Using udp4/6 can be automated if there is an v6 listen address or not, I will keep this in mind, thanks for the hint.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 10 2020
Dec 10 2020
c-po added a comment to T3117: OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217.
c-po changed the status of T563: webproxy: migrate 'service webproxy' to get_config_dict() from On hold to In progress.
c-po renamed T563: webproxy: migrate 'service webproxy' to get_config_dict() from Migrate 'service webproxy' to python/xml to webproxy: migrate 'service webproxy' to get_config_dict().
c-po added a parent task for T1090: Webproxy overhaul: T563: webproxy: migrate 'service webproxy' to get_config_dict().
c-po added a parent task for T1732: Removing vyatta-webproxy module: T563: webproxy: migrate 'service webproxy' to get_config_dict().
c-po added a parent task for T2581: webproxy: implement proxy chaining: T563: webproxy: migrate 'service webproxy' to get_config_dict().
c-po added subtasks for T563: webproxy: migrate 'service webproxy' to get_config_dict(): T2581: webproxy: implement proxy chaining, T1732: Removing vyatta-webproxy module, T1730: Adding the remote syslog feature to webproxy, T1770: webproxy breaks commit and http access on routed client, T1090: Webproxy overhaul.
Dec 9 2020
Dec 9 2020
Dec 8 2020
Dec 8 2020
c-po changed the status of T3117: OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217 from In progress to Needs testing.
c-po added a comment to T3117: OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217.
Unfortunately setting udp4 was never "valid" in the first place, this was only possible by a wrong regex here: https://github.com/vyos/vyos-1x/blob/406083932ae62ccde5ff547ef7d7960efe0269e3/interface-definitions/interfaces-openvpn.xml.in#L345 this has been corrected already which shows the above mentioned result in a not loading config.
c-po closed T2562: VyOS can't be used as a DHCP server for a DHCP relay, a subtask of T3100: Migrate DHCP/DHCPv6 server to get_config_dict(), as Resolved.
c-po changed the status of T3117: OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217 from Open to In progress.
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay, a subtask of T3100: Migrate DHCP/DHCPv6 server to get_config_dict(), from In progress to Needs testing.
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay from In progress to Needs testing.
c-po added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.
Unfortunately this is the wrong way to go. If it is - for whatever reason - not possible to configure the VLAN parameters for this given interface b/c the enslaved interface is yet not present on the system, it should be later configured by the individual interface.
Dec 7 2020
Dec 7 2020
Well this is from old Vyatta times, on system bootup this script is called (https://github.com/vyos/vyatta-cfg-system/blob/current/scripts/system/vyatta_interface_rescan#L137-L140) and a WIFI node is created if a wifi interface is detected. The script could be altered, too if monitor is not supported.
I guess the best thing would be to not add this interface at all
Dec 6 2020
Dec 6 2020
c-po renamed T3100: Migrate DHCP/DHCPv6 server to get_config_dict() from Migrate DHCP server to get_config_dict() to Migrate DHCP/DHCPv6 server to get_config_dict().
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
Okay, debugging with @jack9603301 showed that there was/is an issue. If you are running DHCP client on the interface which is using mirroring, this indeed becomes an issue as traffic is dropped until the session is re-established.
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
Of course, restarting ping works, but all flows in transit will stop, this is not what you wan't on an edge device running 10GBit/s of traffic
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
Running VyOS 1.3-rolling-202012060217 immediately when I enable port mirroring all sessions are dropped on this link.
c-po added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.
Please only allow native-vlan and allowed-vlan for ethernet and bond type of interfaces for the time beeing
c-po added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.
I wonder if this configuration should be possible at all. In my opinion native-vlan and allowed-vlan should be supported only on bond and ethernet interface types
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay, a subtask of T3100: Migrate DHCP/DHCPv6 server to get_config_dict(), from Open to In progress.
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay from Open to In progress.
Taking the following configuration as a pool serving relays:
c-po changed the status of T3113: dhcp-server: Multiple domain-search values are escaped incorrectly from Open to In progress.
Dec 5 2020
Dec 5 2020
c-po added a comment to T2996: Checking digital signature failed on downgrade from rolling to stable..
Disable downgrades in general is a bad idea. We still can leave the user with a broken config on downgrade but prevent it is bad. Imagine a very simple config, that would be downgradable.
Dec 4 2020
Dec 4 2020
c-po closed T3112: PPPoE IPv6: remove "enable" node, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, as Resolved.
yes, specifying "ipv6" has the same effect as "ipv6 enable"
Dec 3 2020
Dec 3 2020
c-po changed the status of T3105: static-host-mapping writing in one line from Open to Needs testing.
Dec 2 2020
Dec 2 2020
Calculating setting is always the smartest idea. I also have a WIFI6 NIC with me, the problem is it is not supported by Linux 4.19. which we currently are forced to use.
Dec 1 2020
Dec 1 2020
table ip nat {
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
iifname "eth1" tcp dport { 22 } counter packets 0 bytes 0 dnat to 192.168.1.4 comment "DST-NAT-100"
}
}Thank you @Dmitry, it will be in tomorrows rolling release.
c-po changed the status of T3102: Destination NAT fails to commit from In progress to Needs testing.