Page MenuHomeVyOS Platform
Feed Search

Sep 17 2023

Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Proposed data/templates/frr/daemons.frr.tmpl:

Sep 17 2023, 6:00 AM · VyOS 1.5 Circinus
Apachez created T5591: Cleanup of FRR daemons-file and various FRR fixes.
Sep 17 2023, 5:58 AM · VyOS 1.5 Circinus

Sep 16 2023

rayzilt created T5590: Firewall "log enable" logs every packet.
Sep 16 2023, 5:41 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev changed the status of T5571: Firewall does not delete networks from the table raw from Confirmed to Needs testing.

Fixed in PR: https://github.com/vyos/vyos-1x/pull/2276

Sep 16 2023, 11:45 AM · VyOS 1.5 Circinus
Apachez created T5589: Nonstripped binaries exists in VyOS.
Sep 16 2023, 11:04 AM · VyOS 1.5 Circinus

Sep 15 2023

c-po closed T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) as Resolved.
Sep 15 2023, 6:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from In Progress to Finished on the VyOS 1.4 Sagitta board.
Sep 15 2023, 6:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
Apachez added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

How does FRR/vrrpd work regarding SNMP compatability?

Sep 15 2023, 4:55 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav moved T5586: Disable by default SNMP for Keepalived VRRP from Open to Finished on the VyOS 1.5 Circinus board.
Sep 15 2023, 4:24 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T5587: Firwall can not pass the smoketest as Resolved.

Fixed

Sep 15 2023, 4:23 PM · VyOS 1.5 Circinus
Viacheslav created T5588: Add kernel conntrack_bridge module.
Sep 15 2023, 2:48 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T5587: Firwall can not pass the smoketest.
Sep 15 2023, 8:48 AM · VyOS 1.5 Circinus
sarthurdev moved T5568: Install image from live ISO always defaults boot to KVM entry from Open to In Progress on the VyOS 1.4 Sagitta board.
Sep 15 2023, 8:18 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T5587: Firwall can not pass the smoketest.

https://github.com/vyos/vyos-1x/pull/2272 should fix this

Sep 15 2023, 8:00 AM · VyOS 1.5 Circinus
Viacheslav created T5587: Firwall can not pass the smoketest.
Sep 15 2023, 7:58 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5586: Disable by default SNMP for Keepalived VRRP from Open to In progress.
Sep 15 2023, 7:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

PR https://github.com/vyos/vyos-1x/pull/2273

Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added projects to T5586: Disable by default SNMP for Keepalived VRRP: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.5).
Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav renamed T5586: Disable by default SNMP for Keepalived VRRP from Disable be default SNMP for Keepalived VRRP to Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 7:34 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav created T5586: Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 6:46 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5579: Log firewall - Wrong command after firewall refactor from In progress to Needs testing.
Sep 15 2023, 6:31 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5574: Support per-service cache management for dynamic dns providers from Open to Needs testing.
Sep 15 2023, 6:30 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5585: Fix file access mode for dynamic dns configuration from Open to Needs testing.
Sep 15 2023, 6:29 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr claimed T5585: Fix file access mode for dynamic dns configuration.
Sep 15 2023, 3:53 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr created T5585: Fix file access mode for dynamic dns configuration.
Sep 15 2023, 3:52 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr updated the task description for T5574: Support per-service cache management for dynamic dns providers.
Sep 15 2023, 3:51 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr renamed T5574: Support per-service cache management for dynamic dns providers from Inprove and refactor dns dynamic service configuration to Support per-service cache management for dynamic dns providers.
Sep 15 2023, 3:49 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 14 2023

n.fort changed the status of T5579: Log firewall - Wrong command after firewall refactor from Confirmed to In progress.

PR: https://github.com/vyos/vyos-1x/pull/2268

Sep 14 2023, 6:45 PM · VyOS 1.5 Circinus
I-n-d-y added a project to T5425: enable VRF for conntrack-sync: VyOS 1.5 Circinus.
Sep 14 2023, 5:51 PM · VyOS Rolling
vfreex added a comment to T3655: NAT doesn't work correctly with VRF.

@fernando This is really nice. Thank you for the testing!

Sep 14 2023, 7:02 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Sep 13 2023

Apachez added a comment to T5575: ARP/NDP table-size isnt set properly.

PR updated: https://github.com/vyos/vyos-1x/pull/2255

Sep 13 2023, 7:14 PM · VyOS 1.5 Circinus
c-po added a comment to T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table).

PR https://github.com/vyos/vyos-1x/pull/2257

Sep 13 2023, 4:58 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to Finished on the VyOS 1.5 Circinus board.
Sep 13 2023, 4:58 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Backlog to In Progress on the VyOS 1.4 Sagitta board.
Sep 13 2023, 4:58 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to Backlog on the VyOS 1.4 Sagitta board.
Sep 13 2023, 4:58 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po changed the status of T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to In progress.
Sep 13 2023, 4:55 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
c-po created T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table).
Sep 13 2023, 4:54 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.0-GA)
fernando added a comment to T4919: TPM-backed config encryption.

@sdev greats !!!

Sep 13 2023, 4:39 PM · VyOS Rolling, VyOS 1.5 Circinus
n.fort added a parent task for T5579: Log firewall - Wrong command after firewall refactor: T5160: Firewall refactor.
Sep 13 2023, 3:07 PM · VyOS 1.5 Circinus
n.fort changed the status of T5579: Log firewall - Wrong command after firewall refactor from Open to Confirmed.
Sep 13 2023, 3:07 PM · VyOS 1.5 Circinus
n.fort created T5579: Log firewall - Wrong command after firewall refactor.
Sep 13 2023, 3:07 PM · VyOS 1.5 Circinus
Apachez added a comment to T5575: ARP/NDP table-size isnt set properly.

PR created: https://github.com/vyos/vyos-1x/pull/2255

Sep 13 2023, 12:08 PM · VyOS 1.5 Circinus
Apachez added a comment to T5575: ARP/NDP table-size isnt set properly.

Turns out that the values who override the vyos-config values are set in /etc/sysctl.d/30-vyos-router.conf:

Sep 13 2023, 11:50 AM · VyOS 1.5 Circinus
Apachez claimed T5575: ARP/NDP table-size isnt set properly.
Sep 13 2023, 11:48 AM · VyOS 1.5 Circinus
sarthurdev changed the status of T5571: Firewall does not delete networks from the table raw from Open to Confirmed.
Sep 13 2023, 10:49 AM · VyOS 1.5 Circinus
n.fort changed the status of T5561: NAT - Inbound or outbound interface should not be mandatory from Confirmed to In progress.

PR: https://github.com/vyos/vyos-1x/pull/2253

Sep 13 2023, 10:47 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5575: ARP/NDP table-size isnt set properly.

I can confirm that setting these values AFTER boot (and doing commit) they will be properly set.

Sep 13 2023, 10:42 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5576: Add bgp remove-private-as all option from Open to In progress.
Sep 13 2023, 10:19 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5576: Add bgp remove-private-as all option.

PR for 1.3.x https://github.com/vyos/vyatta-cfg-quagga/pull/102
PR for the current https://github.com/vyos/vyos-1x/pull/2252

Sep 13 2023, 9:47 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T4919: TPM-backed config encryption.

@fernando See here: https://github.com/vyos/vyos-build/pull/297

Sep 13 2023, 9:35 AM · VyOS Rolling, VyOS 1.5 Circinus
zsdc added a parent task for T5554: Disable sudo for PAM RADIUS: T5577: Optimize PAM configs for RADIUS/TACACS+.
Sep 13 2023, 8:08 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
zsdc added a parent task for T5570: PAM config RADIUS ignore for default and success: T5577: Optimize PAM configs for RADIUS/TACACS+.
Sep 13 2023, 8:08 AM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav created T5576: Add bgp remove-private-as all option.
Sep 13 2023, 8:03 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez created T5575: ARP/NDP table-size isnt set properly.
Sep 13 2023, 7:54 AM · VyOS 1.5 Circinus
syncer assigned T5573: Fix ddclient cache entries to indrajitr.
Sep 13 2023, 3:13 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr updated the task description for T5573: Fix ddclient cache entries.
Sep 13 2023, 3:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr triaged T5574: Support per-service cache management for dynamic dns providers as Normal priority.
Sep 13 2023, 2:08 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr created T5573: Fix ddclient cache entries.
Sep 13 2023, 1:38 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5572: Add capability for sending Gratuitous ARP (GARP) and the equal for IPv6.

Turns out to exist an RFC for this regarding IPv6 along with a naming:

Sep 13 2023, 12:54 AM · VyOS Rolling
Apachez created T5572: Add capability for sending Gratuitous ARP (GARP) and the equal for IPv6.
Sep 13 2023, 12:35 AM · VyOS Rolling

Sep 12 2023

Apachez renamed T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT from Selective proxy-arp when doing SNAT to Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.
Sep 12 2023, 11:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
fernando reopened T3655: NAT doesn't work correctly with VRF as "Needs testing".
Sep 12 2023, 6:59 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav created T5571: Firewall does not delete networks from the table raw.
Sep 12 2023, 3:09 PM · VyOS 1.5 Circinus

Sep 11 2023

jestabro changed the status of T5353: config-mgmt: normalize archive updates and commit log entries, a subtask of T5551: Missing check for boot_configuration_complete raises error in vyos-save-config.py, from Unknown Status to Resolved.
Sep 11 2023, 5:32 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro changed the status of T5353: config-mgmt: normalize archive updates and commit log entries from Unknown Status to Resolved.
Sep 11 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro changed the status of T5551: Missing check for boot_configuration_complete raises error in vyos-save-config.py from Unknown Status to Resolved.
Sep 11 2023, 5:31 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

I was thinking about N/D and personally I would prefer "None" to be listed for the various "show firewall" commands instead of N/D.

Sep 11 2023, 10:34 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav created T5570: PAM config RADIUS ignore for default and success.
Sep 11 2023, 10:34 AM · VyOS 1.4 Sagitta (1.4.1)
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

This can be put to resolved when the backports are confirmed aswell.

Sep 11 2023, 10:20 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav moved T5564: Both show firewall group and show firewall summary fails from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Sep 11 2023, 9:58 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a project to T5564: Both show firewall group and show firewall summary fails: VyOS 1.4 Sagitta.
Sep 11 2023, 9:58 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5564: Both show firewall group and show firewall summary fails.

N/D == not defined

Sep 11 2023, 9:54 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5564: Both show firewall group and show firewall summary fails.

Confirmed working with VyOS 1.5-rolling-202309110651

A question before setting this to resolved:

What does N/D mean?

Shouldnt it be N/A instead?

Sep 11 2023, 9:52 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

Confirmed working with VyOS 1.5-rolling-202309110651

Sep 11 2023, 9:41 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev closed T5562: Smoketests fail for vyos:current (test_netns.py) as Resolved.

Builds passing: https://github.com/vyos/vyos-rolling-nightly-builds/actions/runs/6142937552

Sep 11 2023, 8:59 AM · VyOS 1.5 Circinus
c-po updated the task description for T2472: Ability to configure EIGRP protocol.
Sep 11 2023, 5:15 AM · VyOS Rolling

Sep 10 2023

sarthurdev changed the status of T5568: Install image from live ISO always defaults boot to KVM entry from In progress to Needs testing.

current PR: https://github.com/vyos/vyatta-cfg-system/pull/205

Sep 10 2023, 11:22 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev changed the status of T5568: Install image from live ISO always defaults boot to KVM entry from Open to In progress.
Sep 10 2023, 10:54 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.

PR https://github.com/vyos/vyos-1x/pull/2240

set protocols static proxy-arp 192.0.2.1 interface eth0
set protocols static proxy-arp 192.0.2.1 interface eth1
set protocols static proxy-ndp 2001:db8::1 interface eth1
Sep 10 2023, 10:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Latest run https://github.com/vyos/vyos-rolling-nightly-builds/actions/runs/6138721359/job/16655876943

Sep 10 2023, 7:33 PM · VyOS 1.5 Circinus
Apachez updated subscribers of T5562: Smoketests fail for vyos:current (test_netns.py).

Fix by @sever regarding those failing conntrack smoketest: https://github.com/vyos/vyos-1x/pull/2234

Sep 10 2023, 6:06 PM · VyOS 1.5 Circinus
c-po closed T5555: Fix timezone migrator (system 13-to-14) as Resolved.
Sep 10 2023, 2:17 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5555: Fix timezone migrator (system 13-to-14) from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Sep 10 2023, 2:16 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5564: Both show firewall group and show firewall summary fails from Open to Needs testing.
Sep 10 2023, 1:30 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.

I guess we should use the current ip neighbor xxx instead of old arp. I hope it does the same.

sudo ip neighbor add proxy 192.0.2.1 dev eth0
sudo ip -6 neigh add proxy aa::1 dev eth0

Show

vyos@r1# sudo ip neighbor show proxy
192.168.122.11 dev eth0  proxy
192.0.2.1 dev eth0  proxy
aa::1 dev eth0  proxy
[edit]
vyos@r1#
Sep 10 2023, 1:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5564: Both show firewall group and show firewall summary fails.

PR https://github.com/vyos/vyos-1x/pull/2235

Sep 10 2023, 11:46 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

The failed smoketest test_interfaces_ethernet.py can be seen at:

Sep 10 2023, 6:14 AM · VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

The failed smoketest test_protocols_pim6.py seems to have been taken care of by:

Sep 10 2023, 6:13 AM · VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Regarding the failing smoketest test_system_conntrack.py (test_conntrack_ignore):

Sep 10 2023, 6:12 AM · VyOS 1.5 Circinus

Sep 9 2023

Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Still errors in:

Sep 9 2023, 5:05 PM · VyOS 1.5 Circinus
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

Related: https://vyos.dev/T5513

Sep 9 2023, 3:09 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5566: Disable 802.3az/EEE (energy efficient ethernet).

Related: https://vyos.dev/T5311

Sep 9 2023, 1:26 PM
Apachez created T5566: Disable 802.3az/EEE (energy efficient ethernet).
Sep 9 2023, 1:25 PM
Viacheslav closed T5423: ipsec: no output for op-cmd "show vpn ike secrets" as Resolved.
Sep 9 2023, 11:40 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Backport Candidates to Finished on the VyOS 1.5 Circinus board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T4754: Improvement: system login: show configured 2FA OTP key from Open to Needs testing.
Sep 9 2023, 10:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

PR created (fixes https://github.com/vyos/vyos-build/commit/a863fe0): https://github.com/vyos/vyos-build/pull/395

Sep 9 2023, 10:34 AM · VyOS 1.5 Circinus
Apachez created T5564: Both show firewall group and show firewall summary fails.
Sep 9 2023, 10:00 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

PR https://github.com/vyos/vyos-1x/pull/2230

Sep 9 2023, 9:55 AM · VyOS 1.5 Circinus