Page MenuHomeVyOS Platform
Feed All Stories

May 24 2020

jjakob added a comment to T421: Add Pv6 prefix delegation support.

@jack9603301 Do you have a working RA on that interface? You can set service router-advert interface <if> prefix ::/64 for RA to advertise all prefixes on the interface. That way if the DHCPv6-PD prefix changes it will send advertisements for the new prefix automatically.

May 24 2020, 8:52 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
fetzerms added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.

@Sonicbx @jjakob I also created https://phabricator.vyos.net/T2504 - I think we duplicated the issue here. You can close whichever issue you want.

May 24 2020, 8:38 AM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)
jack9603301 added a comment to T421: Add Pv6 prefix delegation support.

@c-po At present, through DHCPv6 PD, IP can be obtained on the bridge, but cannot be distributed to the client through SLAAC. Is it my configuration error?

May 24 2020, 7:21 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
jjakob added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.

If this can be solved by a kernel update, there was talk about maybe having different build "flavors" in the past - one with all the hardware nic drivers, one without. The minimal image could then have the latest (5.x) kernel.
There's T2085 which prevents us from testing any newer kernel ourselves as it's built by Jenkinsfiles in the CI, we'd need to manually do the steps the CI does to build a kernel. I proposed a shared script solution for these repositories in that task that could be called from both the CI and vyos-build, this would allow anyone to build all packages, including the kernel, through vyos-build, just for cases like this.

May 24 2020, 4:23 AM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)

May 23 2020

Sonicbx added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.
In T2505#64889, @c-po wrote:

There is no newer kernel then 4.19.124 on the 4.19x train. Newer Kernels do not work as the out-of-tree Intel drivers for the NICs and QAT won‘t compile for Kernel >5.3 and that is bot an LTS one.

May 23 2020, 9:58 PM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)
jestabro added a comment to T2409: At boot, effective config should not be equal to current config.

Cool, thanks for pointing this out; I will take T2501, and will probably rename for clarity.

May 23 2020, 9:52 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro claimed T2501: Cannot recover from failed boot config load.
May 23 2020, 9:50 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.

There is no newer kernel then 4.19.124 on the 4.19x train. Newer Kernels do not work as the out-of-tree Intel drivers for the NICs and QAT won‘t compile for Kernel >5.3 and that is bot an LTS one.

May 23 2020, 9:41 PM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)
c-po claimed T2506: DHCPv6-PD add prefix hint CLI option.
May 23 2020, 9:38 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2506: DHCPv6-PD add prefix hint CLI option.
May 23 2020, 9:38 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T421: Add Pv6 prefix delegation support.

Welcome - need to make a prefix-hint CLI node for the future

May 23 2020, 9:36 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
Sonicbx added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.

https://phabricator.vyos.net/T935 Here’s the same thing happening in the past. I think it was resolved by doing kernel updates? Can someone do a kernel update in the rolling build?

May 23 2020, 9:34 PM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)
Sonicbx created T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.
May 23 2020, 9:30 PM · VyOS Rolling, Bugs, VyOS 1.4 Sagitta (1.4.1)
jjakob added a comment to T2409: At boot, effective config should not be equal to current config.

@jestabro thanks for that tip, vyos-config-debug helped me track down the failing code. At least I can continue working until T2501 is fixed.

May 23 2020, 9:01 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro added a comment to T2409: At boot, effective config should not be equal to current config.

@jjakob, yes I see the issue there; but firstly, did you try debugging with boot parameter 'vyos-config-debug' ? cf.

May 23 2020, 8:50 PM · VyOS 1.3 Equuleus (1.3.0)
carpenike added a comment to T421: Add Pv6 prefix delegation support.

Yup, sorry. Just figured that out too after reading https://blog.kylemanna.com/ipv6/using-native-ipv6-via-comcast-in-san-francisco/.

May 23 2020, 8:36 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
jestabro added a comment to T2409: At boot, effective config should not be equal to current config.

@jjakob yes, thanks for pointing this out ...

May 23 2020, 8:34 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T421: Add Pv6 prefix delegation support.

No, its just an ID. Please read my comments above and inser the prefix ::/60 infinity; line and reboot

May 23 2020, 8:15 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
carpenike added a comment to T421: Add Pv6 prefix delegation support.

Appreciate it. Sorry, I had assumed VyOS was using dhclient, not DHCP6c.

May 23 2020, 8:09 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.

You only receive a /64 prefix, try adjusting the template then change sla-len to 4

May 23 2020, 7:47 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
carpenike added a comment to T421: Add Pv6 prefix delegation support.
In T421#64836, @c-po wrote:

sla-len should be 12 in your case then.

If that does not work, it could be that you need to hint comcast you want to have a /60 PD, by addin prefix ::/60 infinity; here into line 26

https://github.com/vyos/vyos-1x/blob/current/data/templates/dhcp-client/ipv6.tmpl#L26

or on the router itself you find the file here: /usr/share/vyos/templates/dhcp-client/ipv6.tmpl

May 23 2020, 7:40 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
jjakob added a comment to T2409: At boot, effective config should not be equal to current config.

@jestabro I think T2501 is related to this - can you take a look?

May 23 2020, 7:02 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2203: http api: "Failed to generate committed config" , a subtask of T1899: Unionfs metadata folder is copied to the active configuration directory, as Resolved.
May 23 2020, 7:01 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2203: http api: "Failed to generate committed config" as Resolved.

Thanks, @fetzerms !

May 23 2020, 7:01 PM
c-po added a comment to T421: Add Pv6 prefix delegation support.

sla-len should be 12 in your case then.

May 23 2020, 7:01 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
carpenike added a comment to T421: Add Pv6 prefix delegation support.
In T421#63911, @c-po wrote:

From the Git commit:

commit faa85accc99d6ff777f12f5dd9e43a6dd8f7e7a2 (origin/ipv6-pd)
Author: Christian Poessinger <christian@poessinger.com>
Date:   Sun May 17 20:15:45 2020 +0200

    pppoe: dhcpv6-pd: T421: initial support

    The following configuration will assign a /64 prefix out of a /56 delegation
    to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64.
    If you do not know the prefix size delegated to you, start with sla-len 0.

      pppoe pppoe0 {
          authentication {
              password vyos
              user vyos
          }
          description sadfas
          dhcpv6-options {
              delegate eth0 {
                  interface-id 65535
                  sla-id 0
                  sla-len 8
              }
          }
          ipv6 {
              address {
                  autoconf
              }
              enable
          }
          source-interface eth1
      }

      vyos@vyos:~$ show interfaces
      Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
      Interface        IP Address                        S/L  Description
      ---------        ----------                        ---  -----------
      eth0             2001:db8:8003:400::ffff/64        u/u

This is a proof of concept. What is not working?

  • IPv6 address is not removed from delegated interface
  • router-advertisements? Not tested yet!
May 23 2020, 6:50 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T2457: IPv6 ping by address not working.
vyos@vyos:~$ ping 2a04:4e42:600::731
PING 2a04:4e42:600::731(2a04:4e42:600::731) 56 data bytes
64 bytes from 2a04:4e42:600::731: icmp_seq=1 ttl=61 time=6.45 ms
64 bytes from 2a04:4e42:600::731: icmp_seq=2 ttl=61 time=6.53 ms
May 23 2020, 6:21 PM
c-po closed T2457: IPv6 ping by address not working as Resolved.
May 23 2020, 6:21 PM
c-po committed rVYOSONEXd9a4eccaabff: ping: T2457: bugfix when argument is IPv6 address.
May 23 2020, 6:20 PM
c-po committed rVYOSONEXd749cbb1f1d3: ping: T2457: migrate from vyatta-op.
May 23 2020, 6:20 PM
c-po added a comment to T2457: IPv6 ping by address not working.
In T2457#63617, @jjakob wrote:

Why not just use the OS's ping command? It does address resolution. Resolving a IP address as hostname would leak the IP via DNS as well.

May 23 2020, 6:16 PM
c-po added a comment to T2457: IPv6 ping by address not working.

That patch is invalid as ping.py does not exist under vyos-1x package, its in vyatta-op.

May 23 2020, 6:13 PM
fetzerms created T2504: Dropped packets on xcp-ng.
May 23 2020, 6:04 PM
thomas-mangin added a comment to T2457: IPv6 ping by address not working.
diff --git a/src/op_mode/ping.py b/src/op_mode/ping.py
index 45b06aa9..f723933b 100644
--- a/src/op_mode/ping.py
+++ b/src/op_mode/ping.py
@@ -210,7 +210,7 @@ if __name__ == '__main__':
     try:
         ip = socket.gethostbyname(host)
     except socket.gaierror:
-        sys.exit(f'ping: Unknown host: {host}')
+        ip = host
May 23 2020, 5:34 PM
jack9603301 updated subscribers of T2502: PPPoE default route not installed for IPv6 when "default-route auto".

@c-po I suspect that the problem has been found, but after I executed the restart PPPoE command, the default travel was lost. My configuration name wrote the following static route:

interface-route 0.0.0.0/0 {

next-hop-interface pppoe0 {
}

}
interface-route6 ::/0 {

next-hop-interface pppoe0 {
}

}
table 150 {

interface-route 0.0.0.0/0 {
    next-hop-interface pppoe0 {
    }
}
interface-route6 ::/0 {
    next-hop-interface pppoe0 {
    }
}

}

But it disappeared after disconnect interface pppoe0.

May 23 2020, 5:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2503: IPv6 Firewall configuration error: Cannot delete rule set "GUEST-WAN-6" (still in use).
May 23 2020, 4:43 PM · VyOS 1.4 Sagitta (1.4.0-GA)
c-po claimed T2502: PPPoE default route not installed for IPv6 when "default-route auto".
May 23 2020, 4:41 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2502: PPPoE default route not installed for IPv6 when "default-route auto".
May 23 2020, 4:36 PM · VyOS 1.3 Equuleus (1.3.0)
raspberry added a comment to T421: Add Pv6 prefix delegation support.

Just thought I'd say that this implementation has worked for my DHCPv6-PD enabled ISP in Australia :)

May 23 2020, 4:16 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
fetzerms added a comment to T2203: http api: "Failed to generate committed config" .

@jestabro Sorry for the delay, I did not find a proper maintenance window... Today I verified the fix and it seems to work. My automation scripts run through just fine, without the error.

May 23 2020, 4:11 PM
jjakob triaged T2501: Cannot recover from failed boot config load as Urgent! priority.
May 23 2020, 2:43 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob created T2500: vyos-build scripts/build-packages builds vyos-1x with version 0.0-no.git.tag.
May 23 2020, 2:15 PM · VyOS 1.3 Equuleus (1.3.0)
thomas-mangin added a comment to T2499: expose the configuration loading function.

https://github.com/vyos/vyos-1x/pull/422/files

May 23 2020, 5:48 AM · VyOS 1.5 Circinus
thomas-mangin claimed T2499: expose the configuration loading function.
May 23 2020, 5:24 AM · VyOS 1.5 Circinus
thomas-mangin created T2499: expose the configuration loading function.
May 23 2020, 5:24 AM · VyOS 1.5 Circinus

May 22 2020

Raeven created T2498: Expected error when deleting vif that has dhcp-server configured.
May 22 2020, 9:07 PM · VyOS Rolling
jestabro added a comment to T2497: Cache config string during commit.

low-brow caching:

May 22 2020, 8:50 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro updated the task description for T2497: Cache config string during commit.
May 22 2020, 8:47 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro created T2497: Cache config string during commit.
May 22 2020, 8:47 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2496: Set default to new syntax for config file component versions, a subtask of T2029: Switch to new syntax for config file component versions, as Resolved.
May 22 2020, 8:20 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2496: Set default to new syntax for config file component versions as Resolved.
May 22 2020, 8:20 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro committed rVYOSONEX139952b55f5f: migration: T2496: default to new syntax of version string on save.
May 22 2020, 8:14 PM
jestabro added a parent task for T2496: Set default to new syntax for config file component versions: T2029: Switch to new syntax for config file component versions.
May 22 2020, 8:07 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro added a subtask for T2029: Switch to new syntax for config file component versions: T2496: Set default to new syntax for config file component versions.
May 22 2020, 8:07 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T2496: Set default to new syntax for config file component versions from Open to In progress.
May 22 2020, 8:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2490: Add serial (rs232) to ssh bridge service.

A friend also thought about set service nettty for network tty (which it is infact)

May 22 2020, 7:25 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) added a comment to T2490: Add serial (rs232) to ssh bridge service.

Maybe set service serial-bridge?

May 22 2020, 7:03 PM · VyOS 1.3 Equuleus (1.3.0)
c-po renamed T2490: Add serial (rs232) to ssh bridge service from Add ser2net service to Add serial (rs232) to ssh bridge service.
May 22 2020, 6:56 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T2389: BGP community-list unknown command.
May 22 2020, 5:10 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
Viacheslav closed T2201: Rewrite protocol BGP [op-mode] to new XML/Python style, a subtask of T2174: Rewrite protocol BGP to new XML/Python style, as Resolved.
May 22 2020, 4:59 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2201: Rewrite protocol BGP [op-mode] to new XML/Python style as Resolved.
May 22 2020, 4:59 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T2387: Create XML scheme for [conf_mode] BGP , a subtask of T2174: Rewrite protocol BGP to new XML/Python style, from Open to Needs testing.
May 22 2020, 4:57 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T2387: Create XML scheme for [conf_mode] BGP from Open to Needs testing.
May 22 2020, 4:57 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T1316: Support for IS-IS .

Who can write a python handler?
XML is ready.

May 22 2020, 4:35 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2495: Add xml for ISIS [conf_mode].

PR https://github.com/vyos/vyos-1x/pull/421

May 22 2020, 4:33 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T2495: Add xml for ISIS [conf_mode].
May 22 2020, 4:24 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2495: Add xml for ISIS [conf_mode].
May 22 2020, 4:23 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX63fce1034230: login: T2492: must use try/except when adding user for the first time.
May 22 2020, 3:26 PM
thomas-mangin added a comment to T2494: systemd dependencies issues.

It causes this:

9140 ?        Ss     0:00 /bin/bash /usr/libexec/vyos/init/vyos-router start
 9427 ?        S      0:00  \_ /bin/bash /usr/libexec/vyos/init/vyos-router start
 9428 ?        S      0:00      \_ python3 /usr/libexec/vyos/vyos-boot-config-loader.py /opt/vyatta/etc/config/config.boot
 9451 ?        S      0:00          \_ /opt/vyatta/sbin/my_commit
 9522 ?        S      0:00              \_ sudo sh -c VYOS_TAGNODE_VALUE='eth0' /usr/libexec/vyos/conf_mode/interfaces-ethernet.py
 9523 ?        Sl     0:00                  \_ python3 /usr/libexec/vyos/conf_mode/interfaces-ethernet.py
 9531 ?        R      0:00                      \_ /bin/cli-shell-api --show-active-only --show-show-defaults --show-ignore-edit showConfig
May 22 2020, 3:12 PM · VyOS 1.3 Equuleus
jjakob changed the status of T2486: DNS records set via 'system static-host-mapping' return NXDOMAIN from 'service dns forwarding' after a request to a forwarded zone, a subtask of T2464: DNS bugs (parent task), from Open to In progress.
May 22 2020, 2:42 PM · VyOS Rolling
jjakob changed the status of T2486: DNS records set via 'system static-host-mapping' return NXDOMAIN from 'service dns forwarding' after a request to a forwarded zone from Open to In progress.
May 22 2020, 2:42 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob claimed T2486: DNS records set via 'system static-host-mapping' return NXDOMAIN from 'service dns forwarding' after a request to a forwarded zone.
May 22 2020, 2:41 PM · VyOS 1.3 Equuleus (1.3.0)
thomas-mangin added a comment to T2494: systemd dependencies issues.
[Unit]
Description=VyOS HTTP API service
May 22 2020, 2:29 PM · VyOS 1.3 Equuleus
thomas-mangin claimed T2494: systemd dependencies issues.
May 22 2020, 2:22 PM · VyOS 1.3 Equuleus
thomas-mangin created T2494: systemd dependencies issues.
May 22 2020, 2:10 PM · VyOS 1.3 Equuleus
c-po committed rVYOSONEX5e74e68bcf24: Merge branch 'nat-integration' of github.com:c-po/vyos-1x into current.
May 22 2020, 1:45 PM
c-po committed rVYOSONEXac5019d7aadc: nat: T2460: fix KeyError: 'sport'.
May 22 2020, 1:45 PM
c-po committed rVYOSONEX62b86071c6b5: nat: T2460: migrate to new Python implementation.
May 22 2020, 1:45 PM
c-po committed rVYOSONEX42939bcb5dbc: Merge branch 'T2460' of https://github.com/thomas-mangin/vyos-1x into nat….
May 22 2020, 1:45 PM
c-po committed rVYOSONEXa46ceed84c55: login: T2492: re-use code from vyos.util.
May 22 2020, 1:35 PM
c-po committed rVYOSONEX38747960151d: login: T2492: force setting of encrypted password on first boot.
May 22 2020, 1:35 PM
c-po moved T1899: Unionfs metadata folder is copied to the active configuration directory from In Progress to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:38 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2339: OpenVPN: IPv4 no longer working after adding IPv6 support from In Progress to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:38 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2213: vyos-1x: WiFi mode ieee80211ac should also activate ieee80211n from In Progress to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:38 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T1842: Equuleus: "reboot at 04:00" command not working from Backlog to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T1180: require_ht and require_vht configuration from Backlog to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po moved T2489: Add MACsec interfaces to "show interfaces" output from Backlog to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2493: Update Linux Kernel to v4.19.124 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2492: Do not set encrypted user password when it is not changed from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2475: linting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2491: MACsec: create CLI for replay protection from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 22 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2493: Update Linux Kernel to v4.19.124 as Resolved.
May 22 2020, 10:36 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2493: Update Linux Kernel to v4.19.124.
May 22 2020, 10:34 AM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX4414803c3558: login: T2492: fix flake8 warnings.
May 22 2020, 10:30 AM
c-po committed rVYOSONEXa07e22377ab8: login: T2492: do not set encrypted user password when it is not changed.
May 22 2020, 10:09 AM
c-po closed T2492: Do not set encrypted user password when it is not changed as Resolved.
May 22 2020, 9:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2492: Do not set encrypted user password when it is not changed.
May 22 2020, 9:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2380: After PPPoE 0 is restarted, the default static route is lost as Resolved.
May 22 2020, 9:43 AM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXfee52f5add71: pppoe: T2488: bugfix, missing not in if condition prevented startup.
May 22 2020, 9:39 AM
c-po committed rVYOSONEX9ed0cc822177: pppoe: T2380: drop superfluous list_pppoe_peers.sh.
May 22 2020, 9:39 AM