@n.fort Maybe set firewall name <name> rule <rule> ipsec match-gre? This feels a bit hacky though... Almost like match should be its own block and contain ipsec, none, or gre
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Sep 19 2022
Sep 19 2022
n.fort changed the status of T4699: Firewall - Add jump action - Add return action from In progress to Needs testing.
Sep 18 2022
Sep 18 2022
Sep 17 2022
Sep 17 2022
roedie moved T4526: keepalived-fifo.py unable to load config from Need Triage to Finished on the VyOS 1.4 Sagitta board.
roedie moved T4665: Keepalived cannot use same VRID for VRRPv2 and VRRPv3 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
It works for me (tm)
c-po moved T4702: Wireguard peers configuration is not synchronized with CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
PR for VyOS 1.3.3 https://github.com/vyos/vyos-1x/pull/1548
c-po moved T4703: accel-ppp: combine vlan-id and vlan-range into single CLI node from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T4702: Wireguard peers configuration is not synchronized with CLI from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po changed Why the issue appeared? from none to implementation-mistake on T4702: Wireguard peers configuration is not synchronized with CLI.
c-po changed the status of T4702: Wireguard peers configuration is not synchronized with CLI from Confirmed to Needs testing.
c-po edited projects for T4702: Wireguard peers configuration is not synchronized with CLI, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Sep 16 2022
Sep 16 2022
c-po changed the status of T4703: accel-ppp: combine vlan-id and vlan-range into single CLI node from Open to In progress.
danhusan awarded T4702: Wireguard peers configuration is not synchronized with CLI a Love token.
Viacheslav added a comment to T4557: fastnetmon: allow configure limits per protocol (tcp, udp, icmp).
PR https://github.com/vyos/vyos-1x/pull/1545
PR https://github.com/vyos/vyatta-cfg-system/pull/185
set service ids ddos-protection direction 'in' set service ids ddos-protection listen-interface 'eth1' set service ids ddos-protection mode mirror set service ids ddos-protection threshold general fps '1000' set service ids ddos-protection threshold general mbps '200' set service ids ddos-protection threshold general pps '150000' set service ids ddos-protection threshold tcp fps '25' set service ids ddos-protection threshold tcp mbps '55' set service ids ddos-protection threshold tcp pps '155' set service ids ddos-protection threshold udp fps '100' set service ids ddos-protection threshold udp mbps '100' set service ids ddos-protection threshold udp pps '100' set service ids ddos-protection threshold icmp fps '200' set service ids ddos-protection threshold icmp mbps '210' set service ids ddos-protection threshold icmp pps '2040'
Expected fastnermon config entries:
# General threshold ban_for_flows = on threshold_flows = 1000 ban_for_bandwidth = on threshold_mbps = 200 ban_for_pps = on threshold_pps = 150000
zsdc raised the priority of T4702: Wireguard peers configuration is not synchronized with CLI from Normal to High.
zsdc renamed T4702: Wireguard peers configuration is not synchronized with CLI from A `disable` option does not work for Wireguard peers to Wireguard peers configuration is not synchronized with CLI.
n.fort changed the status of T4701: Firewall - Implement global option to use one single general chian from Open to In progress.
n.fort changed the status of T4700: Firewall - Add interface match criteria from Open to In progress.
n.fort changed the status of T4699: Firewall - Add jump action - Add return action from Open to In progress.
Viacheslav changed the status of T3896: Extend ocserv support to allow for per-group configs from Open to Needs testing.
c-po changed the status of T4656: Support the listen-host config field of openconnect server from In progress to Needs testing.
c-po closed T4698: Drop validator name="range" and replace it with numeric, a subtask of T4669: Extend numeric.ml for inversion of values and range values, as Resolved.
Viacheslav changed the status of T4697: policy route: Generating ConfigError failes when tcp flag is missing on set tcp-mss rule commit from Open to In progress.
c-po changed Why the issue appeared? from none to other on T4698: Drop validator name="range" and replace it with numeric.
Added a new pull request to make ISIS segment routing work again.
Sep 15 2022
Sep 15 2022
Dear Sir
Will it work with 1.4 ?
BR
Vishvas
Jool is still being maintained for bugfixes etc. and it has all the features we're looking for, then it sounds fairly ideal. If no new features are being added to it, it's less likely to break in future releases too
syncer moved T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
I re-reviewed this PR and the following commit from @c-po
xPakrikx added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.
Ok now its working. Thanks. My bad.
Changes on the FRR side:
- Convert xdp helper library to an optional plugin + bgp hook
- Minor fixes + cleanups
- Figured out most of the permission problems
Changes on the XDP side:
- Convert mappings from legacy iproute format to the latest libbpf one
- New mappings improve debugging experience by implementing pretty-printing for XDP map dumping
- Added an xdp-loader for xdp-tools repo
c-po changed the status of T4696: Extend bgp parameters for bgp bestpath peer-type multipath-relax from Open to In progress.
Unknown Object (User) added a comment to T874: Support for Two Factor Authentication for CLI access via Google Authenticator/OTP.
PR adding libpam-google-authenticator package to VyOS:
https://github.com/vyos/vyos-1x/pull/1541
It seems that we have two constraints here.
Made a fix and now we have:
Let me see if I can fix it.
Doing further testing, it seems adding the explicit-null broke the configuration:
Good news. It seems the patch worked properly. Here we show MPLS labels generated via segment routing for the prefix command:
Sep 14 2022
Sep 14 2022
Viacheslav changed the status of T4680: Telegraf prometheus-client listen-address invalid format from Open to In progress.
Viacheslav changed the status of T4685: Interface does not exist on boot when used as inbound-interface for local policy route from Open to Needs testing.
Viacheslav changed the status of T4695: Add 'es' and 'jp106' keymap option keyboard-layout from In progress to Needs testing.
Viacheslav added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.
As I mentioned above, use it before the configuration, it described in the doc
#!/bin/vbash
Viacheslav changed the status of T4693: ISIS segment routing was broken... from Open to Needs testing.
Interesting article on how and when to match ipsec options: https://thermalcircle.de/doku.php?id=blog:linux:nftables_demystifying_ipsec_expressions
There is PR https://github.com/vyos/vyos-1x/pull/1516 for T4667 but it brakes all GRE traffic
Viacheslav changed the status of T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Open to In progress.
Viacheslav renamed T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Add 'es' and 'jp106' keymap to Add 'es' and 'jp106' keymap option keyboard-layout.
Viacheslav added a comment to T4679: OpenVPN site-to-site incorrect check for IPv6 local and remote address.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1539
Hi all,
Do you have a proposed cli format?
Added a pull request for this fix.
xPakrikx added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.
Nope, i use CLI for configuration and script for vrrp (wireguard interface enable/disable)
Sep 13 2022
Sep 13 2022
Fix for 1.3 https://github.com/vyos/vyos-build/pull/261
c-po edited projects for T2913: Failure to install fpm while building builder docker image, added: VyOS 1.2 Crux (VyOS 1.2.8), VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.2 Crux.
c-po changed the status of T2913: Failure to install fpm while building builder docker image from Open to In progress.
absolutesantaja added a comment to T2913: Failure to install fpm while building builder docker image.
This is also an issue on the 1.3.x builds due to a similar issue. See https://github.com/jordansissel/fpm/issues/1923