Commit Graph

1422 Commits

Author SHA1 Message Date
Ad Schellevis 47ccdcc078 net/wireguard - minor regression in addClient, not adding created uuid. closes https://github.com/opnsense/plugins/issues/3663 2023-11-10 18:46:37 +01:00
Franco Fichtner 77fa2dce42 net/wireguard: last one 2023-11-07 19:48:08 +01:00
Franco Fichtner 57639ea487 net/wireguard: not released yet 2023-11-07 19:44:37 +01:00
Ad Schellevis 7a7b5a5c9c net/wireguard - replace setconf with syncconf in service control for more fluent reloading. (https://github.com/opnsense/plugins/pull/3358) 2023-11-07 18:24:51 +01:00
Franco Fichtner 82860aadeb net/wireguard: changelog 2023-11-01 08:25:11 +01:00
Franco Fichtner ab9d902df8 net/wireguard: UX and wording 2023-11-01 08:21:44 +01:00
Franco Fichtner 06d0969eb2 net/wireguard: allow instance selection from peer 2023-11-01 08:21:18 +01:00
Franco Fichtner 9af41b126b net/wireguard: bump version 2023-10-31 22:43:08 +01:00
Franco Fichtner af80514ad8 net/wireguard: use syncconf on newwanip event 2023-10-31 22:42:16 +01:00
Ad Schellevis 806fb05c1c net/wireguard: Some improvements in carp event handing for https://github.com/opnsense/plugins/issues/3579
This commit addresses a couple of possible issues.

1. When a sequence of carp events is being processed and these processes lock eachother, its possible that collected interface state via legacy_interfaces_details() doesn't match the active one anymore. To prevent this from happening, only fetch the wireguard interface we're interested in inside the lock.

2. To limit the number of events being handled in wg-service-control.php it's likely cleaner to push the vhid as well when we're handling carp events. This means that we should switch between server id (current parameter) and vhid by looking at its format.

3. In case the target (wg) interface doesn't exist, make sure to create it. Although in practice this shouldn't happen (as the stat file is being removed on boot), dropping an interface manually should preferably lead to a funcitonal setup anyway (otherwise it will crash trying to pull it up)

4. When a vhid is passed and affects the interface in question, log relevant information to syslog.
2023-10-30 18:47:12 +01:00
Monviech 19eac172c8 wg - fix error when empty tunnel address in instance (#3638) 2023-10-26 13:49:02 +02:00
Ad Schellevis 186ec0713f net/wireguard - startup missing import (bug) 2023-10-25 14:55:28 +02:00
Franco Fichtner e474d4b17b net/radsecproxy: style scrubbing 2023-10-24 12:37:57 +02:00
Franco Fichtner 5a912c4edb net/wireguard: make it a full version 2023-10-24 12:28:04 +02:00
Ad Schellevis 26d96b96c7 net/radsecproxy: cleanup service control. os-radsecproxy wasn't used, so we're removing it and hook the required settings in rc.conf.d. To make the grids a bit more usable, make sure to wrap a container arount it. Final change is to hook syslog properly and add a menu item for it. (#3628) 2023-10-23 17:02:45 +02:00
Franco Fichtner 3d4c6735ad net/upnp: fix a typo
PR: https://github.com/opnsense/lang/issues/64
2023-10-23 08:13:47 +02:00
Ad Schellevis 0558d48493 net/wireguard - import https://github.com/opnsense/core/commit/c2d07aeef6965a22d4119f815b7afc6bb9d1db09 and https://github.com/opnsense/core/commit/4bef809bd031f0aa3d55963e57a82d988fd2d45a from core 2023-10-20 17:57:51 +02:00
Franco Fichtner 7ff3c44957 net/mdns-repeater: note the recent docs change
https://github.com/opnsense/docs/commit/2f1b56bc93619acc08d864fe7d86218a9653d2c2

It would be nice to have a constraint for this, but it's
probably not worth the work in this case although the validation
should be stating this, not the help text and documentation.
2023-10-20 10:56:06 +02:00
Franco Fichtner c45755f6dc net/firewall: hide menu hints from page search 2023-10-18 20:01:28 +02:00
Franco Fichtner f3695f92d4 net/wireguard: different approach to bootup handling 2023-10-17 08:21:13 +02:00
Franco Fichtner 6c7fd0cc7b net/frr: minor change revision bump 2023-10-10 10:31:50 +02:00
Franco Fichtner a076f0fbb0 net/wireguard: missed this cleanup 2023-10-10 10:30:04 +02:00
Franco Fichtner c6bd73e301 net/wireguard: merge changes from core, wrap up next version 2023-10-10 10:28:15 +02:00
Ad Schellevis a7a94cce56 VPN: WireGuard - hook wireguard empty devices during bootup, using wireguard_devices() plugin system. This should make sure services and components, such as the firewall, are able to use the device before being setup. closes https://github.com/opnsense/core/issues/6909
A minor modification was needed in wg-service-control.php to make sure a configure would be executed if wgX exists without configuration
2023-10-04 18:23:25 +02:00
Ad Schellevis 07b652f22c net/frr - explicit case "interface" in automatic firewall rules, functionally this doesn't change anything, but makes it easier to debug filter rules as they're not being referenced anymore 2023-10-02 13:48:30 +02:00