Page MenuHomeVyOS Platform
Feed All Stories

Jan 18 2023

fernando added a comment to T4939: VRRP command no-preempt not work as expected.

VyOS 1.4.x

Jan 18 2023, 3:45 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
fernando added a comment to T4939: VRRP command no-preempt not work as expected.

VyOS config 1.3.2 :

######### Router 01: master #########
Jan 18 2023, 3:41 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav renamed T4941: Accel-ppp IPoE incompatibility with kernel 6.1 from Accel-ppp IPoE incomability with kernel 6.1 to Accel-ppp IPoE incompatibility with kernel 6.1.
Jan 18 2023, 2:21 PM · VyOS 1.4 Sagitta
Viacheslav created T4941: Accel-ppp IPoE incompatibility with kernel 6.1.
Jan 18 2023, 2:09 PM · VyOS 1.4 Sagitta
erkin changed the status of T4583: Rewrite VRRP op-mode to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Jan 18 2023, 11:45 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
erkin changed the status of T4583: Rewrite VRRP op-mode to vyos.opmode format from Open to In progress.
Jan 18 2023, 11:45 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav moved T4940: Interface debugging from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
Jan 18 2023, 10:18 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
Unknown Object (User) added a comment to T4940: Interface debugging.


Jan 18 2023, 7:10 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
Unknown Object (User) triaged T4940: Interface debugging as Low priority.
Jan 18 2023, 7:09 AM · VyOS 1.4 Sagitta (1.4.0-epa1)

Jan 17 2023

fernando added a comment to T4939: VRRP command no-preempt not work as expected.

I've testing this command , it works as we expected . At this point I think we should add PR in 1.4 with new section :

Jan 17 2023, 10:06 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
fernando added a project to T4939: VRRP command no-preempt not work as expected: VyOS 1.4 Sagitta.
Jan 17 2023, 9:48 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav moved T4906: ipsec connections shows only one connection as up from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Jan 17 2023, 8:57 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4906: ipsec connections shows only one connection as up.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1762

Jan 17 2023, 4:57 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
fernando added a comment to T4939: VRRP command no-preempt not work as expected.

it seems the issue is related no-preemt and interfaces bond , based on keepalived documentation :

Jan 17 2023, 4:18 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
n.fort added a comment to T4939: VRRP command no-preempt not work as expected.

Error seems to be present only when bonding interface is configured.

Jan 17 2023, 3:52 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk changed the status of T4864: `show firewall` command errors from In progress to Needs testing.
Jan 17 2023, 3:17 PM · VyOS 1.4 Sagitta
c-po closed T2460: Migrate vyatta-nat-translations.pl to Python, a subtask of T2198: Rewrite NAT in new XML/Python style, as Wontfix.
Jan 17 2023, 2:25 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2460: Migrate vyatta-nat-translations.pl to Python as Wontfix.
Jan 17 2023, 2:25 PM · VyOS 1.3 Equuleus (1.3.3)
c-po added a comment to T2460: Migrate vyatta-nat-translations.pl to Python.

The old script uses too much CPU and RAM, and can even crash on big conntrack tables.

Jan 17 2023, 2:25 PM · VyOS 1.3 Equuleus (1.3.3)
c-po added a comment to T2460: Migrate vyatta-nat-translations.pl to Python.

1.3 and 1.4 NAT code should not be mixed. Also 1.4 makes use of the generic op-mode framework which is not present in 1.3 thus a backport is not possible.

Jan 17 2023, 2:25 PM · VyOS 1.3 Equuleus (1.3.3)
c-po closed T4938: Interface input ifb does not work as Resolved.
Jan 17 2023, 2:23 PM · VyOS 1.4 Sagitta
c-po closed T4902: snmpd: exclude container storage from monitoring as Resolved.
Jan 17 2023, 2:19 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po closed T4140: Lack of SNMP IANA mibs as Resolved.
Jan 17 2023, 2:18 PM · VyOS 1.4 Sagitta
c-po added a comment to T4140: Lack of SNMP IANA mibs.

Files have been dropped in upstream package libsnmp-base for bullseye version. MIBs moved to vyos-1x repo

Jan 17 2023, 2:18 PM · VyOS 1.4 Sagitta
c-po claimed T4140: Lack of SNMP IANA mibs.
Jan 17 2023, 2:17 PM · VyOS 1.4 Sagitta
n.fort assigned T4939: VRRP command no-preempt not work as expected to fernando.
Jan 17 2023, 12:11 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav added a comment to T4916: Rewrite IPsec authentication.

updated actual PR https://github.com/vyos/vyos-1x/pull/1761

Jan 17 2023, 11:10 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4551: IPsec rekeying collisions bug from Open to In progress.
Jan 17 2023, 10:08 AM · VyOS 1.4 Sagitta
Viacheslav added a project to T1297: Add GARP settings to VRRP/keepalived: VyOS 1.4 Sagitta.
Jan 17 2023, 7:51 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
Viacheslav changed the subtype of T4939: VRRP command no-preempt not work as expected from "Task" to "Bug".
Jan 17 2023, 7:37 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav edited projects for T4939: VRRP command no-preempt not work as expected, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
Jan 17 2023, 7:36 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)

Jan 16 2023

fernando added a comment to T4939: VRRP command no-preempt not work as expected.
Jan 16 2023, 8:41 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
fernando changed the status of T4939: VRRP command no-preempt not work as expected from Open to Confirmed.
Jan 16 2023, 8:38 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
aalmenar added a comment to T3008: Migrate from ntpd to chronyd.

I believe this change had an unintended side effect:

Jan 16 2023, 7:06 PM · VyOS 1.4 Sagitta
Viacheslav moved T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Jan 16 2023, 5:23 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from Open to In progress.
Jan 16 2023, 3:04 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1759

Jan 16 2023, 7:31 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jan 15 2023

Viacheslav changed the status of T4927: Need to change restart to reload-or-restart in Webproxy module from In progress to Needs testing.
Jan 15 2023, 9:39 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
c-po closed T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925) as Resolved.
Jan 15 2023, 6:54 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925) from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Jan 15 2023, 6:54 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925) from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Jan 15 2023, 6:54 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a project to T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925): VyOS 1.3 Equuleus (1.3.3).
Jan 15 2023, 6:54 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T4930: Allow WireGuard peers via DNS hostname.

Unfortunately this is not a trivial task as WG does the DNS lookup only once on tunnel creation and not subsequently. A 3rd party script would be required to do that.

Jan 15 2023, 3:54 PM · VyOS 1.5 Circinus
c-po closed T4918: Odd show interface behavior as Resolved.
Jan 15 2023, 3:51 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4918: Odd show interface behavior from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Jan 15 2023, 3:51 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4918: Odd show interface behavior from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Jan 15 2023, 3:51 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po claimed T4938: Interface input ifb does not work.
Jan 15 2023, 2:36 PM · VyOS 1.4 Sagitta
Viacheslav created T4938: Interface input ifb does not work.
Jan 15 2023, 10:35 AM · VyOS 1.4 Sagitta
c-po closed T4937: ocserv: upgrade package to version 1.1.6 as Resolved.
Jan 15 2023, 7:16 AM · VyOS 1.4 Sagitta
c-po created T4937: ocserv: upgrade package to version 1.1.6.
Jan 15 2023, 7:07 AM · VyOS 1.4 Sagitta
c-po removed a project from T3008: Migrate from ntpd to chronyd: VyOS 1.3 Equuleus (1.3.3).
Jan 15 2023, 7:00 AM · VyOS 1.4 Sagitta
c-po added a comment to T3008: Migrate from ntpd to chronyd.
  1. Change Summary
Jan 15 2023, 7:00 AM · VyOS 1.4 Sagitta
c-po closed T3008: Migrate from ntpd to chronyd as Resolved.
Jan 15 2023, 6:59 AM · VyOS 1.4 Sagitta

Jan 13 2023

c-po added a comment to T3008: Migrate from ntpd to chronyd.

Draft PR https://github.com/vyos/vyos-1x/pull/1758

Jan 13 2023, 9:05 PM · VyOS 1.4 Sagitta
c-po claimed T3008: Migrate from ntpd to chronyd.
Jan 13 2023, 1:49 PM · VyOS 1.4 Sagitta
c-po closed T4911: Rewrite the LLDP op mode in the new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Jan 13 2023, 1:48 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po closed T4911: Rewrite the LLDP op mode in the new format as Resolved.
Jan 13 2023, 1:48 PM · VyOS 1.4 Sagitta
c-po closed T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition) as Resolved.
Jan 13 2023, 1:48 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output: VyOS 1.3 Equuleus (1.3.3).

We should backport it to 1.3

Jan 13 2023, 10:27 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
xrpixer created T4936: Certificate Auto Enrollment via SCEP.
Jan 13 2023, 4:48 AM · VyOS 1.5 Circinus

Jan 12 2023

c-po closed T4929: Update Intel QAT drivers to 4.20.0-00001, a subtask of T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition), as Resolved.
Jan 12 2023, 8:13 PM · VyOS 1.4 Sagitta
c-po closed T4929: Update Intel QAT drivers to 4.20.0-00001 as Resolved.
Jan 12 2023, 8:13 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4935: ospfv3: "not-advertise" and "advertise" conflict from Open to Needs testing.
Jan 12 2023, 8:11 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4916: Rewrite IPsec authentication.

PR https://github.com/vyos/vyos-1x/pull/1757
PR https://github.com/vyos/vyatta-cfg-system/pull/195

Jan 12 2023, 7:16 PM · VyOS 1.4 Sagitta
Restricted Repository Identity closed T4934: ospf: Fix inter-area route summarization as Resolved by committing Restricted Diffusion Commit.
Jan 12 2023, 6:40 PM · VyOS 1.4 Sagitta
c-po updated the task description for T4911: Rewrite the LLDP op mode in the new format.
Jan 12 2023, 5:13 PM · VyOS 1.4 Sagitta
c-po added a comment to T4911: Rewrite the LLDP op mode in the new format.

https://github.com/vyos/vyos-1x/pull/1756

Jan 12 2023, 5:13 PM · VyOS 1.4 Sagitta
c-po changed the status of T4911: Rewrite the LLDP op mode in the new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Jan 12 2023, 5:13 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po changed the status of T4911: Rewrite the LLDP op mode in the new format from Open to In progress.
Jan 12 2023, 5:13 PM · VyOS 1.4 Sagitta
vfreex created T4935: ospfv3: "not-advertise" and "advertise" conflict.
Jan 12 2023, 3:26 PM · VyOS 1.4 Sagitta
vfreex created T4934: ospf: Fix inter-area route summarization.
Jan 12 2023, 3:17 PM · VyOS 1.4 Sagitta
dmbaturin created T4933: Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error.
Jan 12 2023, 12:12 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a project to T4931: Failed to build firmware for arm64: VyOS 1.4 Sagitta.
Jan 12 2023, 7:01 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build
Viacheslav changed the subtype of T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture from "Task" to "Bug".
Jan 12 2023, 7:01 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build
tkmr_akhs added a project to T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture: VyOS 1.4 Sagitta.
Jan 12 2023, 7:01 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build
tkmr_akhs updated the task description for T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture.
Jan 12 2023, 6:56 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build
tkmr_akhs created T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture.
Jan 12 2023, 6:55 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build
Viacheslav added a comment to T4930: Allow WireGuard peers via DNS hostname.

See tasks T1700 T2943

Jan 12 2023, 6:11 AM · VyOS 1.5 Circinus
tkmr_akhs created T4931: Failed to build firmware for arm64.
Jan 12 2023, 5:38 AM · Restricted Project, VyOS 1.5 Circinus, vyos-build

Jan 11 2023

b- created T4930: Allow WireGuard peers via DNS hostname.
Jan 11 2023, 9:01 PM · VyOS 1.5 Circinus
roedie added a comment to T4918: Odd show interface behavior.

@jestabro I've created the backport PR just now.

Jan 11 2023, 7:08 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro added a comment to T4918: Odd show interface behavior.

@roedie , thanks.

Jan 11 2023, 6:37 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie added a comment to T4918: Odd show interface behavior.

Will push the backport for 1.3 as well.

Jan 11 2023, 6:26 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po claimed T4929: Update Intel QAT drivers to 4.20.0-00001.
Jan 11 2023, 5:50 PM · VyOS 1.4 Sagitta
c-po updated the task description for T4929: Update Intel QAT drivers to 4.20.0-00001.
Jan 11 2023, 5:50 PM · VyOS 1.4 Sagitta
c-po created T4929: Update Intel QAT drivers to 4.20.0-00001.
Jan 11 2023, 5:49 PM · VyOS 1.4 Sagitta
c-po changed the status of T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition) from Open to In progress.
Jan 11 2023, 5:47 PM · VyOS 1.4 Sagitta
c-po created T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition).
Jan 11 2023, 5:47 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.

So there are 2 options

  1. Live it as it is, it works as before (but maybe it is a legacy way)
  2. Return the strongswan.service and use it in all required places (conf-mode, op-mode, dmvpn scripts, etc). So old ipsec/starter must not be overlapped with strongswan.service restarts
Jan 11 2023, 4:04 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T3008: Migrate from ntpd to chronyd: VyOS 1.4 Sagitta.
Jan 11 2023, 9:12 AM · VyOS 1.4 Sagitta
Viacheslav placed T3008: Migrate from ntpd to chronyd up for grabs.
Jan 11 2023, 9:11 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4927: Need to change restart to reload-or-restart in Webproxy module from Open to In progress.
Jan 11 2023, 6:48 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
jack9603301 awarded T3008: Migrate from ntpd to chronyd a Like token.
Jan 11 2023, 3:07 AM · VyOS 1.4 Sagitta

Jan 10 2023

jestabro closed T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, as Resolved.
Jan 10 2023, 4:26 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro closed T4880: Expose 'add/delete container image' in HTTP-API as Resolved.
Jan 10 2023, 4:26 PM · VyOS 1.4 Sagitta
a.apostoliuk added a comment to T4551: IPsec rekeying collisions bug.

I found that if IPSEC lifetime is large(28800) then this problem occurs.
If lifetime eq 1800 sec, everything works.

Jan 10 2023, 3:46 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from In progress to Needs testing.
Jan 10 2023, 3:37 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.

After return strongswan.starer https://github.com/vyos/vyos-1x/commit/f5f43c6639957f95177bb77d2b569e16d4dab9dc
all looks good now, service can be restored without issues

Jan 10 2023, 1:11 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4906: ipsec connections shows only one connection as up.

PR https://github.com/vyos/vyos-1x/pull/1745

Jan 10 2023, 12:48 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk claimed T4927: Need to change restart to reload-or-restart in Webproxy module.
Jan 10 2023, 9:42 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta