The similar task https://vyos.dev/T4797
You can add manually nft rules that used for firewall group, but they will overwritten per next firewall change/commit. The whole firewall config will overwritten.
There are 2 ways. Somehow use it in CLI or use native (nft) tables, chains, group-sets and rules which are not overlapping with generated “system” firewall ruleset
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Today
Today
Viacheslav closed T5231: Add op-mode for load-balancing reverse-proxy, a subtask of T5222: Add load-balancing reverse-proxy based on haproxy , as Resolved.
Viacheslav moved T5253: MPLS config removed at boot when wireguard interfaces present from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Yesterday
Yesterday
On another router I've changed the base mounts to sync ie: mount /dev/md127 /boot -o remount,rw,noatime,sync before upgrading, but after a reboot it came back corrupted.
Thu, Jun 8
Thu, Jun 8
c-po changed the status of T5272: Upgrade OpenVPN to 2.6 in Equuleus, a subtask of T5271: Add support for peer-fingerprint to OpenVPN, from Open to In progress.
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
I have been able to get NAT to work with VRFs with 1.4-rolling-202306080317. However:
<?xml version="1.0"?>
<interfaceDefinition>
<node name="show">
<children>
<node name="interfaces">
<properties>
<help>Show network interface information</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_summary</command>
<children>
<leafNode name="counters">
<properties>
<help>Show network interface counters</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_counters</command>
</leafNode>
<leafNode name="detail">
<properties>
<help>Show detailed information of all interfaces</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show</command>
</leafNode>
</children>
</node>
</children>
</node>
</interfaceDefinition>c-po added a comment to T5239: frr 'hostname' missing or incorrect, and domain-name missing totally.
It's actually an old issue.
jestabro added a subtask for T5136: Possible config corruption on upgrade: T5267: Another corruption on upgrade.
jestabro added a parent task for T5267: Another corruption on upgrade: T5136: Possible config corruption on upgrade.
c-po edited projects for T5268: OpenVPN: upgrade package to 2.6 series, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Viacheslav renamed T2196: Dynamic ipv4 interface list hairpin from Dynamic ipv4 interface list to Dynamic ipv4 interface list hairpin.
With Base Configuration, it's don't have any issues. but after commit command here, error will show error:
Wed, Jun 7
Wed, Jun 7
c-po changed Why the issue appeared? from none to other on T5265: WAN load-balancing: missing completion helpers.
PR for VyOS 1.3 https://github.com/vyos/vyatta-wanloadbalance/pull/19
c-po changed the status of T5265: WAN load-balancing: missing completion helpers from Open to In progress.
Viacheslav updated the task description for T5264: Add Mellanox Technologies firmware flash module mlxfw to kernel.
Found the problem with command:
Viacheslav changed the status of T5262: Warn the user about unsaved config on reboot/shutdown attempts from Open to Needs testing.
SrividyaA changed the status of T5253: MPLS config removed at boot when wireguard interfaces present from Open to Confirmed.
Tue, Jun 6
Tue, Jun 6
jestabro added a parent task for T5248: Ability to load config via API in JSON format: T5263: Generalization of REST configure endpoint.
jestabro added a parent task for T3955: Allow commit-confirm through http API: T5263: Generalization of REST configure endpoint.
Could you please try the configuration in the latest rolling release.
Viacheslav changed the status of T5260: Python3 module crypt is deprecated from In progress to Needs testing.
Mon, Jun 5
Mon, Jun 5
In this case I found the ipv6-address-group and ipv6-network-group not assigned without name or group. Because it's can't show references.
Viacheslav changed the status of T5260: Python3 module crypt is deprecated from Open to In progress.
Viacheslav changed the status of T5261: Add aws gateway load-balance -tunnel-handler gwlbtun from Open to In progress.
jestabro moved T5259: Openconnect cannot pass migration 1-to-2 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
jestabro closed T5259: Openconnect cannot pass migration 1-to-2, a subtask of T5251: Uncaught errors for functions delete/delete_value in Python module configtree.py, as Resolved.
jestabro changed the status of T5259: Openconnect cannot pass migration 1-to-2 from Open to In progress.
jestabro changed the status of T5259: Openconnect cannot pass migration 1-to-2, a subtask of T5251: Uncaught errors for functions delete/delete_value in Python module configtree.py, from Open to In progress.
Viacheslav added a comment to T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
PR for vyos-1x https://github.com/vyos/vyos-1x/pull/2025
Maybe related with https://vyos.dev/T5048
Viacheslav changed the status of T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker from Open to Needs testing.
Viacheslav renamed T5259: Openconnect cannot pass migration 1-to-2 from Openconnect authentication mode should be local by default to Openconnect cannot pass migration 1-to-2.
Viacheslav updated the task description for T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
Viacheslav updated the task description for T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
Sun, Jun 4
Sun, Jun 4
Draft PR re-opened following fix of regression with option 'recursive'; simplified logic and added optional args to get_config_defaults to mirror get_config_dict. The latter allows easy manipulation of defaults in cases where the automatic merge is not sufficient.
Sat, Jun 3
Sat, Jun 3
cuongdt1994 renamed T5256: Quality of Services crash with new qos policy from QOS crash and cannot commit to Quality of Services crash with new qos policy.
Viacheslav added a project to T5257: Cannont assign netflow source ip to ip in non default VRF: VyOS 1.4 Sagitta.