Page MenuHomeVyOS Platform
Feed All Stories

Mon, Oct 19

rherold added a comment to T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down.

@a.kudientsov thanks for the detailed report and the reproducer. You wrote that you have local patches for both parts (skipping the drain in lcp_nl_pair_add_cb when
there is no socket, and the state sync during the resync window) that remove the stuck state in your tests.

Mon, Oct 19, 8:50 AM · VyOS Rolling
rherold added a comment to T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.

I checked this against current rolling and the description matches what I see in the sources:

Mon, Oct 19, 8:44 AM · VyOS Rolling
rherold added a comment to T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each.

Because of that the fix belongs in FRR: batch a hard clear (BGP_CLEAR_SOFT_NONE) also when a family is given. Then clearing a group with a family filter is fast as well.
FRR issue: https://github.com/FRRouting/frr/issues/23771. I also opened a patch with a topotest: https://github.com/FRRouting/frr/pull/23779.

Mon, Oct 19, 8:35 AM · VyOS Rolling
rherold added a comment to T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each.

I looked at this in the FRR source (stable/10.5 and master, same code), and the cause is a bit wider than the ip token.

Mon, Oct 19, 7:17 AM · VyOS Rolling
evgmol created T9488: vyos_facts: Wrong ansible_net_model / ansible_net_serialnum..
Mon, Oct 19, 7:11 AM · VyOS Rolling
evgmol created T9487: vyos_bgp_global: Commit fails: Configuration path … is not valid..
Mon, Oct 19, 7:09 AM · VyOS Rolling
evgmol created T9486: vyos_bgp_address_family: Sessions never come up: No BGP neighbors found.
Mon, Oct 19, 7:07 AM · VyOS Rolling
rherold added a comment to T9482: static: a route with a blackhole and a next-hop at the same distance is accepted, then rejected by FRR.

PR: https://github.com/vyos/vyos-1x/pull/5582

Mon, Oct 19, 7:06 AM · VyOS Rolling

Sun, Oct 18

jvoss created T9485: IS-IS: SRv6-only configuration also enables SR-MPLS.
Sun, Oct 18, 7:50 PM · VyOS Rolling
a.kudientsov added a subtask for T7070: VPP related bugs the root task: T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down.
Sun, Oct 18, 4:32 PM · VyOS Rolling
a.kudientsov added a parent task for T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down: T7070: VPP related bugs the root task.
Sun, Oct 18, 4:32 PM · VyOS Rolling
a.kudientsov added a subtask for T7070: VPP related bugs the root task: T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.
Sun, Oct 18, 4:31 PM · VyOS Rolling
a.kudientsov added a parent task for T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied: T7070: VPP related bugs the root task.
Sun, Oct 18, 4:31 PM · VyOS Rolling
c-po changed the status of T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references from Open to In progress.
Sun, Oct 18, 4:26 PM · VyOS Rolling
c-po added a comment to T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.

Implementation superseeded by https://github.com/vyos/vyos-1x/pull/5579

Sun, Oct 18, 4:25 PM · VyOS Rolling
a.kudientsov updated the task description for T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.
Sun, Oct 18, 4:25 PM · VyOS Rolling
a.kudientsov created T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.
Sun, Oct 18, 4:23 PM · VyOS Rolling
a.kudientsov added a comment to T9450: bgp: commits re-send unchanged BGP settings to FRR.

https://github.com/vyos/vyos-1x/pull/5578

Sun, Oct 18, 4:00 PM · VyOS Rolling
a.kudientsov created T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each.
Sun, Oct 18, 1:53 PM · VyOS Rolling
a.kudientsov created T9482: static: a route with a blackhole and a next-hop at the same distance is accepted, then rejected by FRR.
Sun, Oct 18, 1:14 PM · VyOS Rolling
a.kudientsov changed the status of T9451: frr: every 'router bgp <ASN>' re-runs VRF route leaking over the whole VPN table from Open to In progress.
Sun, Oct 18, 1:04 PM · VyOS Rolling
a.kudientsov changed the status of T9450: bgp: commits re-send unchanged BGP settings to FRR from Open to In progress.
Sun, Oct 18, 1:04 PM · VyOS Rolling
alainlamar added a comment to T9480: Build process: Collision between packages vyos-1x and bgpq3.

Removing bgpq3 from data/live-build-config/package-lists/vyos-utils.list.chroot resolves the error. I must have had dragged it with me in my own version of that file.

Sun, Oct 18, 11:49 AM · VyOS Rolling
a.kudientsov created T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down.
Sun, Oct 18, 11:39 AM · VyOS Rolling
alainlamar created T9480: Build process: Collision between packages vyos-1x and bgpq3.
Sun, Oct 18, 11:20 AM · VyOS Rolling
rasty94 created T9478: vyos.vyos: lint cleanup (flake8 F401, stale version references).
Sun, Oct 18, 10:34 AM · VyOS Ansible Collection
rasty94 created T9479: vyos.vyos: fix isort import-ordering drift.
Sun, Oct 18, 10:34 AM · VyOS Ansible Collection
c-po renamed T9477: Remove no longer needed executable bit from conf_mode and migration helper scripts from Remove no longer needed executable bot from conf_mode scripts to Remove no longer needed executable bit from conf_mode and migration helper scripts.
Sun, Oct 18, 7:18 AM · VyOS Rolling
c-po changed Version from - to rolling on T9477: Remove no longer needed executable bit from conf_mode and migration helper scripts.
Sun, Oct 18, 7:14 AM · VyOS Rolling
c-po created T9477: Remove no longer needed executable bit from conf_mode and migration helper scripts.
Sun, Oct 18, 7:14 AM · VyOS Rolling

Sat, Oct 17

c-po added a comment to T9476: smoketest: bgp: shorten test_protocols_bgp runtime by dropping a fixed sleep and redundant commits.

https://github.com/vyos/vyos-1x/pull/5575

Sat, Oct 17, 8:13 PM · VyOS Rolling
c-po triaged T9476: smoketest: bgp: shorten test_protocols_bgp runtime by dropping a fixed sleep and redundant commits as Low priority.
Sat, Oct 17, 8:07 PM · VyOS Rolling
c-po created T9476: smoketest: bgp: shorten test_protocols_bgp runtime by dropping a fixed sleep and redundant commits.
Sat, Oct 17, 8:07 PM · VyOS Rolling
c-po triaged T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports as Normal priority.
Sat, Oct 17, 8:06 PM · VyOS Rolling
c-po added a comment to T9475: nat: commit failures and weight issue in load-balancing, translation issues for port-ranges.

https://github.com/vyos/vyos-1x/pull/5574

Sat, Oct 17, 7:59 PM · VyOS Rolling
c-po claimed T9475: nat: commit failures and weight issue in load-balancing, translation issues for port-ranges.
Sat, Oct 17, 7:56 PM · VyOS Rolling
c-po created T9475: nat: commit failures and weight issue in load-balancing, translation issues for port-ranges.
Sat, Oct 17, 7:56 PM · VyOS Rolling
c-po added a comment to T9474: firewall: multiple issues in rule processing (time based rules, fragment matching and fail;ing commits).

https://github.com/vyos/vyos-1x/pull/5573

Sat, Oct 17, 7:49 PM · VyOS Rolling
c-po claimed T9474: firewall: multiple issues in rule processing (time based rules, fragment matching and fail;ing commits).
Sat, Oct 17, 7:44 PM · VyOS Rolling
c-po created T9474: firewall: multiple issues in rule processing (time based rules, fragment matching and fail;ing commits).
Sat, Oct 17, 7:44 PM · VyOS Rolling
c-po added a comment to T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports.

https://github.com/vyos/vyos-1x/pull/5572

Sat, Oct 17, 7:23 PM · VyOS Rolling
c-po renamed T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports from CGNAT: invalid input crashes commit and overlapping pools hand out the same external address and ports to cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports.
Sat, Oct 17, 7:12 PM · VyOS Rolling
c-po updated the task description for T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports.
Sat, Oct 17, 7:11 PM · VyOS Rolling
c-po created T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports.
Sat, Oct 17, 7:11 PM · VyOS Rolling
c-po added a comment to T9472: wlb: silent daemon failures, ignored options and connections broken by commits.

https://github.com/vyos/vyos-1x/pull/5571

Sat, Oct 17, 7:03 PM · VyOS Rolling
c-po changed the status of T9472: wlb: silent daemon failures, ignored options and connections broken by commits from Open to In progress.
Sat, Oct 17, 6:55 PM · VyOS Rolling
c-po created T9472: wlb: silent daemon failures, ignored options and connections broken by commits.
Sat, Oct 17, 6:55 PM · VyOS Rolling
c-po closed T8928: Backport Intel ice Out-Of-Tree driver (E825-C, E835-C support) to Stream and LTS, Related to T6847, T8147. as Resolved.
Sat, Oct 17, 6:16 PM · VyOS Rolling
c-po added a comment to T8928: Backport Intel ice Out-Of-Tree driver (E825-C, E835-C support) to Stream and LTS, Related to T6847, T8147..

@najieb_haswell VyOS 1.5.2 will run at least Kernel 6.6.159 and ICE 2.6.7, IAVF 4.13.35, I40E 2.30.18 - or even newer

Sat, Oct 17, 6:16 PM · VyOS Rolling
c-po closed T9470: Update Linux Kernel to 6.18.57 | 6.6.159 as Resolved.
Sat, Oct 17, 6:02 PM · VyOS Rolling
c-po closed T9455: Remove exfat-fuse package as Kernel has in-tree EXFAT support as Resolved.
Sat, Oct 17, 6:01 PM · VyOS Rolling
c-po closed T9456: container: use in-kernel overlayfs instead of fuse-overlayfs on installed systems as Resolved.
Sat, Oct 17, 6:01 PM · VyOS Rolling
jvoss changed the status of T9227: Add IS-IS distribute link-state for BGP-LS SRv6 from Blocked to In progress.
Sat, Oct 17, 5:37 PM · VyOS Rolling
jvoss added a comment to T9227: Add IS-IS distribute link-state for BGP-LS SRv6.

vyos-build was recently updated with FRR 10.7.1. This is now unblocked, PR#5570 submitted.

Sat, Oct 17, 5:26 PM · VyOS Rolling
a.apostoliuk triaged T9471: OpenConnect VRF support as Normal priority.
Sat, Oct 17, 9:45 AM · VyOS Rolling
a.apostoliuk created T9471: OpenConnect VRF support.
Sat, Oct 17, 9:44 AM · VyOS Rolling
c-po raised the priority of T9470: Update Linux Kernel to 6.18.57 | 6.6.159 from Normal to High.
Sat, Oct 17, 6:28 AM · VyOS Rolling
c-po added a comment to T9470: Update Linux Kernel to 6.18.57 | 6.6.159.

https://github.com/vyos/vyos-build/pull/1327

Sat, Oct 17, 6:19 AM · VyOS Rolling
c-po renamed T9470: Update Linux Kernel to 6.18.57 | 6.6.159 from Update Linux Kernel to 6.18.55 | 6.6.158 to Update Linux Kernel to 6.18.57 | 6.6.159.
Sat, Oct 17, 6:17 AM · VyOS Rolling
c-po created T9470: Update Linux Kernel to 6.18.57 | 6.6.159.
Sat, Oct 17, 6:16 AM · VyOS Rolling

Fri, Oct 16

asklymenko closed T9257: Run integration workflows for merged branches as Resolved.
Fri, Oct 16, 6:13 PM · VyOS Rolling
asklymenko closed T9304: Fix workflow that checks unused imports after recent GitHub security updates as Resolved.
Fri, Oct 16, 6:04 PM · VyOS Rolling
Viacheslav triaged T9469: openvpn: generated client config lacks tls-crypt/tls-auth static key as Normal priority.
Fri, Oct 16, 5:52 PM · VyOS Rolling
aiv created T9469: openvpn: generated client config lacks tls-crypt/tls-auth static key.
Fri, Oct 16, 5:47 PM · VyOS Rolling
Viacheslav closed T9453: http-api: commit returns before the API server is back up after a reload - race as Resolved.
Fri, Oct 16, 5:26 PM · VyOS Rolling
Viacheslav closed T9408: Add TACACS+ and RADIUS docker containers for ARM64 platform as Resolved.
Fri, Oct 16, 5:25 PM · VyOS Rolling
Viacheslav closed T9454: frr: upgrade package to 10.7 series of FRRouting as Resolved.
Fri, Oct 16, 5:21 PM · VyOS Rolling
natali-rs1985 added a comment to T9466: Local SSH and HA proxy SSH service give a commit error.

https://github.com/vyos/vyos-1x/pull/5566

Fri, Oct 16, 5:16 PM · VyOS Rolling
rherold claimed T9468: IPsec VTI: dual-stack traffic selectors in a single CHILD_SA are narrowed to IPv4 by some peers (Sophos SFOS).
Fri, Oct 16, 5:04 PM · VyOS Rolling
marekm added a comment to T7916: Supermicro IPMI/BMC keyboard/mouse not working after boot.

I can confirm "set system option disable-usb-autosuspend" fixes the issue on Supermicro X11SCM-F with current BIOS 2.9 / BMC 1.74.21.
The virtual keyboard can be made to work for a while by clicking Options -> Keyboard Mouse Hotplug in the iKVM window.
Then quickly type this (the keyboard freezes again after a few seconds of inactivity):

Fri, Oct 16, 5:01 PM · VyOS 1.5 Circinus, VyOS Rolling, VyOS 1.4 Sagitta
rherold added a comment to T9468: IPsec VTI: dual-stack traffic selectors in a single CHILD_SA are narrowed to IPv4 by some peers (Sophos SFOS).

With no traffic-selector configured, the template falls back to 0.0.0.0/0,::/0 for both local and remote. That is the same proposal as listing both families explicitly, so the result is identical: the responder narrows the CHILD_SA to IPv4 and IPv6 stays down. The default does not help, because both families are always sent in one CHILD_SA.
The only way to get both families up against this peer is one CHILD_SA per family. That is what the PR does: https://github.com/vyos/vyos-1x/pull/5565. I tested it against a real Sophos Firewall by configuring the two children by hand: both were installed and IPv6 worked, with no change on the Sophos side.

Fri, Oct 16, 4:50 PM · VyOS Rolling
rherold added a comment to T9468: IPsec VTI: dual-stack traffic selectors in a single CHILD_SA are narrowed to IPv4 by some peers (Sophos SFOS).

PR: https://github.com/vyos/vyos-1x/pull/5565

Fri, Oct 16, 4:45 PM · VyOS Rolling
natali-rs1985 changed the status of T9466: Local SSH and HA proxy SSH service give a commit error from Open to In progress.
Fri, Oct 16, 4:40 PM · VyOS Rolling
Viacheslav changed the status of T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5564

Fri, Oct 16, 4:26 PM · VyOS Rolling
Viacheslav added a comment to T9468: IPsec VTI: dual-stack traffic selectors in a single CHILD_SA are narrowed to IPv4 by some peers (Sophos SFOS).

@rherold, what will happen if you remove the traffic-selector option altogether?

Fri, Oct 16, 4:20 PM · VyOS Rolling
Viacheslav closed T9346: The migration from 1.3.5 to 1.4 or 1.5 fails if policy prefix-list name contains dot as Resolved.
Fri, Oct 16, 4:16 PM · VyOS Rolling
Viacheslav closed T9447: vyos-router: boot noise "cp: -r not specified; omitting directory '/run/live/rootfs/" as Resolved.
Fri, Oct 16, 4:04 PM · VyOS Rolling
Viacheslav closed T9300: VPP: GRE tunnel-type teb validation for a VPP bridge only checks the last member, a subtask of T7070: VPP related bugs the root task, as Resolved.
Fri, Oct 16, 3:51 PM · VyOS Rolling
Viacheslav closed T9300: VPP: GRE tunnel-type teb validation for a VPP bridge only checks the last member as Resolved.
Fri, Oct 16, 3:51 PM · VyOS Rolling
rherold added a comment to T9267: Conditional DHCP option.

Thanks for the capture, that settles it.

Fri, Oct 16, 2:48 PM · VyOS Rolling
rherold created T9468: IPsec VTI: dual-stack traffic selectors in a single CHILD_SA are narrowed to IPv4 by some peers (Sophos SFOS).
Fri, Oct 16, 2:47 PM · VyOS Rolling
Viacheslav changed the subtype of T9466: Local SSH and HA proxy SSH service give a commit error from "Task" to "Bug".
Fri, Oct 16, 2:45 PM · VyOS Rolling
DuxOv8 added a comment to T9267: Conditional DHCP option.

Options on a client class (and possibly a list of classes per subnet) would be a new feature. I can open a separate task for that if you want it.

Fri, Oct 16, 12:15 PM · VyOS Rolling
rherold claimed T9467: Title: dhcp-server: tftp-server-name (option 66) rejects provisioning URLs.
Fri, Oct 16, 11:21 AM · VyOS Rolling
rherold added a comment to T9467: Title: dhcp-server: tftp-server-name (option 66) rejects provisioning URLs.

PR: https://github.com/vyos/vyos-1x/pull/5563

Fri, Oct 16, 11:21 AM · VyOS Rolling
Viacheslav triaged T9467: Title: dhcp-server: tftp-server-name (option 66) rejects provisioning URLs as Normal priority.
Fri, Oct 16, 11:20 AM · VyOS Rolling
rherold created T9467: Title: dhcp-server: tftp-server-name (option 66) rejects provisioning URLs.
Fri, Oct 16, 11:01 AM · VyOS Rolling
rherold added a comment to T9267: Conditional DHCP option.

Thanks for testing, @DuxOv8.

Fri, Oct 16, 10:56 AM · VyOS Rolling
DuxOv8 added a comment to T9267: Conditional DHCP option.

The default server in the yealink phone is normal and this is the default URL after a factory reset (https://updateyealink.lydis.com ....

Fri, Oct 16, 10:19 AM · VyOS Rolling
DuxOv8 added a comment to T9267: Conditional DHCP option.

Hi all

Fri, Oct 16, 10:16 AM · VyOS Rolling
natali-rs1985 added a comment to T9312: VPP sFlow: bonding interface produces no flow samples while physical bond members are rejected by configuration validation.

https://github.com/vyos/vyos-1x/pull/5555

Fri, Oct 16, 8:52 AM · VyOS Rolling
SrividyaA raised the priority of T9466: Local SSH and HA proxy SSH service give a commit error from Low to High.
Fri, Oct 16, 7:50 AM · VyOS Rolling
Chynnon added a comment to T6285: Listen-address in DHCP-server when going VyOS 1.4 to 1.5 will cause problems.

Hi Team,

Fri, Oct 16, 1:23 AM · VyOS Rolling, Bugs

Thu, Oct 15

j.vela created T9466: Local SSH and HA proxy SSH service give a commit error.
Thu, Oct 15, 7:55 PM · VyOS Rolling
jestabro closed T7886: Create unified check for interface dependencies- as Resolved.
Thu, Oct 15, 7:11 PM · VyOS Rolling
jestabro added a subtask for T9068: Add config manager to vyos-configd for management of dependencies and caching of intermediary results: T9105: vyos-configd dies at startup when vyos-1x-aws isn't installed.
Thu, Oct 15, 7:11 PM · VyOS Rolling
jestabro added a parent task for T9105: vyos-configd dies at startup when vyos-1x-aws isn't installed: T9068: Add config manager to vyos-configd for management of dependencies and caching of intermediary results.
Thu, Oct 15, 7:11 PM · VyOS Rolling
Viacheslav closed T9452: GitHub: name pull request smoketest ISO after the PR number as Resolved.
Thu, Oct 15, 6:53 PM · VyOS Rolling
bmstu2208 created T9465: Request to Consider VyOS 1.5 for Anthropic OSS Scanner Security Review.
Thu, Oct 15, 5:16 PM · VyOS 1.5 Circinus
DuxOv8 added a comment to T9267: Conditional DHCP option.

Great @Viacheslav ! I'll wait for the next rolling release to test this new feature. Thank you both (you and @rherold) and VyOS Team

Thu, Oct 15, 3:00 PM · VyOS Rolling