squid: squidguard: T3810: Fix template for sourcre-group and rule

Modify template for squid
Replace old directives to actual

(cherry picked from commit 3037661951d0e5d1f6264f886781b7ddc019329e)

Turns out an AX88179 USB 3.0 NIC does not support reading back the speed and
duplex settings in ...

Move the two implementations to get the driver name of a NIC from ethernet.py
and ethtool.py to ...

(cherry picked from commit 1572edd2cef355710d1129907d3e49451a6c31d4)

In order to alter rpki configuration we must also process the route-map nodes
with/for bgpd.

This change is required and currently only impacts WireGuards peer configuration,
so that the pe...

Add support for OpenVPN client mode with only the CA certificate of the server
installed.

process_node() processes the XML tree in a fixed order, "node" before "tagNode"
before "leafNode...

This commit also extends the smoketest to verify that the exception for this
error is raised.

https: T2230: only support TLS1.2 and TLS1.3

data = {
'interfaces': {'dummy': {'dum0': {'address': ['192.0.2.17/29']}},
'...

T3804 changed how DHCP servers from DHCP interfaces are read in and passed to
the system. The co...

We have "set system name-server <ipv4|ipv6>" to specify a name-server IP
address we wan't to use...

VyOS 1.3 equuleus now uses version 21 so we have to bump this by one.

T3803: add source-address option to the op mode ping CLI.

Commit 27e53fbc ("op-mode: T3619: bugfix "show interfaces" for VLANs") fixed
the op-mode command...

Commit 31169fa8a7 ("vyos.ifconfig: T3619: only set offloading options if
supported by NIC") alwa...

Commit 5f1c1ae4 ("bgp: T3798: add support for neighbor local-as <n> replace-as")
added support f...

login: T971 allow quoting in public-keys options

This patch allows the use of `&quot;` in ssh public-key options which
unlocks the ability to set...

rename t0 to drift
add subnemu for 2fa to make it more readable

tunnel: T3788: Add check keys for ipip and sit

Keys are not allowed with ipip and sit tunnels

While migrating to get_config_dict() in commit e8a1c291b1 ("login: radius:
T3192: migrate to get...

The workaround is no longer required, as the issue was resolved in
get_config_dict() so if it is...

Commit 9f20bee81c ("T1376: improve show_dhcp and show_dhcpv6") added the tab
completion helper t...

(cherry picked from commit 23388fe193f04ab05f270098123cbb3e5f0b9f75)

tunnel: T2920: Add checks tun with same source addr and keys

2 tunnels with the same local-address should has different keys
Check existing tunnels (source-a...

It makes no sense to have a parser for the ethtool values in ethtool.py
and ethernet.py - one in...

Commit 29082959 ("ethernet: T3163: only change ring-buffer settings if
required") added a delta-...

Only update the RX/TX ring-buffer settings if they are different from the ones
currently program...

It makes no sense to have a parser for the ethtool value sin ethtool.py
and ethernet.py - one in...

Not all interface drivers have the ability to change the speed and duplex
settings. Known driver...

This makes understanding the code easier what is "really" called without
opening the man page.

SSH keys used for remote login are supplied as base64 encoded data on the CLI.
The key is not va...

Ethernet adapters have a discrete set of available speed and duplex settings.
Instead of passing...

tunnel: T3786: Add checks for source any and not key

Deprecated in the Linux Kernel by commit 08a00fea6de277df12ccfadc21 ("net:
Remove references to ...

An analysis of the code base from VyOS 1.2 -> 1.3 -> 1.4 revealed the following
"root-cause"

Vy...

VyOS 1.4 already had a migrator for interfaces 20 -> 21, but this is a different
one compared to...

Commit 31169fa8 ("vyos.ifconfig: T3619: only set offloading options if
supported by NIC") added ...

interface: T3782: Fix unexpected delete qdisc rule

Some tc qdisc rules are generated by old perl code
It prevent to unexpected override this code b...

Add a new method which supports checking if the desired speed and duplex
setting is actually sup...

Commit d22f97af ("vyos.ethtool: T3163: rename unused methods for offload
validation") reworked t...

Check eui64_old value before deleting
It can be empty or not ipv6 address.

(cherry picked from ...

wireguard: T3763: Fixed uninitialized port issue

Check a port availability only if it was changed in current commit.
This should protect from fai...

The commit fixes the problem, when port availability check is
triggered even if a port for WireG...

Add new CLI command:
* "set protocols ospf redistribute table <n>"

Mandatory FRR options for spf-delay-ietf did not get rendered in the Jinja2
template.

In the past we always told ethtool to change the offloading settings, even if
this was not suppo...

wireguard: T3763: Added check for listening port availability

We need to copy the configuration before this is done in super().update() as we
utilize self.set...

`print` was removed or replaced to `ValueError`, where possible.

bgp: evpn: T3739: add route-map match support