Ad Schellevis
47ccdcc078
net/wireguard - minor regression in addClient, not adding created uuid. closes https://github.com/opnsense/plugins/issues/3663
2023-11-10 18:46:37 +01:00
Franco Fichtner
77fa2dce42
net/wireguard: last one
2023-11-07 19:48:08 +01:00
Franco Fichtner
57639ea487
net/wireguard: not released yet
2023-11-07 19:44:37 +01:00
Ad Schellevis
7a7b5a5c9c
net/wireguard - replace setconf with syncconf in service control for more fluent reloading. ( https://github.com/opnsense/plugins/pull/3358 )
2023-11-07 18:24:51 +01:00
Franco Fichtner
82860aadeb
net/wireguard: changelog
2023-11-01 08:25:11 +01:00
Franco Fichtner
ab9d902df8
net/wireguard: UX and wording
2023-11-01 08:21:44 +01:00
Franco Fichtner
06d0969eb2
net/wireguard: allow instance selection from peer
2023-11-01 08:21:18 +01:00
Franco Fichtner
9af41b126b
net/wireguard: bump version
2023-10-31 22:43:08 +01:00
Franco Fichtner
af80514ad8
net/wireguard: use syncconf on newwanip event
2023-10-31 22:42:16 +01:00
Ad Schellevis
806fb05c1c
net/wireguard: Some improvements in carp event handing for https://github.com/opnsense/plugins/issues/3579
...
This commit addresses a couple of possible issues.
1. When a sequence of carp events is being processed and these processes lock eachother, its possible that collected interface state via legacy_interfaces_details() doesn't match the active one anymore. To prevent this from happening, only fetch the wireguard interface we're interested in inside the lock.
2. To limit the number of events being handled in wg-service-control.php it's likely cleaner to push the vhid as well when we're handling carp events. This means that we should switch between server id (current parameter) and vhid by looking at its format.
3. In case the target (wg) interface doesn't exist, make sure to create it. Although in practice this shouldn't happen (as the stat file is being removed on boot), dropping an interface manually should preferably lead to a funcitonal setup anyway (otherwise it will crash trying to pull it up)
4. When a vhid is passed and affects the interface in question, log relevant information to syslog.
2023-10-30 18:47:12 +01:00
Monviech
19eac172c8
wg - fix error when empty tunnel address in instance ( #3638 )
2023-10-26 13:49:02 +02:00
Ad Schellevis
186ec0713f
net/wireguard - startup missing import (bug)
2023-10-25 14:55:28 +02:00
Franco Fichtner
e474d4b17b
net/radsecproxy: style scrubbing
2023-10-24 12:37:57 +02:00
Franco Fichtner
5a912c4edb
net/wireguard: make it a full version
2023-10-24 12:28:04 +02:00
Ad Schellevis
26d96b96c7
net/radsecproxy: cleanup service control. os-radsecproxy wasn't used, so we're removing it and hook the required settings in rc.conf.d. To make the grids a bit more usable, make sure to wrap a container arount it. Final change is to hook syslog properly and add a menu item for it. ( #3628 )
2023-10-23 17:02:45 +02:00
Franco Fichtner
3d4c6735ad
net/upnp: fix a typo
...
PR: https://github.com/opnsense/lang/issues/64
2023-10-23 08:13:47 +02:00
Ad Schellevis
0558d48493
net/wireguard - import https://github.com/opnsense/core/commit/c2d07aeef6965a22d4119f815b7afc6bb9d1db09 and https://github.com/opnsense/core/commit/4bef809bd031f0aa3d55963e57a82d988fd2d45a from core
2023-10-20 17:57:51 +02:00
Franco Fichtner
7ff3c44957
net/mdns-repeater: note the recent docs change
...
https://github.com/opnsense/docs/commit/2f1b56bc93619acc08d864fe7d86218a9653d2c2
It would be nice to have a constraint for this, but it's
probably not worth the work in this case although the validation
should be stating this, not the help text and documentation.
2023-10-20 10:56:06 +02:00
Franco Fichtner
c45755f6dc
net/firewall: hide menu hints from page search
2023-10-18 20:01:28 +02:00
Franco Fichtner
f3695f92d4
net/wireguard: different approach to bootup handling
2023-10-17 08:21:13 +02:00
Franco Fichtner
6c7fd0cc7b
net/frr: minor change revision bump
2023-10-10 10:31:50 +02:00
Franco Fichtner
a076f0fbb0
net/wireguard: missed this cleanup
2023-10-10 10:30:04 +02:00
Franco Fichtner
c6bd73e301
net/wireguard: merge changes from core, wrap up next version
2023-10-10 10:28:15 +02:00
Ad Schellevis
a7a94cce56
VPN: WireGuard - hook wireguard empty devices during bootup, using wireguard_devices() plugin system. This should make sure services and components, such as the firewall, are able to use the device before being setup. closes https://github.com/opnsense/core/issues/6909
...
A minor modification was needed in wg-service-control.php to make sure a configure would be executed if wgX exists without configuration
2023-10-04 18:23:25 +02:00
Ad Schellevis
07b652f22c
net/frr - explicit case "interface" in automatic firewall rules, functionally this doesn't change anything, but makes it easier to debug filter rules as they're not being referenced anymore
2023-10-02 13:48:30 +02:00