Page MenuHomeVyOS Platform
Create Task
Maniphest T5406

"update webproxy blacklists" fails when vrf is being configured
Closed, ResolvedPublicBUG
Actions

Description

When having vrfs configured attempting to run "update webproxy blacklists" from op-mode fails:

vyos@vyos:~$ update webproxy blacklists 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0curl: (6) Could not resolve host: ftp.univ-tlse1.fr
Unable to download [ftp://ftp.univ-tlse1.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz]!

Workaround is to first switch context into the vrf who can reach internet like so:

vyos@vyos:~$ force vrf INTERNET

vyos@vyos:INTERNET:~$ update webproxy blacklists 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 27.2M  100 27.2M    0     0  1130k      0  0:00:24  0:00:24 --:--:-- 1150k
Uncompressing blacklist...

Suggestion is that "update webproxy blacklists" should get the same syntax as "add system image" where one from op-mode can specify which vrf the command should run under like so:

vyos@vyos:~$ update webproxy blacklists vrf INTERNET

Details

Version
VyOS 1.4-rolling-202307250317
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

Apachez created this task.Jul 27 2023, 2:43 AM
pasik subscribed.Jul 27 2023, 8:39 AM
n.fort claimed this task.Jul 27 2023, 10:11 AM
n.fort changed the task status from Open to In progress.Jul 31 2023, 4:59 PM

PR: https://github.com/vyos/vyos-1x/pull/2123

Restricted Repository Identity mentioned this in rVYOSONEXdf33f450b4e8: Merge pull request #2123 from nicolas-fort/T5406.Jul 31 2023, 5:20 PM
n.fort mentioned this in rVYOSONEXbefd4045b59f: T5406: webproxy op-mode command: add vrf support for blacklist update command.Jul 31 2023, 5:20 PM
Viacheslav changed the task status from In progress to Needs testing.Aug 1 2023, 8:02 AM
Apachez added a comment.Aug 5 2023, 10:23 PM

I can confirm that updating blacklist now is vrf aware and functional:

vyos@vyos:~$ update webproxy blacklists vrf INTERNET
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 27.1M  100 27.1M    0     0  1103k      0  0:00:25  0:00:25 --:--:-- 1145k
Uncompressing blacklist...

Using VyOS 1.4-rolling-202308050917.

n.fort closed this task as Resolved.Aug 7 2023, 9:43 AM
Viacheslav moved this task from Open to Finished on the VyOS 1.4 Sagitta board.Aug 7 2023, 9:45 AM