Or you can use PBR for destination/source address /port/protocol
Feed Advanced Search
Dec 8 2023
Dec 8 2023
Viacheslav changed the status of T5805: Missed per-interface statistic in telegraf from Open to Needs testing.
Viacheslav added a comment to T5810: Add support for RPKI source ip.
Loremo changed Is it a breaking change? from none to compatible on T5810: Add support for RPKI source ip.
Loremo updated the task description for T5810: Add support for RPKI source ip.
vfomkin added a comment to T5805: Missed per-interface statistic in telegraf.
SrividyaA added a project to T5802: ping (ip or hostname) interface <tab> produces error: VyOS 1.5 Circinus.
jestabro moved T5782: Use a single config mode script for https and http-api from Open to Finished on the VyOS 1.4 Sagitta board.
jestabro moved T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script from Open to Finished on the VyOS 1.4 Sagitta board.
Dec 7 2023
Dec 7 2023
jestabro closed T5758: Restore scanning configs when live installing, a subtask of T4516: Rewrite system image manipulation tools in Python, as Unknown Status.
Viacheslav added a comment to T5805: Missed per-interface statistic in telegraf.
Could you create a PR?
jestabro added a parent task for T5806: Clear old raid data on new install image: T4516: Rewrite system image manipulation tools in Python.
jestabro added a comment to T5758: Restore scanning configs when live installing.
SrividyaA added a comment to T5247: the bug of the command "show interfaces system".
Now we receive this error in 1.5-rolling-202312060024 when the command is executed:
SrividyaA added a project to T5247: the bug of the command "show interfaces system": VyOS 1.5 Circinus.
Dec 6 2023
Dec 6 2023
jestabro changed Issue type from feature-removal to improvement on T5758: Restore scanning configs when live installing.
jestabro changed the status of T5758: Restore scanning configs when live installing, a subtask of T4516: Rewrite system image manipulation tools in Python, from Open to In progress.
jestabro changed the status of T5758: Restore scanning configs when live installing from Open to In progress.
n.fort added a comment to T5804: SNAT "any" interface error.
Korikaze added a comment to T4502: Consider implementing (NAT/other) flow table offload.
Per discussion on forums (https://forum.vyos.io/t/how-to-use-flowtables-in-vyos-1-4-with-zone-based-firewall/13004/4), custom chains do not currently have the ability to set offload as an action. The action is only able to be applied directly within the forward filter.
n.fort added a comment to T5804: SNAT "any" interface error.
In the past any interface was supported, and it has been removed.
a.apostoliuk changed the status of T5688: Create the same view of pool configuration for all accel-ppp services, a subtask of T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict, from In progress to Needs testing.
n.fort changed the status of T5779: custom conntrack timeout rule not applicable from In progress to Needs testing.
n.fort added a comment to T5804: SNAT "any" interface error.
If you want to match any interface, you can complete remove interface matcher from the rule, since it's not mandatory (as it was in the past):
delete nat source rule 110 outbound-interface
vfomkin updated the task description for T5804: SNAT "any" interface error.
vfomkin updated the task description for T5804: SNAT "any" interface error.
vfomkin created T5804: SNAT "any" interface error.
Dec 5 2023
Dec 5 2023
indrajitr updated the task description for T5803: git/github: Adjust configuration for safe and baseline defaults.
n.fort added a comment to T5779: custom conntrack timeout rule not applicable.
Viacheslav changed the status of T5772: Require HTTPS API server configurations to include at least one key if key-based auth is used from Open to Needs testing.
Dec 4 2023
Dec 4 2023
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.5 Circinus board.
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
tested on 1.5/1.4 :
fernando changed the status of T5796: Openconnect - HTTPS security headers are missing from In progress to Needs testing.
a.apostoliuk changed the status of T4704: Allow to set metric (MED) to rtt with rtt,+rtt or -rtt from Open to Needs testing.
Dec 3 2023
Dec 3 2023
Cheeze_It added a comment to T5530: Add LFA to IS-IS.
Added PR for documentation here https://github.com/vyos/vyos-documentation/pull/1169
c-po added a comment to T5769: VTI tunnels lose their v6 Link Local addresses when set down/up.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2568
c-po moved T5769: VTI tunnels lose their v6 Link Local addresses when set down/up from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5753: Add VXLAN vnifilter support, a subtask of T3700: Support VLAN tunnel mapping of VLAN aware bridges, as Resolved.
Apachez added a comment to T5759: Change VXLAN default MTU to 1500 bytes.
Wouldnt this break things with compatibility with other vendors?
c-po moved T5759: Change VXLAN default MTU to 1500 bytes from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5759: Change VXLAN default MTU to 1500 bytes from Open to Finished on the VyOS 1.4 Sagitta board.
Dec 2 2023
Dec 2 2023
c-po moved T5769: VTI tunnels lose their v6 Link Local addresses when set down/up from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a comment to T5769: VTI tunnels lose their v6 Link Local addresses when set down/up.
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
PR 1.5/1.4 : https://github.com/vyos/vyos-1x/pull/2564
fernando changed the status of T5796: Openconnect - HTTPS security headers are missing from Open to In progress.
indrajitr added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
@Viacheslav, updated PR https://github.com/vyos/vyos-1x/pull/2562
indrajitr added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
Looks like, we still need to keep /etc/avahi/services because avahi-daemon chroot to that location at startup. This is set up at build time via AVAHI_CONFIG_DIR and there is no way to change it at runtime.
Viacheslav added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
Cannot pass smoketest, @indrajitr could you re-check?
DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py
DEBUG - test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack) ... FAIL
DEBUG - test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4) ... FAIL
DEBUG - test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6) ... FAIL
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 3 tests in 11.145s
DEBUG -
DEBUG - FAILED (failures=3)Dec 1 2023
Dec 1 2023
indrajitr renamed T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc from mdns: Cleanup avahi-daemon configuration in /etc to mdns-repeater: Cleanup avahi-daemon configuration in /etc.
indrajitr updated the task description for T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS.
indrajitr triaged T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS as Normal priority.
Nov 30 2023
Nov 30 2023
a.hajiyev added a comment to T5004: DHCP-Relay potential bug. Static configurations of DHCP-Relay Interfaces.
Tested in VyOS 1.3.4
a.hajiyev added a comment to T4601: dhcp : relay agent IP address issue..
Tested in VyOS 1.3.4
a.hajiyev added a comment to T4601: dhcp : relay agent IP address issue..
Tested in VyOS 1.4-rolling-202311100309
jestabro closed T5789: image-tools should copy ssh host keys on image update, a subtask of T4516: Rewrite system image manipulation tools in Python, as Unknown Status.
Nov 29 2023
Nov 29 2023
jestabro closed T5751: Adjust new image tools for non-interactive use, a subtask of T4516: Rewrite system image manipulation tools in Python, as Unknown Status.
jestabro added a comment to T5789: image-tools should copy ssh host keys on image update.
jestabro updated the task description for T5789: image-tools should copy ssh host keys on image update.
c-po moved T5788: frr: update to 9.1 release from Backlog to In Progress on the VyOS 1.5 Circinus board.
c-po added a comment to T5788: frr: update to 9.1 release.
currently OSPF smoketests fail b/c of https://github.com/FRRouting/frr/issues/14910
c-po created T5788: frr: update to 9.1 release.
troggie added a comment to T5364: Make it possible to set the PADO delay to 0.
Good day
a.hajiyev added a comment to T5004: DHCP-Relay potential bug. Static configurations of DHCP-Relay Interfaces.
Tested in VyOS 1.4-rolling-202311100309