Antonios Chariton (daknob)
9f115d1957
Refresh RPKI Document
...
- Rephrase introduction slightly
- Replace GoRTR w/ StayRTR (official CF deprecation and assignment of succesor)
- Add rpki-client (probably the best software to use with StayRTR)
- Remove RIPE RPKI Validator (deprecated)
- Replace RIPE's instructions (deprecated) with NLnet Labs'
- Update ROA coverage metrics (yay for 20% -> 60% ROA coverage!)
- Add missing Oxford comma
- Replace RIPE's deprecated test with Cloudflare's
(cherry picked from commit 5befda2a24e29e6579b5c1ce17b57bac6969f28d)
2024-04-09 19:27:16 +00:00
Robert Göhler
bba2a85660
Merge pull request #1374 from vyos/mergify/bp/sagitta/pr-1367
...
Failover - Slight rephrase of initial summary paragraph. (backport #1367 )
2024-04-09 21:22:29 +02:00
Chrisc-c-c
62e8dbba0b
Failover - Slight rephrase of initial summary paragraph.
...
(cherry picked from commit 7f25bd580e990a23f2fccfacc09d1522121109df)
2024-04-09 19:21:15 +00:00
Chrisc-c-c
12eea1750d
Fixed minor typo in loopback.rst
...
(cherry picked from commit 334f4a036533f8748a899d51be0fdc39ea26aba5)
2024-04-09 19:21:12 +00:00
Christian Breunig
af29c78e41
Merge pull request #1360 from vyos/mergify/bp/sagitta/pr-1352
...
conntrack-sync: T1244: Support for StartupResync in conntrackd (backport #1352 )
2024-04-07 16:25:16 +02:00
Nataliia Solomko
d2a3af453e
conntrack-sync: T1244: Support for StartupResync in conntrackd
...
(cherry picked from commit 2b32a2e134ec4dcb1a574fd405147aeb9644abdb)
2024-04-07 16:24:47 +02:00
Antonios Chariton (daknob)
9fe4b8a936
Fix mistake in RPKI documentation about the use of TLS
...
HTTP is not used for RPKI information, the RTR protocol is used, which works on
top of plain TCP. Although some implementations can use TLS, VyOS (and FRR) do
not support it, and use either plain TCP or SSH.
(cherry picked from commit edbf8846059a9f3e2d5a6bdf8227f97f5d79da4f)
2024-04-07 16:21:59 +02:00
Nataliia Solomko
dd9c1a052f
conntrack-sync: T1244: Support for StartupResync in conntrackd
...
(cherry picked from commit f4e6d33a06e6125419900723ae7dc02fe264059d)
# Conflicts:
# docs/configuration/service/conntrack-sync.rst
2024-04-07 14:20:58 +00:00
Davide Beatrici
2723690178
Firewall: Fix typo "addtion" -> "addition"
...
(cherry picked from commit a55f214ab44253a444a958be4975e143ab5d83d4)
2024-04-07 14:18:55 +00:00
Christian Breunig
4bc89c76b5
container: T6208: rename "cap-add" CLI node to "capability"
...
(cherry picked from commit d33a54f084ebf2c1632031bdf0122a0c7f72066a)
2024-04-07 14:17:51 +00:00
srividya0208
f9203543fc
openvpn option: "--client-cert-not-required" is not acceepted
...
(cherry picked from commit 95a666510d1fdc685d20c7e6ed88654b438c0ac5)
2024-04-04 10:06:41 +00:00
Ginko (Giggum)
27970f7a20
T5614: extend ipv4 firewall documentation on conntrack-helper matching
2024-03-25 10:50:42 -04:00
Christian Breunig
2f773ca216
bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering
...
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType
value of 0x88A8 is required.
Reusing CLI command from VIF-S (QinQ) interfaces:
set interfaces bridge br0 protocol 802.1ad
(cherry picked from commit a7f2e520cbf8b24ccb5e266b5d4c739588aed48e)
2024-03-21 13:43:36 +00:00
Christian Breunig
8bb38d5112
policy: T6129: add route-map option "as-path exclude all"
...
(cherry picked from commit d578921431ba8c9eb5f7bbd7531b667e465cc2c5)
2024-03-17 17:21:07 +00:00
Christian Breunig
d903bbc543
radvd: T6118: add nat64prefix support RFC8781
...
(cherry picked from commit 7611b9be992c29bc0919072cc7df7519afa0b441)
2024-03-17 08:21:54 +00:00
khramshinr
659a95161c
T6020:vrrp health-check script not applied correctly in keepalived.conf
...
New path was added to sync-group config tree
(cherry picked from commit 25b9e5f1ff2aaffb40a03b2c6e20327e39c41eba)
2024-03-07 16:26:18 +00:00
Ginko (Giggum)
0f413beec1
Fixed line wrapping for previous PR #1313
2024-03-06 13:51:09 -05:00
Ginko (Giggum)
5a6aa7506d
Rewrote Dynamic DNS documentation/examples to align with T5791
2024-03-06 13:15:26 -05:00
rebortg
7385cfe0d4
backport all firewall based documentation
2024-03-05 21:51:37 +01:00
Robert Göhler
951c56bce1
Merge pull request #1309 from vyos/mergify/bp/sagitta/pr-1300
...
Rewritten the SSTP server documentation (backport #1300 )
2024-03-05 21:41:40 +01:00
Robert Göhler
26d5585bf8
Update sstp.rst
2024-03-05 21:38:12 +01:00
aapostoliuk
0316ea57c6
Rewritten the PPTP server documentation
...
Fully rewritten PPTP server documentation.
(cherry picked from commit 8cb0070b51edf550189a9ccf5f1a92bf537c3572)
2024-03-05 20:27:59 +00:00
aapostoliuk
fb9775d571
Rewritten the SSTP server documentation
...
Fully rewritten SSTP server documentation.
(cherry picked from commit d71c4607fa0c330a3c6269811b2126a25ceb91f7)
# Conflicts:
# docs/configuration/vpn/sstp.rst
2024-03-05 20:27:58 +00:00
Christian Breunig
7943e5513c
T2447: add configurable kernel boot option 'disable-power-saving'
...
Lower available CPU C states to a minimum if this option set. This will set
Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1".
(cherry picked from commit f0324d8a03c0c0cd7ed250b722ca4a2aff55f617)
2024-03-05 19:35:49 +00:00
Christian Breunig
4263ff840a
ipv6: improve PPPoE and RA examples
...
(cherry picked from commit 62b36a812a922ad6fc17f636bba029e463f35d49)
2024-03-03 10:01:23 +01:00
aapostoliuk
e4d66ef8e3
Fixing IPoE and PPPoE documentation
...
Fixing IPoE and PPPoE documentation
(cherry picked from commit 7f9b031aeffeeb48201c7d51df71fc58191b4138)
2024-02-28 21:28:26 +00:00
aapostoliuk
7952a12917
Rewritten the IPoE server documentation
...
Fully rewritten IPoE server documentation.
(cherry picked from commit 2c3553ef8828748fdbd4938f758e6bfb6170f869)
2024-02-27 20:22:27 +00:00
Christian Breunig
e30e9608d6
ipsec: add IKEv2 road-warrior documentation
...
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
bb1abfb3fb
Rewritten the PPPoE server documentation
...
Fully rewritten PPPoE server documentation.
(cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
2024-02-26 21:32:01 +00:00
aapostoliuk
859a9ee449
Rewritten the L2TP documentation
...
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints
(cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
2024-02-26 20:02:52 +00:00
Christian Breunig
b0a96edc91
container: add missing CLI command definitions
...
(cherry picked from commit 3bac18ee5271e5af0ee6a200e0a04b8c6bfe07bd)
2024-02-24 09:43:09 +01:00
Christian Breunig
fc61840372
login: T5972: add possibility to disable individual local user accounts
...
(cherry picked from commit e6b534942b8eaedfc3a6290f97d0040e61179b79)
2024-02-17 11:13:13 +00:00
Christian Breunig
d96b22b46f
T6001: add option to disable next-hop-tracking resolve-via-default in VRF context
...
(cherry picked from commit abaf9814502b931fa81b4af9b3953880825b57f4)
2024-02-16 08:37:43 +00:00
Christian Breunig
e72e6c6e3d
T6001: add option to disable next-hop-tracking resolve-via-default
...
(cherry picked from commit 7a6cc0cf0ff081b4367c212821c7bf125bbb7427)
2024-02-16 08:37:43 +00:00
rebortg
7103937ac5
Added information related to root-partition-auto-resize
...
(cherry picked from commit e50b510c0c5c980047bd77775a0c4d763aaa838b)
2024-02-14 21:39:17 +01:00
cfouche
be81a4a967
fix a forgotten "set"
...
(cherry picked from commit c9c5ac5cc8f74f2f20d72cd42a4d84e7d280e407)
2024-02-14 20:31:50 +00:00
Christian Breunig
a0c81044cf
srv6: T5849: add segment support to "protocols static route6"
...
(cherry picked from commit c857be8ce1474b56711db76170ab7494771c2202)
2024-02-12 05:28:08 +00:00
Christian Breunig
3b08675325
rpki: T6023: add support for CLI knobs expire-interval and retry-interval
...
(cherry picked from commit 6b8c81855959b0b3c9e12530eecd9ba6ca25ad8e)
2024-02-08 22:02:16 +00:00
Robert Göhler
218c2bc974
Merge pull request #1269 from vyos/mergify/bp/sagitta/pr-1267
...
bgp: T6024: add additional missing FRR features (backport #1267 )
2024-02-08 10:07:13 +01:00
aapostoliuk
97dc32e5cd
T5971: Added PPP options documentation
...
Added PPP options documentation
(cherry picked from commit dd3537443d71b8a5481ad0e8fb1a8e4edd0ecb71)
2024-02-08 09:02:31 +00:00
Christian Breunig
2772d9d89d
bgp: T6024: add additional missing FRR features
...
(cherry picked from commit 64d4513bc06a4ba610221442ba7e590470beb86d)
2024-02-07 21:03:27 +00:00
Robert Göhler
5e13cabcbc
Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261
...
container: T5955: set uid/gid for container (backport #1261 )
2024-02-02 20:46:18 +01:00
Robert Göhler
f0a2ea8f8d
Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250
...
Changed IPv6 pool documentation in accel-ppp services (backport #1250 )
2024-02-02 20:46:03 +01:00
Piotr Maksymiuk
093d35107e
container: T5955: set uid/gid for container
...
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
2024-02-02 19:45:24 +00:00
Christian Breunig
95518d579e
T5979: add configurable kernel boot option 'disable-mitigations'
...
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
2024-02-02 20:19:41 +01:00
aapostoliuk
c07b6d69f1
Changed IPv6 pool documentation in accel-ppp services
...
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865
(cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
2024-02-02 08:03:57 +00:00
khramshinr
6f9d52dcb3
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor
...
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
2024-02-01 19:26:55 +00:00
Nicolas Fort
e2d80596eb
Adding first documentation regarding IDS and FastNetMon. Also a brief configuration example is provided.
...
(cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
2024-01-30 20:00:53 +00:00
Robert Göhler
7d34dafb63
Merge pull request #1253 from vyos/mergify/bp/sagitta/pr-1249
...
Updated DPD and close-action values in IPSEC (backport #1249 )
2024-01-25 15:19:04 +01:00
Christian Breunig
7b23beeb3c
bfd: T5967: add minimum-ttl option
...
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
2024-01-23 12:58:15 +01:00