That is my first PR; please, let me know if you need something else.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 12 2023
Nov 12 2023
c-po changed the status of T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features from Open to In progress.
syncer lowered the priority of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from High to Normal.
Nov 11 2023
Nov 11 2023
@twan it was backported https://github.com/vyos/vyos-1x/pull/2400
Will this feature be backported to 1.4?
syncer triaged T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client as Normal priority.
Nov 10 2023
Nov 10 2023
jestabro updated the task description for T5731: Add ability to call config dependencies by canonical function instead of whole script.
Here is another candidate, although msmtp still looks like a better choice:
https://wiki.debian.org/nullmailer
Viacheslav added a comment to T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release.
@indrajitr could you recheck smoketests?
DEBUG - ---------------------------------------------------------------------- DEBUG - Ran 3 tests in 7.616s DEBUG - DEBUG - OK DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py DEBUG - test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard) ... ok DEBUG - test_02_dyndns_service_ipv6 (__main__.TestServiceDDNS.test_02_dyndns_service_ipv6) ... ok DEBUG - test_03_dyndns_service_dual_stack (__main__.TestServiceDDNS.test_03_dyndns_service_dual_stack) ... ok DEBUG - test_04_dyndns_rfc2136 (__main__.TestServiceDDNS.test_04_dyndns_rfc2136) ... ok DEBUG - test_05_dyndns_hostname (__main__.TestServiceDDNS.test_05_dyndns_hostname) ... ok DEBUG - test_06_dyndns_web_options (__main__.TestServiceDDNS.test_06_dyndns_web_options) ... ok DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... ERROR DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... FAIL DEBUG - DEBUG - ====================================================================== DEBUG - ERROR: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 304, in test_07_dyndns_vrf DEBUG - self.cli_set(['vrf', 'name', vrf_name, 'table', vrf_table]) DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/base_vyostest_shim.py", line 68, in cli_set DEBUG - self._session.set(config) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 150, in set DEBUG - self.__run_command([SET] + path + value) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 139, in __run_command DEBUG - raise ConfigSessionError(output) DEBUG - vyos.configsession.ConfigSessionError: Number is not in any of allowed ranges DEBUG - DEBUG - DEBUG - DEBUG - VRF routing table must be in range from 100 to 65535 DEBUG - Value validation failed DEBUG - Set failed DEBUG - DEBUG - DEBUG - ====================================================================== DEBUG - FAIL: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 50, in tearDown DEBUG - self.assertTrue(process_running(DDCLIENT_PID)) DEBUG - AssertionError: False is not true DEBUG - DEBUG - ----------------------------------------------------------------------
n.fort changed the status of T5729: Firewall, nat and policy route - Switch to valueless from Open to In progress.
Viacheslav updated the task description for T4712: Collaborative Protection Profile cPP for Network Devices root task.
Yes I mean sudo ip vrf exec FOO /usr/sbin/conntrackd -C /run/conntrackd/conntrackd.conf
Restricted Repository Identity closed T5727: validator: Use native URL validator instead of regex-based validator as Resolved by committing Restricted Diffusion Commit.
It has been a while since I had setup the HA VRF. I attached the interfaces on both routers to use this VRF but then conntrack-sync wasn't woking anymore. Do you mean if I had also tried to manually start the service and configure it to use this VRF?
PR https://github.com/vyos/vyos-1x/pull/2469
set service file-server listen-address 0.0.0.0 set service file-server port 8000 set service file-server directory '/tmp'
Nov 9 2023
Nov 9 2023
Viacheslav added a comment to T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
It seems to be a bug in the FRR that delete isisd configuration completely
router isis VyOS net 49.0001.1920.0200.0011.00 lsp-mtu 1460 redistribute ipv4 connected level-2 ! ! interface eth1 ip router isis VyOS ipv6 router isis VyOS ! interface tun0 ip router isis VyOS ipv6 router isis VyOS !
check
r1# conf t r1(config)# router isis VyOS r1(config-router)# net 49.0001.1920.0200.0011.00 r1(config-router)# lsp-mtu 1460 r1(config-router)# redistribute ipv4 connected level-2 r1(config-router)# ! r1(config-router)# ! r1(config-router)# interface eth1 r1(config-if)# ip router isis VyOS r1(config-if)# ipv6 router isis VyOS r1(config-if)# ! r1(config-if)# interface tun0 r1(config-if)# ip router isis VyOS vtysh: error reading from isisd: Success (0)Warning: closing connection to isisd because of an I/O error! r1(config-if)# ipv6 router isis VyOS Warning: connecting to isisd...failed! isisd is not running r1(config-if)# ! r1(config-if)# end Warning: connecting to isisd...failed! r1# r1#
Viacheslav renamed T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address from protocol IS-IS configuration is empty to protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav updated the task description for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav edited projects for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
OK, I will.
Did you try to start this service in VRF?
Viacheslav moved T5648: ldpd neighbour template errors from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5648: ldpd neighbour template errors from Need Triage to Finished on the VyOS 1.5 Circinus board.
Create please a PR if it works for you.
Nov 8 2023
Nov 8 2023
qdrddr added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
++
qdrddr added a comment to T5388: Something is fishy with commit and boot times when more than a few hundred static routes are being used.
++
++
fernando changed the status of T5563: container: Container environment variable cannot be set from Open to Needs testing.
I've tested this flag in both version 1.4 / 1.5 , it seems to work as expected :
fernando added a project to T5563: container: Container environment variable cannot be set: VyOS 1.5 Circinus.
Make sure conntrack-sync works with active-active HA configuration with BGP environment & IPv6
Command show zone-policy is no longer available in 1.4, and neither in 1.5
I'm closing this task.
tested on 1.4-rolling-202311080309
I'm marking this one as resolved since ZBF was already re-introduced.
Can we mark this one as resolved for 1.5? Seems it wasn't back-ported yet to Saggita @sdev
Apachez closed T5693: Adding variable vyos_persistence_dir (and improve variable vyos_rootfs_dir) as Resolved.
Verified with VyOS 1.5-rolling-202311081451.
Viacheslav changed the status of T5715: IPSec VPN: restart vpn is not working from Open to In progress.
submitted PR: https://github.com/vyos/vyatta-op-vpn/pull/37
tjjh89017 added a comment to T5668: Disable VXLAN bridge learning and enable neigh_suppress when using EVPN.
@c-po It seems you only implement the "type bridge_slave neigh_suppress on"
And "type bridge_slave learning on" is not implemented in this PR.
Will you add this also?
Thank you
Viacheslav moved T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT from Need Triage to Finished on the VyOS 1.4 Sagitta board.
set protocols static neighbor-proxy arp 192.0.2.1 interface eth1
check
vyos@r4# sudo ip nei show proxy 192.0.2.1 dev eth1 proxy [edit] vyos@r4#
Viacheslav moved T5720: PPPoE-server adding new interface does not work from Need Triage to Finished on the VyOS 1.4 Sagitta board.
It looks like maybe there’s just some op mode command changes.
Nov 7 2023
Nov 7 2023
indrajitr triaged T5723: mdns repeater: Always reload systemd daemon before applying changes as Normal priority.
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from In progress to Needs testing.
According to firewall-version.xml.i, the firewall config version was not updated to 12. Was this intentional?
giuavo updated the task description for T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
giuavo added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
@Viacheslav My addition of the onlink option is really brute-force, applied blindly to everything just to see if that was a solution and give you more information. I do not think my "fix" is really ready for a PR.
Viacheslav added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
@giuavo I didn't test "default route", only regular routes for some prefixes, and it worked.
Could you create a PR?
Tested in 1.3. Everything works
a.apostoliuk added a comment to T5402: VRRP router with rfc3768-compatibility sends multiple ARP replies .
Tested in 1.5
Viacheslav added a project to T5720: PPPoE-server adding new interface does not work: VyOS 1.4 Sagitta.
Backport to 1.4 https://github.com/vyos/vyos-1x/pull/2449
It's fixed in 1.5-rolling-202311060023 but the bug is still present in 1.4.
Nov 6 2023
Nov 6 2023
I would mainly want to log new conntrack entries for various reasons.