690 Commits

Author SHA1 Message Date
Nataliia Solomko
dd9c1a052f conntrack-sync: T1244: Support for StartupResync in conntrackd
(cherry picked from commit f4e6d33a06e6125419900723ae7dc02fe264059d)

# Conflicts:
#	docs/configuration/service/conntrack-sync.rst
2024-04-07 14:20:58 +00:00
Davide Beatrici
2723690178 Firewall: Fix typo "addtion" -> "addition"
(cherry picked from commit a55f214ab44253a444a958be4975e143ab5d83d4)
2024-04-07 14:18:55 +00:00
Christian Breunig
4bc89c76b5 container: T6208: rename "cap-add" CLI node to "capability"
(cherry picked from commit d33a54f084ebf2c1632031bdf0122a0c7f72066a)
2024-04-07 14:17:51 +00:00
srividya0208
f9203543fc openvpn option: "--client-cert-not-required" is not acceepted
(cherry picked from commit 95a666510d1fdc685d20c7e6ed88654b438c0ac5)
2024-04-04 10:06:41 +00:00
Ginko (Giggum)
27970f7a20 T5614: extend ipv4 firewall documentation on conntrack-helper matching 2024-03-25 10:50:42 -04:00
Christian Breunig
2f773ca216 bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType
value of 0x88A8 is required.

Reusing CLI command from VIF-S (QinQ) interfaces:
  set interfaces bridge br0 protocol 802.1ad

(cherry picked from commit a7f2e520cbf8b24ccb5e266b5d4c739588aed48e)
2024-03-21 13:43:36 +00:00
Christian Breunig
8bb38d5112 policy: T6129: add route-map option "as-path exclude all"
(cherry picked from commit d578921431ba8c9eb5f7bbd7531b667e465cc2c5)
2024-03-17 17:21:07 +00:00
Christian Breunig
d903bbc543 radvd: T6118: add nat64prefix support RFC8781
(cherry picked from commit 7611b9be992c29bc0919072cc7df7519afa0b441)
2024-03-17 08:21:54 +00:00
khramshinr
659a95161c T6020:vrrp health-check script not applied correctly in keepalived.conf
New path was added to sync-group config tree

(cherry picked from commit 25b9e5f1ff2aaffb40a03b2c6e20327e39c41eba)
2024-03-07 16:26:18 +00:00
Ginko (Giggum)
0f413beec1 Fixed line wrapping for previous PR #1313 2024-03-06 13:51:09 -05:00
Ginko (Giggum)
5a6aa7506d Rewrote Dynamic DNS documentation/examples to align with T5791 2024-03-06 13:15:26 -05:00
rebortg
7385cfe0d4 backport all firewall based documentation 2024-03-05 21:51:37 +01:00
Robert Göhler
951c56bce1
Merge pull request #1309 from vyos/mergify/bp/sagitta/pr-1300
Rewritten the SSTP server documentation (backport #1300)
2024-03-05 21:41:40 +01:00
Robert Göhler
26d5585bf8
Update sstp.rst 2024-03-05 21:38:12 +01:00
aapostoliuk
0316ea57c6 Rewritten the PPTP server documentation
Fully rewritten PPTP server documentation.

(cherry picked from commit 8cb0070b51edf550189a9ccf5f1a92bf537c3572)
2024-03-05 20:27:59 +00:00
aapostoliuk
fb9775d571 Rewritten the SSTP server documentation
Fully rewritten SSTP server documentation.

(cherry picked from commit d71c4607fa0c330a3c6269811b2126a25ceb91f7)

# Conflicts:
#	docs/configuration/vpn/sstp.rst
2024-03-05 20:27:58 +00:00
Christian Breunig
7943e5513c T2447: add configurable kernel boot option 'disable-power-saving'
Lower available CPU C states to a minimum if this option set. This will set
Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1".

(cherry picked from commit f0324d8a03c0c0cd7ed250b722ca4a2aff55f617)
2024-03-05 19:35:49 +00:00
Christian Breunig
4263ff840a ipv6: improve PPPoE and RA examples
(cherry picked from commit 62b36a812a922ad6fc17f636bba029e463f35d49)
2024-03-03 10:01:23 +01:00
aapostoliuk
e4d66ef8e3 Fixing IPoE and PPPoE documentation
Fixing IPoE and PPPoE documentation

(cherry picked from commit 7f9b031aeffeeb48201c7d51df71fc58191b4138)
2024-02-28 21:28:26 +00:00
aapostoliuk
7952a12917 Rewritten the IPoE server documentation
Fully rewritten IPoE server documentation.

(cherry picked from commit 2c3553ef8828748fdbd4938f758e6bfb6170f869)
2024-02-27 20:22:27 +00:00
Christian Breunig
e30e9608d6 ipsec: add IKEv2 road-warrior documentation
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
bb1abfb3fb Rewritten the PPPoE server documentation
Fully rewritten PPPoE server documentation.

(cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
2024-02-26 21:32:01 +00:00
aapostoliuk
859a9ee449 Rewritten the L2TP documentation
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints

(cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
2024-02-26 20:02:52 +00:00
Christian Breunig
b0a96edc91 container: add missing CLI command definitions
(cherry picked from commit 3bac18ee5271e5af0ee6a200e0a04b8c6bfe07bd)
2024-02-24 09:43:09 +01:00
Christian Breunig
fc61840372 login: T5972: add possibility to disable individual local user accounts
(cherry picked from commit e6b534942b8eaedfc3a6290f97d0040e61179b79)
2024-02-17 11:13:13 +00:00
Christian Breunig
d96b22b46f T6001: add option to disable next-hop-tracking resolve-via-default in VRF context
(cherry picked from commit abaf9814502b931fa81b4af9b3953880825b57f4)
2024-02-16 08:37:43 +00:00
Christian Breunig
e72e6c6e3d T6001: add option to disable next-hop-tracking resolve-via-default
(cherry picked from commit 7a6cc0cf0ff081b4367c212821c7bf125bbb7427)
2024-02-16 08:37:43 +00:00
rebortg
7103937ac5 Added information related to root-partition-auto-resize
(cherry picked from commit e50b510c0c5c980047bd77775a0c4d763aaa838b)
2024-02-14 21:39:17 +01:00
cfouche
be81a4a967 fix a forgotten "set"
(cherry picked from commit c9c5ac5cc8f74f2f20d72cd42a4d84e7d280e407)
2024-02-14 20:31:50 +00:00
Christian Breunig
a0c81044cf srv6: T5849: add segment support to "protocols static route6"
(cherry picked from commit c857be8ce1474b56711db76170ab7494771c2202)
2024-02-12 05:28:08 +00:00
Christian Breunig
3b08675325 rpki: T6023: add support for CLI knobs expire-interval and retry-interval
(cherry picked from commit 6b8c81855959b0b3c9e12530eecd9ba6ca25ad8e)
2024-02-08 22:02:16 +00:00
Robert Göhler
218c2bc974
Merge pull request #1269 from vyos/mergify/bp/sagitta/pr-1267
bgp: T6024: add additional missing FRR features (backport #1267)
2024-02-08 10:07:13 +01:00
aapostoliuk
97dc32e5cd T5971: Added PPP options documentation
Added PPP options documentation

(cherry picked from commit dd3537443d71b8a5481ad0e8fb1a8e4edd0ecb71)
2024-02-08 09:02:31 +00:00
Christian Breunig
2772d9d89d bgp: T6024: add additional missing FRR features
(cherry picked from commit 64d4513bc06a4ba610221442ba7e590470beb86d)
2024-02-07 21:03:27 +00:00
Robert Göhler
5e13cabcbc
Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261
container: T5955: set uid/gid for container (backport #1261)
2024-02-02 20:46:18 +01:00
Robert Göhler
f0a2ea8f8d
Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
2024-02-02 20:46:03 +01:00
Piotr Maksymiuk
093d35107e container: T5955: set uid/gid for container
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
2024-02-02 19:45:24 +00:00
Christian Breunig
95518d579e T5979: add configurable kernel boot option 'disable-mitigations'
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
2024-02-02 20:19:41 +01:00
aapostoliuk
c07b6d69f1 Changed IPv6 pool documentation in accel-ppp services
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865

(cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
2024-02-02 08:03:57 +00:00
khramshinr
6f9d52dcb3 dns forwarding: T5687: Implement ECS settings for PowerDNS recursor
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
2024-02-01 19:26:55 +00:00
Nicolas Fort
e2d80596eb Adding first documentation regarding IDS and FastNetMon. Also a brief configuration example is provided.
(cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
2024-01-30 20:00:53 +00:00
Robert Göhler
7d34dafb63
Merge pull request #1253 from vyos/mergify/bp/sagitta/pr-1249
Updated DPD and close-action values in IPSEC (backport #1249)
2024-01-25 15:19:04 +01:00
Christian Breunig
7b23beeb3c bfd: T5967: add minimum-ttl option
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
2024-01-23 12:58:15 +01:00
aapostoliuk
3c6bb1ec30 Updated DPD and close-action values in IPSEC
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.

(cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
2024-01-22 10:53:21 +00:00
Christian Breunig
5447c0509f ntp: T5692: add support to configure leap second behavior
(cherry picked from commit 2443622964b476bfbcf88b05322fd27b55406fad)
2024-01-21 20:48:45 +01:00
strifel
5eeeb7bb5f
Update passive-interface default exclusion notice
Update notice telling users how to exclude passive interface.
2024-01-18 21:27:10 +01:00
Christian Breunig
1431c3736b https: add latest CLI changes
(cherry picked from commit cecc0f3c32afb455ddb006b35faf343877061443)
2024-01-11 06:32:08 +00:00
Christian Breunig
02446eb692 pki: T5886: add support for ACME protocol (LetsEncrypt)
(cherry picked from commit 8e2932ebb426534b6727836c51395077ed8ed490)
2024-01-11 06:30:03 +00:00
Trae Santiago
8a81c9ccfb added new NPTv6/DHCPv6 example
(cherry picked from commit 1b1cc7986813c65b608ace38bf497622eb74f1cf)
2024-01-11 06:28:58 +00:00
Bubun Das
98e93c7c6f Update monitoring.rst
Updated docs for influxdb

(cherry picked from commit 8628ad46eb25d5e165cf2e03f52c2b7c7bc7b6ca)
2024-01-08 20:19:16 +00:00