Page MenuHomeVyOS Platform
Create Task
Maniphest T3132

Enable egress flow accounting
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Give the ability to enable egress flow accounting

This could be done like the Ubiquity variant via set system flow-accounting enable-egress

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)

Revisions and Commits

Restricted Diffusion Commit

Related Objects
Search...

StatusSubtypeAssignedTask
 WontfixFEATURE REQUESTViacheslavT446 Flow accounting enhancements: pre/post NAT, ingress/egress
 ResolvedFEATURE REQUESTjpbedeT3132 Enable egress flow accounting

Event Timeline

jpbede changed the task status from Open to In progress.Dec 17 2020, 9:30 AM
jpbede claimed this task.
jpbede triaged this task as Normal priority.
jpbede created this task.
jpbede added a comment.Dec 17 2020, 11:38 AM

See PR: https://github.com/vyos/vyos-1x/pull/647

jpbede lowered the priority of this task from Normal to Wishlist.Dec 17 2020, 12:51 PM
jpbede added a commit: Restricted Diffusion Commit.Dec 17 2020, 1:02 PM
jpbede edited commits, added Restricted Diffusion Commit; removed Restricted Diffusion Commit.Dec 17 2020, 9:23 PM
jpbede closed this task as Resolved.Dec 20 2020, 7:56 PM
c-po moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.May 24 2021, 7:41 PM
tuxis-ie added a subscriber: tuxis-ie.Jun 2 2021, 7:05 AM

We upgraded to 1.3.0-rc4 last night and enabled enable-egress, which indeed sends out egress traffic as well. However, the macaddresses are all zero:

[email protected]:~$ show flow-accounting | grep -c 00:00:00:00:00:00
11522

All entries where the macaddresses (both source and dest) are 00's, have a local ip address as a source.

So close, but no sigar yet! ;)

jpbede added a comment.Jun 3 2021, 1:57 PM

@tuxis-ie thanks for testing this out. Will check this.

jpbede added a comment.Jun 3 2021, 4:37 PM

@tuxis-ie found the issue. Used the wrong iptables chain. See https://github.com/vyos/vyos-1x/pull/864

c-po added a project: VyOS 1.3 Equuleus.Jun 4 2021, 12:32 PM
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.Jun 4 2021, 12:39 PM
erkin set Issue type to Feature (new functionality).Aug 29 2021, 12:00 PM
erkin removed a subscriber: Active contributors.
syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Aug 29 2022, 12:17 PM
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.