Page MenuHomeVyOS Platform
Feed Search

Jul 27 2022

Viacheslav changed the status of T4531: NAT op-mode errors with exclude rules, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Jul 27 2022, 10:02 PM · VyOS Rolling
Viacheslav changed the status of T4531: NAT op-mode errors with exclude rules from In progress to Needs testing.
Jul 27 2022, 10:02 PM · VyOS 1.4 Sagitta
fernando closed T4573: PPPOE - missing options default-route-distance as Invalid.
Jul 27 2022, 6:15 PM · VyOS 1.4 Sagitta
fernando created T4573: PPPOE - missing options default-route-distance.
Jul 27 2022, 5:57 PM · VyOS 1.4 Sagitta
df3rry closed T4571: Sflow with vrf configured does not use vrf to validate agent-address IP from vrf-configured interfaces as Resolved.

Tested locally and receive sflow with agent IP of the configured ip/interface/vrf.

Jul 27 2022, 2:28 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T4569: Rewrite show bridge to new format.
Jul 27 2022, 2:25 PM · VyOS 1.4 Sagitta
Viacheslav closed T4552: Unable to reset IPsec IPv6 peer, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Jul 27 2022, 2:25 PM · VyOS Rolling
Viacheslav closed T4552: Unable to reset IPsec IPv6 peer as Resolved.
Jul 27 2022, 2:25 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.

Will it affect also tunnels/openvpn/wireguard/vxlan etc?
If you get rid of the default MTU values you get more pain.

Jul 27 2022, 12:34 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T4570: Exception when trying to set up VXLAN over Wireguard.

PR https://github.com/vyos/vyos-1x/pull/1440

Jul 27 2022, 12:02 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T4570: Exception when trying to set up VXLAN over Wireguard: VyOS 1.4 Sagitta.
Jul 27 2022, 11:38 AM · VyOS 1.4 Sagitta
zsdc changed the status of T4572: Add an option to force interface MTU to the value received from DHCP from Open to Confirmed.
Jul 27 2022, 11:28 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
zsdc created T4572: Add an option to force interface MTU to the value received from DHCP.
Jul 27 2022, 11:28 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Jul 26 2022

masterit added a project to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static : VyOS 1.4 Sagitta.
Jul 26 2022, 7:53 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
Viacheslav changed the status of T4545: Rewrite show nat source rules, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to Needs testing.
Jul 26 2022, 7:35 PM · VyOS Rolling
Viacheslav changed the status of T4545: Rewrite show nat source rules from Open to Needs testing.
Jul 26 2022, 7:35 PM · VyOS 1.4 Sagitta
Viacheslav claimed T4145: Conntrack table not showing after firewall rewriting.
Jul 26 2022, 7:34 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4531: NAT op-mode errors with exclude rules.

Fix PR https://github.com/vyos/vyos-1x/pull/1439

Jul 26 2022, 7:33 PM · VyOS 1.4 Sagitta
Viacheslav claimed T4531: NAT op-mode errors with exclude rules.
Jul 26 2022, 7:08 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4531: NAT op-mode errors with exclude rules, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Jul 26 2022, 7:08 PM · VyOS Rolling
Viacheslav changed the status of T4531: NAT op-mode errors with exclude rules from Open to In progress.

VyOS config:

set nat source rule 10 destination address '192.0.2.0/24'
set nat source rule 10 exclude
set nat source rule 10 outbound-interface 'any'
set nat source rule 10 protocol 'all'
set nat source rule 10 source address '0.0.0.0/0'
set nat source rule 100 outbound-interface 'eth0'
set nat source rule 100 source address '203.0.113.0/24'
set nat source rule 100 translation address masquerade

The bug is still here:

vyos@r14# run show nat source rules 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/nat.py", line 157, in <module>
    res = vyos.opmode.run(sys.modules[__name__])
  File "/usr/lib/python3/dist-packages/vyos/opmode.py", line 118, in run
    res = func(**args)
  File "/usr/libexec/vyos/op_mode/nat.py", line 152, in show_rules
    return _get_formatted_output_rules(nat_rules, direction)
  File "/usr/libexec/vyos/op_mode/nat.py", line 103, in _get_formatted_output_rules
    sport {sport}'''
UnboundLocalError: local variable 'sport' referenced before assignment
[edit]
vyos@r14#
Jul 26 2022, 7:08 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4569: Rewrite show bridge to new format from Open to In progress.
Jul 26 2022, 5:52 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4569: Rewrite show bridge to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Jul 26 2022, 5:52 PM · VyOS Rolling
Viacheslav added a comment to T4569: Rewrite show bridge to new format.

PR https://github.com/vyos/vyos-1x/pull/1438

Jul 26 2022, 5:52 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4571: Sflow with vrf configured does not use vrf to validate agent-address IP from vrf-configured interfaces from Open to Needs testing.
Jul 26 2022, 4:22 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po claimed T4565: vlan aware bridge not working .
Jul 26 2022, 4:03 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.3 Equuleus (1.3.2)
df3rry created T4571: Sflow with vrf configured does not use vrf to validate agent-address IP from vrf-configured interfaces.
Jul 26 2022, 1:52 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a project to T4565: vlan aware bridge not working : VyOS 1.4 Sagitta.
Jul 26 2022, 10:42 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.3 Equuleus (1.3.2)
Viacheslav closed T4568: show vpn debug peer doesn't work as Resolved.
Jul 26 2022, 10:09 AM · VyOS 1.4 Sagitta
Viacheslav moved T4495: Combine BGP reset op commands from Open to Finished on the VyOS 1.4 Sagitta board.
Jul 26 2022, 9:47 AM · VyOS 1.4 Sagitta
Viacheslav moved T4556: fastnetmon: Allow configure white_list_path and populate with hosts/networks that should be ignored. from Open to Finished on the VyOS 1.4 Sagitta board.
Jul 26 2022, 9:45 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4569: Rewrite show bridge to new format.

PR https://github.com/vyos/vyos-1x/pull/1435

vyos@r14:~$ show bridge 
Bridge interface br0:
Member    State       MTU    Flags                            Prio
--------  ----------  -----  -------------------------------  ------
dum0      forwarding  1500   broadcast,noarp,up,lower_up      32
eth1.30   forwarding  1500   broadcast,multicast,up,lower_up  32
eth1.55   forwarding  1500   broadcast,multicast,up,lower_up  32
Jul 26 2022, 9:35 AM · VyOS 1.4 Sagitta
aalmenar closed T4556: fastnetmon: Allow configure white_list_path and populate with hosts/networks that should be ignored. as Resolved.

Mark as resolved as a i have tested it on 1.4-rolling-202207260217 and has been merged

Jul 26 2022, 8:28 AM · VyOS 1.4 Sagitta
aderouineau added a comment to T4497: ping cannot force ipv4 or ipv6.

@n.fort source-address is useful especially when more precision is needed. At the moment its use is cumbersome as it does not provide help hint on the addresses assigned to the router, forcing an operator to first list those addresses.

Jul 26 2022, 2:14 AM · VyOS 1.4 Sagitta
aderouineau added a comment to T4492: Incorrect list of neighbors in help for "show bgp vrf VRF neighbors".

As of 1.4-rolling-202207250217 this is still not resolved.

Jul 26 2022, 2:10 AM · VyOS 1.4 Sagitta
aderouineau closed T4495: Combine BGP reset op commands as Resolved.

I can confirm that at least as of version 1.4-rolling-202207250217the op commands have been merged:

vyos@vyos-lab:~$ reset bgp
Possible completions:
  <x.x.x.x>     BGP IPv4/IPv6 neighbor to clear
  <h:h:h:h:h:h:h:h>
  1-4294967295  Reset peers with the AS number
  all           Clear all peers
  external      Reset all external peers
  ipv4          IPv4 Address Family
  ipv6          IPv6 Address Family
  l2vpn         Layer 2 Virtual Private Network Address Family
  peer-group    Reset all members of peer-group
  prefix        Clear bestpath and re-advertise
  vrf           Virtual Routing and Forwarding (VRF)
Jul 26 2022, 2:09 AM · VyOS 1.4 Sagitta

Jul 25 2022

aalmenar added a comment to T4561: reset ip bgp <neighbor> allows reset bgp peer for ipv4, also it should exist one for ipv6.

@c-po which one is the new syntax?

Jul 25 2022, 10:35 PM · VyOS Rolling
c-po closed T4560: VRF and BGP neighbor local-as error as Resolved.
Jul 25 2022, 6:52 PM · VyOS 1.4 Sagitta
jestabro added a comment to T4554: Implement GraphQL resolvers for standardized op-mode scripts.

https://github.com/vyos/vyos-1x/pull/1432

Jul 25 2022, 3:24 PM · VyOS 1.4 Sagitta
jestabro added a comment to T4544: Generate schema definitions from standardized op-mode scripts.

https://github.com/vyos/vyos-1x/pull/1432

Jul 25 2022, 3:24 PM · VyOS 1.4 Sagitta
jestabro closed T4567: Merge experimental branch of GraphQL development as Resolved.
Jul 25 2022, 3:11 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4556: fastnetmon: Allow configure white_list_path and populate with hosts/networks that should be ignored. from Open to In progress.
Jul 25 2022, 1:45 PM · VyOS 1.4 Sagitta
Viacheslav created T4569: Rewrite show bridge to new format.
Jul 25 2022, 1:07 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4568: show vpn debug peer doesn't work.

PR https://github.com/vyos/vyos-1x/pull/1433

Jul 25 2022, 12:55 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4568: show vpn debug peer doesn't work from Open to In progress.
Jul 25 2022, 12:00 PM · VyOS 1.4 Sagitta
Viacheslav created T4568: show vpn debug peer doesn't work.
Jul 25 2022, 11:55 AM · VyOS 1.4 Sagitta
n.fort added a comment to T4497: ping cannot force ipv4 or ipv6.

Agree that both options are not available in cli.. But, you can use source-address:

Jul 25 2022, 11:37 AM · VyOS 1.4 Sagitta
Viacheslav closed T1233: ipsec vpn sa showing down, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
Jul 25 2022, 9:42 AM · VyOS 1.4 Sagitta
Viacheslav closed T1233: ipsec vpn sa showing down as Resolved.

Fixed in https://github.com/vyos/vyos-1x/commit/201257fe60afc40d101d162cc08e2878dfa3467b

Jul 25 2022, 9:42 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T3496: show conntrack-sync statistics shows a warning.
Jul 25 2022, 9:40 AM · VyOS Rolling
Viacheslav added a parent task for T3496: show conntrack-sync statistics shows a warning: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 25 2022, 9:40 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3723: op-mode IPSec show vpn ipsec sa output with underscores.

Will be fixed with syntax migration in T4118

Jul 25 2022, 9:38 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T3937: Rewrite "show system memory" in Python to make it usable as a library function.
Jul 25 2022, 9:33 AM · VyOS Rolling
Viacheslav added a parent task for T3937: Rewrite "show system memory" in Python to make it usable as a library function: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 25 2022, 9:33 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav closed T4493: Incorrect help for "show bgp neighbors" as Resolved.
Jul 25 2022, 9:01 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4547: Show vpn ipsec sa show unexpected prefix 'B' in packets.
Jul 25 2022, 8:56 AM · VyOS Rolling
Viacheslav added a parent task for T4547: Show vpn ipsec sa show unexpected prefix 'B' in packets: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 25 2022, 8:56 AM · VyOS 1.4 Sagitta

Jul 24 2022

jestabro created T4567: Merge experimental branch of GraphQL development.
Jul 24 2022, 7:46 PM · VyOS 1.4 Sagitta

Jul 23 2022

Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4145: Conntrack table not showing after firewall rewriting.
Jul 23 2022, 5:44 PM · VyOS Rolling
Viacheslav added a parent task for T4145: Conntrack table not showing after firewall rewriting: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:44 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4552: Unable to reset IPsec IPv6 peer.
Jul 23 2022, 5:41 PM · VyOS Rolling
Viacheslav added a parent task for T4552: Unable to reset IPsec IPv6 peer: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:41 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4543: Show source nat statistics shows incorrect interface.
Jul 23 2022, 5:40 PM · VyOS Rolling
Viacheslav added a parent task for T4543: Show source nat statistics shows incorrect interface: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:40 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4531: NAT op-mode errors with exclude rules.
Jul 23 2022, 5:39 PM · VyOS Rolling
Viacheslav added a parent task for T4531: NAT op-mode errors with exclude rules: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:39 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4545: Rewrite show nat source rules.
Jul 23 2022, 5:39 PM · VyOS Rolling
Viacheslav added a parent task for T4545: Rewrite show nat source rules: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:39 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4562: Rewrite show vrf to new format.
Jul 23 2022, 5:38 PM · VyOS Rolling
Viacheslav added a parent task for T4562: Rewrite show vrf to new format: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:38 PM · VyOS 1.4 Sagitta
Viacheslav created T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Jul 23 2022, 5:38 PM · VyOS Rolling
Viacheslav added a comment to T4531: NAT op-mode errors with exclude rules.

It will be fixed in T4545
PR https://github.com/vyos/vyos-1x/pull/1426

Jul 23 2022, 5:28 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4562: Rewrite show vrf to new format.

PR https://github.com/vyos/vyos-1x/pull/1430

vyos@r14:~$ show vrf
Name    State    MAC address        Flags                     Interfaces
------  -------  -----------------  ------------------------  ---------------
foo     up       be:e3:5c:f1:54:99  noarp,master,up,lower_up  eth1.50,eth1.55
bar     up       1e:7c:94:da:e0:35  noarp,master,up,lower_up  n/a
vyos@r14:~$
Jul 23 2022, 1:57 PM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T4562: Rewrite show vrf to new format from "Bug" to "Feature Request".
Jul 23 2022, 1:42 PM · VyOS 1.4 Sagitta
Viacheslav created T4562: Rewrite show vrf to new format.
Jul 23 2022, 1:42 PM · VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4542: route-map: "match prefix-len" incorrect behavior.

New PR (Notice corrected):
https://github.com/vyos/vyos-1x/pull/1427

Jul 23 2022, 9:38 AM · VyOS 1.4 Sagitta
aalmenar added a comment to T4556: fastnetmon: Allow configure white_list_path and populate with hosts/networks that should be ignored..

I have added a pull request for this:

Jul 23 2022, 9:24 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4552: Unable to reset IPsec IPv6 peer.

PR https://github.com/vyos/vyos-1x/pull/1428

vyos@r14:~$ reset vpn ipsec-peer 2001:db8::2 
CHILD_SA {21241} closed successfully
CHILD_SA {21243} closed successfully
CHILD_SA {21245} closed successfully
CHILD_SA {21244} closed successfully
CHILD_SA {21247} closed successfully
CHILD_SA {21246} closed successfully
CHILD_SA {21249} closed successfully
CHILD_SA {21248} closed successfully
closing CHILD_SA peer_2001-db8--2_tunnel_0{21250} with SPIs cab47d6b_i (0 bytes) c3cbba13_o (0 bytes) and TS 2001:db8:1111::/64 === 2001:db8:2222::/64
sending DELETE for ESP CHILD_SA with SPI cab47d6b
generating INFORMATIONAL request 14065 [ D ]
sending packet: from 2001:db8::1[500] to 2001:db8::2[500] (69 bytes)
received packet: from 2001:db8::2[500] to 2001:db8::1[500] (69 bytes)
parsed INFORMATIONAL response 14065 [ D ]
received DELETE for ESP CHILD_SA with SPI c3cbba13
CHILD_SA closed
CHILD_SA {21250} closed successfully
establishing CHILD_SA peer_2001-db8--2_tunnel_0{21251}
generating CREATE_CHILD_SA request 14066 [ SA No KE TSi TSr ]
sending packet: from 2001:db8::1[500] to 2001:db8::2[500] (497 bytes)
received packet: from 2001:db8::2[500] to 2001:db8::1[500] (497 bytes)
parsed CREATE_CHILD_SA response 14066 [ SA No KE TSi TSr ]
selected proposal: ESP:AES_GCM_16_256/MODP_2048/NO_EXT_SEQ
CHILD_SA peer_2001-db8--2_tunnel_0{21251} established with SPIs ccaff1e5_i c5a2b674_o and TS 2001:db8:1111::/64 === 2001:db8:2222::/64
connection 'peer_2001-db8--2_tunnel_0' established successfully
Peer reset result: success
vyos@r14:~$
Jul 23 2022, 8:50 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4552: Unable to reset IPsec IPv6 peer from Open to In progress.
Jul 23 2022, 7:56 AM · VyOS 1.4 Sagitta

Jul 22 2022

Viacheslav changed the status of T4546: Does not connect Cisco spoke to VyOS hub. from In progress to Needs testing.
Jul 22 2022, 11:15 PM · VyOS 1.4 Sagitta
c-po added a comment to T4560: VRF and BGP neighbor local-as error.

Commit fails b/c of frr-reload output: 200 % Local-AS allowed only for EBGP peers - we should add an appropriate verify() stage I guess.

Jul 22 2022, 9:10 PM · VyOS 1.4 Sagitta
Viacheslav closed T4145: Conntrack table not showing after firewall rewriting as Resolved.
Jul 22 2022, 7:30 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4545: Rewrite show nat source rules.

PR https://github.com/vyos/vyos-1x/pull/1426
An example with only one rule 10 raw output

vyos@r14:~$ /usr/libexec/vyos/op_mode/nat.py show_rules --direction source --raw
[
    {
        "rule": {
            "family": "ip",
            "table": "nat",
            "chain": "POSTROUTING",
            "handle": 114,
            "comment": "SRC-NAT-10",
            "expr": [
                {
                    "match": {
                        "op": "==",
                        "left": {
                            "meta": {
                                "key": "oifname"
                            }
                        },
                        "right": "eth0"
                    }
                },
                {
                    "counter": {
                        "packets": 0,
                        "bytes": 0
                    }
                },
                {
                    "masquerade": null
                }
            ]
        }
    }
]
vyos@r14:~$
Jul 22 2022, 4:37 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T4561: reset ip bgp <neighbor> allows reset bgp peer for ipv4, also it should exist one for ipv6: VyOS 1.4 Sagitta.
Jul 22 2022, 1:01 PM · VyOS Rolling
Viacheslav added a comment to T4145: Conntrack table not showing after firewall rewriting.

PR to new format + IPv6 entries https://github.com/vyos/vyos-1x/pull/1425

Jul 22 2022, 12:35 PM · VyOS 1.4 Sagitta
c-po claimed T4560: VRF and BGP neighbor local-as error.
Jul 22 2022, 7:54 AM · VyOS 1.4 Sagitta
Viacheslav created T4560: VRF and BGP neighbor local-as error.
Jul 22 2022, 7:46 AM · VyOS 1.4 Sagitta
vfreex added a project to T4559: vyos-1x: xdp build error: VyOS 1.4 Sagitta.
Jul 22 2022, 7:21 AM · VyOS 1.4 Sagitta
vfreex updated subscribers of T160: Support NAT64.

@aaliddell I am not too concerned about tayga's maintenance. It have been proved to work well for years, and the package is already a part of the official repository of debian. Actually debian's tayga package includes a few patches: https://salsa.debian.org/debian/tayga/-/tree/debian/master/debian/patches

Jul 22 2022, 7:01 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav changed the status of T4550: router-advert: Add deprecate-prefix & decrement-lifetimes options from Open to In progress.
Jul 22 2022, 1:09 AM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T4556: fastnetmon: Allow configure white_list_path and populate with hosts/networks that should be ignored. from "Task" to "Feature Request".
Jul 22 2022, 12:58 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4558: Incomplete error message when duplicate firewall port-group used.

I just leave it here. We must not return to bug T2189 with this fix.

Jul 22 2022, 12:57 AM · VyOS 1.4 Sagitta
Viacheslav added a project to T4557: fastnetmon: allow configure limits per protocol (tcp, udp, icmp): VyOS 1.4 Sagitta.
Jul 22 2022, 12:51 AM · VyOS 1.4 Sagitta

Jul 21 2022

c-po renamed T4537: MACsec not working with cipher gcm-aes-256 from Macsec not working with cipher gcm-aes-256 to MACsec not working with cipher gcm-aes-256.
Jul 21 2022, 7:48 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
SrividyaA created T4558: Incomplete error message when duplicate firewall port-group used.
Jul 21 2022, 7:23 PM · VyOS 1.4 Sagitta
c-po added a comment to T4537: MACsec not working with cipher gcm-aes-256.

That's XPN support but GCM-AES-256 was added back in 2018 in https://w1.fi/cgit/hostap/commit/?id=1ff8605775

Jul 21 2022, 7:20 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Cheeze_It added a comment to T4257: Discussion on changing BGP autonomous system number syntax.

Put in pull request https://github.com/vyos/vyos-1x/pull/1423

Jul 21 2022, 6:38 PM · VyOS 1.4 Sagitta
c-po closed T4555: fastnetmon: add IPv6 support as Resolved.
Jul 21 2022, 6:23 PM · VyOS 1.4 Sagitta
c-po created T4555: fastnetmon: add IPv6 support.
Jul 21 2022, 6:23 PM · VyOS 1.4 Sagitta
c-po added a comment to T4553: Allow to set ban time on ddos-protection configuration.

That's what commit rVYOSONEX5e510e45f6f9 did :)

Jul 21 2022, 6:16 PM · VyOS 1.4 Sagitta