Page MenuHomeVyOS Platform
Feed All Stories

Jul 21 2023

c-po committed rVYOSONEXe9153730c76f: login: T5363: keep home when user is deleted.
Jul 21 2023, 8:30 PM
n.fort changed the status of T5014: Destination NAT - Add Load Balancing capabilities from Open to In progress.
Jul 21 2023, 6:05 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5014: Destination NAT - Add Load Balancing capabilities.
vyos@nat-lb-july# run show config comm | grep nat
set nat destination rule 10 destination port '443'
set nat destination rule 10 inbound-interface 'eth3'
set nat destination rule 10 protocol 'tcp'
set nat destination rule 10 translation load-balance mode 'round-robin'
set nat destination rule 10 translation load-balance translation-address 1.1.1.1 hash-value '0'
set nat destination rule 10 translation load-balance translation-address 2.2.2.2 hash-value '1'
set nat destination rule 10 translation load-balance translation-address 3.3.3.3 hash-value '2'
set nat destination rule 10 translation load-balance upper-limit '3'
set nat destination rule 20 destination port '53'
set nat destination rule 20 inbound-interface 'eth3'
set nat destination rule 20 protocol 'udp'
set nat destination rule 20 translation load-balance mode 'random'
set nat destination rule 20 translation load-balance translation-address 1.1.1.1 hash-value '0-24'
set nat destination rule 20 translation load-balance translation-address 2.2.2.2 hash-value '25-49'
set nat destination rule 20 translation load-balance translation-address 3.3.3.3 hash-value '50-99'
set nat destination rule 20 translation load-balance upper-limit '100'
set system host-name 'nat-lb-july'
[edit]
Jul 21 2023, 6:05 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5374: Ability to set 24-hour time format.

Proposed syntax one of them

set system option time-format 12|24
set system option time-format 12-hour|24-hour
set system option time-format us|gb

Actually, it should configure:

sudo localectl set-locale LC_TIME="en_GB.UTF-8"
sudo localectl set-locale LC_TIME="en_US.UTF-8"
Jul 21 2023, 3:38 PM · VyOS 1.4 Sagitta
dex added a comment to T5386: Execute VRRP transition script when `set high-availability disable` is commited.

Hmm, fair enough. Maybe just executing the stop script and then committing set high-availability disable is enough for maintenance periods.
One general question though out of curiosity: What are the circumstances in which the stop script is executed in the first place?

Jul 21 2023, 3:00 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
zsdc added a comment to T4412: commit archive: reboot not working with sftp.

PR for 1.3: https://github.com/vyos/vyos-1x/pull/2106

Jul 21 2023, 2:58 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
jestabro closed T5385: reference_tree: catch parse error on non-transcluded files, a subtask of T5194: Add reference tree to vyos1x-config, as Resolved.
Jul 21 2023, 2:51 PM · VyOS 1.4 Sagitta
jestabro closed T5385: reference_tree: catch parse error on non-transcluded files as Resolved.
Jul 21 2023, 2:51 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5386: Execute VRRP transition script when `set high-availability disable` is commited.

Maybe it is the wrong way. I think it shouldn't touch anything in the disable state.

Jul 21 2023, 2:35 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
zsdc changed the status of T4412: commit archive: reboot not working with sftp from Open to In progress.

To reproduce the problem:

Jul 21 2023, 1:29 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a comment to T5368: FastNetmon service ids ddos-protection add support sflow mode.

PR https://github.com/vyos/vyos-1x/pull/2105

set system sflow interface 'eth0'
set system sflow interface 'eth1'
set system sflow server 127.0.0.1
Jul 21 2023, 11:02 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5368: FastNetmon service ids ddos-protection add support sflow mode from Open to In progress.
Jul 21 2023, 10:36 AM · VyOS 1.4 Sagitta
dex created T5386: Execute VRRP transition script when `set high-availability disable` is commited.
Jul 21 2023, 9:41 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
a.apostoliuk closed T5328: bgp: Incorrect warning showed for address-family configured with neighbor as interface as Resolved.
Jul 21 2023, 7:47 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5328: bgp: Incorrect warning showed for address-family configured with neighbor as interface from Open to Needs testing.
Jul 21 2023, 7:23 AM · VyOS 1.4 Sagitta
Viacheslav closed T5373: LLDP seems to be running even if its disabled on all interfaces as Resolved.
Jul 21 2023, 6:51 AM · VyOS 1.4 Sagitta
SrividyaA closed T5361: "monitor log" behaves like "show log" as Resolved.
Jul 21 2023, 5:53 AM · VyOS 1.4 Sagitta
jestabro added a comment to T5385: reference_tree: catch parse error on non-transcluded files.

PR:
https://github.com/vyos/vyos1x-config/pull/18

Jul 21 2023, 3:33 AM · VyOS 1.4 Sagitta
jestabro added a subtask for T5194: Add reference tree to vyos1x-config: T5385: reference_tree: catch parse error on non-transcluded files.
Jul 21 2023, 3:23 AM · VyOS 1.4 Sagitta
jestabro added a parent task for T5385: reference_tree: catch parse error on non-transcluded files: T5194: Add reference tree to vyos1x-config.
Jul 21 2023, 3:23 AM · VyOS 1.4 Sagitta
jestabro triaged T5385: reference_tree: catch parse error on non-transcluded files as Normal priority.
Jul 21 2023, 3:23 AM · VyOS 1.4 Sagitta

Jul 20 2023

ralph.bariz added a comment to T5380: VyOS Kubelet (k8s).
  1. I want to have something like minikube on my VyOS router joining my k8s with my services so data is replicated and I can "balance" the services to my home.
  2. Coming from my R&D journey of https://causal-rt.org I'm trying to further rethink a few things including social networking, one goal would be to get a communication service for "convergent/consent-forging human swarm interaction" https://dory-swarm.org onto the edge, rather than relying on central or semi-decentral services for relaying communication.
Jul 20 2023, 8:49 PM
c-po committed rVYOSONEX26af45a61bbe: smoketest: remove failfast=True on unittest startup.
Jul 20 2023, 8:15 PM
c-po committed rVYOSONEX13276967a8c7: vscode: identify j2 als Jinja.
Jul 20 2023, 8:15 PM
syncer added a comment to T5380: VyOS Kubelet (k8s).

That is challenging task :)
What is your goal?

Jul 20 2023, 8:09 PM
jestabro committed rVYOSONEX30b75192f2fb: config: T5228: add missing check of args.
Jul 20 2023, 7:45 PM
jestabro committed rVYOSONEXa30395067a20: xml: T5345: replace dropped shift, necessary for compatability of args.
Jul 20 2023, 7:45 PM
a.apostoliuk committed rVYOSONEX9ec62f6511ee: bgp: T5328: Fixed verifying peer without AFI..
Jul 20 2023, 7:19 PM
GitHub <[email protected]> committed rVYOSONEXdb32a1e45776: Merge pull request #2103 from aapostoliuk/T5328-sagitta (authored by c-po).
Jul 20 2023, 7:19 PM
c-po committed rVYOSONEX8160aa1f90d9: vscode: specify additional common settings for languag association and indention.
Jul 20 2023, 7:07 PM
Viacheslav changed the status of T5373: LLDP seems to be running even if its disabled on all interfaces from In progress to Needs testing.
Jul 20 2023, 3:00 PM · VyOS 1.4 Sagitta
ralph.bariz updated the task description for T5380: VyOS Kubelet (k8s).
Jul 20 2023, 2:57 PM
ralph.bariz updated the task description for T5383: Extend VyOS Configuration for initializing kubelet service.
Jul 20 2023, 2:52 PM
ralph.bariz updated the task description for T5381: Extend VyOS Configuration for joining kubelet service.
Jul 20 2023, 2:47 PM
ralph.bariz updated the task description for T5381: Extend VyOS Configuration for joining kubelet service.
Jul 20 2023, 2:46 PM
ralph.bariz updated the task description for T5380: VyOS Kubelet (k8s).
Jul 20 2023, 2:45 PM
ralph.bariz created T5384: Integrate proper CNI integrating or at least not conflicting with VyOS.
Jul 20 2023, 2:44 PM
ralph.bariz updated the task description for T5381: Extend VyOS Configuration for joining kubelet service.
Jul 20 2023, 2:33 PM
ralph.bariz updated the task description for T5383: Extend VyOS Configuration for initializing kubelet service.
Jul 20 2023, 2:32 PM
ralph.bariz created T5383: Extend VyOS Configuration for initializing kubelet service.
Jul 20 2023, 2:31 PM
ralph.bariz renamed T5381: Extend VyOS Configuration for joining kubelet service from Extend VyOS Configuration for kubelet service to Extend VyOS Configuration for joining kubelet service.
Jul 20 2023, 2:26 PM
ralph.bariz renamed T5381: Extend VyOS Configuration for joining kubelet service from Extend VyOS Configuration to Extend VyOS Configuration for kubelet service.
Jul 20 2023, 2:18 PM
ralph.bariz created T5382: Integrate kubeadm and kubectl.
Jul 20 2023, 2:17 PM
ralph.bariz created T5381: Extend VyOS Configuration for joining kubelet service.
Jul 20 2023, 2:15 PM
ralph.bariz claimed T5380: VyOS Kubelet (k8s).
Jul 20 2023, 1:48 PM
ralph.bariz created T5380: VyOS Kubelet (k8s).
Jul 20 2023, 1:47 PM
JeffWDH added a comment to T1237: Static Route Path Monitoring, failover.
Jul 20 2023, 12:34 PM · VyOS 1.4 Sagitta
SrividyaA closed T5355: IPSec: OP cmd : "show vpn ike sa" does not show output as Resolved.
Jul 20 2023, 11:42 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5369: System login timeout doesnt work as expected.

I think this feature must then be modified with:

Jul 20 2023, 11:28 AM · VyOS Rolling, Restricted Project
troggie added a comment to T5364: Make it possible to set the PADO delay to 0.

no it's the PPPOE server configuration

Jul 20 2023, 11:04 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T5369: System login timeout doesnt work as expected.

Actualy is just exports TMOUT option per login

Jul 20 2023, 10:49 AM · VyOS Rolling, Restricted Project
n.fort moved T1297: Add GARP settings to VRRP/keepalived from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Jul 20 2023, 10:41 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
Viacheslav added a comment to T5364: Make it possible to set the PADO delay to 0.

I'm wondering about the syntax
Will it be enough?

set service pppoe-server pado-delay 0

I think we should include the sessions incase there multiple PPPOE services and people want to spread the load across multiple devices?
Or maybe an option to allow without sessions as well as allow with sessions - make the system versatile ?

Jul 20 2023, 10:39 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa3)
SrividyaA closed T4288: IPsec tunnel will break when ESP timeout as Resolved.
Jul 20 2023, 10:39 AM · VyOS 1.4 Sagitta
SrividyaA added a comment to T4288: IPsec tunnel will break when ESP timeout.

Tested in the latest rolling release with both ipsec configured as tunnel and transport mode . As suggested in the above comment, with the correct close-action setting configured in both the initiator and responder side, then no duplicate child_sa are noticed.

Jul 20 2023, 10:39 AM · VyOS 1.4 Sagitta
n.fort closed T4497: ping cannot force ipv4 or ipv6 as Resolved.
Jul 20 2023, 10:38 AM · VyOS 1.4 Sagitta
troggie added a comment to T5364: Make it possible to set the PADO delay to 0.

I'm wondering about the syntax
Will it be enough?

set service pppoe-server pado-delay 0
Jul 20 2023, 10:25 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T5364: Make it possible to set the PADO delay to 0.

I'm wondering about the syntax
Will it be enough?

set service pppoe-server pado-delay 0
Jul 20 2023, 10:20 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T5373: LLDP seems to be running even if its disabled on all interfaces.

Will be fixed in the next rolling release.

Jul 20 2023, 9:09 AM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX987cf1a0d62a: T5373: LLDP is running even with disable option bug.
Jul 20 2023, 9:07 AM
GitHub <[email protected]> committed rVYOSONEX6b46a7466302: Merge pull request #2102 from sever-sever/T5373 (authored by c-po).
Jul 20 2023, 9:07 AM
Viacheslav added a comment to T5373: LLDP seems to be running even if its disabled on all interfaces.

PR https://github.com/vyos/vyos-1x/pull/2102

Jul 20 2023, 9:04 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5363: Bash history file does not exists after reboot and ony other file in home directory.

Oh ok.

Jul 20 2023, 8:43 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5373: LLDP seems to be running even if its disabled on all interfaces from Open to In progress.
Jul 20 2023, 8:42 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5363: Bash history file does not exists after reboot and ony other file in home directory.

I think this should be configured through a config option if bash-history should be retained or not (by default it shouldnt for regular users and equal to root).

It can for security reasons be argued that history should only exist in current session but when user logs out it should be removed.

This way in a multiuser environment one user cannot steal potential sensitive data from another user.

If security logging (what a particular user have done to the system when logged in) is needed this should be done remotely through syslog or similar.

Jul 20 2023, 8:40 AM · VyOS 1.4 Sagitta
vishvas added a comment to T5363: Bash history file does not exists after reboot and ony other file in home directory.

Dear Viacheslav
Can I get compiled binary suitable for dell VEP4600 wich will retain the bash history.

Jul 20 2023, 8:32 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5379: show system updates doesnt seem to be working.

I can confirm by removing the incorrect update-check url like so:

Jul 20 2023, 8:11 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5379: show system updates doesnt seem to be working.

Ooh, I thought update-check should point to the iso-file like so:

Jul 20 2023, 8:08 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5373: LLDP seems to be running even if its disabled on all interfaces.

Something wrong with this template https://github.com/vyos/vyos-1x/blob/d2540ac4c6fc05991b18cf0e2434fbb6d5f3c2cf/data/templates/lldp/vyos.conf.j2#L7

Jul 20 2023, 8:07 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5374: Ability to set 24-hour time format.

It should be configurable as an option but not by default.

Jul 20 2023, 7:58 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5379: show system updates doesnt seem to be working.

It is not fully implemented.
You have to set the URL to a JSON file with System versions, which not exists for now (there is no permanent URL for it), so it will be in the future developments.

Jul 20 2023, 7:36 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5378: Request for clearing single entry multicast route.

FRR does not support it
Allows only full multicast table

r11# clear ip 
...
  mroute       IP multicast routing table
Jul 20 2023, 7:27 AM · VyOS Rolling
Viacheslav edited projects for T5378: Request for clearing single entry multicast route, added: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3), VyOS 1.2 Crux.
Jul 20 2023, 7:23 AM · VyOS Rolling
Apachez added a comment to T1467: Loopback interface naming and dummy devices.

Just want to jump onto the train and say that I too like the proposal of having "lo" as the main linux kernel loopback and loN as the networking loopback who is VRF-aware aswell.

Jul 20 2023, 7:22 AM
Apachez created T5379: show system updates doesnt seem to be working.
Jul 20 2023, 7:16 AM · VyOS 1.4 Sagitta
a.apostoliuk closed T5362: `set high-availability vrrp global-parameters version 3` seems to have no effect as Resolved.
Jul 20 2023, 7:06 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5363: Bash history file does not exists after reboot and ony other file in home directory.

https://github.com/vyos/vyos-1x/blob/d2540ac4c6fc05991b18cf0e2434fbb6d5f3c2cf/src/init/vyos-router#L327
https://github.com/vyos/vyos-1x/blob/d2540ac4c6fc05991b18cf0e2434fbb6d5f3c2cf/src/conf_mode/system-login.py#L392-L393

Jul 20 2023, 6:50 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5362: `set high-availability vrrp global-parameters version 3` seems to have no effect from In progress to Needs testing.
Jul 20 2023, 6:49 AM · VyOS 1.4 Sagitta
aso_flow created T5378: Request for clearing single entry multicast route.
Jul 20 2023, 6:46 AM · VyOS Rolling
c-po changed Version from - to 1.4-rolling on T5377: ospf: add graceful restart FRR feature (RFC 3623).
Jul 20 2023, 6:04 AM · VyOS 1.4 Sagitta
c-po updated the task description for T5377: ospf: add graceful restart FRR feature (RFC 3623).
Jul 20 2023, 6:04 AM · VyOS 1.4 Sagitta
c-po renamed T5377: ospf: add graceful restart FRR feature (RFC 3623) from ospf: add graceful restart FRR feature to ospf: add graceful restart FRR feature (RFC 3623).
Jul 20 2023, 6:03 AM · VyOS 1.4 Sagitta
c-po claimed T5377: ospf: add graceful restart FRR feature (RFC 3623).
Jul 20 2023, 6:02 AM · VyOS 1.4 Sagitta
c-po created T5377: ospf: add graceful restart FRR feature (RFC 3623).
Jul 20 2023, 6:02 AM · VyOS 1.4 Sagitta
jestabro closed T5330: Keep track of source of config dict value when merging defaults, a subtask of T5228: Simplify get_config_dict and add argument with_defaults, as Resolved.
Jul 20 2023, 2:28 AM · VyOS 1.4 Sagitta
jestabro closed T5330: Keep track of source of config dict value when merging defaults as Resolved.
Jul 20 2023, 2:28 AM · VyOS 1.4 Sagitta

Jul 19 2023

Apachez added a comment to T5311: Connection issues packet loss, network down with Intel I225-V and I226.

I have experienced this myself several years ago where "Green Ethernet" aka "Energy-Efficient Ethernet mode" was the cause that HPE Comware switches/routers had issues with cable based Apple devices.

Jul 19 2023, 8:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
svd135 created T5376: Conntrack FTP helper does not work properly.
Jul 19 2023, 7:37 PM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus
Apachez created T5375: It should be possible to set multiple advertised speed/duplex with autoneg on through config.
Jul 19 2023, 7:05 PM · VyOS Rolling
a.apostoliuk committed rVYOSONEX00ce5e2b81d9: high-availability: T5362: Fixed setting vrrp version.
Jul 19 2023, 6:58 PM
GitHub <[email protected]> committed rVYOSONEXd2540ac4c6fc: Merge pull request #2099 from aapostoliuk/T5362-sagitta (authored by c-po).
Jul 19 2023, 6:58 PM
n.fort added a comment to T5371: "system name-server" is not vrf aware.

This could be considred as duplicate task for: https://vyos.dev/T5116

Jul 19 2023, 6:23 PM · VyOS Rolling, Restricted Project
n.fort closed T5370: Improve example of how to use post-login with multilines as Invalid.
Jul 19 2023, 6:21 PM · VyOS 1.4 Sagitta
fernando changed the status of T4974: OpenVPN- Data Channel Offload(DCO) from Open to Needs testing.
Jul 19 2023, 6:20 PM · VyOS 1.4 Sagitta
fernando added a comment to T4974: OpenVPN- Data Channel Offload(DCO).

@c-po thanks for compiled the kernel module and @spion06 for your contribution script , now we've DCO rolling releases starting on 1.4-rolling-202307190317

Jul 19 2023, 6:20 PM · VyOS 1.4 Sagitta
n.fort closed T5372: Configuring listen-address for service snmp will result in a warning during commit as Invalid.
Jul 19 2023, 6:15 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5370: Improve example of how to use post-login with multilines.

Changes on documentation don't need a task here.

Jul 19 2023, 6:12 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5372: Configuring listen-address for service snmp will result in a warning during commit.

Already fixed:
https://vyos.dev/T5340

Jul 19 2023, 6:09 PM · VyOS 1.4 Sagitta
Apachez created T5374: Ability to set 24-hour time format.
Jul 19 2023, 6:06 PM · VyOS 1.4 Sagitta
Apachez created T5373: LLDP seems to be running even if its disabled on all interfaces.
Jul 19 2023, 6:05 PM · VyOS 1.4 Sagitta