697 Commits

Author SHA1 Message Date
Antonios Chariton (daknob)
9f115d1957 Refresh RPKI Document
- Rephrase introduction slightly
- Replace GoRTR w/ StayRTR (official CF deprecation and assignment of succesor)
- Add rpki-client (probably the best software to use with StayRTR)
- Remove RIPE RPKI Validator (deprecated)
- Replace RIPE's instructions (deprecated) with NLnet Labs'
- Update ROA coverage metrics (yay for 20% -> 60% ROA coverage!)
- Add missing Oxford comma
- Replace RIPE's deprecated test with Cloudflare's

(cherry picked from commit 5befda2a24e29e6579b5c1ce17b57bac6969f28d)
2024-04-09 19:27:16 +00:00
Robert Göhler
bba2a85660
Merge pull request #1374 from vyos/mergify/bp/sagitta/pr-1367
Failover - Slight rephrase of initial summary paragraph. (backport #1367)
2024-04-09 21:22:29 +02:00
Chrisc-c-c
62e8dbba0b Failover - Slight rephrase of initial summary paragraph.
(cherry picked from commit 7f25bd580e990a23f2fccfacc09d1522121109df)
2024-04-09 19:21:15 +00:00
Chrisc-c-c
12eea1750d Fixed minor typo in loopback.rst
(cherry picked from commit 334f4a036533f8748a899d51be0fdc39ea26aba5)
2024-04-09 19:21:12 +00:00
Christian Breunig
af29c78e41
Merge pull request #1360 from vyos/mergify/bp/sagitta/pr-1352
conntrack-sync: T1244: Support for StartupResync in conntrackd (backport #1352)
2024-04-07 16:25:16 +02:00
Nataliia Solomko
d2a3af453e conntrack-sync: T1244: Support for StartupResync in conntrackd
(cherry picked from commit 2b32a2e134ec4dcb1a574fd405147aeb9644abdb)
2024-04-07 16:24:47 +02:00
Antonios Chariton (daknob)
9fe4b8a936 Fix mistake in RPKI documentation about the use of TLS
HTTP is not used for RPKI information, the RTR protocol is used, which works on
top of plain TCP. Although some implementations can use TLS, VyOS (and FRR) do
not support it, and use either plain TCP or SSH.

(cherry picked from commit edbf8846059a9f3e2d5a6bdf8227f97f5d79da4f)
2024-04-07 16:21:59 +02:00
Nataliia Solomko
dd9c1a052f conntrack-sync: T1244: Support for StartupResync in conntrackd
(cherry picked from commit f4e6d33a06e6125419900723ae7dc02fe264059d)

# Conflicts:
#	docs/configuration/service/conntrack-sync.rst
2024-04-07 14:20:58 +00:00
Davide Beatrici
2723690178 Firewall: Fix typo "addtion" -> "addition"
(cherry picked from commit a55f214ab44253a444a958be4975e143ab5d83d4)
2024-04-07 14:18:55 +00:00
Christian Breunig
4bc89c76b5 container: T6208: rename "cap-add" CLI node to "capability"
(cherry picked from commit d33a54f084ebf2c1632031bdf0122a0c7f72066a)
2024-04-07 14:17:51 +00:00
srividya0208
f9203543fc openvpn option: "--client-cert-not-required" is not acceepted
(cherry picked from commit 95a666510d1fdc685d20c7e6ed88654b438c0ac5)
2024-04-04 10:06:41 +00:00
Ginko (Giggum)
27970f7a20 T5614: extend ipv4 firewall documentation on conntrack-helper matching 2024-03-25 10:50:42 -04:00
Christian Breunig
2f773ca216 bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType
value of 0x88A8 is required.

Reusing CLI command from VIF-S (QinQ) interfaces:
  set interfaces bridge br0 protocol 802.1ad

(cherry picked from commit a7f2e520cbf8b24ccb5e266b5d4c739588aed48e)
2024-03-21 13:43:36 +00:00
Christian Breunig
8bb38d5112 policy: T6129: add route-map option "as-path exclude all"
(cherry picked from commit d578921431ba8c9eb5f7bbd7531b667e465cc2c5)
2024-03-17 17:21:07 +00:00
Christian Breunig
d903bbc543 radvd: T6118: add nat64prefix support RFC8781
(cherry picked from commit 7611b9be992c29bc0919072cc7df7519afa0b441)
2024-03-17 08:21:54 +00:00
khramshinr
659a95161c T6020:vrrp health-check script not applied correctly in keepalived.conf
New path was added to sync-group config tree

(cherry picked from commit 25b9e5f1ff2aaffb40a03b2c6e20327e39c41eba)
2024-03-07 16:26:18 +00:00
Ginko (Giggum)
0f413beec1 Fixed line wrapping for previous PR #1313 2024-03-06 13:51:09 -05:00
Ginko (Giggum)
5a6aa7506d Rewrote Dynamic DNS documentation/examples to align with T5791 2024-03-06 13:15:26 -05:00
rebortg
7385cfe0d4 backport all firewall based documentation 2024-03-05 21:51:37 +01:00
Robert Göhler
951c56bce1
Merge pull request #1309 from vyos/mergify/bp/sagitta/pr-1300
Rewritten the SSTP server documentation (backport #1300)
2024-03-05 21:41:40 +01:00
Robert Göhler
26d5585bf8
Update sstp.rst 2024-03-05 21:38:12 +01:00
aapostoliuk
0316ea57c6 Rewritten the PPTP server documentation
Fully rewritten PPTP server documentation.

(cherry picked from commit 8cb0070b51edf550189a9ccf5f1a92bf537c3572)
2024-03-05 20:27:59 +00:00
aapostoliuk
fb9775d571 Rewritten the SSTP server documentation
Fully rewritten SSTP server documentation.

(cherry picked from commit d71c4607fa0c330a3c6269811b2126a25ceb91f7)

# Conflicts:
#	docs/configuration/vpn/sstp.rst
2024-03-05 20:27:58 +00:00
Christian Breunig
7943e5513c T2447: add configurable kernel boot option 'disable-power-saving'
Lower available CPU C states to a minimum if this option set. This will set
Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1".

(cherry picked from commit f0324d8a03c0c0cd7ed250b722ca4a2aff55f617)
2024-03-05 19:35:49 +00:00
Christian Breunig
4263ff840a ipv6: improve PPPoE and RA examples
(cherry picked from commit 62b36a812a922ad6fc17f636bba029e463f35d49)
2024-03-03 10:01:23 +01:00
aapostoliuk
e4d66ef8e3 Fixing IPoE and PPPoE documentation
Fixing IPoE and PPPoE documentation

(cherry picked from commit 7f9b031aeffeeb48201c7d51df71fc58191b4138)
2024-02-28 21:28:26 +00:00
aapostoliuk
7952a12917 Rewritten the IPoE server documentation
Fully rewritten IPoE server documentation.

(cherry picked from commit 2c3553ef8828748fdbd4938f758e6bfb6170f869)
2024-02-27 20:22:27 +00:00
Christian Breunig
e30e9608d6 ipsec: add IKEv2 road-warrior documentation
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
bb1abfb3fb Rewritten the PPPoE server documentation
Fully rewritten PPPoE server documentation.

(cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
2024-02-26 21:32:01 +00:00
aapostoliuk
859a9ee449 Rewritten the L2TP documentation
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints

(cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
2024-02-26 20:02:52 +00:00
Christian Breunig
b0a96edc91 container: add missing CLI command definitions
(cherry picked from commit 3bac18ee5271e5af0ee6a200e0a04b8c6bfe07bd)
2024-02-24 09:43:09 +01:00
Christian Breunig
fc61840372 login: T5972: add possibility to disable individual local user accounts
(cherry picked from commit e6b534942b8eaedfc3a6290f97d0040e61179b79)
2024-02-17 11:13:13 +00:00
Christian Breunig
d96b22b46f T6001: add option to disable next-hop-tracking resolve-via-default in VRF context
(cherry picked from commit abaf9814502b931fa81b4af9b3953880825b57f4)
2024-02-16 08:37:43 +00:00
Christian Breunig
e72e6c6e3d T6001: add option to disable next-hop-tracking resolve-via-default
(cherry picked from commit 7a6cc0cf0ff081b4367c212821c7bf125bbb7427)
2024-02-16 08:37:43 +00:00
rebortg
7103937ac5 Added information related to root-partition-auto-resize
(cherry picked from commit e50b510c0c5c980047bd77775a0c4d763aaa838b)
2024-02-14 21:39:17 +01:00
cfouche
be81a4a967 fix a forgotten "set"
(cherry picked from commit c9c5ac5cc8f74f2f20d72cd42a4d84e7d280e407)
2024-02-14 20:31:50 +00:00
Christian Breunig
a0c81044cf srv6: T5849: add segment support to "protocols static route6"
(cherry picked from commit c857be8ce1474b56711db76170ab7494771c2202)
2024-02-12 05:28:08 +00:00
Christian Breunig
3b08675325 rpki: T6023: add support for CLI knobs expire-interval and retry-interval
(cherry picked from commit 6b8c81855959b0b3c9e12530eecd9ba6ca25ad8e)
2024-02-08 22:02:16 +00:00
Robert Göhler
218c2bc974
Merge pull request #1269 from vyos/mergify/bp/sagitta/pr-1267
bgp: T6024: add additional missing FRR features (backport #1267)
2024-02-08 10:07:13 +01:00
aapostoliuk
97dc32e5cd T5971: Added PPP options documentation
Added PPP options documentation

(cherry picked from commit dd3537443d71b8a5481ad0e8fb1a8e4edd0ecb71)
2024-02-08 09:02:31 +00:00
Christian Breunig
2772d9d89d bgp: T6024: add additional missing FRR features
(cherry picked from commit 64d4513bc06a4ba610221442ba7e590470beb86d)
2024-02-07 21:03:27 +00:00
Robert Göhler
5e13cabcbc
Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261
container: T5955: set uid/gid for container (backport #1261)
2024-02-02 20:46:18 +01:00
Robert Göhler
f0a2ea8f8d
Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
2024-02-02 20:46:03 +01:00
Piotr Maksymiuk
093d35107e container: T5955: set uid/gid for container
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
2024-02-02 19:45:24 +00:00
Christian Breunig
95518d579e T5979: add configurable kernel boot option 'disable-mitigations'
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
2024-02-02 20:19:41 +01:00
aapostoliuk
c07b6d69f1 Changed IPv6 pool documentation in accel-ppp services
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865

(cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
2024-02-02 08:03:57 +00:00
khramshinr
6f9d52dcb3 dns forwarding: T5687: Implement ECS settings for PowerDNS recursor
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
2024-02-01 19:26:55 +00:00
Nicolas Fort
e2d80596eb Adding first documentation regarding IDS and FastNetMon. Also a brief configuration example is provided.
(cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
2024-01-30 20:00:53 +00:00
Robert Göhler
7d34dafb63
Merge pull request #1253 from vyos/mergify/bp/sagitta/pr-1249
Updated DPD and close-action values in IPSEC (backport #1249)
2024-01-25 15:19:04 +01:00
Christian Breunig
7b23beeb3c bfd: T5967: add minimum-ttl option
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
2024-01-23 12:58:15 +01:00