It was actually leaking routes.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 17 2023
Jul 17 2023
Viacheslav closed T2051: Throughput anomalies, a subtask of T3619: Performance Degradation 1.2 --> 1.3 | High ksoftirqd CPU usage, as Resolved.
Jul 16 2023
Jul 16 2023
syncer reassigned T1753: Configuring `ip source-validation loose` doesn't properly configure `sysctl` from Unknown Object (User) to Viacheslav.
syncer reassigned T1418: DHCP update record to microsoft dns from Unknown Object (User) to Viacheslav.
syncer reassigned T446: Flow accounting enhancements: pre/post NAT, ingress/egress from Unknown Object (User) to Viacheslav.
syncer reassigned T2045: Can't commit due to with the same name, but different firewall groups types from Unknown Object (User) to Viacheslav.
syncer reassigned T1417: IPv6 zone based firewall rules can't be modified from Unknown Object (User) to Viacheslav.
syncer reassigned T1620: Leases in "show dhcp server leases" lose Pool and Hostname after some time from Unknown Object (User) to Viacheslav.
syncer reassigned T1500: Slow boot/load and CLI response times from Unknown Object (User) to Viacheslav.
syncer reassigned T1810: Commit to add new l2tp local user shouldn't disconnect all current l2tp sessions from Unknown Object (User) to Viacheslav.
syncer reassigned T3159: L2TP MTU mismatch between client and server from Unknown Object (User) to Viacheslav.
syncer reassigned T3546: Add support for running scripts on PPPoE server session events from Unknown Object (User) to Viacheslav.
syncer reassigned T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict from Unknown Object (User) to Viacheslav.
syncer reassigned T4676: IPoE server with mac authentication generates a wrong dictionary from Unknown Object (User) to Viacheslav.
Unknown Object (User) added a comment to T5155: restart bgp daemon throws route-map error.
Looking at the FRR configuration vtysh -c "show run" I see the route-map - maybe it's just a display error? Or you actually leak routes?
Once we update to FRR 9.0 we can make use of this faeture
[ 4065.850013] ovpn_dco_v2: loading out-of-tree module taints kernel. [ 4065.852874] OpenVPN data channel offload (ovpn-dco) 0.2.20230426 -- (C) 2020-2023 OpenVPN, Inc
Jul 15 2023
Jul 15 2023
GitHub <noreply@github.com> committed rVYOSONEX9285b9a571ee: Merge pull request #2091 from jvoss/policy_bgp_communities (authored by c-po).
Jul 14 2023
Jul 14 2023
GitHub <noreply@github.com> committed rVYOSONEXd1ca536da448: T5195: vyos.util -> vyos.utils package refactoring (#2093) (authored by c-po).
n.fort changed the status of T5059: add 'disable' option to DHCP relay config from In progress to Needs testing.
darinkuo closed T5358: 99-ipsec-dhclient-hook prevents DHCP stateless routes from being installed in VRF table as Resolved.
Merged into vyos:current.
GitHub <noreply@github.com> committed rVYOSONEX36ce4167538d: Merge pull request #2089 from nicolas-fort/T5059 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX0a248d505607: Merge pull request #2090 from srividya0208/T5355 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX1ac0dab20647: Merge pull request #2092 from darinkuo/current (authored by c-po).
n.fort closed T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface as Resolved.
Marking this bug as resolved, since in last comment it shows that DNAT is working using multiple "WANs" connections
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .
Also, correct behavior when 1 interface is pppoe, and other dhcp-client:
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .
Test #1:
- Simple configuration with one interface pppoe and other static, WLB working as expected:
I see no errors on 1.4:
Jul 13 2023
Jul 13 2023
Jackwmtr updated the task description for T5356: DMVPN NHRP spoke stops sending resolution requests upon restart.
Jackwmtr updated the task description for T5356: DMVPN NHRP spoke stops sending resolution requests upon restart.
Very nice. I noticed show system updates and set system update-check in the CLI now. Will there be a URL available to start testing this, perhaps even via the most recent nightly rolling release?
n.fort changed the status of T5059: add 'disable' option to DHCP relay config from Open to In progress.
Viacheslav changed the status of T5355: IPSec: OP cmd : "show vpn ike sa" does not show output from Open to In progress.
Viacheslav changed the status of T3045: Changes to Conntrack-Sync don't apply correctly (Mutlicast->UDP), a subtask of T3076: Router reboot adds unwanted 'conntrack-sync mcast-group '225.0.0.50'' line to configuration, from Unknown Status to Resolved.
Viacheslav changed the status of T3045: Changes to Conntrack-Sync don't apply correctly (Mutlicast->UDP) from Unknown Status to Resolved.
Viacheslav edited projects for T5354: Add sshguard to protect against brut-forces for 1.3, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Viacheslav closed T2315: Ability to have right address-family for BGP peers., a subtask of T2174: Rewrite protocol BGP to new XML/Python style, as Resolved.
It possible with
set protocols bgp 65001 parameters default no-ipv4-unicast
Viacheslav moved T2315: Ability to have right address-family for BGP peers. from Open to Finished on the VyOS 1.4 Sagitta board.
I fixed this in https://github.com/vyos/vyos-1x/pull/995 but must not have updated this task to reflect that.
Jul 12 2023
Jul 12 2023
I can't test this at this time. I stopped using the platform
syncer moved T4652: Upgrade PowerDNS recursor to 4.7 series from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T109: VyOS Can Lose Parts Of Its Config On Reboot - In Certain Situations from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T1024: Policy Based Routing by DSCP from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T1928: Is the 'Welcome to VyOS' message when using SSH an information leak? from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T1518: Removing full OSPF protocol is not possible from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T2189: Adding a large port-range will take ~ 20 minutes to commit from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T3827: interfaces migration script fails on AWS hosts from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T2524: Restarting vyos-router.service breaks router from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.