You mean you've fixed the bug? If so, you can consider submitting pr

I don’t understand you, is it really impossible to see from the diff that stupid errors have been fixed here?

I have just quickly browsed the relevant code of this code base. Generally speaking, the code structure is very clear, which is not difficult to understand. The overall operation of this daemon is divided into the following processes:

I have to say that I saw the diff of this code base for the first time, but in fact, as for my understanding of C troubleshooting, analyzing the log and execution process will become a necessary work (none of them). I can see that the operation process required by this code base may be relatively complex, so that it can be executed as a background daemons rather than a single place According to the description of the questioner, there is hardly any relevant information that can be extracted from the error process. It is suggested to provide the following information:

Are you familiar with that codebase @jack9603301? As I see no real answer in your posting which does not help at all :(

If the process is simple, you can consider py script. If you need to run uninterrupted in the background or have other complex tasks, it is a good way to continue to use C/C++

I feel more like abandoning that daemon and use a python based implementation.

Will this issue be fixed in the next release? Just in doubt, I've used Sha instead of MD5.

New ISO build triggered with fix - also an MD5 smoketest was added

Bug in the library is confirmed - id completely ignores MD5

Problem seems to be in the 3rd party hash library - when upgrading from 1.2.5 to 1.3 rolling settings persist and work:

MD5 should be supported as it works in VyOS 1.2 - let me have a look.

Thank you. I'm in a hurry to solve the problem. If I neglect, I can try to use Sha and reset it successfully. Do you not support MD5?

It is stated in the documentation - that is why I passed it to you

The configuration is as follows:

The following rules are now installed after the fix:

Your above ruleset should be tralnsated into thie NFT syntax:

There i no community in SNMPv3 - please read https://docs.vyos.io/en/latest/services/snmp.html#snmpv3

Now, I don't know how to pull the SNMP data again. The command is as follows:

After upgrading, the entire NAT section is gone

Error when upgrading to 1.3

Can confirm that the image now contains wireguard.ko.

Understood, will re-check and close the report once confirmed.

@linuxgemini we do not support DKMS.

Can't I dial on demand when I need to negotiate?

@c-po When I manually add the following commands to the following file:

Did a rebuild and found the silent error:

While I was checking my old build, I have seen this on /live/filesystem.packages:

I need to modify the file(/etc/swanctl/swanctl.conf) manually, from emote_ts = dynamic[gre] to remote_ts = 0.0.0.0/0[gre].

I test that issue on 1.2.5. but not work

Have the opportunity to study whether it is because of pppd configuration file error?

Well a bit more verbosity would be good. As usual:

• provide config
• logfiles
• routing table
• interface ip list

Dial on demand still doesn't work

If you think about it carefully, maybe for vyos, if you don't consider supporting SDN, then Linux bridge is a good choice.

I have been thinking about a problem. OVS can work in SDN controller mode. However, if OVS works in SDN controller mode, whether router related functions related to routing configuration will fail. If someone wants to implement it, then whether SDN switching control mode and non SDN related modules need exclusive processing to prevent conflicts should be considered.

After some benchmarking of this code i have i've gotten hold of a quite large test configuration that takes a waste amount of time to load into vyos.

Waiting for the next rolling version, thank you.

There is a basic test for this which should be expanded.

Can regression testing of some sort be added for this? I've seen this issue crop up before now, so I would guess this is a good candidate for that if possible.

@thomas-mangin I'm convinced: for get_child_nodes and get_node, we'll return a dict of respective dicts:

A very fast look on the source indicated wrong dictionary keys which have bewn missed out during migration to get_config_dict() - please try next rolling.

My guess is this will be resolved by the full BGP rewrite - I also do not like the current behavior.

Closed - this is available as set system ip layer4-hashing

Oh, neat. Thanks, I'll close this then!

I would very much like you reconsider classifying this as a bug if not security issue.

Is this bug report not handled?

https://github.com/vyos/vyos-1x/pull/493

The same for ipv6 is available under set system ipv6 layer4-hashing

HI! On 1.3 layer4-hashing is activated by using the set system ip layer4-hashing command

Okay, I like that video already ...

@thomas-mangin Firstly, I needed to write this version before reasonably debating the pros/cons of various approaches --- the important idea developed is that the use of get_sub_dict, and ability to return the sub_dict under the diff'ed nodes will allow a fluid use in writing conf_mode scripts --- beyond that, I am not particularly attached to any details of implementation, yet.