@jingyun Can you describe more details?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jul 16 2021
Jul 16 2021
Jul 15 2021
Jul 15 2021
Viacheslav added a parent task for T2051: Throughput anomalies: T3619: Performance Degradation 1.2 --> 1.3 | High ksoftirqd CPU usage.
Jul 14 2021
Jul 14 2021
note: Record the process of upgrading from 1.4-rolling-202107010537 to 1.4-rolling-202107122017
Thanks @jestabro this seems like a good place to start learning VyOS internals, will give it a go when I have some off time and submit a pull request.
@artooro This sounds reasonable, and I don't imagine a problem, though I have yet to try it; if you would like to submit a pull request with fix, I will review.
stepler changed the status of T3680: Static routes with dhcp-interface are flaky from Open to In progress.
Jul 13 2021
Jul 13 2021
Most likely related to T3505
erkin changed the status of T3679: Point the unexpected exception message link to the new rolling release location from Open to In progress.
sarthurdev added a comment to T3678: VyOS 1.4: Invalid error message while deleting ipsec vpn configuration.
This error occurs because the ipsec module blindly updates the l2tp module after a commit change to ensure any l2tp via ipsec config is then refreshed also.
stepler added a comment to T3505: Commits do not respect changes in FRR that are not stored in a config.
Workaround for missing DHCP default route:
SrividyaA added a comment to T3678: VyOS 1.4: Invalid error message while deleting ipsec vpn configuration.
Parent task: https://phabricator.vyos.net/T2816
SrividyaA renamed T3678: VyOS 1.4: Invalid error message while deleting ipsec vpn configuration from VyoOS 1.4: Invalid error message while deleting ipsec vpn configuration to VyOS 1.4: Invalid error message while deleting ipsec vpn configuration.
Other instances:
Jul 12 2021
Jul 12 2021
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.129 / 5.10.47 to Update Linux Kernel to v5.4.131 / 5.10.49.
SrividyaA added a comment to T3656: IPSec 1.4 : "show vpn ike sa" does not show the correct default ike version.
@sdev It still shows the ikev2 as the default version in the output.
I agree with your point that strongswan has changed the default version. A quote from their documentation: "Since 5.0.0 both protocols are handled by Charon and connections marked with ike will use IKEv2 when initiating, but accept any protocol version when responding."
Jul 11 2021
Jul 11 2021
@Viacheslav but that sounds more of a decent FRR bug. We could still consider adding EIGRP support for 1.4
c-po moved T3663: Use inotify file watching where applicable from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T1210: About IKEv2 IPSec VPN remote access from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po changed the status of T1210: About IKEv2 IPSec VPN remote access, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to Needs testing.
Jul 10 2021
Jul 10 2021
This seems to work now.
Jul 9 2021
Jul 9 2021
It is a feature request.
So we don't have a "large-comm-list" for set in our CLI. It is incorrect to compare "large-community" with "large-comm-list"
The option "delete" is preset only for the "lists"
Viacheslav changed the subtype of T3673: BGP large-community del operation missing from "Bug" to "Feature Request".
In the latest rolling release all works fine without any changes
vyos@r1-roll:~$ show version
Jul 8 2021
Jul 8 2021
Please backport this to 1.3. Thanks.
trae@cr01a-vyos# show system config-management
commit-archive {
location sftp://cr01a-vyos.int:<somePassword>@stor01z-rh8.int.trae32566.org:/int/cr01a-vyos
source-address lo
}
commit-revisions 10000Jul 7 2021
Jul 7 2021
tom.siewert renamed T3665: Missing VRF support for VxLAN but already documented from Missing `vrf` support for VxLAN to Missing VRF support for VxLAN but already documented.
vpn rsa-keys migrated: https://github.com/vyos/vyos-1x/pull/912
@trae32566 I can't replicate this. Can you post your config?
erkin changed the status of T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, from Open to In progress.
erkin changed the status of T3628: commit-archive source-address Interface Broken from Open to In progress.
trae32566 reopened T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, as Open.
This is still broken on the most recent rolling release:
trae@cr01a-vyos# commit
Using source address lo
Archiving config...
sftp://stor01z-rh8.int.trae32566.org:/int/cr01a-vyos Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/usr/lib/python3/dist-packages/vyos/remote.py", line 315, in upload
upload_sftp(local_path, url.hostname, url.path, username, password, port, source, progressbar)
File "/usr/lib/python3/dist-packages/vyos/remote.py", line 190, in upload_sftp
transfer_sftp('upload', *args, **kwargs)
File "/usr/lib/python3/dist-packages/vyos/remote.py", line 162, in transfer_sftp
sock.connect((hostname, port))
OSError: [Errno 22] Invalid argument
[edit protocols bgp]Jul 6 2021
Jul 6 2021
SrividyaA added a comment to T3656: IPSec 1.4 : "show vpn ike sa" does not show the correct default ike version.
@sdev , Thank you. I will test and confirm, once the new rolling version is released.
c-po added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.
Thanks for the confirmation
Jul 5 2021
Jul 5 2021
m1nus added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.
Hi @c-po i've been testing the added command.
Jul 4 2021
Jul 4 2021
Viacheslav added a parent task for T3499: Podman is not compatible with nat rules: T2216: Containerized third-party applications for VyOS.
Jul 3 2021
Jul 3 2021
c-po closed T57: Make it possible to disable the entire IPsec peer, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
c-po edited projects for T1210: About IKEv2 IPSec VPN remote access, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Jul 2 2021
Jul 2 2021
m1nus added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.
Thanks Chris I'll test it once available and let you know!!
c-po added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.
Added command set service conntrack-sync interface <intrerface> port <port>
c-po changed the status of T3660: Conntrack-Sync configuration command to specify destination udp port for peer from Confirmed to Needs testing.
Viacheslav moved T3535: Rewrite vyatta-conntrack-sync in new XML and Python flavor from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav added a project to T3535: Rewrite vyatta-conntrack-sync in new XML and Python flavor: VyOS 1.3 Equuleus.
Source NAT Rules went Out of Range in VyOS 1.4-rolling-202107010320
m1nus added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.
Hi @c-po I hope you're doing great!
sarthurdev changed the status of T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors from In progress to Needs testing.
sarthurdev added a comment to T3656: IPSec 1.4 : "show vpn ike sa" does not show the correct default ike version.
Should be resolved in PR: https://github.com/vyos/vyos-1x/pull/903
sarthurdev added a comment to T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors.
Fixed in PR: https://github.com/vyos/vyos-1x/pull/903
sarthurdev changed the status of T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors from Open to In progress.
Jul 1 2021
Jul 1 2021
c-po changed the status of T3660: Conntrack-Sync configuration command to specify destination udp port for peer from Open to Confirmed.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.128 / 5.10.46 to Update Linux Kernel to v5.4.129 / 5.10.47.
Looks good on 1.4-rolling-202107010537 and 1.3-beta-202106301443: