Yeah also it looks like wide is hardcoded to support only type 1 DUID (LLT) anyway.... so probably it wasn't accidentally "forgotten" in 1.3 migration that someone probably has realized it wasn't viable to support it... Thanks :)
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Dec 22 2020
Dec 22 2020
Undortunately it only worked in 50% of the cases properly. Also there is only one global duid file so you can not have multiple duids (one per each interface).
jack9603301 moved T3137: Let VLAN aware bridge approach the behavior of professional equipment from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
@vagardx thank you for this rant.
Unknown Object (User) closed T3142: OpenVPN op-command completion fails due to missing status file as Resolved.
Unknown Object (User) renamed T3142: OpenVPN op-command completion fails due to missing status file from OpenVPN up-command completion issue to OpenVPN op-command completion issue.
Unknown Object (User) changed the status of T3143: OpenVPN server: Push route config format is wrong from In progress to Needs testing.
Unknown Object (User) committed rVYOSONEX35fcfbbfe530: openvpn: T3143: Push routes in correct format <IP> <NETMASK>.
GitHub <noreply@github.com> committed rVYOSONEXb0c8fb08c55d: Merge pull request #655 from DmitriyEshenko/1x-openvpn21122020f2 (authored by c-po).
jack9603301 updated the task description for T3137: Let VLAN aware bridge approach the behavior of professional equipment.
jack9603301 renamed T3137: Let VLAN aware bridge approach the behavior of professional equipment from When the bridge is a VLAN-aware bridge, the parent interface of the bridge can be set with an address to When setting a VLAN-aware bridge, the VLAN ID of the parent interface is always 1.
Sorry I am confused. I took a brief look at the code of dhcp6c and it appears manually modifying the dhcp6c_duid file should be able to keep the change persistent: https://github.com/jinmei/wide-dhcpv6/blob/24ee2a4f0009bc6ac9bd0b7b737aef93a4aa9905/common.c#L992. Did I miss anything? Thanks :)
Dec 21 2020
Dec 21 2020
Accidentally deleted the comment. Is there plan to migrated to dhcpcd instead? dhcpcd has good ipv6 support and being actively maintained too. Thanks.
Unknown Object (User) changed the status of T3143: OpenVPN server: Push route config format is wrong from Open to In progress.
Unknown Object (User) claimed T3143: OpenVPN server: Push route config format is wrong.
Unknown Object (User) created T3143: OpenVPN server: Push route config format is wrong.
Unknown Object (User) changed the status of T3142: OpenVPN op-command completion fails due to missing status file from Open to Needs testing.
Unknown Object (User) committed rVYOSONEX1951413f8a3e: openvpn: T3142: Change the path to tunnel status file.
GitHub <noreply@github.com> committed rVYOSONEX3a795c8d0dcf: Merge pull request #654 from DmitriyEshenko/fix-openvpn-21122020 (authored by c-po).
Unknown Object (User) claimed T3142: OpenVPN op-command completion fails due to missing status file.
Unknown Object (User) created T3142: OpenVPN op-command completion fails due to missing status file.
This breaks with standard configuration convention in Wireguard. Also, no documentation has been updated to reflect this breaking change.
I want to know the behavior of the implementation when upgrading the vyos version
GitHub <noreply@github.com> committed rVYOSONEXf8db20706527: Merge pull request #653 from jpbede/fix/flow-accounting-template (authored by c-po).
Dec 20 2020
Dec 20 2020
GitHub <noreply@github.com> committed rVYOSONEX089b5f10aaa3: Merge pull request #652 from jpbede/fix/flow-accounting-template (authored by dmbaturin).
jpbede changed the status of T3141: Flow-Accounting: uacctd conf wrongly formatted from Open to In progress.
jpbede closed T3132: Enable egress flow accounting, a subtask of T446: Flow accounting enhancements: pre/post NAT, ingress/egress, as Resolved.
It looks like wide dhcp client does not support setting the DUID as it is overwritten again after a restart :(
c-po closed T3140: Relax "ethernet offload-options" CLI definition, a subtask of T1637: Rewrite ethernet interface in new style XML syntax, as Resolved.
c-po changed the status of T3140: Relax "ethernet offload-options" CLI definition, a subtask of T1637: Rewrite ethernet interface in new style XML syntax, from Open to In progress.
c-po changed the status of T3140: Relax "ethernet offload-options" CLI definition from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX0cf4694a23b2: Merge pull request #647 from jpbede/feature/flowacc-enable-egress (authored by c-po).
OK, I now tried vyos-1.3-rolling-202012192139 and am happy to report that something since the previous version I tried and this version has now fixed the problem.
Dec 19 2020
Dec 19 2020
francescocarzaniga updated the task description for T3139: Cannot create bond SR-IOV XCP-ng X540-T2.
jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Confirmed to In progress.
jack9603301 edited a custom field on T3137: Let VLAN aware bridge approach the behavior of professional equipment.
jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Open to Confirmed.
GitHub <noreply@github.com> committed rVYOSONEX22308b05dfbc: Merge pull request #649 from Cheeze-It/current (authored by c-po).
Put in a PR to add op commands for LDP.
Dec 18 2020
Dec 18 2020
Dec 18 2020, 12:58 PM · Restricted Project
Dec 18 2020, 11:47 AM · Restricted Project
Dec 18 2020, 11:01 AM · Restricted Project
PR:
afics closed T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length as Resolved.
@runar You're right, my bad.
GitHub <noreply@github.com> committed rVYOSONEX2dc688ded021: T3135: bfd template missing newlines (authored by bedmisten).
GitHub <noreply@github.com> committed rVYOSONEX889128c7aaec: Merge pull request #648 from bedmisten/current (authored by c-po).
Dec 17 2020
Dec 17 2020
Created PR #648 in vyos-1x
sempervictus added a comment to T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree.
So how are userspace packages for this sort of stuff handled? I assume we need to itemize out individual phabricator tickets?
Off the top of my head, relevant things to add to uspace would be:
- eoip binary
- eoip CLI wrapper
- Xtables userspace with GeoIP table data and updater script (we would need to figure out how to deal with rule placement for persistence)
- Xtables-related CLI for firewall matching on GeoIP, DNS, etc
- Xtables-related CLI for firewall actions to TARPIT or DELUDE
- UKSM userspace (or just wrappers for the sysfs interface in CLI)
- Hardened Malloc with system-wide LD_PRELOAD or maintain a vyos-specific libc package with it built-in
The CLI command set interfaces ethernet <interface> offload-options xdp enables the XDP generic mode on the given interface.