tested /resolved
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 6 2023
Nov 6 2023
Does anyone knows real scenario where permanently storing/saving this logs are required?
Yes, this feature is not working on 1.4, neither on 1.5
But I can't think on a real case where this logs are needed. I know that keeping information of NAT for certain ISP is mandatory due lo legal requirements. But writing a log entry for every conntrack status change seems like it will flood logs, and may consume more resources than expected.
With usage of netflow/slflow, maybe this required information can be obtained in the netflow collector, and do not increase load on vyos router.
It seems to be the difference between the vyos version build in the Dockerfile of librtr-dev and the Debian librtr-dev version (which works).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXf7a82c8ee132: vxlan: T3700: add bridge dependency call when altering member interfaces (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXf6a347234171: Merge pull request #2439 from c-po/t3700-vxlan-svd-fixup (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX148ab6c4382b: Merge pull request #2441 from nicolas-fort/T5541-fix-zbf-sagiita (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX8e2429ebddfc: Merge pull request #2438 from indrajitr/ddclient-bump-311 (authored by dmbaturin).
Thanks, I'll wait for the merge and test the new iso ASAP.
If you add the librtr-dev to the docker build image and build FRR (with the docker build image) yourself it works:
$ git clone -b current --single-branch https://github.com/vyos/vyos-build.git $ cd vyos-build $ vi docker/Dockerfile $ git diff diff --git a/docker/Dockerfile b/docker/Dockerfile index 953ea4c..baeb232 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -345,6 +345,9 @@ RUN apt-get update && apt-get install -y \ libnl-genl-3-dev \ libxtables-dev
Viacheslav changed the status of T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Open to In progress.
Working on it! Thanks for the details!
Viacheslav moved T5704: PPPoE-server add max-starting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T5715: IPSec VPN: restart vpn is not working, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Viacheslav edited projects for T5714: IPSec VPN: op-mode: "show log vpn" does not show results, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Nov 5 2023
Nov 5 2023
(20:39) cpo lnx01:~/vyos-1x [current] # git grep \"secret\" interface-definitions/ interface-definitions/vpn-ipsec.xml.in: <leafNode name="secret"> interface-definitions/vpn-l2tp.xml.in: <leafNode name="secret">
Yup, VPN site to site authentication credentials are stored as "secret" hence the patch.
Nov 4 2023
Nov 4 2023
indrajitr renamed T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release from Upgrade ddclient to 3.11.1 release to Additional dynamic dns improvements to align with ddclient 3.11.1 release.
Do you have any example of in which context that exists?
Apachez added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
In that PR, shouldnt also ifb* be included?
@n.fort Unfortunately, I'm hitting an issue with traffic sent from the router itself.
Running 1.4-rolling-202311021131.
Interfaces eth0 and pppoe0 are WAN. Interfaces bond0* are LAN.
For example, running dig google.nl @9.9.9.9 from the VyOS CLI will fail. The kernel log says:
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to In progress.
PR added...
https://github.com/vyos/vyos-1x/pull/2435
Viacheslav added a comment to T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
PR https://github.com/vyos/vyos-1x/pull/2434
set service snmp community public client '127.0.0.1' set service snmp mib interface-max '25' set service snmp mib interface 'eth' set service snmp mib interface 'bond'
c-po added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
+1 for the other "virtual interfaces like lo, dummy, sstp. If such an interface is created - vyos.ifconfig library sets (or should set) all the appropriate sysctl stuff
Viacheslav changed the status of T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP from Open to In progress.
Viacheslav updated the task description for T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
Nov 3 2023
Nov 3 2023
Viacheslav moved T5700: Monitoring telegraf deprecated plugins inputs outputs from Open to Finished on the VyOS 1.4 Sagitta board.
Apachez added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
Shouldnt dummy* and some others be excluded aswell?
Viacheslav added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
To fix it
sudo nano -c /lib/udev/rules.d/99-systemd.rules
Find sysctl line
# Apply sysctl variables to network devices (and only to those) as they appear. ACTION=="add", SUBSYSTEM=="net", KERNEL!="lo", RUN+="/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$name --prefix=/net/ipv6/conf/$name --prefix=/net/ipv6/neigh/$name"
Replace to:
# Apply sysctl variables to network devices (and only to those) as they appear. ACTION=="add", SUBSYSTEM=="net", KERNEL!="lo|ppp*|ipoe*", RUN+="/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$name --prefix=/net/ipv6/conf/$name --prefix=/net/ipv6/neigh/$name"
Tested with 1.5-rolling-202311030022 and working as expected.
GitHub <noreply@github.com> committed rVYOSONEXfd9e2c24e739: Merge pull request #2429 from vyos/mergify/bp/sagitta/pr-2423 (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX1512d64c929f: Merge pull request #2432 from nicolas-fort/T5513-fwall-show-sagitta (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX8391fb5f2c3d: Merge pull request #2433 from vyos/mergify/bp/sagitta/pr-2431 (authored by dmbaturin).
c-po awarded T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release a Like token.
c-po moved T5707: Wireguard peer public key update leaves redundant peers and breaks connectivity from Open to Finished on the VyOS 1.4 Sagitta board.
c-po added a comment to T5707: Wireguard peer public key update leaves redundant peers and breaks connectivity.
PR for VyOS 1.4 https://github.com/vyos/vyos-1x/pull/2433
GitHub <noreply@github.com> committed rVYOSONEXd8a71978b462: Merge pull request #2431 from c-po/wireguard-t5707 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXecdb142f3c60: wireguard: T5707: remove previously deconfigured peer (authored by c-po).
Viacheslav triaged T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces as High priority.
Viacheslav added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
vyos@r4:~$ sudo udevadm monitor KERNEL[717.626843] remove /devices/virtual/net/ppp3466/queues/rx-0 (queues) KERNEL[717.626859] remove /devices/virtual/net/ppp3466/queues/tx-0 (queues) KERNEL[717.626903] remove /devices/virtual/net/ppp3466 (net) KERNEL[717.635679] remove /devices/virtual/net/ppp3468/queues/rx-0 (queues) KERNEL[717.635695] remove /devices/virtual/net/ppp3468/queues/tx-0 (queues) KERNEL[717.635769] remove /devices/virtual/net/ppp3468 (net) KERNEL[717.636144] remove /devices/virtual/net/ppp3469/queues/rx-0 (queues) KERNEL[717.636155] remove /devices/virtual/net/ppp3469/queues/tx-0 (queues) KERNEL[717.636181] remove /devices/virtual/net/ppp3469 (net) KERNEL[717.636536] remove /devices/virtual/net/ppp3458/queues/rx-0 (queues) KERNEL[717.636548] remove /devices/virtual/net/ppp3458/queues/tx-0 (queues) KERNEL[717.636614] remove /devices/virtual/net/ppp3458 (net) KERNEL[717.648940] remove /devices/virtual/net/ppp3470/queues/rx-0 (queues) KERNEL[717.648965] remove /devices/virtual/net/ppp3470/queues/tx-0 (queues) KERNEL[717.649018] remove /devices/virtual/net/ppp3470 (net) KERNEL[717.662658] remove /devices/virtual/net/ppp3473/queues/rx-0 (queues) KERNEL[717.662694] remove /devices/virtual/net/ppp3473/queues/tx-0 (queues) KERNEL[717.662705] remove /devices/virtual/net/ppp3473 (net) KERNEL[717.663198] remove /devices/virtual/net/ppp3471/queues/rx-0 (queues) KERNEL[717.663211] remove /devices/virtual/net/ppp3471/queues/tx-0 (queues) KERNEL[717.663255] remove /devices/virtual/net/ppp3471 (net) KERNEL[717.663423] remove /devices/virtual/net/ppp3472/queues/rx-0 (queues) KERNEL[717.663436] remove /devices/virtual/net/ppp3472/queues/tx-0 (queues) KERNEL[717.663465] remove /devices/virtual/net/ppp3472 (net) ^C
I think we may be talking about different things. The situation I am testing has the pair of QFX switches. An end server has a pair of interfaces in a bond with each interface going to one QFX. VyOS is configured with an interface to each QFX but not in a bond (just two different VLANs). The designated forwarder election for the segment to the end server is handled by the QFXs.
@shthead: Im talking about features in VyOS. I dont care what others such as Juniper does or doesnt do.
Viacheslav renamed T5709: IPoE-server fails if next pool mentioned but not defined from IPoE server fails if next pool mentioned but not defined to IPoE-server fails if next pool mentioned but not defined.
In T5698#163675, @Apachez wrote:@shthead: Yes but when it comes to multihoming there are some additional settings that should exist aswell:
https://www.arista.com/en/um-eos/eos-vxlan-configuration#topic_ckc_dh4_ynb
redundancy single-active
vs.
redundancy all-active
Nov 2 2023
Nov 2 2023
indrajitr triaged T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release as Normal priority.
n.fort changed the status of T5513: Anomalies in show firewall command after refactoring from Open to In progress.
The migration scripts still have an issue @n.fort I sent you the issues with loading a 1.4 rolling to 1.5 in slack
Good to know it worked @marc_s . Thanks for letting us know!
@shthead: Yes but when it comes to multihoming there are some additional settings that should exist aswell:
c-po moved T5707: Wireguard peer public key update leaves redundant peers and breaks connectivity from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a comment to T5707: Wireguard peer public key update leaves redundant peers and breaks connectivity.
PR for VyOS 1.5 https://github.com/vyos/vyos-1x/pull/2431
c-po changed the status of T5707: Wireguard peer public key update leaves redundant peers and breaks connectivity from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEXa327526240c9: Merge pull request #2430 from vyos/mergify/bp/sagitta/pr-2427 (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX19ec98f993bd: Merge pull request #2428 from vyos/mergify/bp/sagitta/pr-2425 (authored by Viacheslav).
marc_s awarded T5541: Zone-Based Firewalling in VyOS Sagitta 1.4 a Love token.
@Viacheslav @n.fort Regarding https://github.com/vyos/vyos-1x/pull/2388: I just tested on 1.4-rolling-202311021131: ZBF config from 1.4-rolling-202304120317 loaded without a hitch.
This is a 8 zone, 959 line config.
GitHub <noreply@github.com> committed rVYOSONEX031a5c8a1b1a: Merge pull request #2416 from c-po/evpn-mh-t5698 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX27c6dce45778: T5704: PPPoE L2TP SSTP IPoE add option max-concurrent-sessions (authored by Viacheslav).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX6a10149ca56e: T5700: Fix deprecate telegraf plugin input net (authored by Viacheslav).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX8f67048adff9: T4726: Remove accel-ppp RADIUS vendor validators (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX0c86d0a94beb: Merge pull request #2427 from sever-sever/T5704 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX42d4a2d69288: Merge pull request #2425 from sever-sever/T5700 (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX78ac5efd8849: Merge pull request #2423 from sever-sever/T4726 (authored by dmbaturin).
Viacheslav changed the status of T5700: Monitoring telegraf deprecated plugins inputs outputs from Open to In progress.
Viacheslav changed the status of T5705: rsyslog - Not working when using facility=all from In progress to Needs testing.