51 Commits

Author SHA1 Message Date
9a619f1048 bind ssh to VRF; console on ttyS0 and ttyS1; exec environment 2021-04-24 15:04:01 +01:00
f82403aec1 create exec environment if binding to loopback address 2021-04-24 15:03:15 +01:00
053d5df46e VRF support (for management networks) 2021-01-03 19:26:53 +00:00
5754e0209f ssh ciphers, key-exchanges, and macs 2021-01-03 19:26:03 +00:00
2010802ef5 don't send /64 to upstream 2021-01-03 19:25:24 +00:00
402262d7d4 goodbye oldschool netflow iptables rule 2021-01-03 19:24:05 +00:00
132ae74c2d newer versions of VyOS reject config with same prefix+length 2020-12-27 22:07:23 +00:00
f2e306899e don't log martians 2020-09-03 01:53:22 +01:00
ee175fe7a1 more kernel version tweaks for BCP38 2020-08-11 08:12:04 +01:00
ee9973ee76 fix RADIUS support pillar 2020-08-11 08:11:39 +01:00
bad9fa19b9 add RADIUS 2020-08-07 07:43:18 +01:00
FAELIX SALT
538dd78cca add peeringdb support 2020-04-27 03:41:13 +00:00
FAELIX SALT
29cd4ee90e need to be able to accept most-specific prefixes from downstreams 2020-04-02 22:24:38 +00:00
FAELIX SALT
43bdf0f0cc add default-originate to BGP peers 2020-04-02 08:59:45 +00:00
FAELIX SALT
b6d01c8683 reduce CPU usage by doing netflow samping in iptables 2020-03-30 08:56:27 +00:00
FAELIX SALT
1488e40075 nflog-range becomes nflog-size 2020-03-29 19:29:58 +00:00
FAELIX SALT
d8600e464e add hphr-*-LONG-* versions of prefix-lists 2020-03-29 17:02:08 +00:00
5f44c407dc defautl no-ipv4-unicast 2020-03-26 07:28:34 +00:00
7ab8727e2a remove route-map/self.j2 2020-03-22 10:12:53 +00:00
64d2556102 template up the users 2020-02-22 17:38:47 +00:00
e6b58a06f8 add route-reflector and route-server; fix for NetBox 2.7.x 2020-02-22 15:18:17 +00:00
692c53901d set mode for VyOS 1.3 2020-02-22 15:16:37 +00:00
603fbe1979 add route-reflector-client support; fix form_factor 2020-02-20 23:12:34 +00:00
68d95a05ad trying to do netflow 2019-12-12 08:53:27 +00:00
32058cfb5d deploy properly, not testing 2019-10-01 14:59:10 +01:00
7690ec0b12 use dicts for BGP control plane protection 2019-10-01 14:55:56 +01:00
b9c5154ec3 add BGP control plane filtering 2019-10-01 14:43:57 +01:00
df5e80366e sort out naming of subinterfaces; add sysctls 2019-09-30 22:38:58 +01:00
f88ce976ea add ability to originate default on OSPF 2019-09-27 22:32:33 +01:00
4f85fe97ab add RPKI, maximum-prefix, nexthop-self, and BGP passwords 2019-09-25 19:07:32 +01:00
4fddfa33ca don't fill logs with martians 2019-09-25 19:07:02 +01:00
86f12cf445 add RPKI cache connections 2019-09-23 14:17:36 +01:00
be1cdefb27 readdress workstation.marek.isal.ski 2019-09-22 11:42:17 +01:00
688784a0ff route-maps for redistribute in BGP; allowas-in; communities; flow accounting 2019-08-02 07:04:05 +01:00
082cdd1f0c add VYATTA_CT_PREROUTING_HOOK for flow statistics 2019-08-02 07:02:50 +01:00
cac2f9a599 fixup route-map for ipv6 2019-05-21 18:05:46 +01:00
3a6df16492 ssh ciphers and various options 2019-05-20 23:48:41 +01:00
88f6215e8b add blackhole signalling by BGP 2019-05-19 10:11:18 +01:00
ec1905f1bd now doing BCP38 2019-05-18 10:33:49 +01:00
ac521117b0 taking over iptables/ip6tables and ipset 2019-05-18 09:38:36 +01:00
2c9be299e0 interface routes and fixes to bgpq3 prefix-list generation 2019-05-16 22:16:57 +01:00
b60798c787 add bind.so for LD_PRELOAD; run bgpq3 on the router again 2019-05-14 18:38:17 +01:00
87807af1d4 only save if commit succeeds 2019-05-14 18:37:39 +01:00
495dc7acf6 add IPv6 support to bind.so 2019-05-14 18:35:49 +01:00
413c2b34c5 add bind.so 2019-05-14 18:23:12 +01:00
7c99c98792 making prefix filters programmatically 2019-05-14 07:42:33 +01:00
a6fbfb43c1 add update-source to BGP neighbors 2019-05-12 11:21:59 +01:00
1056ddfdb9 use dicts instead of lists to make merging work more nicely 2019-05-12 10:15:51 +01:00
ad775bffe9 use netbox's tagged_vlans on an interface to create sub-interfaces 2019-05-12 00:59:55 +01:00
9cb533f71d deploying a very basic template config 2019-05-11 23:09:41 +01:00