8080
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -

As the CLI already has an option to move the API communication from an IP to a
UNIX domain socket, the best idea is to make this the default way of
communication, as we never directly talk to the API server but rather use the
NGINX reverse proxy.
2023-11-21 08:22:39 +01:00
Christian Breunig
c8f8c2d10c vxlan: T5753: add support for VNI filtering 2023-11-18 19:57:43 +01:00
greenpsi
c32a5a06c4 Update wireguard pki command syntax 2023-11-17 00:15:04 +01:00
greenpsi
f0349e7f1f Nat update
Update some nat commands to new syntax
2023-11-16 00:19:59 +01:00
Christian Breunig
9e9f2755a8
Merge pull request #1151 from vyos/frr-pim-T5733
pim: igmp: T5733: adjust to latest CLI syntax
2023-11-15 18:21:41 +01:00
Christian Breunig
2de650e60c pim: igmp: T5733: adjust to latest CLI syntax 2023-11-13 21:29:52 +01:00
Robert Göhler
092965a217
Update flowtables.rst 2023-11-13 11:16:14 +01:00
Robert Göhler
f59bff9cdd
Merge pull request #1144 from nicolas-fort/fwall-nat-update
Fwall nat update
2023-11-12 21:43:16 +01:00
Robert Göhler
2c14b973a3
Update flowtables.rst 2023-11-12 21:42:49 +01:00
Indrajit Raychaudhuri
510485fd14 mdns: T5227, T5615, T5719: Update mDNS documentation for additional options
Add mdns repeater docs for additional conf-mode and op-mode options.
2023-11-09 22:00:25 -06:00
Daniil Baturin
e4785773bf
Merge pull request #1146 from srividya0208/minor_errors
correction of typos
2023-11-09 13:27:19 +00:00
srividya0208
040472e043 correction of typos 2023-11-09 08:19:04 -05:00
Nicolas Fort
b6c3c7f40a Firewall Update: improve documentation and split file for better experience while reading. Add brief notes regarding Flowtables and Bridge firewall, leaving a note that those documents are still under development. New explanation for Netfilter based firewall, which includes new diagrams. 2023-11-08 13:51:47 -03:00
Robert Göhler
8a1d41b7f1
Merge pull request #1127 from JeffWDH/master
Update ssh.rst
2023-11-07 21:27:00 +01:00