Page MenuHomeVyOS Platform
Feed Search

May 12 2023

Viacheslav renamed T5222: Add load-balancing reverse-proxy based on haproxy from Add loadbalancing based on haproxy to Add load-balancing based on haproxy .
May 12 2023, 1:30 PM · VyOS 1.4 Sagitta
Viacheslav created T5222: Add load-balancing reverse-proxy based on haproxy .
May 12 2023, 1:30 PM · VyOS 1.4 Sagitta

May 11 2023

Viacheslav committed rVYOSONEX163ad47c7906: T5171: Set default value icmp for load-balancing test check.
May 11 2023, 7:16 PM
Viacheslav edited projects for T5219: ddclient: Cloudflare doesn't require login, added: VyOS 1.4 Sagitta; removed ddclient.
May 11 2023, 1:46 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5217: Add firewall SYNPROXY .
May 11 2023, 12:48 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5186: QoS test cannot pass for 1.3.

@c-po I guess it should be v5.4.234

May 11 2023, 12:16 PM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav added a comment to T4362: Wan Load Balancing - Can't create routing tables.

one issue.
the migration scripts don't take into account older load balancing configs.

if the test > rule > type > ping isn't explicitly set then the rule defaults to the next hop address and ignores the rule entirely.
the default rule seems to be the next hop address for the interface.

May 11 2023, 10:56 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates.

set default check type ping https://github.com/vyos/vyos-1x/pull/1998

May 11 2023, 10:55 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5213: Accel-ppp sending accounting interim updates acct-interim-interval option from In progress to Needs testing.
May 11 2023, 6:45 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav added a comment to T3829: Support separated TCP/IP stack via "ip netns".

Veth is not ready to work together with netns
As Interface moves entirely to logical stack and with the next commit will be recreated and try to move to netns again. As it doesn't see veth interface which moved to another logical stack, it tryes to recreate this interface.
We should either fix it or revert the previous commit.

May 11 2023, 3:46 AM · VyOS Rolling

May 10 2023

Viacheslav committed rVYOSONEX153f3579d703: T5213: Add accounting-interim-interval option for L2TP-server.
May 10 2023, 7:13 PM
Viacheslav committed rVYOSONEX98c310462ded: T5213: Add accounting-interim-interval option for PPTP-server.
May 10 2023, 7:12 PM
Viacheslav committed rVYOSONEX3c2a206e733c: T5217: Add smoketest for CONFIG_NFT_SYNPROXY kernel option.
May 10 2023, 7:11 PM
Viacheslav updated the task description for T5217: Add firewall SYNPROXY .
May 10 2023, 2:29 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5217: Add firewall SYNPROXY .

Add kernel module https://github.com/vyos/vyos-build/pull/348

May 10 2023, 1:05 PM · VyOS 1.4 Sagitta
Viacheslav created T5217: Add firewall SYNPROXY .
May 10 2023, 11:45 AM · VyOS 1.4 Sagitta
Viacheslav closed T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status as Resolved.
May 10 2023, 9:51 AM · VyOS 1.4 Sagitta
Viacheslav closed T5060: add a VRRP 'maintenance mode' as Resolved.
May 10 2023, 9:48 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.

PR for L2TP https://github.com/vyos/vyos-1x/pull/1988

May 10 2023, 9:39 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav closed T5065: Mixing `destination port xxx` and `destination group port-group yyy` in firewall rules doesn't work, but can be commited as Resolved.
May 10 2023, 8:10 AM · VyOS 1.4 Sagitta
Viacheslav created T5216: Add encrypting syslog traffic with TLS (SSL).
May 10 2023, 7:29 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5144: Modernize dynamic dns operation from Open to Needs testing.
May 10 2023, 7:20 AM · VyOS 1.4 Sagitta

May 9 2023

Viacheslav committed rVYOSONEXe201454f073c: T5060: Add disable option for high-availability.
May 9 2023, 5:25 PM
Viacheslav committed rVYOSONEX718d11daa2bd: T5213: Add accounting-interim-interval option for PPPoE IPoE SSTP.
May 9 2023, 5:24 PM
Viacheslav committed rVYOSONEX7c23983ba121: T5213: Add smoketest for pppoe-server accounting-interim-interval.
May 9 2023, 5:24 PM
Viacheslav committed rVYOSONEXac0fedb7ac24: T5214: Fix warning if a named pool is defined for PPPoE-server.
May 9 2023, 5:24 PM
Viacheslav changed the status of T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status from Open to In progress.

PR https://github.com/vyos/vyatta-wanloadbalance/pull/18

May 9 2023, 2:49 PM · VyOS 1.4 Sagitta
Viacheslav closed T5202: After removal load-balancing a pid remained which used in dhclient-exit-hooks as Resolved.

Fixed with rewriting to systemd unit vyos-wan-load-balance.service

May 9 2023, 2:29 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.

@Viacheslav Thanks for the prompt response. Not sure if the change will also cover L2TP as well. For example:

set vpn l2tp remote-access authentication radius accounting-interim-interval '60'
May 9 2023, 2:19 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav reopened T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Needs testing.
May 9 2023, 2:05 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav reopened T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init as "Needs testing".

Sometimes it stuck for ~1.5 minutes after deleting.

vyos@r14# delete load-balancing 
[edit]
vyos@r14# commit
May 9 2023, 2:05 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5214: PPPoE-server incorrect warning if a named pool is defined.

PR https://github.com/vyos/vyos-1x/pull/1986

May 9 2023, 12:40 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.

PR https://github.com/vyos/vyos-1x/pull/1986

set service pppoe-server authentication mode 'radius'
set service pppoe-server authentication radius accounting-interim-interval '60'
set service pppoe-server authentication radius server 203.0.113.1 key '123'
set service pppoe-server client-ip-pool name POOL-01 gateway-address '192.0.2.1'
set service pppoe-server client-ip-pool name POOL-01 subnet '192.0.2.0/24'
set service pppoe-server interface eth1
May 9 2023, 12:39 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav changed the status of T5214: PPPoE-server incorrect warning if a named pool is defined from Open to In progress.
May 9 2023, 10:36 AM · VyOS 1.4 Sagitta
Viacheslav created T5214: PPPoE-server incorrect warning if a named pool is defined.
May 9 2023, 10:36 AM · VyOS 1.4 Sagitta
Viacheslav renamed T5213: Accel-ppp sending accounting interim updates acct-interim-interval option from Sending accounting interim updates to Accel-ppp sending accounting interim updates acct-interim-interval option.
May 9 2023, 9:28 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav changed the status of T5213: Accel-ppp sending accounting interim updates acct-interim-interval option from Open to In progress.
May 9 2023, 9:28 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav added a comment to T5186: QoS test cannot pass for 1.3.

this is cause by

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.4.235&id=7a6fb69bbcb21e9ce13bdf18c008c268874f0480

tcindex classifier is removed by upstream kernel, so

08:04:48 DEBUG - filter add dev eth1 parent 11: protocol ip prio 1 handle 128 tcindex classid 11:a

fails.

May 9 2023, 9:01 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav added a comment to T5211: route-map allows both IPv4 and IPv6 in one rule which never match.

We use FRR as the backend and it uses logical AND for match entries

May 9 2023, 7:11 AM

May 8 2023

Viacheslav created T5210: IPSec cosmetic bug for Warning vti inrerface.
May 8 2023, 12:56 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5060: add a VRRP 'maintenance mode'.

PR https://github.com/vyos/vyos-1x/pull/1984

set high-availability disable
set high-availability vrrp group GRP01 address 192.0.2.47/32
set high-availability vrrp group GRP01 interface 'eth1'
set high-availability vrrp group GRP01 vrid '10'
May 8 2023, 11:47 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5060: add a VRRP 'maintenance mode' from Open to In progress.
May 8 2023, 11:41 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5048: QoS doesn't work correctly root task.

It doesn't like protocol tcp

vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol tcp 0xff action police rate 300000000 burst 15k flowid 1:a
Illegal "match"
[edit]
vyos@r14#

But it works with protocol 6

vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol 6 0xff action police rate 300000000 burst 15k flowid 1:a
[edit]
vyos@r14#

And next fail:

ardware UUID:    4d6f4d29-1ae8-446f-8d2b-3decd9da64c7
May 8 2023, 10:34 AM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status.
May 8 2023, 9:55 AM · VyOS 1.4 Sagitta
Viacheslav created T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status.
May 8 2023, 9:52 AM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5202: After removal load-balancing a pid remained which used in dhclient-exit-hooks.
May 8 2023, 9:39 AM · VyOS 1.4 Sagitta
Viacheslav created T5208: Failed to start nvmf-autoconnect.service during the boot.
May 8 2023, 9:29 AM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T5207: Improper NAT66 Support from "Task" to "Feature Request".
May 8 2023, 8:12 AM · VyOS Rolling
Viacheslav closed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
May 8 2023, 7:59 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav closed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init as Resolved.
May 8 2023, 7:59 AM · VyOS 1.4 Sagitta

May 7 2023

Viacheslav changed the subtype of T5053: Vyatta-cfg Post-Removal Hook Tries to Disable Deleted Service from "Task" to "Bug".
May 7 2023, 10:53 PM · VyOS 1.4 Sagitta

May 6 2023

Viacheslav committed rVYOSONEXee025e34241a: T5203: Add systemd vyos-wan-load-balance.service.
May 6 2023, 1:06 PM
Viacheslav committed rVYOSONEX454fcea2a3a0: T5203: Use vyos-wan-load-balance.service for load-balancing.
May 6 2023, 1:06 PM

May 5 2023

Viacheslav added a comment to T2754: PBR doesn't work with VRRP.

It should work for 1.4

set policy route foo interface eth1v1
May 5 2023, 2:22 PM · VyOS 1.3 Equuleus (1.3.6)
Viacheslav added a comment to T5205: Rewrite load-balancing op-mode to vyos.opmode format.

Load-balancing op-mode output generated by https://github.com/vyos/vyatta-wanloadbalance/blob/current/src/lboutput.cc

May 5 2023, 1:17 PM · VyOS Rolling
Viacheslav created T5205: Rewrite load-balancing op-mode to vyos.opmode format.
May 5 2023, 12:26 PM · VyOS Rolling
Viacheslav added a comment to T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init.

PR https://github.com/vyos/vyos-1x/pull/1980
PR https://github.com/vyos/vyos-build/pull/347

May 5 2023, 11:42 AM · VyOS 1.4 Sagitta
Viacheslav renamed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Add systemd unit instead of old vyatta-wanloadbalance.init to load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init.
May 5 2023, 10:13 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to In progress.
May 5 2023, 10:11 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Open to In progress.
May 5 2023, 10:11 AM · VyOS 1.4 Sagitta
Viacheslav created T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init.
May 5 2023, 10:11 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from In progress to Needs testing.
May 5 2023, 8:09 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from In progress to Needs testing.
May 5 2023, 8:09 AM · VyOS 1.4 Sagitta

May 4 2023

Viacheslav committed rVYOSONEXeac5dc2b1f7b: T5171: Rewrite load-balancing wan to XML and python3.
May 4 2023, 1:33 PM
Viacheslav created T5202: After removal load-balancing a pid remained which used in dhclient-exit-hooks.
May 4 2023, 1:08 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5200: Static routing tables are not created with dhcp route.
May 4 2023, 10:36 AM · Invalid
Viacheslav added projects to T2934: proxy-arp-pvlan on VRRP interface: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3).
May 4 2023, 10:30 AM · Restricted Project, VyOS Rolling
Viacheslav added a comment to T5200: Static routing tables are not created with dhcp route.

Works in my test

set protocols static table 200 route 192.0.2.35/32 dhcp-interface 'eth4'

Show ip route

vyos@vyos2:~$ vtysh -c "show ip route table 200"
Codes: K - kernel route, C - connected, S - static, R - RIP,
       O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
       T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
       f - OpenFabric,
       > - selected route, * - FIB route, q - queued, r - rejected, b - backup
       t - trapped, o - offload failure
May 4 2023, 9:40 AM · Invalid

May 3 2023

Viacheslav created T5199: Salt-minion cannot connect to server in python 3.10 and up.
May 3 2023, 3:29 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5197: Conntrack-sync external cache commit error.

https://git.netfilter.org/conntrack-tools/tree/src/sync-mode.c#n620

May 3 2023, 2:48 PM · VyOS 1.4 Sagitta
Viacheslav created T5198: Firewall global settings no showing.
May 3 2023, 1:09 PM · VyOS 1.4 Sagitta
Viacheslav created T5197: Conntrack-sync external cache commit error.
May 3 2023, 11:37 AM · VyOS 1.4 Sagitta
Viacheslav closed T5163: Policy route-map add match source-protocol as Resolved.
May 3 2023, 10:29 AM · VyOS 1.4 Sagitta

May 2 2023

Viacheslav committed rVYOSONEX33810487a8ea: T5163: Add match protocol filter for route-map.
May 2 2023, 4:43 PM
Viacheslav added a comment to T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP.

VPP 23.02 failing on Debian 12 (bookworm) https://jira.fd.io/browse/VPP-2075

May 2 2023, 4:25 PM
Viacheslav added a comment to T5163: Policy route-map add match source-protocol.

PR https://github.com/vyos/vyos-1x/pull/1975

set policy route-map foo rule 10 action 'permit'
set policy route-map foo rule 10 match protocol 'connected'
set policy route-map foo rule 20 action 'permit'
set policy route-map foo rule 20 match protocol 'bgp'
May 2 2023, 3:14 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5163: Policy route-map add match source-protocol from Open to In progress.
May 2 2023, 11:17 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4470: Rewrite load-balancing wan to XML/Python.

PR https://github.com/vyos/vyos-1x/pull/1973

May 2 2023, 10:47 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Apr 29 2023

Viacheslav moved T4971: Radius attribute "Framed-Pool" for PPPoE from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Apr 29 2023, 9:59 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a project to T4971: Radius attribute "Framed-Pool" for PPPoE: VyOS 1.3 Equuleus (1.3.3).
Apr 29 2023, 9:59 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Apr 28 2023

Viacheslav added a comment to T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates.

PR https://github.com/vyos/vyos-1x/pull/1973
PR https://github.com/vyos/vyatta-wanloadbalance/pull/17

Apr 28 2023, 10:48 AM · VyOS 1.4 Sagitta

Apr 27 2023

Viacheslav closed T5181: Wrong dependencies or priorities for zebra vni vrf interfaces and bgpd as Resolved.
Apr 27 2023, 6:45 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX9d7c9af77992: T5181: Fix condition to detect correct vrf name for vrf-vni.
Apr 27 2023, 4:17 PM
Viacheslav edited projects for T5188: Update Intel igc driver for improved 2.5 GbE support, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Apr 27 2023, 4:15 PM · VyOS 1.3 Equuleus (1.3.8)
Viacheslav closed T5183: IPv6 route6 problem as Resolved.
Apr 27 2023, 4:14 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5181: Wrong dependencies or priorities for zebra vni vrf interfaces and bgpd.

PR https://github.com/vyos/vyos-1x/pull/1972

Apr 27 2023, 4:12 PM · VyOS 1.4 Sagitta
Viacheslav reopened T5181: Wrong dependencies or priorities for zebra vni vrf interfaces and bgpd as "Needs testing".
Apr 27 2023, 9:53 AM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5186: QoS test cannot pass for 1.3.
Apr 27 2023, 8:10 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav triaged T5186: QoS test cannot pass for 1.3 as High priority.
Apr 27 2023, 8:00 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav edited projects for T5186: QoS test cannot pass for 1.3, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.4 Sagitta.
Apr 27 2023, 7:59 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav updated the task description for T5186: QoS test cannot pass for 1.3.
Apr 27 2023, 7:58 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav created T5186: QoS test cannot pass for 1.3.
Apr 27 2023, 7:56 AM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav added a comment to T5116: Better VRF support.

I think the only solution is to use network namespaces
https://docs.strongswan.org/docs/5.9/howtos/nameSpaces.html

Apr 27 2023, 7:37 AM · VyOS Rolling

Apr 26 2023

Viacheslav added a comment to T5184: Unable to display L2TP sessions l2tp-server sessions.

Do you have users/passwords with specsymbols or not utf-8 or some ascii symbols?

Apr 26 2023, 3:43 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5185: Static IPv6 route with blackhole fails.
Apr 26 2023, 3:40 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5185: Static IPv6 route with blackhole fails.
Apr 26 2023, 3:40 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5185: Static IPv6 route with blackhole fails.
Apr 26 2023, 3:36 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T5185: Static IPv6 route with blackhole fails.
Apr 26 2023, 3:36 PM · VyOS 1.4 Sagitta
Viacheslav created T5185: Static IPv6 route with blackhole fails.
Apr 26 2023, 3:34 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5184: Unable to display L2TP sessions l2tp-server sessions.

Could you provide l2tp configuration? show conf com | match l2tp
I cannot reproduce it

vyos@r14:~$ 
vyos@r14:~$ show l2tp-server sessions 
 ifname | username |      ip      | ip6 | ip6-dp |  calling-sid  | rate-limit | state  |  uptime  | rx-bytes | tx-bytes 
--------+----------+--------------+-----+--------+---------------+------------+--------+----------+----------+----------
 l2tp0  | alice    | 100.64.203.0 |     |        | 192.168.122.1 |            | active | 00:00:10 | 246 B    | 208 B
vyos@r14:~$ 
vyos@r14:~$ 
vyos@r14:~$ show version 
Version:          VyOS 1.4-rolling-202304261027
Release train:    current
Apr 26 2023, 1:41 PM · VyOS 1.4 Sagitta