Page MenuHomeVyOS Platform
Create Task
Maniphest T3132

Enable egress flow accounting
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Give the ability to enable egress flow accounting

This could be done like the Ubiquity variant via set system flow-accounting enable-egress

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)

Revisions and Commits

rVYOSONEX vyos-1x
rVYOSONEX2acea7d92ca3 Merge da03caa27446f32eb39c8458d443e9fd94452ad2 into…

Related Objects
Search...

StatusSubtypeAssignedTask
WontfixFEATURE REQUESTViacheslavT446 Flow accounting enhancements: pre/post NAT, ingress/egress
ResolvedFEATURE REQUESTjpbedeT3132 Enable egress flow accounting

Event Timeline

jpbede created this task.Dec 17 2020, 9:30 AM
jpbede changed the task status from Open to In progress.
jpbede claimed this task.
jpbede triaged this task as Normal priority.
jpbede added a comment.Dec 17 2020, 11:38 AM

See PR: https://github.com/vyos/vyos-1x/pull/647

jpbede lowered the priority of this task from Normal to Wishlist.Dec 17 2020, 12:51 PM
jpbede added a commit: rVYOSONEXdd010dcabae8: Merge da03caa27446f32eb39c8458d443e9fd94452ad2 into….Dec 17 2020, 1:02 PM
jpbede edited commits, added rVYOSONEX2acea7d92ca3: Merge da03caa27446f32eb39c8458d443e9fd94452ad2 into…; removed rVYOSONEXdd010dcabae8: Merge da03caa27446f32eb39c8458d443e9fd94452ad2 into….Dec 17 2020, 9:23 PM
Restricted Repository Identity mentioned this in rVYOSONEX0cf4694a23b2: Merge pull request #647 from jpbede/feature/flowacc-enable-egress.Dec 20 2020, 10:17 AM
jpbede mentioned this in rVYOSONEXda03caa27446: flow-accounting: T3132: enable egress traffic accounting.Dec 20 2020, 10:17 AM
jpbede mentioned this in rVYOSONEXc1135630283f: flow-accounting: T3132: enable egress traffic accounting.
jpbede closed this task as Resolved.Dec 20 2020, 7:56 PM
c-po moved this task from Open to Finished on the VyOS 1.4 Sagitta board.May 24 2021, 7:41 PM
tuxis-ie subscribed.Jun 2 2021, 7:05 AM

We upgraded to 1.3.0-rc4 last night and enabled enable-egress, which indeed sends out egress traffic as well. However, the macaddresses are all zero:

mark@rtr1.amc.tuxis.net:~$ show flow-accounting | grep -c 00:00:00:00:00:00
11522

All entries where the macaddresses (both source and dest) are 00's, have a local ip address as a source.

So close, but no sigar yet! ;)

jpbede added a comment.Jun 3 2021, 1:57 PM

@tuxis-ie thanks for testing this out. Will check this.

jpbede added a comment.Jun 3 2021, 4:37 PM

@tuxis-ie found the issue. Used the wrong iptables chain. See https://github.com/vyos/vyos-1x/pull/864

Restricted Repository Identity mentioned this in rVYOSONEXe0c86b974891: Merge pull request #864 from jpbede/fix-flow-accounting-egress.Jun 4 2021, 12:32 PM
jpbede mentioned this in rVYOSONEX95cc2e4b4c11: flow-accounting: T3132: fix egress iptables chain.Jun 4 2021, 12:32 PM
c-po added a project: VyOS 1.3 Equuleus.Jun 4 2021, 12:32 PM
c-po mentioned this in rVYOSONEX77866ccb1619: flow-accounting: T3132: fix egress iptables chain.Jun 4 2021, 12:39 PM
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.Jun 4 2021, 12:39 PM
erkin set Issue type to Feature (new functionality).Aug 29 2021, 12:00 PM
erkin removed a subscriber: Global Notifications.
syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Aug 29 2022, 12:17 PM
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.