Page MenuHomeVyOS Platform
Feed Search

Apr 1 2023

Viacheslav added a comment to T5125: Add op-mode commands for hsflowd based sflow.

I think there should be one more metric - the number of packet-drop-events sent. I just checked in a change that adds to the example telemetry.py script:
https://github.com/sflow/host-sflow/commit/5b01779abf21a7553e07188ff2f54850c568f786

But we should also expose the number of drops that were suppressed by the mod_dropmon rate limit. I'll check in 2.0.50-4 later today to add that option too.

Apr 1 2023, 3:33 AM · VyOS 1.4 Sagitta

Mar 31 2023

Viacheslav changed the status of T5125: Add op-mode commands for hsflowd based sflow, a subtask of T5086: Integrate hsflowd for sflow accounting, from In progress to Needs testing.
Mar 31 2023, 1:33 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5125: Add op-mode commands for hsflowd based sflow from In progress to Needs testing.
Mar 31 2023, 1:33 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX657f5c1a0835: T5125: Add op-mode for sFlow based on hsflowd.
Mar 31 2023, 1:19 PM
Viacheslav added a comment to T5125: Add op-mode commands for hsflowd based sflow.

PR https://github.com/vyos/vyos-1x/pull/1927
Formatted output:

vyos@r14:~$ show sflow 
--------------------------  -----------------------------------
Agent address               192.168.122.14
sFlow interfaces            ['eth0', 'eth1']
sFlow servers               ['192.168.122.1', '192.168.122.11']
Datagrams sent              306
Packet samples sent         18
Packet samples dropped      0
Counter samples sent        917
Flow samples suppressed     0
Counter samples suppressed  0
--------------------------  -----------------------------------
vyos@r14:~$

Raw output:

vyos@r14:~$ sudo /usr/libexec/vyos/op_mode/sflow.py show --raw
{
    "agent_address": "192.168.122.14",
    "sflow_interfaces": [
        "eth0",
        "eth1"
    ],
    "sflow_servers": [
        "192.168.122.1",
        "192.168.122.11"
    ],
    "counter_samples_sent": 1077,
    "datagrams_sent": 359,
    "packet_samples_dropped": 0,
    "packet_samples_sent": 19,
    "rtmetric_samples": 0,
    "flow_samples_suppressed": 0,
    "counter_samples_suppressed": 0,
    "hsflowd_version": "2.0.50"
}
vyos@r14:~$
Mar 31 2023, 1:18 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5125: Add op-mode commands for hsflowd based sflow.

PR https://github.com/vyos/vyos-build/pull/329

Mar 31 2023, 10:02 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5125: Add op-mode commands for hsflowd based sflow, a subtask of T5086: Integrate hsflowd for sflow accounting, from Open to In progress.
Mar 31 2023, 9:17 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5125: Add op-mode commands for hsflowd based sflow from Open to In progress.
Mar 31 2023, 9:17 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4173: Wan Load Balancing - Error on firewall NAT rules from Confirmed to Needs testing.
Mar 31 2023, 8:20 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5131: Operational command "show isis segment-routing prefix-sids" isn't working from In progress to Needs testing.
Mar 31 2023, 7:59 AM
Viacheslav committed rVYOSONEX8a75a0ea52f2: T4173: Fix smoketest for load-balancing wan.
Mar 31 2023, 6:54 AM

Mar 30 2023

Viacheslav added a comment to T5123: Display route originator in show ospf table command.

We can use patches dir https://github.com/vyos/vyos-build/blob/c3f11ba39c50a3bd1c69e61c38f1c82960a15ee7/packages/frr/build-frr.sh#L18

Mar 30 2023, 7:59 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4173: Wan Load Balancing - Error on firewall NAT rules.

There also additional bugs relates iptables-nft as chain WANLOADBALANCE_OUT is not exist
https://github.com/vyos/vyatta-wanloadbalance/blob/70ee1319c20e083ab407d8a11faa44c74d05f084/src/lbdecision.cc#L312

vyos@r14# sudo nft list table ip mangle
# Warning: table ip mangle is managed by iptables-nft, do not touch!
table ip mangle {
	chain PREROUTING {
		type filter hook prerouting priority mangle; policy accept;
		counter packets 851 bytes 179376 jump WANLOADBALANCE_PRE
	}
Mar 30 2023, 6:29 AM · VyOS 1.4 Sagitta

Mar 29 2023

Viacheslav created T5125: Add op-mode commands for hsflowd based sflow.
Mar 29 2023, 8:25 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4173: Wan Load Balancing - Error on firewall NAT rules.

PRl https://github.com/vyos/vyatta-wanloadbalance/pull/15

Mar 29 2023, 7:00 PM · VyOS 1.4 Sagitta
Viacheslav created T5124: Python3 deprecation distutils.version import LooseVersion.
Mar 29 2023, 4:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav placed T4173: Wan Load Balancing - Error on firewall NAT rules up for grabs.
Mar 29 2023, 3:53 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4173: Wan Load Balancing - Error on firewall NAT rules.

The possible reason https://github.com/vyos/vyatta-wanloadbalance/blob/02f9e8fbee873f9ca1111a69761546c758001b24/src/lbdecision.cc#L116

Mar 29 2023, 2:11 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5086: Integrate hsflowd for sflow accounting.

bump hsflowd version to v2.0.50-3

Mar 29 2023, 12:05 PM · VyOS 1.4 Sagitta
Viacheslav closed T5033: generate-public-key command fails for address with multiple public keys like GitHub as Resolved.
Mar 29 2023, 9:58 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav closed T5056: IPoE server vlan-mon is not working as Resolved.
Mar 29 2023, 9:57 AM · VyOS 1.4 Sagitta
Viacheslav closed T5085: ospfv3 route-map not applied in FRR configuration as Resolved.
Mar 29 2023, 9:55 AM · VyOS 1.4 Sagitta
Viacheslav closed T5100: Update FRR to 8.5 as Resolved.
Mar 29 2023, 9:52 AM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T5121: Incorrect "architecture" config loaded from "Task" to "Bug".
Mar 29 2023, 9:18 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav changed the status of T5122: Move "archive-areas" to defaults.toml to support "non-free-firmware" repository from Open to Needs testing.
Mar 29 2023, 9:15 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav changed the status of T5110: Show frr op-mode vtysh_pam: Failed in account validation, a subtask of T5100: Update FRR to 8.5, from In progress to Needs testing.
Mar 29 2023, 9:09 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5110: Show frr op-mode vtysh_pam: Failed in account validation from In progress to Needs testing.
Mar 29 2023, 9:09 AM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX116b9395523e: T5110: Fix op-mode FRR vtysh_pam account validation.
Mar 29 2023, 9:00 AM
Viacheslav changed the status of T5110: Show frr op-mode vtysh_pam: Failed in account validation, a subtask of T5100: Update FRR to 8.5, from Open to In progress.
Mar 29 2023, 8:44 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5110: Show frr op-mode vtysh_pam: Failed in account validation from Open to In progress.
Mar 29 2023, 8:44 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5110: Show frr op-mode vtysh_pam: Failed in account validation.

@stepler Thanks
PR https://github.com/vyos/vyos-1x/pull/1918

Mar 29 2023, 8:44 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5118: Cleanup vestigial ntp completion script from Open to Needs testing.
Mar 29 2023, 6:42 AM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T5117: wide-dhcpv6 prefix delegation & router adverts for prefixes not working with decrement-lifetimes from "Task" to "Bug".
Mar 29 2023, 6:40 AM · Bugs
Viacheslav closed T5094: FRR systemd logs unknow key LimitNOFILESoft as Resolved.

Fixed in https://github.com/vyos/vyos-1x/commit/4a44d8bbd328b99582d8079fd086a7239bfc2121

Mar 29 2023, 6:23 AM · VyOS 1.4 Sagitta

Mar 28 2023

Viacheslav added a comment to T4516: Rewrite system image manipulation tools in Python.

@diodep There is the task for it T3001

Mar 28 2023, 12:37 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav changed the subtype of T5116: Better VRF support from "Task" to "Feature Request".
Mar 28 2023, 12:35 PM · VyOS Rolling

Mar 27 2023

Viacheslav closed T4737: FRRouting/zebra 7.5.1 does not redistribute routes to other protocols as Resolved.
Mar 27 2023, 11:54 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav added a comment to T4770: Rewrite OpenVPN op-mode to vyos.opmode format.

The site-to-site mode shows that tunnel not configured
Config:

set interfaces openvpn vtun52 description 'Site-to-Site'
set interfaces openvpn vtun52 local-address xxx.xxx.0.1
set interfaces openvpn vtun52 local-port '1152'
set interfaces openvpn vtun52 mode 'site-to-site'
set interfaces openvpn vtun52 persistent-tunnel
set interfaces openvpn vtun52 protocol 'udp'
set interfaces openvpn vtun52 remote-address 'xxx.xxx.0.2'
set interfaces openvpn vtun52 remote-host 'xxx.xxx.41.117'
set interfaces openvpn vtun52 remote-port '1152'
set interfaces openvpn vtun52 shared-secret-key 's2s'

interface:

vyos@vyos:~$ show int openvpn 
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
vtun52           10.52.0.1/32                      u/u  Site-to-Site

Output show openvpn

vyos@vyos:~$ show openvpn site-to-site 
No OpenVPN interfaces configured
vyos@vyos:~$
Mar 27 2023, 11:18 AM · VyOS 1.4 Sagitta
Viacheslav closed T5099: IPoE server add option 'next-pool' for named ip pools as Resolved.
Mar 27 2023, 8:52 AM · VyOS 1.4 Sagitta
Viacheslav raised the priority of T4737: FRRouting/zebra 7.5.1 does not redistribute routes to other protocols from Normal to High.

The required patch is not included in builds and they have the same bug.

Version:          VyOS 1.3-stable-202303270442
Release train:    equuleus
Mar 27 2023, 8:24 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav changed the status of T5113: PDNS: Support custom port for DNS forwarders from Open to Needs testing.
Mar 27 2023, 8:02 AM · VyOS 1.4 Sagitta

Mar 26 2023

Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony, a subtask of T3008: Migrate from ntpd to chronyd, from Open to Needs testing.
Mar 26 2023, 9:51 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony from Open to Needs testing.
Mar 26 2023, 9:51 AM · VyOS 1.4 Sagitta

Mar 25 2023

Viacheslav added a project to T5112: Enable support for Network Time Security (NTS) for chrony: VyOS 1.4 Sagitta.
Mar 25 2023, 8:09 AM · VyOS 1.4 Sagitta

Mar 24 2023

Viacheslav added a project to T2195: Support for encrypted DNS: dnscrypt, DoH, DoT, anonymized DNS: VyOS 1.4 Sagitta.
Mar 24 2023, 5:53 PM
Viacheslav placed T5022: VRRP add mail notification up for grabs.
Mar 24 2023, 3:48 PM · VyOS Rolling, Restricted Project

Mar 23 2023

Viacheslav added a subtask for T5100: Update FRR to 8.5: T5110: Show frr op-mode vtysh_pam: Failed in account validation.
Mar 23 2023, 6:08 PM · VyOS 1.4 Sagitta
Viacheslav added a parent task for T5110: Show frr op-mode vtysh_pam: Failed in account validation: T5100: Update FRR to 8.5.
Mar 23 2023, 6:08 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5110: Show frr op-mode vtysh_pam: Failed in account validation.
Mar 23 2023, 6:06 PM · VyOS 1.4 Sagitta
Viacheslav renamed T5110: Show frr op-mode vtysh_pam: Failed in account validation from Show version frr vtysh_pam: Failed in account validation to Show frr op-mode vtysh_pam: Failed in account validation.
Mar 23 2023, 6:06 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX7cb95a6bc980: T5099: IPoE-server add option next-pool for named ip pools.
Mar 23 2023, 5:16 PM
Viacheslav created T5110: Show frr op-mode vtysh_pam: Failed in account validation.
Mar 23 2023, 3:46 PM · VyOS 1.4 Sagitta
Viacheslav closed T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format as Resolved.
Mar 23 2023, 3:09 PM · VyOS 1.4 Sagitta
Viacheslav closed T5086: Integrate hsflowd for sflow accounting as Resolved.
Mar 23 2023, 3:07 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX32e94e1699c2: T5086: Add smoketest DROP_MONITOR kernel option.
Mar 23 2023, 2:21 PM
Viacheslav committed rVYOSONEX9c81b63a1a42: T5108: Add option rate-limit for l2tp pptp sstp ipoe raw format.
Mar 23 2023, 2:21 PM
Viacheslav added a comment to T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format.

PR https://github.com/vyos/vyos-1x/pull/1909

Mar 23 2023, 1:49 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format from Open to In progress.
Mar 23 2023, 1:38 PM · VyOS 1.4 Sagitta
Viacheslav created T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format.
Mar 23 2023, 1:37 PM · VyOS 1.4 Sagitta

Mar 21 2023

Viacheslav changed the status of T5099: IPoE server add option 'next-pool' for named ip pools from Open to In progress.
Mar 21 2023, 3:13 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5099: IPoE server add option 'next-pool' for named ip pools.

PR https://github.com/vyos/vyos-1x/pull/1901

set service ipoe-server authentication mode 'noauth'
set service ipoe-server client-ip-pool name first-pool gateway-address '192.0.2.1'
set service ipoe-server client-ip-pool name first-pool next-pool 'second-pool'
set service ipoe-server client-ip-pool name first-pool subnet '192.0.2.0/25'
set service ipoe-server client-ip-pool name second-pool gateway-address '203.0.113.1'
set service ipoe-server client-ip-pool name second-pool next-pool 'third-pool'
set service ipoe-server client-ip-pool name second-pool subnet '203.0.113.0/25'
set service ipoe-server client-ip-pool name third-pool gateway-address '198.51.100.1'
set service ipoe-server client-ip-pool name third-pool subnet '198.51.100.0/24'
set service ipoe-server interface eth1
Mar 21 2023, 3:06 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5050: Firewall - Add options for logging packets from In progress to Needs testing.
Mar 21 2023, 12:13 PM · VyOS 1.4 Sagitta
Viacheslav edited projects for T5098: PPPoE client holdoff configuration, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.4).
Mar 21 2023, 10:32 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav moved T5098: PPPoE client holdoff configuration from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Mar 21 2023, 10:32 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a project to T5098: PPPoE client holdoff configuration: VyOS 1.4 Sagitta.
Mar 21 2023, 10:32 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T5100: Update FRR to 8.5.

PR https://github.com/vyos/vyos-build/pull/322

Mar 21 2023, 7:25 AM · VyOS 1.4 Sagitta

Mar 20 2023

Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
Mar 20 2023, 6:11 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
Mar 20 2023, 5:53 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
Mar 20 2023, 1:25 PM · VyOS 1.4 Sagitta
Viacheslav closed T5057: IPoE server incorrect interface regex as Resolved.
Mar 20 2023, 1:01 PM · VyOS 1.4 Sagitta
Viacheslav renamed T5099: IPoE server add option 'next-pool' for named ip pools from IPoE server add option 'next-pool' to IPoE server add option 'next-pool' for named ip pools.
Mar 20 2023, 12:11 PM · VyOS 1.4 Sagitta
Viacheslav created T5100: Update FRR to 8.5.
Mar 20 2023, 11:55 AM · VyOS 1.4 Sagitta
Viacheslav created T5099: IPoE server add option 'next-pool' for named ip pools.
Mar 20 2023, 11:23 AM · VyOS 1.4 Sagitta

Mar 17 2023

Viacheslav committed rVYOSONEX9d3f88170fab: T5086: Fix sflow fix default values for server.
Mar 17 2023, 7:09 PM
Viacheslav added a comment to T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters'.

Some related tasks T2557 T4885

Mar 17 2023, 5:06 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
Viacheslav committed rVYOSONEX57c06dcd78f9: T5086: Add sFlow drop-monitor-limit option.
Mar 17 2023, 5:03 PM
Viacheslav added a comment to T5086: Integrate hsflowd for sflow accounting.

PR https://github.com/vyos/vyos-build/pull/321
PR https://github.com/vyos/vyos-1x/pull/1897

Mar 17 2023, 12:48 PM · VyOS 1.4 Sagitta
Viacheslav closed T5092: IPoE-server named pool must not rely on the authentication type as Resolved.
Mar 17 2023, 11:05 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5086: Integrate hsflowd for sflow accounting.

As DROP_MONITOR merged we can extend configuration to

set system sflow drop-monitor-limit 50

hsflowd.conf

dropmon { limit=50 start=on sw=on hw=off }
Mar 17 2023, 7:26 AM · VyOS 1.4 Sagitta
Viacheslav closed T5091: IPoE server with RADIUS authentication does not verify radius configuration as Resolved.
Mar 17 2023, 7:04 AM · VyOS 1.4 Sagitta
Viacheslav renamed T5091: IPoE server with RADIUS authentication does not verify radius configuration from IPoE server with RADIUS authentication does not check radius configuration to IPoE server with RADIUS authentication does not verify radius configuration.
Mar 17 2023, 1:47 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5092: IPoE-server named pool must not rely on the authentication type from In progress to Needs testing.
Mar 17 2023, 1:40 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5086: Integrate hsflowd for sflow accounting from In progress to Needs testing.
Mar 17 2023, 1:36 AM · VyOS 1.4 Sagitta

Mar 16 2023

Viacheslav committed rVYOSONEXe540d0ad4c58: T5091: IPoE-server verify RADIUS settings.
Mar 16 2023, 8:17 PM
Viacheslav committed rVYOSONEX45de84952e6f: T5092: IPoE-server named pool must not rely on auth type.
Mar 16 2023, 8:15 PM
Viacheslav committed rVYOSONEX707641f4dc94: T5086: Add sFlow feature based on hsflowd.
Mar 16 2023, 8:13 PM
Viacheslav closed T2516: vyos-container: cannot configure ethernet interface as Resolved.
Mar 16 2023, 2:37 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav closed T5073: IPoE-server interface option failed to parse as Resolved.
Mar 16 2023, 2:35 PM · VyOS 1.4 Sagitta
Viacheslav moved T5063: IPoE-server ethX vlan must not be used with client-subnet from Open to Finished on the VyOS 1.4 Sagitta board.
Mar 16 2023, 2:35 PM · VyOS 1.4 Sagitta
Viacheslav closed T5063: IPoE-server ethX vlan must not be used with client-subnet as Resolved.
Mar 16 2023, 2:34 PM · VyOS 1.4 Sagitta
Viacheslav reopened T5057: IPoE server incorrect interface regex as "Open".
Mar 16 2023, 2:34 PM · VyOS 1.4 Sagitta
Viacheslav closed T5058: Extend template filter range_to_regex as Resolved.
Mar 16 2023, 2:34 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXf7661b7803af: T2516: Exclude veth interfaces from duplex and speed check.
Mar 16 2023, 2:12 PM
Viacheslav committed rVYOSONEXf2f78ac79632: T5058: Add template filter range_to_regex.
Mar 16 2023, 2:11 PM
Viacheslav committed rVYOSONEX4eccfe6a19b4: T5057: Fix IPoE regex Jinja2 for interface.
Mar 16 2023, 2:11 PM
Viacheslav closed T3083: Add feature event-handler as Resolved.
Mar 16 2023, 1:26 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav moved T3083: Add feature event-handler from Backlog to Finished on the VyOS 1.4 Sagitta board.
Mar 16 2023, 1:26 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav changed the status of T5091: IPoE server with RADIUS authentication does not verify radius configuration from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/1895

Mar 16 2023, 1:24 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXf992b2bd230d: T3083: Add service event-handler.
Mar 16 2023, 1:19 PM
Viacheslav renamed T5091: IPoE server with RADIUS authentication does not verify radius configuration from IPoE server with RARIUS authentication does not check radius configuration to IPoE server with RADIUS authentication does not check radius configuration.
Mar 16 2023, 11:13 AM · VyOS 1.4 Sagitta