vplane-config-npf (4.4.6) unstable; urgency=medium

  [ Derek Fawcus ]
  * GPC: Split classifier in to a grouping
  * GPC: Rename container used to hold rules
  * GPC: Each classifier has a type, not ip-version
  * GPC: VCI changes to handle renames
  * GPC: Allow an imported classifier
  * GPC: Add classify clause for users

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 06 May 2021 11:26:48 +0100

vplane-config-npf (4.4.5) unstable; urgency=medium

  * gpc/acl: update error msgs saying 'protocol final' may not be supported

 -- Gavin Shearer <gavin.shearer@att.com>  Fri, 16 Apr 2021 18:31:04 +0100

vplane-config-npf (4.4.4) unstable; urgency=medium

  * J2: Update validation to check not running out of statistics resources
  * Fix some pylint3 warnings in existing code

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 08 Apr 2021 10:56:13 +0100

vplane-config-npf (4.4.3) unstable; urgency=medium

  [ Paul Aitken ]
  * Fix lintian warning

  [ Alan Dewar ]
  * GPC: limit group and result names to 16 characters (Fixes: VRVDR-54757)

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 25 Mar 2021 12:20:27 +0000

vplane-config-npf (4.4.2) unstable; urgency=medium

  [ Paul Carson ]
  * Enable show/clear commands for operator users (Closes: VRVDR-54360)

  [ Paul Aitken ]
  * set flake8 qualitygate appropriately

  [ Paul Carson ]
  * Escalate privileges for some show/update commands (Closes: VRVDR-54360)

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 22 Feb 2021 14:09:30 +0000

vplane-config-npf (4.4.1) unstable; urgency=medium

  [ Gavin Shearer ]
  * Update the end date of copyrights to be 2021

  [ Nicholas Brown ]
  * referenceJobName is deprecated
  * Update copyright date

  [ Gavin Shearer ]
  * ippf: fix issue of show cmd matching incorrect rule numbers

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 10 Feb 2021 18:29:38 +0000

vplane-config-npf (4.4.0) unstable; urgency=medium

  [ bs775m ]
  * vyatta-cfg :ACL Support for IP_DSCP, IPv6 HopLimit.

  [ Derek Fawcus ]
  * NPF: Allow for more flexible IPv6 RT RH matches

  [ Ian Wilson ]
  * Unused import in vyatta-op-ippf-v1.yang

  [ Gavin Shearer ]
  * ippf: enable IPPF Yang for platform ufi.s9700-53dx (Jericho 2)
  * ippf: rename YANG platform file for SIAD/QAX to use name "qax"

  [ Brian Russell ]
  * Uprev dataplane qos dependency (Fixes: VRVDR-53324)

  [ Duncan Eastoe ]
  * debian: Swap libvyatta-cfg1 dependency

  [ Brian Russell ]
  * Add generic packet classifier yang
  * Add generic packet classifier VCI component
  * Send a notification on GPC config change
  * Add J2 platform support and deviations for GPC

  [ Nicholas Brown ]
  * Move post step to specific stage

  [ Paul Aitken ]
  * Fix revision statement whitespace

  [ Alan Dewar ]
  * GPC: use correct protobuf field names (Fixes: VRVDR-54132)

 -- Gavin Shearer <gavin.shearer@att.com>  Tue, 19 Jan 2021 22:18:57 +0000

vplane-config-npf (4.3.4) unstable; urgency=medium

  * ippf: use minimal number of spaces when aligning
  * ippf: ensure cannot match on L4 fields if matching fragments

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 26 Oct 2020 10:33:07 +0000

vplane-config-npf (4.3.3) unstable; urgency=medium

  [ Ian Wilson ]
  * Enable software ACLs permanently

 -- Gavin Shearer <gavin.shearer@att.com>  Fri, 23 Oct 2020 10:41:48 +0100

vplane-config-npf (4.3.2) unstable; urgency=medium

  [ Paul Aitken ]
  * only append port if NAT cmd already set

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 15 Oct 2020 12:48:32 +0100

vplane-config-npf (4.3.1) unstable; urgency=medium

  [ Ian Wilson ]
  * Display rule details in firewall and NAT sessions

  [ Gavin Shearer ]
  * Add handling of additional error types

  [ Ian Wilson ]
  * Split sess_op_parse_options into two function
  * Filter and sort sessions by NAT translation address or port

  [ Paul Aitken ]
  * Jenkinsfile: raise flake8 threshold to 22

  [ William Ivory ]
  * Tweak YANG to keep Cisco NCS happy

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 21 Sep 2020 10:55:30 +0100

vplane-config-npf (4.3.0) unstable; urgency=medium

  [ Ian Wilson ]
  * Add stateful firewall override

  [ Alexey Khan ]
  * add originate firewall for switch vif

  [ Brian Russell ]
  * Uprev dataplane qos dependency

  [ Ian Wilson ]
  * Add new "show/clear dataplane sessions ..." command

  [ Paul Aitken ]
  * app groups: add group name to rule

  [ Vinicius Soares ]
  * l3acl: Added counter type option "auto-per-action"
  * l3acl: Added support for "auto-per-action" to the SW counters

  [ Duncan Eastoe ]
  * Remove vyatta-protocols dependencies

  [ Paul Aitken ]
  * Fix two flake8 issues

  [ Gavin Shearer ]
  * Allow 0 as a possible value in a port range for matching pkts

  [ Paul Aitken ]
  * Enable qualitygates even for failed builds

  [ Vinicius Soares ]
  * l3acl: Added 'name' leaf in statistics output (action-per-action counters)

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 07 Sep 2020 14:11:29 +0100

vplane-config-npf (4.2.4) unstable; urgency=medium

  [ Ian Wilson ]
  * Show, clear and rpc commands for NPF dataplane statistics

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 23 Jul 2020 12:42:01 +0100

vplane-config-npf (4.2.3) unstable; urgency=medium

  [ Paul Aitken ]
  * flake8: anomalous backslash
  * improve flake8 quality gate in Jenkinsfile
  * fix flake8 warning in res_grp_provisioner.py

  [ Derek Fawcus ]
  * SIAD-ACL: Make 'must' path component names qnames

  [ Gavin Shearer ]
  * Return empty JSON when resource group state is requested via VCI

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 20 Jul 2020 10:39:02 +0100

vplane-config-npf (4.2.2) unstable; urgency=medium

  [ Ian Wilson ]
  * npf: Change address group show cmd to use python

  [ Paul Aitken ]
  * Jenkinsfile: use $SRC_DIR
  * Jenkinsfile: improve qualitygates metric
  * DRAM: suppress download progress indication

  [ Nicholas Brown ]
  * Reuse the node when starting docker container

  [ Ian Wilson ]
  * cgnat: Change upper bound of max-dest-per-session from 64 to 128
  * Obsolete address-group 'tree' and deprecate unqualified name show commands

  [ Gavin Shearer ]
  * nat: fix issue of python uninit message for exclude

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 22 Jun 2020 10:38:05 +0100

vplane-config-npf (4.2.1) unstable; urgency=medium

  [ Paul Aitken ]
  * CGNAT: fix flake8 warning

  [ Derek Fawcus ]
  * IPPF: Constrain IPv6 input rules on QAX platform

  [ Ian Wilson ]
  * cgnat: Use the NAT pool 'full' boolean json in show outout and netconf

  [ ak487r ]
  * npf: add validation for ipv6-frag protocol for originating firewall

  [ Paul Aitken ]
  * codechecks: bail out if there's nothing to check
  * codechecks: relax platform ignore restriction

  [ ck487r ]
  * Egress ACLs: Support egress ACL counters for QAX platfom

  [ Ian Wilson ]
  * cgnat: Add log command
  * Add an interface parameter to the npf store_cfg command
  * cgnat: Pass an interface parameter to the store config function

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 10 Jun 2020 09:57:11 +0100

vplane-config-npf (4.2.0) unstable; urgency=medium

  [ Derek Fawcus ]
  * IPPF: Add additional match criteria - TTL
  * IPPF: Add additional match criteria - DSCP
  * IPPF: Add additional match criteria - IPv4 ICMP
  * IPPF: Add additional match criteria - ICMPv6
  * IPPF: Add additional match criteria - ICMPv6 class
  * IPPF: Add additional match criteria - L4 Ports

  [ Gavin Shearer ]
  * nat: show nat used port counts per-protocol
  * nat: don't show total ports available for DNAT
  * nat64: remove space after a comma in nat64 overload show cmd
  * nat64: show nat used port counts per-protocol for overload

  [ Stuart Reilly ]
  * Add dpi engine support
  * Replace multiple user types with arbitrary types

  [ Paul Aitken ]
  * Simplify appname; add apptype
  * Update vyatta-dp-npf-show-sessions DPI handling

  [ ck487r ]
  * Use 'leafref' for validation
  * Egress ACLs: Enable egress ACLs at CLI
  * Egress ACLs: preclude new ingress ACL matching fields

  [ ak487r ]
  * fw: add originating firewall

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 18 May 2020 10:18:36 +0100

vplane-config-npf (4.1.8) unstable; urgency=medium

  [ Paul Carson ]
  * Add firewall and PBR to PPPoE interfaces (Fixes: VRVDR-43273)

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 29 Apr 2020 15:00:20 +0100

vplane-config-npf (4.1.7) unstable; urgency=medium

  [ Ian Wilson ]
  * cgnat: Obsolete some error counts, and add echo-req count to summary

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 08 Apr 2020 09:58:50 +0100

vplane-config-npf (4.1.6) unstable; urgency=medium

  * l3acl: add help/description for 'protocol base/final'
  * l3acl: remove "protocol final" config for SIAD platform

 -- Gavin Shearer <gavin.shearer@att.com>  Tue, 07 Apr 2020 10:22:29 +0100

vplane-config-npf (4.1.5) unstable; urgency=medium

  [ Ian Wilson ]
  * CGNAT: Remove unnecessary APM table resource constraint notifications

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 01 Apr 2020 14:08:38 +0100

vplane-config-npf (4.1.4) unstable; urgency=medium

  [ Paul Aitken ]
  * flake8

  [ Brian Russell ]
  * Change QoS dataplane command version dependency

  [ Gavin Shearer ]
  * lintian: fix debhelper-but-no-misc-depends warnings
  * lintian: fix debian-source-dir warning
  * lintian: fix build-depends-on-obsolete-package warning
  * lintian: fix global-files-wildcard-not-first-paragraph-in-dep5-copyright
  * lintian: fix ancient-standards-version 3.9.6 warning
  * lintian: fix debian-changelog-line-too-long warning
  * lintian: fix priority-extra-is-replaced-by-priority-optional warning
  * dpkg-gencontrol: fix ${perl:Depends} substitution variable warnings
  * dpkg-gencontrol: fix ${python3:Depends} substitution variable warnings
  * Update the end date of copyrights to be 2020

  [ ak487r ]
  * add protocol filter to "delete session table" command

  [ Paul Aitken ]
  * Add missing copyrights
  * Remove trailing WS
  * Standard format copyright message
  * New codechecks script
  * Remove flake8 install
  * Add gitlint config file
  * Add codechecks to Jenkinsfile
  * Change gitlint ... to ..
  * JenkinsFile: add referenceJobName
  * JenkinsFile: re-enable osc chroot wipe
  * JenkinsFile: target acquisition

  [ Nicholas Brown ]
  * Jenkinsfile: CHANGE_TARGET is null

  [ Paul Aitken ]
  * Fix some flake8 issues
  * make "pyfiles" more selective

  [ Ian Wilson ]
  * cgnat: Add 5-tuple counts to subscriber, policy and summary
  * cgnat: Add subnet option to nat pool range

 -- Gavin Shearer <gavin.shearer@att.com>  Tue, 24 Mar 2020 12:08:58 +0000

vplane-config-npf (4.1.3) unstable; urgency=medium

  [ ak487r ]
  * Fix for command service nat <nat> group <group> rule (Fixes: VRVDR-47559)

  [ Vinicius Soares ]
  * IPPF: Added 'ipv6-frag' matching option.

  [ Ian Wilson ]
  * cgnat: Add subs-addr <addr> to filter string for update and clear commands

  [ Gavin Shearer ]
  * Revert "IPPF: Added 'ipv6-frag' matching option."

  [ ck487r ]
  * YANG: Replace 'opd:option' with no type by 'opd:command'

  [ Vinicius Soares ]
  * IPPF: Added 'ipv6-frag' matching option.

  [ Paul Aitken ]
  * Add Jenkinsfile

  [ ak487r ]
  * split <ip:port> to separate attributes in command delete session table

  [ Ian Wilson ]
  * cgnat: Add counts of dest addr/port hash tables created and destroyed

  [ Paul Aitken ]
  * Update Jenkinsfile

  [ Ramkumar Ganapathysubramanian ]
  * Support for clear nat nptv6 CLI command

  [ Gavin Shearer ]
  * cgnat: change tabs to spaces
  * cgnat: correct revision statement
  * cgnat: make per-port timeout node "established" mandatory
  * cgnat: fix up sending per-port timeout configuration
  * cgnat: used nested_dict() to saves lots of explicit dictionary creations

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 02 Mar 2020 15:49:56 +0000

vplane-config-npf (4.1.2) unstable; urgency=medium

  [ Ian Wilson ]
  * cgnat: The unknown src count only applies to 3-tuple sessions, subscriber
    etc.

  [ Alan Dewar ]
  * Reinstate original order of Yang nodes (Fixes: VRVDR-49362)

  [ Gavin Shearer ]
  * Updated due to in-pkts count now including unknown-sources
  * cgnat: do display timeouts value if not in JSON for session detail
  * cgnat: display timeout as "-" if not in JSON when showing session

  [ Alan Dewar ]
  * Delete the vyatta-resources-group-lib package
  * Create the resources-group ephemeral VCI component (Fixes: VRVDR-49474)

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 13 Jan 2020 15:42:35 +0000

vplane-config-npf (4.1.1) unstable; urgency=medium

  [ Ian Wilson ]
  * Add CGNAT per-port session timeouts for TCP and UDP Established sessions

 -- Gavin Shearer <gavin.shearer@att.com>  Fri, 06 Dec 2019 11:18:07 +0000

vplane-config-npf (4.1.0) unstable; urgency=medium

  [ Alan Dewar ]
  * QoS VCI: Move dscp-groups into yang submodule (Fixes: VRVDR-48985)

 -- Gavin Shearer <gavin.shearer@att.com>  Fri, 06 Dec 2019 11:14:54 +0000

vplane-config-npf (4.0.11) unstable; urgency=medium

  * cgnat: add YANG and processing for setting CGNAT logging core

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 05 Dec 2019 15:27:23 +0000

vplane-config-npf (4.0.10) unstable; urgency=medium

  * Revert "QoS: send VCI notification when dscp-groups change"

 -- Gavin Shearer <gavin.shearer@att.com>  Thu, 05 Dec 2019 11:11:52 +0000

vplane-config-npf (4.0.9) unstable; urgency=medium

  [ Paul Aitken ]
  * CGNAT: if export CLI doesn't exist

 -- Gavin Shearer <gavin.shearer@att.com>  Wed, 04 Dec 2019 16:16:46 +0000

vplane-config-npf (4.0.8) unstable; urgency=medium

  [ Paul Aitken ]
  * Rework cgnat-configuration (Fixes: VRVDR-49274)
  * Fluent-bit: disable vanilla td-agent-bit

  [ Gavin Shearer ]
  * Increase HWM for ZMQ channel for non-critical Kafka logs

  [ Paul Aitken ]
  * Revert "Fluent-bit: disable vanilla td-agent-bit"
  * Fluent-bit: override td-agent-bit

  [ Ian Wilson ]
  * cgnat: Add count for unknown pkts on session, subscriber, and policy

  [ Duncan Eastoe ]
  * No td-agent-bit.service -> /dev/null link in src

 -- Paul Aitken <paul.aitken@att.com>  Tue, 03 Dec 2019 16:38:45 +0000

vplane-config-npf (4.0.7) unstable; urgency=medium

  * Update CGNAT yang revision statement

 -- Paul Aitken <paul.aitken@att.com>  Tue, 26 Nov 2019 16:06:39 +0000

vplane-config-npf (4.0.6) unstable; urgency=medium

  * Add dh-systemd build dependency

 -- Paul Aitken <paul.aitken@att.com>  Tue, 26 Nov 2019 10:27:18 +0000

vplane-config-npf (4.0.5) unstable; urgency=medium

  * CGNAT: td-agent-bit VRF support
  * CGNAT: td-agent-bit reload service

 -- Paul Aitken <paul.aitken@att.com>  Tue, 26 Nov 2019 09:54:35 +0000

vplane-config-npf (4.0.4) unstable; urgency=medium

  [ Ian Wilson ]
  * cgnat: Only display the session output header once

  [ Paul Aitken ]
  * move td-agent-bit storage to /opt/vyatta

 -- Gavin Shearer <gavin.shearer@att.com>  Mon, 25 Nov 2019 14:46:03 +0000

vplane-config-npf (4.0.3) unstable; urgency=medium

  [ Ian Wilson ]
  * cgnat: Changes to global return code / error counters

 -- Gavin Shearer <gavin.shearer@att.com>  Tue, 19 Nov 2019 12:40:47 +0000

vplane-config-npf (4.0.2) unstable; urgency=medium

  * Change AT&T ZIP code to 7502 and add country USA
  * Fix typo: compatability ==> compatibility
  * Correct typos: specifed ==> specified
  * Correct typos in scripts

 -- Gavin Shearer <gavin.shearer@att.com>  Tue, 19 Nov 2019 11:58:28 +0000

vplane-config-npf (4.0.1) unstable; urgency=medium

  * DANOS Import master

 -- Vyatta Package Maintainers <DL-vyatta-help@att.com>  Tue, 05 Nov 2019 15:07:17 +0000

vplane-config-npf (1.12.16.1) unstable; urgency=medium

  * DANOS Import

 -- Vyatta Package Maintainers <DL-vyatta-help@att.com>  Fri, 01 Nov 2019 15:58:06 +0000
