Page MenuHomeVyOS Platform
Feed Search

Sep 18 2023

Viacheslav added a comment to T5573: Fix ddclient cache entries.

Cannot pass the smoketest:

 DEBUG - ======================================================================
DEBUG - FAIL: test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 82, in test_01_dyndns_service_standard
DEBUG -     self.assertIn(f'use=if', ddclient_conf)
DEBUG - AssertionError: 'use=if' not found in '### Autogenerated by dns_dynamic.py ###\ndaemon=300\nsyslog=yes\nssl=yes\npid=/run/ddclient/ddclient.pid\ncache=/run/ddclient/ddclient.cache\nweb=googledomains use=no            \n # Web service dynamic DNS configuration for cloudflare: [cloudflare, test.ddns.vyos.io]\nusev4=ifv4, \\\nifv4=eth0, \\\nprotocol=cloudflare, \\\nzone=vyos.io, \\\npassword=paSS_@4ord \\\ntest.ddns.vyos.io'
DEBUG - 
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 4 tests in 11.489s
DEBUG - 
DEBUG - FAILED (failures=1)
Sep 18 2023, 6:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 15 2023

Viacheslav moved T5586: Disable by default SNMP for Keepalived VRRP from Open to Finished on the VyOS 1.5 Circinus board.
Sep 15 2023, 4:24 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T5587: Firwall can not pass the smoketest as Resolved.

Fixed

Sep 15 2023, 4:23 PM · VyOS 1.5 Circinus
Viacheslav committed rVYOSONEX47875457cd8b: T5586: Disable by default SNMP for Keeplived VRRP service.
Sep 15 2023, 3:31 PM
Viacheslav created T5588: Add kernel conntrack_bridge module.
Sep 15 2023, 2:48 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav committed rVYOSONEX1c49d3ef8855: T5261: Add AWS load-balancing tunnel handler.
Sep 15 2023, 9:47 AM
Viacheslav created T5587: Firwall can not pass the smoketest.
Sep 15 2023, 7:58 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5586: Disable by default SNMP for Keepalived VRRP from Open to In progress.
Sep 15 2023, 7:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

PR https://github.com/vyos/vyos-1x/pull/2273

Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added projects to T5586: Disable by default SNMP for Keepalived VRRP: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.5).
Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav renamed T5586: Disable by default SNMP for Keepalived VRRP from Disable be default SNMP for Keepalived VRRP to Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 7:34 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav created T5586: Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 6:46 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5579: Log firewall - Wrong command after firewall refactor, a subtask of T5160: Firewall refactor, from In progress to Needs testing.
Sep 15 2023, 6:31 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5579: Log firewall - Wrong command after firewall refactor from In progress to Needs testing.
Sep 15 2023, 6:31 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5574: Support per-service cache management for dynamic dns providers from Open to Needs testing.
Sep 15 2023, 6:30 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5585: Fix file access mode for dynamic dns configuration from Open to Needs testing.
Sep 15 2023, 6:29 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 14 2023

Viacheslav committed rVYOSONEX7a79dd77fa11: T5480: Ability to disable SNMP for keepalived service VRRP.
Sep 14 2023, 2:48 PM
Viacheslav created T5584: System cannot boot with commit-arachive location sftp in some cases.
Sep 14 2023, 8:19 AM · VyOS Rolling, Bugs
Viacheslav changed the status of T5530: Add LFA to IS-IS from Open to In progress.
Sep 14 2023, 8:00 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Sep 13 2023

Viacheslav committed rVYOSONEXd72024b11e12: T5576: Add BGP remove-private-as all option.
Sep 13 2023, 5:17 PM
Viacheslav changed the status of T5576: Add bgp remove-private-as all option from Open to In progress.
Sep 13 2023, 10:19 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav edited projects for T5578: "ikev2-reauth" description contains outdated information, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Sep 13 2023, 9:48 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav added a comment to T5576: Add bgp remove-private-as all option.

PR for 1.3.x https://github.com/vyos/vyatta-cfg-quagga/pull/102
PR for the current https://github.com/vyos/vyos-1x/pull/2252

Sep 13 2023, 9:47 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav created T5576: Add bgp remove-private-as all option.
Sep 13 2023, 8:03 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Sep 12 2023

Viacheslav committed rVYOSONEXb730015945dc: T4309: Conntrack ignore fix to handle interface any.
Sep 12 2023, 6:11 PM
Viacheslav created T5571: Firewall does not delete networks from the table raw.
Sep 12 2023, 3:09 PM · VyOS 1.5 Circinus
Viacheslav committed rVYOSONEXd028be894fcb: T5562: Cleanup netns for smoketest load-balancing wan.
Sep 12 2023, 10:19 AM

Sep 11 2023

Viacheslav created T5570: PAM config RADIUS ignore for default and success.
Sep 11 2023, 10:34 AM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav moved T5564: Both show firewall group and show firewall summary fails from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Sep 11 2023, 9:58 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a project to T5564: Both show firewall group and show firewall summary fails: VyOS 1.4 Sagitta.
Sep 11 2023, 9:58 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5564: Both show firewall group and show firewall summary fails.

Confirmed working with VyOS 1.5-rolling-202309110651

A question before setting this to resolved:

What does N/D mean?

Shouldnt it be N/A instead?

Sep 11 2023, 9:52 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5518: Add MLD protocol support from In progress to Needs testing.
Sep 11 2023, 9:48 AM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXb658f601f03f: T5533: Fix for vrrp dict key if virtual-server is used.
Sep 11 2023, 2:29 AM

Sep 10 2023

Viacheslav added a comment to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.

PR https://github.com/vyos/vyos-1x/pull/2240

set protocols static proxy-arp 192.0.2.1 interface eth0
set protocols static proxy-arp 192.0.2.1 interface eth1
set protocols static proxy-ndp 2001:db8::1 interface eth1
Sep 10 2023, 10:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5564: Both show firewall group and show firewall summary fails from Open to Needs testing.
Sep 10 2023, 1:30 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav committed rVYOSONEX9daac1632df9: T5564: Fix show firewall group and show firewall summary.
Sep 10 2023, 1:29 PM
Viacheslav added a comment to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.

I guess we should use the current ip neighbor xxx instead of old arp. I hope it does the same.

sudo ip neighbor add proxy 192.0.2.1 dev eth0
sudo ip -6 neigh add proxy aa::1 dev eth0

Show

vyos@r1# sudo ip neighbor show proxy
192.168.122.11 dev eth0  proxy
192.0.2.1 dev eth0  proxy
aa::1 dev eth0  proxy
[edit]
vyos@r1#
Sep 10 2023, 1:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5529: Missing symbolic link in linux-firmware package. as Resolved.
Sep 10 2023, 1:00 PM · VyOS 1.4 Sagitta
Viacheslav closed T5565: Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp as Resolved.
Sep 10 2023, 12:49 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5564: Both show firewall group and show firewall summary fails.

PR https://github.com/vyos/vyos-1x/pull/2235

Sep 10 2023, 11:46 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav committed rVYOSONEXa36443810dbf: T4309: Fix conntrack teamplate group.
Sep 10 2023, 11:00 AM

Sep 9 2023

Viacheslav moved T4426: Add arpwatch to the image from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Sep 9 2023, 11:43 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav closed T5423: ipsec: no output for op-cmd "show vpn ike secrets" as Resolved.
Sep 9 2023, 11:40 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Backport Candidates to Finished on the VyOS 1.5 Circinus board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T4754: Improvement: system login: show configured 2FA OTP key, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to Needs testing.
Sep 9 2023, 10:56 AM · VyOS Rolling
Viacheslav changed the status of T4754: Improvement: system login: show configured 2FA OTP key from Open to Needs testing.
Sep 9 2023, 10:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a reverting change for rVYOSONEX7a99a59b338f: Create build.yml: rVYOSONEX7ebdaead30f3: Revert "Create build.yml".
Sep 9 2023, 10:33 AM
Viacheslav committed rVYOSONEX7ebdaead30f3: Revert "Create build.yml".
Sep 9 2023, 10:33 AM
Viacheslav committed rVYOSONEXffb227da757f: T4754: Fix path for popen moved to utils process.
Sep 9 2023, 10:28 AM
Viacheslav committed rVYOSONEX849499f44f6e: T5562: Cleanup netns for smoketest load-balancing wan.
Sep 9 2023, 10:28 AM
Viacheslav added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

PR https://github.com/vyos/vyos-1x/pull/2230

Sep 9 2023, 9:55 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5554: Disable sudo for PAM RADIUS, a subtask of T3191: PAM RADIUS freezing when accounting does not configured on RADIUS server, from Open to In progress.
Sep 9 2023, 8:04 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5554: Disable sudo for PAM RADIUS from Open to In progress.
Sep 9 2023, 8:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5554: Disable sudo for PAM RADIUS.

PR for 1.3.x https://github.com/vyos/vyos-1x/pull/2225

Sep 9 2023, 8:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 8 2023

Viacheslav committed rVYOSONEXa5be6427daa9: T5489: Add sysctl TCP congestion control by default to BBR.
Sep 8 2023, 6:35 PM
Viacheslav committed rVYOSONEX7cb85a8b4970: T5423: Fix for op-mode show vpn ike secrets.
Sep 8 2023, 6:34 PM
Viacheslav committed rVYOSONEX7682e148fcf7: T5554: Disable sudo for PAM RADIUS.
Sep 8 2023, 6:33 PM
Viacheslav committed rVYOSONEX01b30eb6d83c: T5554: Disable sudo for PAM RADIUS.
Sep 8 2023, 3:36 PM
Viacheslav moved T5423: ipsec: no output for op-cmd "show vpn ike secrets" from Open to Finished on the VyOS 1.5 Circinus board.
Sep 8 2023, 3:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5423: ipsec: no output for op-cmd "show vpn ike secrets": VyOS 1.5 Circinus.

Cherry-pick to 1.4 https://github.com/vyos/vyos-1x/pull/2226

Sep 8 2023, 3:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5489: Change to BBR as TCP congestion control, or at least make it an config option.

PR for 1.4 https://github.com/vyos/vyos-1x/pull/2224

Sep 8 2023, 12:10 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T4426: Add arpwatch to the image as Resolved.
Sep 8 2023, 12:05 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Sep 8 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5489: Change to BBR as TCP congestion control, or at least make it an config option: VyOS 1.5 Circinus.
Sep 8 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5502: Firewall - wrong parser for inbound and/or outbound interface from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:46 AM · VyOS 1.4 Sagitta
Viacheslav moved T5460: Firewall - remove config-trap from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:45 AM · VyOS 1.4 Sagitta
Viacheslav moved T5450: Firewall interface group - Allow inverted matcher from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:45 AM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXa0e3d29ee33e: Revert "Create build.yml".
Sep 8 2023, 10:37 AM
Viacheslav added a reverting change for rVYOSONEX7a99a59b338f: Create build.yml: rVYOSONEXa0e3d29ee33e: Revert "Create build.yml".
Sep 8 2023, 10:37 AM
Viacheslav added a project to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT: VyOS 1.5 Circinus.
Sep 8 2023, 9:00 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 7 2023

Viacheslav added a comment to T5554: Disable sudo for PAM RADIUS.

For 1.4 add session [default=ignore success=2] pam_succeed_if.so service = sudo to /etc/pam.d/common-session-noninteractive fixes the issue

# here are the per-package modules (the "Primary" block)
session [default=1]                     pam_permit.so
# here's the fallback if no module succeeds
session requisite                       pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required                        pam_permit.so
# and here are more per-package modules (the "Additional" block)
session required        pam_mkhomedir.so umask=0022 skel=/etc/skel
session [default=ignore success=2] pam_succeed_if.so service = sudo
session [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
session [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so
session required        pam_unix.so
# end of pam-auth-update config
Sep 7 2023, 4:02 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav edited projects for T5555: Fix timezone migrator (system 13-to-14), added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).
Sep 7 2023, 3:13 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav renamed T5556: reboot now and poweroff does not work from reboot now does not work to reboot now and poweroff does not work.
Sep 7 2023, 12:39 PM · VyOS 1.5 Circinus
Viacheslav created T5556: reboot now and poweroff does not work.
Sep 7 2023, 12:38 PM · VyOS 1.5 Circinus
Viacheslav updated the task description for T5554: Disable sudo for PAM RADIUS.
Sep 7 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5554: Disable sudo for PAM RADIUS.
Sep 7 2023, 11:43 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 6 2023

Viacheslav changed the status of T5489: Change to BBR as TCP congestion control, or at least make it an config option from In progress to Needs testing.
Sep 6 2023, 6:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXb99ed37dd1cf: T5489: Add sysctl TCP congestion control by default to BBR.
Sep 6 2023, 6:25 PM
Viacheslav committed rVYOSONEX97326920e290: T5423: Fix for op-mode show vpn ike secrets.
Sep 6 2023, 6:25 PM
Viacheslav moved T5542: ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 6 2023, 12:08 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5440: Restore pre/postconfig scripts if user deleted them.

I have two scripts
Is it ok?

vyos@r14:~$ sudo ls -la /config/scripts/vyos-postconfig-boot*
-rwxrwxr-x 1 root vyattacfg 413 Sep  6 15:04 /config/scripts/vyos-postconfig-boot.script
-rwxrwxr-x 1 root vyattacfg 230 Jun 27 06:17 /config/scripts/vyos-postconfig-bootup.script
vyos@r14:~$
Sep 6 2023, 12:07 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5542: ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented.

@Niklasthegeek Could you re-check and close it if it was fixed?

Sep 6 2023, 10:13 AM · VyOS 1.4 Sagitta
Viacheslav reassigned T5544: Allow CAP_SYS_MODULE to be set on containers from Viacheslav to anthr76.
Sep 6 2023, 10:11 AM · VyOS 1.4 Sagitta
Viacheslav closed T5544: Allow CAP_SYS_MODULE to be set on containers as Resolved.

@

Sep 6 2023, 10:10 AM · VyOS 1.4 Sagitta
Viacheslav moved T5548: HAProxy renders timeouts incorrectly from Open to Finished on the VyOS 1.5 Circinus board.
Sep 6 2023, 10:09 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5548: HAProxy renders timeouts incorrectly as Resolved.
Sep 6 2023, 10:08 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T3191: PAM RADIUS freezing when accounting does not configured on RADIUS server: VyOS 1.5 Circinus.
Sep 6 2023, 8:39 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5552: 'set system option performance throughput' enables IPv6 forwarding even if it's explicitly disabled with 'set system ipv6 disable-forwarding'.

Related task T2133
I guess we should drop this option ipv6 disable-forwarding

Sep 6 2023, 8:09 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1)

Sep 5 2023

Viacheslav committed rVYOSONEX5ae730a52de2: T5480: Ability to disable SNMP for keepalived service VRRP.
Sep 5 2023, 11:26 PM
Viacheslav committed rVYOSONEX5f2926cf04e8: T5533: Fix for vrrp dict key if virtual-server is used.
Sep 5 2023, 11:26 PM
Viacheslav added a comment to T5521: Home owner directory changed to vyos for the user after reboot.
In T5521#158836, @c-po wrote:

Please re-test with latest rolling-release if the issue persists.

Sep 5 2023, 9:12 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5532: After add system image the boot stuck and works again after the second reboot: VyOS 1.5 Circinus.
Sep 5 2023, 9:04 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav reopened T5533: Keepalived VRRP IPv6 group enters in FAULT state as "Needs testing".

Cannot pass smoketest for virtual-server which also uses vrrp

Sep 5 2023, 8:31 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX41143c901a75: T5548: Fix load-balancing reverse-proxy timeouts.
Sep 5 2023, 7:52 PM
Viacheslav committed rVYOSONEX24d65014bbdb: T2958: Refactor DHCP-server systemd unit and lease.
Sep 5 2023, 7:51 PM
Viacheslav added a comment to T5215: Add a built-in ICMP health check for VRRP groups.

@dmbaturin Can we close it?

Sep 5 2023, 6:07 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5548: HAProxy renders timeouts incorrectly from In progress to Needs testing.

@mhamzahkhan Will be fixed in the next rolling release, could you re-check it?

Sep 5 2023, 5:59 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T2444: Remove keepalived in favor of FRR for VRRP.

If the FRR/vrrpd is good enough then the main benefit is that the FRR/vrrpd is already included so no need to also include and use keepalived (unnecessary files and binaries and dependencies).

Things to verify however before a switch is performed (and keepalived is thrown out) is support for vrf/namespaces, various interface and other tracking and multicast vs unicast (it seems that keepalived supports them all - dunno about FRR/vrrpd).

https://docs.frrouting.org/en/latest/vrrp.html

Sep 5 2023, 5:54 PM
Viacheslav added a comment to T5489: Change to BBR as TCP congestion control, or at least make it an config option.

To check if it works just use ss -tin, for example:

vyos@r14:~$ ss -tin
State                    Recv-Q                    Send-Q                                        Local Address:Port                                        Peer Address:Port                     Process                                                                                                                                                                                          
ESTAB                    0                         0                                            192.168.122.14:22                                         192.168.122.1:45446                    
	 bbr wscale:7,7 rto:201 rtt:0.103/0.048 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:140 ssthresh:138 bytes_sent:126383 bytes_acked:126383 bytes_received:20969 segs_out:2460 segs_in:2592 data_segs_out:2445 data_segs_in:341 bbr:(bw:503652048bps,mrtt:0.018,pacing_gain:1.25,cwnd_gain:2) send 15745242718bps lastsnd:3003449 lastrcv:3005252 lastack:3003448 pacing_rate 623269416bps delivery_rate 503652168bps delivered:2446 app_limited busy:2029ms rcv_space:14600 rcv_ssthresh:64076 minrtt:0.018 snd_wnd:64128
ESTAB                    0                         36                                           192.168.122.14:22                                         192.168.122.1:51320                    
	 bbr wscale:7,7 rto:201 rtt:0.427/0.555 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:148 ssthresh:136 bytes_sent:1779503 bytes_retrans:68 bytes_acked:1779399 bytes_received:167865 segs_out:12061 segs_in:12088 data_segs_out:11899 data_segs_in:3996 bbr:(bw:530564808bps,mrtt:0.068,pacing_gain:1.25,cwnd_gain:2) send 4015063232bps lastsnd:30 lastrcv:31 lastack:31 pacing_rate 525259160bps delivery_rate 458772272bps delivered:11899 app_limited busy:27667ms unacked:1 retrans:0/1 dsack_dups:1 rcv_rtt:392993 rcv_space:65229 rcv_ssthresh:84348 minrtt:0.024 snd_wnd:1344128
vyos@r14:~$
Sep 5 2023, 5:48 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta