T5602: Reverse-proxy add option backup for backend server

openvpn: T5269: add a deprecation warning for shared-secret

A `backup` server can be defined to take over in the case of all other
backends failing

set loa...

conntrack: firewall: T4502: Update conntrack check for new flowtable CLI

Also updates flowtable smoketest to verify conntrack enabled

init: T5239: configure system hostname prior to FRR startup

On first boot after an upgrade /etc/hostname and FRR configuration is not
populated. FRR determi...

After sources analysis, we found the next possible return statuses for PAM
modules:

1. pam_tacp...

bgp: T5596: add new features from FRR 9

isis: T5597: add new features from FRR 9

firewall: T4502: Update to flowtable CLI

A commit that removes `firewall bridge` will delete the table and not re-create it. Therefore an...

- Add required offload setting for interfaces + flowtable offload (hw-tc-offload)
- Verification...

`set firewall flowtable <name> interface <ifname>`
`set firewall flowtable <name> offload [softw...

* Add support for IS-IS advertise-high-metrics
set protocols isis advertise-high-metrics

* Ad...

* Add BGP Software Version capability (draft-abraitis-bgp-version-capability)
set protocols bg...

T5590: firewall log rule: fix order which rule are processed

conntrack: T5571: Refactor conntrack using vyos.configdep

- Moves MSS node out of `tcp-flags.xml.i` and into `tcp-mss.xml.i`
- Update smoketest to verify ...

ddclient: T5573: Fix smoketest for updated ddclient config

GitHub: Add smoketest result menu

T5594: vrrp: extend function is_ipv6_tentative

Add the `Smoketest result` option to the default PR template

ddclient: T5573: Update config generation aligning with caching fixes

/usr/libexec/vyos/conf_mode/nat.py:21: DeprecationWarning: The distutils package is deprecated a...

T5586: Disable by default SNMP for Keeplived VRRP service

T5261: Add AWS load-balancing tunnel handler

T4502: Fix syntax error introduced by #2062

AgentX does not work stable. From time to time we see the system
service crashing/degrading if s...

When rebasing https://github.com/vyos/vyos-1x/pull/2062, some additional
lines are mistakenly in...

ddclient: T5585: Fix file access mode for dynamic dns configuration

After commit 976f82785 ("T5575: ARP/NDP table-size isnt set properly") the
system bootup process...

After commit 0ccbbca01b ("openvpn: T3214: specify nopool on --server line only
if needed") that ...

ddclient.conf file is expected to have permission 600. We need to set
the permission explicitly ...

T5579: show log firewall - Fix and extend command

T4072: Firewall op-mode command: add bridge capabilities

T5561: nat: inbound|outbound interface should not be mandatory

T5575: ARP/NDP table-size isnt set properly

op mode: T5582: Add 'force ntp synchronization'

openvpn: T3214: fix server-ipv6 and nopool handling

T4502: firewall: Add software flow offload using flowtable

T2044: RPKI doesn't boot properly

In CLI we can choose authentication logic:

- `mandatory` - if TACACS+ answered with `REJECT`,...

T671: do not preserve old tech-support report implementation

In CLI we can choose authentication logic:

- `mandatory` - if RADIUS answered with `Access-Re...

T5576: Add BGP remove-private-as all option

op-mode: T5581: add "show ip nht" command (IPv4 nexthop tracking table)

vyos@vyos:~$ show ip nht
172.18.254.202
resolved via ospf
via 172.18.201.254, eth0.201 (vrf de...

frr: T5239: fix process startup order

Add the ability to use the option all for remove-private-as.
Remove private ASNs in outbound upd...

We need separated groups for RADIUS and TACACS+ system users because they need
to be used in PAM...

Now that the caching fixes are in place, we can update the config to
remove legacy treatment of ...

T4309: Conntrack ignore fix to handle interface any

Interface 'any' not expected in nft rules, it means that option
iifname shouldn't exist at all

...

- Reuse existing utility functions to check if a boot is ongoing
(boot_configuration_complete(...

vxlan: T3700: Revert change to `vyos.utils.process.cmd`

T3655: Fix NAT problem with VRF

Linux netfilter patch https://patchwork.ozlabs.org/project/netfilter-devel/patch/d0f84a97f9c86be...

T5567: Increase allowed range for maximum-object-size to 1GB for webproxy

T5564: Fix show firewall group and show firewall summary

The `rule` key could be not exists in the entry of the dictionary
for examppe `{'default_action'...

T4309: Fix conntrack teamplate group

T5518: pim6: Fix smoketests

T5518: Add basic MLD support

T5562: Cleanup netns for smoketest load-balancing wan

Cleanup nets for the smoketest load-balancing
Remove deleting container interfaces from default ...