The new design introduced with https://phabricator.vyos.net/T2653 does not show any pitfalls and infact increased the code maintenance in an unimaginable way.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Nov 23 2020
Confirmed working
This is actually a "wontfix" b/c it depends on the users hardware
Proper handle OS exceptions for the user:
It looks like this issue is already present in 1.3-rolling-202010270217, before the OpenVPN rewrite to get_config_dict():
[ interfaces openvpn vtun0 ]
{'auth_user_pass_file': '/run/openvpn/vtun0.pw',
'daemon_group': 'openvpn',
'daemon_user': 'openvpn',
'device_type': 'tun',
'encryption': {'cipher': 'aes256gcm'},
'ifname': 'vtun0',
'keep_alive': {'failure_count': '3', 'interval': '10'},
'mode': 'server',
'openvpn_option': ['tls-auth /config/auth/ovpn_test_site2site.key 0'],
'protocol': 'udp',
'server': {'name_server': ['10.53.53.53', '10.53.53.54'],
'push_route': ['0.0.0.0/0'],
'subnet': ['10.7.178.0/24'],
'topology': 'net30'},
'tls': {'ca_cert_file': '/config/auth/ovpn_test_ca.pem',
'cert_file': '/config/auth/ovpn_test_server.pem',
'dh_file': '/config/auth/ovpn_test_dh.pem',
'key_file': '/config/auth/ovpn_test_server.key'},
'use_lzo_compression': {}}We will deal with the compat-names warning once starting on VyOS 1.4 ;)
Work with latest rolling release:
Nov 22 2020
That we can deal with later on when it‘s needed
I still have the opinion that NDP proxy should be automatically configured when configuring nat66 as by then all interfaces and directions of the translation are known and the user must not configure any additional daemon.
Nov 21 2020
@danielpo thanks foe the config. A new rolling containig a fix for this issue was just published. A smoketest will be added today to ensure this wont happen again.
Nov 20 2020
Please show us your config
DNS domain name servers are always requested from the server but must be explicitly "allowed" by set systems name-servers-dhcp