Page MenuHomeVyOS Platform
Feed All Stories

Apr 24 2023

Viacheslav added a comment to T1237: Static Route Path Monitoring, failover.

@Harliff Could you check it? Available in the latest rolling release

vyos@r14# set  protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 check policy 
Possible completions:
   all-available        All targets must be alive
   any-available        Any target must be alive (default)
Apr 24 2023, 8:59 AM · VyOS 1.4 Sagitta
carazzim0 added a comment to T5082: container: switch to netavark network stack.

Hi guys,

Apr 24 2023, 7:47 AM · VyOS 1.4 Sagitta
Cheeze_It triaged T5081: ISIS and OSPF syncronization with IGP-LDP sync as Normal priority.
Apr 24 2023, 5:54 AM · VyOS 1.4 Sagitta
Cheeze_It changed the status of T5081: ISIS and OSPF syncronization with IGP-LDP sync from Open to Needs testing.
Apr 24 2023, 5:54 AM · VyOS 1.4 Sagitta

Apr 23 2023

glueckself created T5177: Make the chain policy configurable.
Apr 23 2023, 10:05 PM · VyOS 1.5 Circinus
jestabro added a subtask for T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0: T5176: http-api: update vyos-http-api-tools for FastAPI security vulnerability.
Apr 23 2023, 9:11 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro added a parent task for T5176: http-api: update vyos-http-api-tools for FastAPI security vulnerability: T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0.
Apr 23 2023, 9:11 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro triaged T5176: http-api: update vyos-http-api-tools for FastAPI security vulnerability as High priority.
Apr 23 2023, 9:11 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro changed the status of T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0 from Open to In progress.
Apr 23 2023, 8:35 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro added a comment to T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0.

This has a simple fix: starlette commit c568b55d set the attribute

Request._form = None

to support use of Request.form() as a context manager. Since we override the Request class for backwards-compatibility support (translation) of form-data requests, we need to check for value, not existence, of the attribute. Adding this fix allows updating FastAPI past 0.91.0.

Apr 23 2023, 8:35 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro renamed T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0 from http-api: error in MultiPart parser for FastAPI version >= 0.90.0 to http-api: error in MultiPart parser for FastAPI version >= 0.91.0.
Apr 23 2023, 8:29 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro renamed T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0 from http-api: error in MultipPart parser for FastAPI version >= 0.90.0 to http-api: error in MultiPart parser for FastAPI version >= 0.90.0.
Apr 23 2023, 2:10 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro updated the task description for T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0.
Apr 23 2023, 1:44 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro triaged T5175: http-api: error in MultiPart parser for FastAPI version >= 0.91.0 as Urgent! priority.
Apr 23 2023, 1:39 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po changed the status of T5174: vrf: ensure no duplicate VNIs can be created from Open to In progress.
Apr 23 2023, 1:13 PM · VyOS 1.4 Sagitta
c-po created T5174: vrf: ensure no duplicate VNIs can be created.
Apr 23 2023, 1:13 PM · VyOS 1.4 Sagitta

Apr 21 2023

fernando added a comment to T5161: BFD Static Route Monitoring.

bfd is able to monitoring static routes , using profiles and multi-hop to reached a peer :

Apr 21 2023, 6:24 PM · VyOS 1.4 Sagitta
fernando added a comment to T5161: BFD Static Route Monitoring.

PR https://github.com/vyos/vyos-1x/pull/1967

Apr 21 2023, 6:21 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T1237: Static Route Path Monitoring, failover.

PR https://github.com/vyos/vyos-1x/pull/1966

set protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 check policy 'any-available'
set protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 check target '192.168.122.1'
set protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 check target '192.168.122.11'
set protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 check timeout '3'
set protocols failover route 192.0.2.55/32 next-hop 192.168.122.1 interface 'eth0'
Apr 21 2023, 3:43 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates.

Don't have any idea how to integrate this logic to XML https://github.com/vyos/vyatta-wanloadbalance/blob/973421035568810e2583187c48d14054970b9806/templates/load-balancing/wan/node.def#L2-L5

Apr 21 2023, 1:40 PM · VyOS 1.4 Sagitta
dmbaturin created T5172: Set Python3 version dependency for vyos-1x to 3.10.
Apr 21 2023, 12:58 PM · VyOS 1.4 Sagitta
zsdc added a comment to T3202: Enable wireguard debug messages by default.

Just in case someone wants to implement this: debugging must not be enabled by default, only on demand or via config.

Apr 21 2023, 10:15 AM · VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project, VyOS 1.5 Circinus
Viacheslav added a comment to T5082: container: switch to netavark network stack.

Bug report https://forum.vyos.io/t/unable-to-update-to-1-4-rolling-release-past-netavark-changes/

Apr 21 2023, 3:27 AM · VyOS 1.4 Sagitta

Apr 20 2023

indrajitr closed T5170: Relocate ntp config path in config.boot.default as Wontfix.

Per VyOS maintainers, this operation isn't necessary.

Apr 20 2023, 10:35 PM · VyOS 1.4 Sagitta
Viacheslav renamed T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from Use XML for conf-mode "load-balancing wan" instead of legasy templates to Use XML for conf-mode "load-balancing wan" instead of legacy templates.
Apr 20 2023, 3:05 PM · VyOS 1.4 Sagitta
Viacheslav renamed T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from Use XML for conf-mode "load-balancing wan" instead of templates to Use XML for conf-mode "load-balancing wan" instead of legasy templates.
Apr 20 2023, 3:04 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to In progress.
Apr 20 2023, 3:04 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from Open to In progress.
Apr 20 2023, 3:04 PM · VyOS 1.4 Sagitta
Viacheslav created T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates.
Apr 20 2023, 3:03 PM · VyOS 1.4 Sagitta
indrajitr triaged T5170: Relocate ntp config path in config.boot.default as Low priority.
Apr 20 2023, 1:15 AM · VyOS 1.4 Sagitta

Apr 19 2023

Viacheslav updated the task description for T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Apr 19 2023, 4:54 PM · Restricted Project, VyOS 1.5 Circinus
Viacheslav updated the task description for T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Apr 19 2023, 4:53 PM · Restricted Project, VyOS 1.5 Circinus
raju123 updated raju123.
Apr 19 2023, 11:51 AM
Viacheslav created T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Apr 19 2023, 11:36 AM · Restricted Project, VyOS 1.5 Circinus
aserkin attached a referenced file: F3728177: zebra-mem-leak.jpg.
Apr 19 2023, 10:19 AM
v.huti claimed T5168: zebra memory leak.
Apr 19 2023, 10:18 AM
aserkin created T5168: zebra memory leak.
Apr 19 2023, 10:02 AM
aserkin added a watcher for VyOS 1.4 Sagitta: aserkin.
Apr 19 2023, 9:55 AM
Viacheslav created T5167: Add a simple file server.
Apr 19 2023, 8:45 AM · VyOS 1.5 Circinus
Viacheslav changed the subtype of T5166: Remove local minisign package from build repo for 1.4 from "Task" to "Feature Request".
Apr 19 2023, 8:19 AM · VyOS 1.4 Sagitta
indrajitr updated the task description for T5166: Remove local minisign package from build repo for 1.4.
Apr 19 2023, 5:53 AM · VyOS 1.4 Sagitta
indrajitr created T5166: Remove local minisign package from build repo for 1.4.
Apr 19 2023, 5:51 AM · VyOS 1.4 Sagitta

Apr 18 2023

Netboy3 added a comment to T5144: Modernize dynamic dns operation.

Tested on latest "current" source tree build. Works fine and solves the "old syntax" cache file issue. Thank you for the quick and responsive fix.

Apr 18 2023, 1:52 PM · VyOS 1.4 Sagitta
Viacheslav created T5165: Policy local-route ability set protocol and port.
Apr 18 2023, 10:42 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
SrividyaA created T5164: op cmd: "show dhcp server leases state" with available options does not show any result.
Apr 18 2023, 9:45 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Harliff added a comment to T1237: Static Route Path Monitoring, failover.

That would be great!

Apr 18 2023, 9:22 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T1237: Static Route Path Monitoring, failover.

Sorry, missed some messages.

We have targets-checks 203.0.113.1, 192.0.2.1, and if any of these targets are unreachable, we delete this route.
Is it correct?

It is not correct. I think it would be better to remove the route if ALL of corresponding targets are unreachable.

A target may become unreachable due to a problem of its own rather than an uplink failure. This is the reason why I asked to add multiple targets per uplink.

Apr 18 2023, 8:54 AM · VyOS 1.4 Sagitta
Harliff added a comment to T1237: Static Route Path Monitoring, failover.

@Harliff Could you re-check?

Apr 18 2023, 7:51 AM · VyOS 1.4 Sagitta
Harliff added a comment to T1237: Static Route Path Monitoring, failover.

Sorry, missed some messages.

Apr 18 2023, 7:50 AM · VyOS 1.4 Sagitta
indrajitr added a comment to T5144: Modernize dynamic dns operation.

PR for the fix: https://github.com/vyos/vyos-1x/pull/1962

Apr 18 2023, 4:13 AM · VyOS 1.4 Sagitta

Apr 17 2023

c-po renamed T5010: bgp: EVPN route-target not honored from Route Target not honoured to bgp: EVPN route-target not honored.
Apr 17 2023, 8:48 PM · VyOS 1.4 Sagitta
c-po claimed T5010: bgp: EVPN route-target not honored.
Apr 17 2023, 8:48 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T5137: show tech support command.
Apr 17 2023, 8:02 PM · VyOS 1.5 Circinus
erkin added a parent task for T5137: show tech support command: T3355: Remove all remaining legacy Vyatta code.
Apr 17 2023, 8:02 PM
c-po closed T3734: Move EVPN VRF up in FRR config, a subtask of T3728: FRR not respect configured RD and RT for L3VNI, as Resolved.
Apr 17 2023, 7:01 PM · VyOS 1.4 Sagitta
c-po closed T3734: Move EVPN VRF up in FRR config as Resolved.
Apr 17 2023, 7:01 PM · VyOS 1.4 Sagitta
c-po closed T5150: Rework CLI definitions to apply route-maps between routing daemons and zebra/kernel as Resolved.
Apr 17 2023, 6:31 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5137: show tech support command.

PR https://github.com/vyos/vyos-1x/pull/1961

Apr 17 2023, 6:11 PM
Viacheslav created T5163: Policy route-map add match source-protocol.
Apr 17 2023, 3:19 PM · VyOS 1.4 Sagitta
sarthurdev added a comment to T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6).

Draft PR: https://github.com/vyos/vyos-1x/pull/1960

Apr 17 2023, 1:20 PM · VyOS 1.5 Circinus
SrividyaA closed T5052: Error displaying dhcpv6 prefix delegation leases as Resolved.
Apr 17 2023, 7:44 AM · VyOS 1.4 Sagitta
SrividyaA added a comment to T5052: Error displaying dhcpv6 prefix delegation leases.

The issue does not exit in the recent release 1.4-rolling-202304130846

Apr 17 2023, 7:43 AM · VyOS 1.4 Sagitta

Apr 16 2023

Viacheslav added a comment to T5144: Modernize dynamic dns operation.

An issue https://forum.vyos.io/t/ddns-setup-issue/

Apr 16 2023, 6:56 PM · VyOS 1.4 Sagitta

Apr 14 2023

sarthurdev changed the status of T5162: Invalid json in configd-include.json from Open to Needs testing.
Apr 14 2023, 11:02 PM
ServerForge added a comment to T5162: Invalid json in configd-include.json.

https://github.com/vyos/vyos-1x/pull/1959

Apr 14 2023, 7:21 PM
ServerForge triaged T5162: Invalid json in configd-include.json as Normal priority.
Apr 14 2023, 7:17 PM
fernando changed the status of T5161: BFD Static Route Monitoring from Open to In progress.
Apr 14 2023, 5:31 PM · VyOS 1.4 Sagitta
fernando claimed T5161: BFD Static Route Monitoring.
Apr 14 2023, 5:31 PM · VyOS 1.4 Sagitta
fernando created T5161: BFD Static Route Monitoring.
Apr 14 2023, 5:31 PM · VyOS 1.4 Sagitta
n.fort changed the status of T5160: Firewall refactor from Open to In progress.
Apr 14 2023, 3:11 PM · VyOS 1.4 Sagitta
n.fort created T5160: Firewall refactor.
Apr 14 2023, 3:09 PM · VyOS 1.4 Sagitta
SrividyaA added a comment to T5159: DHCPv6-server leases op-command shows warning message even if configured.

submitted this PR: https://github.com/vyos/vyos-1x/pull/1958

Apr 14 2023, 12:18 PM · VyOS 1.4 Sagitta
SrividyaA claimed T5159: DHCPv6-server leases op-command shows warning message even if configured.
Apr 14 2023, 9:32 AM · VyOS 1.4 Sagitta
SrividyaA created T5159: DHCPv6-server leases op-command shows warning message even if configured.
Apr 14 2023, 9:32 AM · VyOS 1.4 Sagitta
HappyShr00m added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.
In T5157#147008, @sdev wrote:

Just to clarify, it changes again to pod-networkname in https://github.com/vyos/vyos-1x/commit/2a876059826927ef204e359a40395955f27503ce (next rolling image) to avoid name constraint issues.

Apr 14 2023, 8:26 AM
sarthurdev added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.

Just to clarify, it changes again to pod-networkname in https://github.com/vyos/vyos-1x/commit/2a876059826927ef204e359a40395955f27503ce (next rolling image) to avoid name constraint issues.

Apr 14 2023, 8:23 AM
HappyShr00m closed T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317 as Resolved.

It uses other names in the newest versions, not cni-xxx

Apr 14 2023, 8:20 AM
HappyShr00m added a comment to T5156: vyos unable to tell that it updated dynamic DNS on cloudflare correctly.

Provide your configuration
It is difficult to say without it

Apr 14 2023, 7:58 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Viacheslav added a comment to T5156: vyos unable to tell that it updated dynamic DNS on cloudflare correctly.

Provide your configuration
It is difficult to say without it

Apr 14 2023, 7:43 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Viacheslav added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.

It uses other names in the newest versions, not cni-xxx

Apr 14 2023, 7:41 AM
Unknown Object (User) added a comment to T5158: Refactoring the commad '$ sh interfaces counters'.

https://github.com/vyos/vyos-1x/pull/1956

Apr 14 2023, 5:23 AM
Unknown Object (User) renamed T5158: Refactoring the commad '$ sh interfaces counters' from Refactoring he commad '$ sh interfaces counters' to Refactoring the commad '$ sh interfaces counters'.
Apr 14 2023, 5:18 AM
Unknown Object (User) added a comment to T5158: Refactoring the commad '$ sh interfaces counters'.
#!/usr/bin/env python3
#
# Copyright (C) 2022 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
Apr 14 2023, 5:07 AM
Unknown Object (User) created T5158: Refactoring the commad '$ sh interfaces counters'.
Apr 14 2023, 5:05 AM

Apr 13 2023

HappyShr00m added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.
In T5157#146979, @sdev wrote:

Can you share container config section?

Apr 13 2023, 9:47 PM
sarthurdev added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.

Can you share container config section?

Apr 13 2023, 9:29 PM
HappyShr00m renamed T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317 from Containers are inaccessable on 1.4-rolling-202303270317 to Containers are inaccessable on vyos-1.4-rolling-202304070317.
Apr 13 2023, 9:25 PM
HappyShr00m created T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.
Apr 13 2023, 9:24 PM
HappyShr00m renamed T5156: vyos unable to tell that it updated dynamic DNS on cloudflare correctly from Dynamic DNS on cloudflare to vyos unable to tell that it updated dynamic DNS on cloudflare correctly.
Apr 13 2023, 9:21 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
HappyShr00m created T5156: vyos unable to tell that it updated dynamic DNS on cloudflare correctly.
Apr 13 2023, 9:20 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Arc771 added a comment to T5155: restart bgp daemon throws route-map error.

If I need to guess, it is just an issue that the BGP session gets configured before the route-maps

Apr 13 2023, 9:05 PM · VyOS 1.4 Sagitta
Arc771 added a comment to T5155: restart bgp daemon throws route-map error.

As I said, this happens with any config that includes route maps

Apr 13 2023, 9:03 PM · VyOS 1.4 Sagitta
jestabro changed the status of T2612: HTTPS API, changing API key fails but goes through from On hold to Open.

Self-configuration of the http-api calls a service restart from the config mode script: some re-configuration should be possible without restart; the remaining should provide an explanatory 'success' response. Move to high-priority to address.

Apr 13 2023, 8:33 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro edited projects for T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups, added: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Apr 13 2023, 8:32 PM · Restricted Project, Restricted Project, VyOS 1.3 Equuleus (1.3.9)
jestabro edited projects for T3980: vrrp transition-script validator makes warning fatal and also causes a python NameError exception, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Apr 13 2023, 7:57 PM · VyOS 1.3 Equuleus (1.3.6)
jestabro edited projects for T3022: Allow to provide custom TLS certificates for the HTTP virtual hosts, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).

This is available in Sagitta thanks to the PKI subsystem; backport depends on backport of that subsystem.

Apr 13 2023, 7:56 PM · VyOS 1.5 Circinus
fernando added a comment to T425: AWS CloudWatch monitoring scripts.

Thanks for clarifying. Yes , I also saw the possibility of extending role based IAM to add on-premise image (that could be interesting for VyOS).

Apr 13 2023, 7:35 PM · VyOS 1.3 Equuleus (1.3.3), AWS Support
fernando added a comment to T5155: restart bgp daemon throws route-map error.

Could you share configuration ? where attached RM and BGP settings:

Apr 13 2023, 7:16 PM · VyOS 1.4 Sagitta
jack9603301 added a comment to T4599: run vyos in lxc/lxd.

We can add guidelines about running vyos on LXC/LXD in the documentation

Apr 13 2023, 5:12 PM · Restricted Project, VyOS 1.5 Circinus
jack9603301 changed the status of T4599: run vyos in lxc/lxd from Open to In progress.

Must run in physical NIC pass-through mode
It is recommended to execute the container in privileged mode
This is currently only an initial implementation!

Apr 13 2023, 5:10 PM · Restricted Project, VyOS 1.5 Circinus