Or you can use PBR for destination/source address /port/protocol
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 8 2023
Dec 8 2023
Viacheslav changed the status of T5805: Missed per-interface statistic in telegraf from Open to Needs testing.
Viacheslav claimed T5798: reverse-proxy load-balancing service should support multiple certificates for frontend.
PR https://github.com/vyos/vyos-1x/pull/2590
set load-balancing reverse-proxy service web mode http set load-balancing reverse-proxy service web port 443 set load-balancing reverse-proxy service web ssl certificate cert set load-balancing reverse-proxy service web ssl certificate client1 set load-balancing reverse-proxy backend bk01 server srv01 address 192.0.2.1 set load-balancing reverse-proxy backend bk01 server srv01 port 9898
Dec 7 2023
Dec 7 2023
Could you create a PR?
Viacheslav committed rVYOSONEX7d49f7079f11: nat64: T160: Implement Jool-based NAT64 translator (authored by frebib).
Dec 5 2023
Dec 5 2023
Viacheslav changed the status of T5772: Require HTTPS API server configurations to include at least one key if key-based auth is used from Open to Needs testing.
PR https://github.com/vyos/vyos-1x/pull/2573
set interfaces ethernet eth0 address '192.168.122.14/24' set interfaces ethernet eth0 address '192.168.122.10/24' set interfaces ethernet eth2 address '2001:db8::1/64'
Dec 4 2023
Dec 4 2023
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav edited projects for T5800: HTTPS API unavailable after delete VRF, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Dec 2 2023
Dec 2 2023
Cannot pass smoketest, @indrajitr could you re-check?
DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py
DEBUG - test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack) ... FAIL
DEBUG - test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4) ... FAIL
DEBUG - test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6) ... FAIL
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 3 tests in 11.145s
DEBUG -
DEBUG - FAILED (failures=3)Dec 1 2023
Dec 1 2023
The similar task, leave a link here https://vyos.dev/T3771
Nov 30 2023
Nov 30 2023
Nov 28 2023
Nov 28 2023
You can use GraphQL query. It shows you what does container.py for raw format
set service https api graphql set service https api keys id KID key 'foo'
Query
curl -k --raw 'https://localhost/graphql' \
-H 'Content-Type: application/json' \
-d '{"query":" { ShowImageContainer (data: {key: \"foo\"}) {\n success\n errors\n data {\n result\n }\n}\n}\n"}'For example
Nov 27 2023
Nov 27 2023
Viacheslav awarded T5780: Support for custom firewall-services/ports a Dislike token.
Nov 25 2023
Nov 25 2023
Viacheslav moved T5754: Update to StrongSwan 5.9.11 from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Viacheslav added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.
What is the difference between local router and failover router? It is not clear. My local router in failover mode ;) but state master.
Nov 24 2023
Nov 24 2023
Viacheslav added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.
Do you want to see leases state == backup?
What is the expected?
Nov 23 2023
Nov 23 2023
Viacheslav edited projects for T5777: frr: backport and upstream recent bgpd daemon crashes, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Viacheslav added a comment to T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors.
There are different commands
vyos@r1:~$ show bgp neighbors 192.168.122.14 advertised-routes % No such neighbor or address family vyos@r1:~$ vyos@r1:~$ show ip bgp neighbors 192.168.122.14 advertised-routes vyos@r1:~$
Viacheslav added a comment to T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Should we return global state policy?
It was useful.
Viacheslav added a comment to T5612: Miscellaneous improvements and fixes for dynamic DNS configuration.
Backport to 1.4 has conflicts https://github.com/vyos/vyos-1x/pull/2533
Nov 22 2023
Nov 22 2023
Viacheslav triaged T5774: commit-archive to FTP server broken after update (VyOS 1.5-rolling) as Normal priority.
Works fine
$ curl -k --location --request POST 'https://192.168.122.11/reboot' --form data='{"op": "reboot", "path": ["now"]}' --form key='foo' {"success": true, "data": "Warning: there are unsaved configuration changes!\nRun 'save' command if you do not want to lose those changes after reboot/shutdown.\n\n", "error": null}
@a.apostoliuk will be available in the next rolling release.
Viacheslav changed the status of T5767: Add reboot and poweroff the system via API from In progress to Needs testing.
Nov 21 2023
Nov 21 2023
Viacheslav changed the status of T5767: Add reboot and poweroff the system via API from Open to In progress.
Nov 20 2023
Nov 20 2023
Did you try it?
set interfaces pppoe pppoe1 ipv6
If someone will implement it, there was a discussion https://github.com/vyos/vyos-1x/pull/2488
Nov 18 2023
Nov 18 2023
Nov 17 2023
Nov 17 2023
Viacheslav renamed T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS from Upgrade from 1.3.4 to 1.4 Rolling fails. to Upgrade from 1.3.4 to 1.4 Rolling fails QoS.
Viacheslav added a project to T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS: VyOS 1.5 Circinus.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces", a subtask of T5747: op-mode add MAC VRF and MTU for show interfaces summary, from Open to In progress.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces" from Open to In progress.
Nov 16 2023
Nov 16 2023
Viacheslav updated the task description for T5749: Show MAC address VRF and MTU by default for "show interfaces".
Viacheslav changed the status of T5747: op-mode add MAC VRF and MTU for show interfaces summary from Open to Needs testing.
As I undestand it is possible now to create multiple auth ID's
vyos@r4# set vpn ipsec authentication psk FOO id Possible completions: <text> ID used for authentication
Not sure about other options.
Viacheslav added a project to T5747: op-mode add MAC VRF and MTU for show interfaces summary: VyOS 1.4 Sagitta.
Viacheslav renamed T5747: op-mode add MAC VRF and MTU for show interfaces summary from op-mode add MAC and MTU for show interfaces to op-mode add MAC VRF and MTU for show interfaces summary.
Viacheslav closed T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix as Resolved.
Viacheslav changed the status of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Needs testing.
Nov 15 2023
Nov 15 2023
PR https://github.com/vyos/vyos-1x/pull/2491
vyos@r4# run show interfaces summary
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address MAC VRF MTU S/L Description
----------- ----------------- ----------------- ------- ----- ----- -------------
dum0 203.0.113.1/32 96:44:ad:c5:a1:a5 default 1500 u/u
eth0 192.168.122.14/24 52:54:00:f1:fd:77 default 1500 u/u WAN
eth1 192.0.2.1/24 52:54:00:04:33:2b foo 1500 u/u LAN-eth1
eth1v10v4 10.10.10.10/24 00:00:5e:00:01:0a foo 1500 u/u
eth2 - 52:54:00:40:2e:af default 1504 u/u LAN-eth2
eth3 - 52:54:00:09:a4:b4 default 1500 A/D
eth4 - 52:54:00:2c:51:09 default 1500 A/D
eth5 - 52:54:00:f3:1d:e8 default 1500 A/D
lo 127.0.0.1/8 00:00:00:00:00:00 default 65536 u/u
::1/128Viacheslav added a project to T5745: conntrack-sync: Multiprimary setups for HA/VRRP: VyOS 1.5 Circinus.
Viacheslav moved T5732: generate firewall rule-resequence drops geoip country-code from output from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T3983: show pki certificate Doesnt show x509 certificates: VyOS 1.5 Circinus.
Viacheslav changed the status of T5726: HTTPS API image cannot be updated from Open to Needs testing.
Viacheslav changed the status of T5732: generate firewall rule-resequence drops geoip country-code from output from Open to In progress.
Viacheslav moved T5726: HTTPS API image cannot be updated from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5
https://github.com/vyos/vyos-1x/pull/2483