Page MenuHomeVyOS Platform
People Viacheslav

Viacheslav (Viacheslav Hletenko)
ViacheslavAdministrator

Projects

User Details

User Since
Oct 2 2019, 6:00 PM (370 w, 6 h)
Roles
Administrator

Recent Activity
View All

Tue, Nov 3

Viacheslav closed T9469: openvpn: generated client config lacks tls-crypt/tls-auth static key as Resolved.
Tue, Nov 3, 7:11 PM · VyOS Rolling
Viacheslav changed the status of T8461: kea: DHCPv4 ip allocation issue on vlan interfaces from In progress to Needs testing.
Tue, Nov 3, 6:38 PM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
Viacheslav added a comment to T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.

The PR has been merged and fix will be available in the next rolling release.
Appreciate if someone can do the final confirmation.

Tue, Nov 3, 6:35 PM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
Viacheslav changed the status of T9521: VPP: VRRP rfc3768 (vmac) on VPP interface from Open to In progress.
Tue, Nov 3, 4:00 PM · VyOS Rolling
Viacheslav closed T9560: openvpn: tls auth-key accepted in site-to-site mode but never rendered as Resolved.
Tue, Nov 3, 3:14 PM · VyOS Rolling

Mon, Nov 2

Viacheslav triaged T9547: vyos-build: image built without an explicit version gets a wrong default version string as Normal priority.
Mon, Nov 2, 5:28 PM · VyOS Rolling
Viacheslav closed T9542: 'show vpn debug peer' fails: /usr/sbin/ipsec is no longer on the image as Resolved.
Mon, Nov 2, 5:28 PM · VyOS Rolling
Viacheslav triaged T9548: BFD echo-mode over VPP echo packets not return as Normal priority.
Mon, Nov 2, 4:49 PM · VyOS Rolling
Viacheslav closed T9557: high-availability: real-server port check dedented out of the virtual-server loop as Resolved.
Mon, Nov 2, 4:49 PM · VyOS Rolling
Viacheslav closed T9482: static: a route with a blackhole and a next-hop at the same distance is accepted, then rejected by FRR as Resolved.
Mon, Nov 2, 3:57 PM · VyOS Rolling
Viacheslav triaged T9559: 'service https vrf default' is refused with a false "port already used" error as Low priority.
Mon, Nov 2, 3:36 PM · VyOS Rolling
Viacheslav triaged T9561: Adding or changing 'load-balancing haproxy vrf' on a running HAProxy is not applied until restart as Normal priority.
Mon, Nov 2, 3:34 PM · VyOS Rolling
Viacheslav triaged T9553: ISO built in a container without CAP_SYS_MODULE has an initrd without kernel modules and does not boot as Normal priority.
Mon, Nov 2, 1:39 PM · VyOS Rolling
Viacheslav closed T9546: protocols_nhrp: nftables rules not re-rendered on delete, stale multicast-drop rules reapplied as Resolved.
Mon, Nov 2, 1:29 PM · VyOS Rolling
Viacheslav triaged T9552: VPP: use the native VPP BFD implementation instead of FRR bfdd on VPP interfaces as Wishlist priority.
Mon, Nov 2, 1:29 PM · VyOS Rolling
Viacheslav triaged T9535: API commit-confirm with action reboot: failed commit still starts the reboot timer as Normal priority.
Mon, Nov 2, 1:21 PM · VyOS Rolling
Viacheslav closed T9549: firewall zone template: from_conf.firewall[fw_name] typo renders 'jump NAME_' with no target as Resolved.
Mon, Nov 2, 1:09 PM · VyOS Rolling
Viacheslav closed T9545: zabbix-agent: verify compares mode to 'pre_shared_secret' instead of 'pre-shared-secret' as Resolved.
Mon, Nov 2, 11:33 AM · VyOS Rolling
Viacheslav triaged T9556: vyos.vyos.vyos_user module fails when looping over it as Normal priority.
Mon, Nov 2, 10:13 AM · VyOS Rolling

Fri, Oct 30

Viacheslav added a comment to T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.

@rherold

Side note: the vyos/vyos-build:current container has an APT source packages.vyos.net/repositories/current that answers 404 now

The actual container is vyos/vyos-build:rolling

Fri, Oct 30, 12:20 PM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
Viacheslav triaged T9521: VPP: VRRP rfc3768 (vmac) on VPP interface as Normal priority.
Fri, Oct 30, 12:11 PM · VyOS Rolling
Viacheslav triaged T9542: 'show vpn debug peer' fails: /usr/sbin/ipsec is no longer on the image as High priority.
Fri, Oct 30, 12:10 PM · VyOS Rolling
Viacheslav closed T9539: Bump accel-ppp-ng version to 9c2c18e as Resolved.

PR https://github.com/vyos/vyos-build/pull/1337

Fri, Oct 30, 11:38 AM · VyOS Rolling
Viacheslav triaged T9540: OpenVPN 2.7: multi-homed UDP server replies out the wrong interface, clients on the second WAN cannot connect as Normal priority.
Fri, Oct 30, 10:21 AM · VyOS Rolling
Viacheslav added a comment to T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.

I'd start with patches this time; this way, we can backport it to the LTS without additional changes or potential new risks.
Then, when we are ready, bump the KEA version for the rolling.

Fri, Oct 30, 10:18 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling

Thu, Oct 29

Viacheslav closed T9504: wwan: op-mode "show interfaces wwan <name>" passes wrong interface type as Resolved.
Thu, Oct 29, 5:59 PM · VyOS Rolling
Viacheslav reassigned T9504: wwan: op-mode "show interfaces wwan <name>" passes wrong interface type from SeeMyPing to c-po.

PR superseded by

Thu, Oct 29, 5:59 PM · VyOS Rolling
Viacheslav closed T9517: openvpn: bump to 2.7.8 as Resolved.
Thu, Oct 29, 5:55 PM · VyOS Rolling
Viacheslav closed T9495: vyos-geoip cron update job not completing as Resolved.
Thu, Oct 29, 5:53 PM · VyOS Rolling
Viacheslav raised the priority of T7752: Setting OpenVPN site-to-site vtunX Interface Description Fails and Disrupts Service from Normal to High.
Thu, Oct 29, 5:31 PM · Bugs
Viacheslav triaged T9527: pppoe-server subscriber cannot reach a kernel-side subscriber as Normal priority.
Thu, Oct 29, 5:30 PM · VyOS Rolling
Viacheslav closed T9491: interfaces: mirror/redirect targets lack reverse-dependency check, delete drops the source at boot as Resolved.
Thu, Oct 29, 3:42 PM · VyOS Rolling
Viacheslav closed T9525: WAN load-balancing: “show wan-load-balance connection” prints unfiltered connections in non-raw output as Resolved.
Thu, Oct 29, 3:30 PM · VyOS Rolling
Viacheslav closed T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down as Resolved.
Thu, Oct 29, 2:40 PM · VyOS Rolling
Viacheslav closed T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down, a subtask of T7070: VPP related bugs the root task, as Resolved.
Thu, Oct 29, 2:40 PM · VyOS Rolling
Viacheslav closed T9450: bgp: commits re-send unchanged BGP settings to FRR as Resolved.
Thu, Oct 29, 2:37 PM · VyOS Rolling
Viacheslav closed T9499: accel-ppp: accel-pppd aborts when a VPP PPPoE session ends (EBADF in epoll_ctl, since T9238) as Resolved.
Thu, Oct 29, 2:29 PM · VyOS Rolling
Viacheslav triaged T9532: OpenVPN: first client subnet is not routed until the server is restarted as High priority.
Thu, Oct 29, 12:51 PM · VyOS Rolling
Viacheslav closed T9526: frr: upgrade to stable/10.7 commit e42337c8d3b80 as Resolved.
Thu, Oct 29, 12:37 PM · VyOS Rolling
Viacheslav added a comment to T9527: pppoe-server subscriber cannot reach a kernel-side subscriber.

It is expected for VPP as it does not add a gateway IP address on its own PPP interfaces
But forwarding traffic should work fine

Thu, Oct 29, 12:34 PM · VyOS Rolling
Viacheslav closed T9473: cgnat: invalid input crashes commit and overlapping pools hand out the same external address and ports as Resolved.
Thu, Oct 29, 12:08 PM · VyOS Rolling

Wed, Oct 28

Viacheslav closed T9149: 'generate pki openvpn shared-secret install' creates a broken PSK — the key value keeps its -----BEGIN OpenVPN Static key----- header as Resolved.
Wed, Oct 28, 2:44 PM · VyOS Rolling
Viacheslav closed T9503: wwan: migration 27-to-28 does not rename "authentication user" for WWAN interfaces as Resolved.
Wed, Oct 28, 2:41 PM · VyOS Rolling
Viacheslav triaged T9523: DHCP client: option 121 routes removed by FRR reload, option 3 default installed despite option 121 as Normal priority.
Wed, Oct 28, 11:43 AM · VyOS Rolling

Tue, Oct 27

Viacheslav triaged T9520: VPP: upstream PPPoE traffic is processed by a single worker (NIC RSS cannot hash PPPoE) as Normal priority.
Tue, Oct 27, 3:34 PM · VyOS Rolling
Viacheslav raised the priority of T9517: openvpn: bump to 2.7.8 from Normal to High.
Tue, Oct 27, 1:13 PM · VyOS Rolling
Viacheslav changed the status of T9154: IPsec vti-up-down: DB keyed only by connection name causes admin-down of a VTI still carried by a live IKE_SA from Open to In progress.
Tue, Oct 27, 12:47 PM · VyOS Rolling
Viacheslav changed the status of T9518: VPP:MPLS/LDP over a VPP interface, not enabling the MPLS feature in VPP from Open to In progress.
Tue, Oct 27, 12:43 PM · VyOS Rolling

Mon, Oct 26

Viacheslav added a comment to T9514: VRRP over VPP: the new VIP stops answering ARP after failover.
In T9514#283701, @rherold wrote:

I can test and create a PR

Mon, Oct 26, 5:04 PM · VyOS Rolling
Viacheslav added a comment to T9514: VRRP over VPP: the new VIP stops answering ARP after failover.

We can always use the patched VPP version https://github.com/vyos/vyos-vpp-patches/tree/rolling/patches/vpp
Needs to check if we can apply it to our version (stable/2510).

Mon, Oct 26, 4:14 PM · VyOS Rolling
Viacheslav closed T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping as Resolved.
Mon, Oct 26, 3:16 PM · VyOS Rolling
Viacheslav triaged T9515: configd: one failed node skips the FRR render, routing lost at boot when a NIC is missing as High priority.
Mon, Oct 26, 3:13 PM · VyOS Rolling
Viacheslav triaged T9507: WAN load balancing configuration fails on boot when using ethernet vif as High priority.
Mon, Oct 26, 1:08 PM · VyOS Rolling
Viacheslav closed T9506: accel-ppp: an idle session ends with Acct-Terminate-Cause Session-Timeout instead of Idle-Timeout as Resolved.
Mon, Oct 26, 1:03 PM · VyOS Rolling
Viacheslav assigned T9511: new rolling release vbash breaks vyps.vyos TerminalModule parsing to evgmol.
Mon, Oct 26, 11:28 AM · VyOS Rolling
Viacheslav triaged T9514: VRRP over VPP: the new VIP stops answering ARP after failover as Normal priority.
Mon, Oct 26, 11:24 AM · VyOS Rolling
Viacheslav triaged T9513: ipsec: strongswan-starter re-enabled on circinus, tunnels down on first boot as High priority.
Mon, Oct 26, 11:21 AM · VyOS Rolling

Fri, Oct 23

Viacheslav added a comment to T9505: RADIUS rate-limit silently does nothing when the vendor name has the wrong case (`vendor mikrotik`).

RADIUS rate-limit silently does nothing when the vendor name has the wrong case (vendor mikrotik)

I think it is expected
What RFC says how to handle a wrong attribute if the vendor name is wrong?

Fri, Oct 23, 11:36 AM · VyOS Rolling
Viacheslav changed the status of T9469: openvpn: generated client config lacks tls-crypt/tls-auth static key from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5567

Fri, Oct 23, 10:54 AM · VyOS Rolling
Viacheslav closed T9406: op-mode: 'reset bgp all' and 'reset bgp ipv4 all' commands fail with "No such file or directory" error as Resolved.
Fri, Oct 23, 10:01 AM · VyOS Rolling
Viacheslav changed the status of T9442: frrender: after a failed FRR apply, later commits do not reapply the FRR configuration from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5591

Fri, Oct 23, 9:50 AM · VyOS Rolling
Viacheslav changed the status of T8461: kea: DHCPv4 ip allocation issue on vlan interfaces from Open to In progress.
Fri, Oct 23, 9:45 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
Viacheslav closed T8382: Stats monitoring support for VPP (via Prometheus), a subtask of T7221: VPP related features the root task, as Resolved.
Fri, Oct 23, 9:00 AM · VyOS Rolling
Viacheslav closed T8382: Stats monitoring support for VPP (via Prometheus) as Resolved.
Fri, Oct 23, 9:00 AM · VyOS Rolling
Viacheslav changed the status of T9504: wwan: op-mode "show interfaces wwan <name>" passes wrong interface type from Open to In progress.
Fri, Oct 23, 6:31 AM · VyOS Rolling
Viacheslav changed the status of T9503: wwan: migration 27-to-28 does not rename "authentication user" for WWAN interfaces from Open to In progress.
Fri, Oct 23, 6:31 AM · VyOS Rolling
Viacheslav changed the status of T9493: Title: dhcp-server: read the TSIG key of dynamic DNS updates from a file (needed for Kea 3.2), a subtask of T8461: kea: DHCPv4 ip allocation issue on vlan interfaces, from Open to In progress.
Fri, Oct 23, 5:58 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
Viacheslav changed the status of T9493: Title: dhcp-server: read the TSIG key of dynamic DNS updates from a file (needed for Kea 3.2) from Open to In progress.
Fri, Oct 23, 5:58 AM · VyOS Rolling

Thu, Oct 22

Viacheslav changed the status of T9299: FRR stale route issue following Accel-PPP L2TP session reconnection from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5516

Thu, Oct 22, 7:33 PM · VyOS Rolling
Viacheslav triaged T9504: wwan: op-mode "show interfaces wwan <name>" passes wrong interface type as Normal priority.
Thu, Oct 22, 7:11 PM · VyOS Rolling
Viacheslav triaged T9503: wwan: migration 27-to-28 does not rename "authentication user" for WWAN interfaces as High priority.
Thu, Oct 22, 7:09 PM · VyOS Rolling
Viacheslav closed T9289: IPoE lease-time options on dhcp as Resolved.
Thu, Oct 22, 7:08 PM · VyOS Rolling
Viacheslav closed T9441: ospf: with `parameters opaque-lsa` set, FRR commit resets every OSPF adjacency of the router as Resolved.
Thu, Oct 22, 6:49 PM · VyOS Rolling
Viacheslav added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.

PR https://github.com/vyos/vyos-1x/pull/5530

Thu, Oct 22, 6:44 PM · VyOS Rolling
Viacheslav reassigned T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied from Viacheslav to a.kudientsov.
Thu, Oct 22, 4:36 PM · VyOS Rolling
Viacheslav closed T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied, a subtask of T7070: VPP related bugs the root task, as Resolved.
Thu, Oct 22, 4:35 PM · VyOS Rolling
Viacheslav closed T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied as Resolved.
Thu, Oct 22, 4:35 PM · VyOS Rolling
Viacheslav closed T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF as Resolved.
Thu, Oct 22, 4:28 PM · VyOS Rolling
Viacheslav changed the subtype of T9501: VPP: NAT44 does not translate traffic of PPPoE server sessions (pppoe_sessionN is not an inside interface) from "Task" to "Bug".
Thu, Oct 22, 4:08 PM · VyOS Rolling
Viacheslav changed the subtype of T9502: accel-ppp: VPP crashes (SIGBUS in policer_input_node_fn) when sessions with a rate limit end from "Task" to "Bug".
Thu, Oct 22, 4:05 PM · VyOS Rolling
Viacheslav raised the priority of T9502: accel-ppp: VPP crashes (SIGBUS in policer_input_node_fn) when sessions with a rate limit end from Low to High.
Thu, Oct 22, 4:04 PM · VyOS Rolling
Viacheslav changed the status of T9495: vyos-geoip cron update job not completing from Open to In progress.
Thu, Oct 22, 1:19 PM · VyOS Rolling
Viacheslav added a comment to T9471: OpenConnect VRF support.

What are the requirements?
Will it be enough to use a single VRF, or is the VRF received via a RADIUS attribute?

Thu, Oct 22, 1:02 PM · VyOS Rolling
Viacheslav triaged T9500: VPP NAT44: exclude rule local-address rmakes the host unreachable as Normal priority.
Thu, Oct 22, 12:45 PM · VyOS Rolling

Wed, Oct 21

Viacheslav assigned T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down to a.kudientsov.
Wed, Oct 21, 5:08 PM · VyOS Rolling
Viacheslav moved T9097: haproxy: support TLS health checks without TLS to the backend (check-ssl) from Need Triage to Completed on the VyOS Rolling board.
Wed, Oct 21, 12:56 PM · VyOS Rolling
Viacheslav closed T9485: IS-IS: SRv6-only configuration also enables SR-MPLS as Resolved.
Wed, Oct 21, 12:54 PM · VyOS Rolling
Viacheslav closed T9462: PPTP silently ignores the configured MPPE encryption policy as Resolved.
Wed, Oct 21, 12:52 PM · VyOS Rolling
Viacheslav closed T9375: vyos1x-config: duplicate-children check re-sorts the list on every step, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, as Resolved.
Wed, Oct 21, 12:32 PM · VyOS Rolling, Bugs
Viacheslav closed T9375: vyos1x-config: duplicate-children check re-sorts the list on every step as Resolved.
Wed, Oct 21, 12:32 PM · VyOS Rolling
Viacheslav changed the subtype of T9495: vyos-geoip cron update job not completing from "Task" to "Bug".
Wed, Oct 21, 12:20 PM · VyOS Rolling
Viacheslav closed T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, as Resolved.
Wed, Oct 21, 12:19 PM · VyOS Rolling, Bugs
Viacheslav closed T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node as Resolved.
Wed, Oct 21, 12:19 PM · VyOS Rolling
Viacheslav changed the subtype of T9497: RFC9370 Multiple Key Exchange Support in IPSEC from "Task" to "Feature Request".
Wed, Oct 21, 11:50 AM · VyOS Rolling

Tue, Oct 20

Viacheslav triaged T9491: interfaces: mirror/redirect targets lack reverse-dependency check, delete drops the source at boot as Normal priority.
Tue, Oct 20, 9:14 AM · VyOS Rolling
Viacheslav assigned T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping to rherold.
Tue, Oct 20, 8:03 AM · VyOS Rolling
Viacheslav changed the status of T9460: config-mgmt: rollback-soft and the commit-confirm revert run one command per changed line and take minutes on large configs from Open to In progress.
Tue, Oct 20, 7:28 AM · VyOS Rolling
Viacheslav triaged T9490: IPv6 link-local address is lost after an interface down/up outside a commit and is not restored as Normal priority.
Tue, Oct 20, 6:53 AM · VyOS Rolling
Viacheslav changed the subtype of T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping from "Task" to "Bug".
Tue, Oct 20, 6:45 AM · VyOS Rolling
Viacheslav added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.

I think we are OK to use even pdns-recursor-5.4.6
Be sure that it fixes the issue, and feel free to add a PR with package build, you can find an example of build HAProxy

Tue, Oct 20, 6:45 AM · VyOS Rolling