vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity
2,928 Commits 32 Branches 12 Tags
Commit Graph

670 Commits

Author SHA1 Message Date
Christian Breunig
e30e9608d6 ipsec: add IKEv2 road-warrior documentation 
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
 2024-02-27 06:56:55 +01:00
aapostoliuk
bb1abfb3fb Rewritten the PPPoE server documentation 
Fully rewritten PPPoE server documentation.

(cherry picked from commit f4ca88a7b02865f6a7edb7cc73d526d78da6456e)
 2024-02-26 21:32:01 +00:00
aapostoliuk
859a9ee449 Rewritten the L2TP documentation 
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints

(cherry picked from commit 4dd84a7c4d784229209eeb4b0d72457b094e08ce)
 2024-02-26 20:02:52 +00:00
Christian Breunig
b0a96edc91 container: add missing CLI command definitions 
(cherry picked from commit 3bac18ee5271e5af0ee6a200e0a04b8c6bfe07bd)
 2024-02-24 09:43:09 +01:00
Christian Breunig
fc61840372 login: T5972: add possibility to disable individual local user accounts 
(cherry picked from commit e6b534942b8eaedfc3a6290f97d0040e61179b79)
 2024-02-17 11:13:13 +00:00
Christian Breunig
d96b22b46f T6001: add option to disable next-hop-tracking resolve-via-default in VRF context 
(cherry picked from commit abaf9814502b931fa81b4af9b3953880825b57f4)
 2024-02-16 08:37:43 +00:00
Christian Breunig
e72e6c6e3d T6001: add option to disable next-hop-tracking resolve-via-default 
(cherry picked from commit 7a6cc0cf0ff081b4367c212821c7bf125bbb7427)
 2024-02-16 08:37:43 +00:00
rebortg
7103937ac5 Added information related to root-partition-auto-resize 
(cherry picked from commit e50b510c0c5c980047bd77775a0c4d763aaa838b)
 2024-02-14 21:39:17 +01:00
cfouche
be81a4a967 fix a forgotten "set" 
(cherry picked from commit c9c5ac5cc8f74f2f20d72cd42a4d84e7d280e407)
 2024-02-14 20:31:50 +00:00
Christian Breunig
a0c81044cf srv6: T5849: add segment support to "protocols static route6" 
(cherry picked from commit c857be8ce1474b56711db76170ab7494771c2202)
 2024-02-12 05:28:08 +00:00
Christian Breunig
3b08675325 rpki: T6023: add support for CLI knobs expire-interval and retry-interval 
(cherry picked from commit 6b8c81855959b0b3c9e12530eecd9ba6ca25ad8e)
 2024-02-08 22:02:16 +00:00
Robert Göhler
218c2bc974
Merge pull request #1269 from vyos/mergify/bp/sagitta/pr-1267 
bgp: T6024: add additional missing FRR features (backport #1267)
 2024-02-08 10:07:13 +01:00
aapostoliuk
97dc32e5cd T5971: Added PPP options documentation 
Added PPP options documentation

(cherry picked from commit dd3537443d71b8a5481ad0e8fb1a8e4edd0ecb71)
 2024-02-08 09:02:31 +00:00
Christian Breunig
2772d9d89d bgp: T6024: add additional missing FRR features 
(cherry picked from commit 64d4513bc06a4ba610221442ba7e590470beb86d)
 2024-02-07 21:03:27 +00:00
Robert Göhler
5e13cabcbc
Merge pull request #1266 from vyos/mergify/bp/sagitta/pr-1261 
container: T5955: set uid/gid for container (backport #1261)
 2024-02-02 20:46:18 +01:00
Robert Göhler
f0a2ea8f8d
Merge pull request #1260 from vyos/mergify/bp/sagitta/pr-1250 
Changed IPv6 pool documentation in accel-ppp services (backport #1250)
 2024-02-02 20:46:03 +01:00
Piotr Maksymiuk
093d35107e container: T5955: set uid/gid for container 
(cherry picked from commit 7ec9d4259de54247dc81d96ef63fc1877fdb94b4)
 2024-02-02 19:45:24 +00:00
Christian Breunig
95518d579e T5979: add configurable kernel boot option 'disable-mitigations' 
(cherry picked from commit 38e13fbab0560758baf3d676657254a490890376)
 2024-02-02 20:19:41 +01:00
aapostoliuk
c07b6d69f1 Changed IPv6 pool documentation in accel-ppp services 
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865

(cherry picked from commit f5b79621d0c841ee9a596543a05ad1acc9130c1d)
 2024-02-02 08:03:57 +00:00
khramshinr
6f9d52dcb3 dns forwarding: T5687: Implement ECS settings for PowerDNS recursor 
(cherry picked from commit ce0b62678f791a18dcc58defc209fbe71b868fca)
 2024-02-01 19:26:55 +00:00
Nicolas Fort
e2d80596eb Adding first documentation regarding IDS and FastNetMon. Also a brief configuration example is provided. 
(cherry picked from commit 57cdbe065b89ec38a779ddb7530cda3ac240caf2)
 2024-01-30 20:00:53 +00:00
Robert Göhler
7d34dafb63
Merge pull request #1253 from vyos/mergify/bp/sagitta/pr-1249 
Updated DPD and close-action values in IPSEC (backport #1249)
 2024-01-25 15:19:04 +01:00
Christian Breunig
7b23beeb3c bfd: T5967: add minimum-ttl option 
(cherry picked from commit c1716052eba00ad6c612755f55015e840e946828)
 2024-01-23 12:58:15 +01:00
aapostoliuk
3c6bb1ec30 Updated DPD and close-action values in IPSEC 
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.

(cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
 2024-01-22 10:53:21 +00:00
Christian Breunig
5447c0509f ntp: T5692: add support to configure leap second behavior 
(cherry picked from commit 2443622964b476bfbcf88b05322fd27b55406fad)
 2024-01-21 20:48:45 +01:00
strifel
5eeeb7bb5f
Update passive-interface default exclusion notice 
Update notice telling users how to exclude passive interface.
 2024-01-18 21:27:10 +01:00
Christian Breunig
1431c3736b https: add latest CLI changes 
(cherry picked from commit cecc0f3c32afb455ddb006b35faf343877061443)
 2024-01-11 06:32:08 +00:00
Christian Breunig
02446eb692 pki: T5886: add support for ACME protocol (LetsEncrypt) 
(cherry picked from commit 8e2932ebb426534b6727836c51395077ed8ed490)
 2024-01-11 06:30:03 +00:00
Trae Santiago
8a81c9ccfb added new NPTv6/DHCPv6 example 
(cherry picked from commit 1b1cc7986813c65b608ace38bf497622eb74f1cf)
 2024-01-11 06:28:58 +00:00
Bubun Das
98e93c7c6f Update monitoring.rst 
Updated docs for influxdb

(cherry picked from commit 8628ad46eb25d5e165cf2e03f52c2b7c7bc7b6ca)
 2024-01-08 20:19:16 +00:00
Christian Breunig
ca8b793cff dns: T5900: add dont-throttle-netmasks and serve-stale-extensions powerdns features 
(cherry picked from commit 9ca5e9dd89eabda161d974e7359ab2716fe56464)
 2024-01-06 20:55:30 +01:00
aapostoliuk
c72e0d8f9a accel-ppp: T5688: Changing CLI to create client address pool 
Changing CLI to create client address pool

(cherry picked from commit 1096cbcf95f96334d773ab98cce9d26d311f9e51)
 2023-12-30 22:16:53 +01:00
Christian Breunig
20a6836e16 system: T5877: Shorten system domain-search config path 
Documentation pdate for https://github.com/vyos/vyos-1x/pull/2718

(cherry picked from commit 05215848a5df37a4cc4075a58b05f19871a56306)
 2023-12-30 10:45:27 +01:00
Nicolas Fort
4b14c6c749 dhcp-server: update docs for op-mode command <show dhcp server leases> 
(cherry picked from commit 0893ca769b1796d2d61dc26a0c0c13d1eda56f5e)
 2023-12-28 10:37:55 +00:00
Christian Breunig
97a3df1722 firewall: sync to master branch 2023-12-27 12:03:44 +01:00
Viacheslav Hletenko
6414b4db09 Add system update-check example 
Add an example of online checking for updates
```
set system update-check auto-check
set system update-check url <url>
```

(cherry picked from commit fd3073eef7bcbd64112e0581ba10afb58100b30d)
 2023-12-26 12:21:19 +00:00
Christian Breunig
e5571ffdbf snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp" 
(cherry picked from commit 0ed155b05523c755a9eb777c49a3a0fd4b56149e)
 2023-12-25 11:01:31 +01:00
Christian Breunig
6f1ed9681b frr: T4020: document multiple per daemon config knobs 
(cherry picked from commit 4aeedc96c2168bd6e19c2be7d30584c8a9fa6ab7)
 2023-12-15 10:47:44 +01:00
Viacheslav Hletenko
0a5103984a NAT64: Add example of configuration for NAT64 
Add a simple description and example of NAT64

(cherry picked from commit 9a049c007001aaa463ba51f82ecf2fb7ed1e4f20)
 2023-12-11 19:25:07 +00:00
aapostoliuk
4fc7bdf5db policy: T4704: Added set metric (MED) to (+/-)rtt in route-map 
Added set metric (MED) to (+/-)rtt in route-map

(cherry picked from commit a78504e95cac31f84714268441781ed0cc8ff578)
 2023-12-08 08:38:51 +00:00
Christian Breunig
09a8acd602 vpn: update site2site VTI example 
(cherry picked from commit 0429c317884d8951cbf2e432981edeacd426f3ed)
 2023-12-02 20:56:32 +01:00
Giggum
690647a1df docs: fix to code snippet in Quick Start/Firewall and typo Firewall/Global Options 
sagitta/quick-start.html:
Fix to replace "interface-name" with "name" for rule 30 and 40 in code snippet to correct syntax error.

sagitta/configuration/firewall/global-options.html:
Fix to improve correctness is use of English language from "conform" to "confirming"

On branch sagitta_giggum
Changes to be committed:
	modified:   quick-start.rst
	modified:   configuration/firewall/global-options.rst
 2023-11-29 10:55:03 -05:00
Christian Breunig
84498945cc ipsec: gre: use dummy interface in example over loopback 
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
 2023-11-24 21:29:53 +01:00
rebortg
5fb241c9ae fix some build warnings 2023-11-24 10:48:09 +01:00
rebortg
4aa0865d9f backport Firewall docs from master 2023-11-23 21:09:57 +01:00
Christian Breunig
32400cbbda vxlan: T5753: add support for VNI filtering 
(cherry picked from commit c8f8c2d10cca97bbc459c5a3565d4230e9fe61df)
 2023-11-22 11:06:09 +01:00
Christian Breunig
841cf147ec http: T5762: rename "virtual-host listen-port" -> "virtual-host port" 
(cherry picked from commit 2e3510f9886a5512b320267f21035d291c2fb3f5)
 2023-11-22 11:05:37 +01:00
Christian Breunig
2c61e8fa88 http: T5762: api: make API socket backend communication the one and only default 
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn
backend server.

https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests.

While debugging those failing, it was uncovered, that uvicorn only listens on
IPv4 connections

vyos@vyos# netstat -tulnp | grep 8080
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -

As the CLI already has an option to move the API communication from an IP to a
UNIX domain socket, the best idea is to make this the default way of
communication, as we never directly talk to the API server but rather use the
NGINX reverse proxy.

(cherry picked from commit 12ffd3e638dc00ae672b47c9dd2a64e0e68d0c01)
 2023-11-21 08:23:54 +01:00
Christian Breunig
21f0d774b5 pim: igmp: T5733: adjust to latest CLI syntax 
(cherry picked from commit 2de650e60c84c70e26cc02341c07fe84e6d1c1fa)
 2023-11-16 15:48:50 +01:00
JeffWDH
a98dc001a8 Add "monitor log ssh" and "monitor log ssh dynamic-protection" 
(cherry picked from commit 6b2d50c755a56ae62620961131bbaebefe110acc)
 2023-11-07 20:29:24 +00:00