haproxy: T7906: Probing of a port other than the one to which normal traffic is sent (#1697)

* haproxy: T7906: Probing of a port other than the one to which normal traffic is sent

Add support for specifying a custom health check port for HAProxy backend servers.
This allows health probes to target a dedicated endpoint - such as port 8080 - separate
from normal traffic ports (e.g., 80 or 443).

* Fix article usage
---------

Co-authored-by: Daniil Baturin <daniil@baturin.org>

docs/configexamples/lac-lns.rst

@@ -67,6 +67,14 @@ LAC
      media-type rj45
      pppoe enable group MAIN-BBA
     !
+    interface Virtual-Template1
+     description pppoe MAIN-BBA
+     no ip address
+     no peer default ip address
+     ppp mtu adaptive
+     ppp authentication chap
+    !
+
 
 LNS
 ---

docs/configuration/loadbalancing/haproxy.rst

@@ -157,6 +157,12 @@ Backend
 
   Active health check backend server
 
+.. cfgcmd:: set load-balancing haproxy backend <name> server
+   <name> check port <port>
+
+  Set an alternative port number for health checks.
+  Overrides the default server port used for TCP/HTTP checks.
+
 .. cfgcmd:: set load-balancing haproxy backend <name> server
    <name> send-proxy
 
@@ -494,5 +500,5 @@ This configuration enables HTTP health checks on backend servers.
     set load-balancing haproxy backend bk-01 server srv01 check
     set load-balancing haproxy backend bk-01 server srv02 address '192.0.2.12'
     set load-balancing haproxy backend bk-01 server srv02 port '8882'
-    set load-balancing haproxy backend bk-01 server srv02 check
+    set load-balancing haproxy backend bk-01 server srv02 check port '8892'
 

docs/configuration/protocols/isis.rst

@@ -223,6 +223,25 @@ Interface Configuration
   This command will change the hold down value for IGP-LDP synchronization
   during convergence/interface flap events, but for this interface only.
 
+.. cfgcmd:: set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] enable
+  This command enables per-prefix local LFA fast reroute link protection.
+
+.. cfgcmd:: set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] exclude
+  This command excludes an interface from the local LFA backup nexthop computation.
+
+.. cfgcmd:: set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] tunnel mpls-ldp
+  This command enables per-prefix Remote LFA fast reroute link protection.
+  Note that other routers in the network need to be configured to accept LDP
+  targeted hello messages in order for RLFA to work.
+
+.. cfgcmd:: set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] maximum-metric <metric>
+  This command limits Remote LFA PQ node selection within the specified metric. Metric value range (1-16777215).
+
+.. cfgcmd:: set protocols isis interface <interface> fast-reroute ti-lfa [level-1|level-2] [node-protection [link-fallback]]
+  This command enables per-prefix TI-LFA fast reroute link or node protection.
+  When node protection is used, option link-fallback enables the computation and
+  use of link-protecting LFAs for destinations unprotected by node protection.
+
 Route Redistribution
 --------------------
 

docs/contributing/cla.rst

@@ -0,0 +1,44 @@
+.. _cla:
+
+#############################
+Contributor License Agreement
+#############################
+
+Before we can accept your contributions to VyOS, you must sign a **Contributor
+License Agreement (CLA)**.
+
+This is a standard open-source practice designed to protect both you and the
+project.
+
+The process is simple and fully automated:
+
+1. **Review the CLA document**
+
+   You can find the CLA text at our
+   `GitHub repository <https://github.com/vyos/vyos-cla-signatures/>`__.
+
+2. **Submit a pull request**
+
+   When you open a pull request, a CLA bot will automatically check whether all
+   commit authors have signed the CLA.
+
+3. **Follow the bot's instructions**
+
+   If the CLA has not been signed, the bot will leave a comment with a prompt.
+   Simply reply to that comment with the suggested text to sign the CLA.
+
+4. **Wait for confirmation**
+
+   The CLA bot will verify your response and update the pull request status.
+   Once all commit authors have signed, the bot will confirm that the CLA
+   requirement has been met, and unlock the pull request for merging.
+
+.. note::
+
+   The CLA must be signed by **each commit author**.
+
+   If your pull request includes commits from multiple contributors, each of
+   them must sign the CLA before the pull request can be accepted.
+
+Once signed, the CLA remains valid for all past and future contributions to VyOS
+made under the same GitHub identity.

docs/contributing/development.rst

@@ -24,6 +24,11 @@ The README.md file will guide you to use the this top level repository.
 Submit a Patch
 ==============
 
+.. warning::
+
+  Please read and sign the :doc:`Contributor License Agreement<cla>` before
+  submitting any patches.
+
 Patches are always more than welcome. To have a clean and easy to maintain
 repository we have some guidelines when working with Git. A clean repository
 eases the automatic generation of a changelog file.

docs/documentation.rst

@@ -10,6 +10,12 @@ We encourage every VyOS user to help us improve our documentation as we have
 a deficit like most software projects.  This not only helps you when reading
 but also everyone else.
 
+.. warning::
+
+  Please read and sign the
+  :doc:`Contributor License Agreement<contributing/cla>` before submitting any
+  documentation updates.
+
 If you are willing to contribute to our documentation this is the definite
 guide how to do so.
 

docs/index.rst

@@ -89,6 +89,7 @@ VyOS User Guide
 
    contributing/build-vyos
    contributing/development
+   contributing/cla
    contributing/issues-features
    contributing/upstream-packages
    contributing/debugging

docs/vpp/configuration/dataplane/interface.rst

@@ -65,7 +65,6 @@ The xdp-options section allows for the configuration of various XDP-specific set
 
 XDP options you can configure are:
 
-- ``no-syscall-lock``: Disables the syscall lock for the XDP interface. This can improve performance by allowing multiple threads to access the interface concurrently.
 - ``num-rx-queues``: Specifies the number of receive queues for the XDP interface. More queues can improve performance on multi-core systems by allowing parallel processing of incoming packets. Each queue will be assigned to a separate CPU core.
 - ``promisc``: Enables or disables promiscuous mode on the interface. When promiscuous mode is enabled, the interface will receive all packets on the network, regardless of type and destination of the packets. Some NICs need this feature to be enabled to avoid filtering out packets (for example to pass VLAN tagged packets).
 - ``rx-queue-size``: Defines the size of each receive queue. Larger queue sizes can help accommodate bursts of incoming traffic, reducing the likelihood of packet drops during high traffic periods.