- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Feb 12 2024
Feb 12 2024
c-po closed T5849: Add SRv6 route commands, a subtask of T5788: frr: update to 9.1 release, as Resolved.
c-po moved T6010: Support setting multiple values in BGP path-attribute from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po closed T6004: Missing RPKI boot priority prevents it from loading, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
c-po moved T6032: bgp: add EVPN MAC-VRF Site-of-Origin support from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T6032: bgp: add EVPN MAC-VRF Site-of-Origin support from Open to Finished on the VyOS 1.5 Circinus board.
sarthurdev added a comment to T5993: DHCP6: no leases are created unless specifying a "interface" on the zone.
This does seem to be new behaviour introduced with Kea. ISC dhcpd did previously assume local distribution of a subnet based on the interface having an address within the subnet, Kea has changed to require this being explicitly defined.
sarthurdev moved T5981: IPsec site-to-site migrated PKI ca certificates are created with an '@' from Open to In Progress on the VyOS 1.5 Circinus board.
sarthurdev changed the status of T5981: IPsec site-to-site migrated PKI ca certificates are created with an '@' from Open to Needs testing.
I'm thinking end of the day an integrated learn address script that can update vyos's forwarder or any of the upstream DNS its using, and then calling learn-address on each client learned in the openvpn is the ideal way to do it since learn-address is built into openvpn
Here is a redacted version
@evilmog Can you provide the OpenVPN/other configuration to achieve what you want?
n.fort changed the status of T6019: Bump nftables and libnftnl version from In progress to Needs testing.
n.fort changed the status of T6009: Firewall - Time not working properly when not using UTC from In progress to Needs testing.
Viacheslav moved T3843: l2tp configuration not cleared after delete from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T3843: l2tp configuration not cleared after delete from Open to Finished on the VyOS 1.5 Circinus board.
It cannot be backported to 1.3 as there are no config-mode-dependencies
Viacheslav added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.
There have been no reports since 2021
PR for fix in vyos-build: https://github.com/vyos/vyos-build/pull/501
PR for smoketest (modified because of change in build): https://github.com/vyos/vyos-1x/pull/2991
PR for fix in vyos-build: https://github.com/vyos/vyos-build/pull/501
PR for smoketest (modified because of change in build): https://github.com/vyos/vyos-1x/pull/2991
Sonicbx added a comment to T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS.
What is the resolution? How was it resolved? @Viacheslav
HollyGurza changed the status of T6020: VRRP health-check script is not applied correctly in keepalived.conf from Open to In progress.
dmbaturin changed the edit policy for T6020: VRRP health-check script is not applied correctly in keepalived.conf.
Viacheslav moved T5926: IPSEC does not apply after l2tp configuration was changed from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5926: IPSEC does not apply after l2tp configuration was changed from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav edited projects for T4393: sstp: add support for configuring host-name (SNI), added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.7).
@TheSin- we also need this feature because our old blacklisting implementation is no longer working since the new nft implementation replaces sets after changes in the config.
So we have to go the official way and I just stumbled over your feature request when I started to make my own implementation.
Even when I have not implemented any core parts for VyOS yet, I offer my help with the implementation of this feature.
Viacheslav reopened T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled as "Open".
Feb 12 2024, 9:45 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Viacheslav closed T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled as Resolved.
Feb 12 2024, 9:44 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Viacheslav removed a project from T2005: Two CEASE notifications sent to BGP peers during reboot: VyOS 1.3 Equuleus (1.3.7).
Viacheslav closed T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS as Not Applicable.
Feb 11 2024
Feb 11 2024
c-po updated the task description for T6034: rpki: move file based SSH keys for authentication to PKI subsystem.
c-po updated the task description for T6034: rpki: move file based SSH keys for authentication to PKI subsystem.
c-po changed the status of T6034: rpki: move file based SSH keys for authentication to PKI subsystem, a subtask of T3642: PKI configuration, from Open to In progress.
c-po changed the status of T6034: rpki: move file based SSH keys for authentication to PKI subsystem from Open to In progress.
ServerForge renamed T6033: hsflowd fails to start when using a tunnel interface from hsflowd fails to start when using a VRF to hsflowd fails to start when using a tunnel interface.
Seems its actually the tunnel interface it doesnt like, not the address.
c-po changed the status of T6032: bgp: add EVPN MAC-VRF Site-of-Origin support, a subtask of T5788: frr: update to 9.1 release, from Open to In progress.
c-po changed the status of T6032: bgp: add EVPN MAC-VRF Site-of-Origin support from Open to In progress.
Feb 10 2024
Feb 10 2024
c-po moved T6010: Support setting multiple values in BGP path-attribute from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T6010: Support setting multiple values in BGP path-attribute from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6010: Support setting multiple values in BGP path-attribute from Open to In progress.
c-po moved T6004: Missing RPKI boot priority prevents it from loading from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T6004: Missing RPKI boot priority prevents it from loading from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T2044: RPKI doesn't boot properly from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.7) board.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2962
c-po closed T6023: rpki: add support for CLI knobs expire-interval and retry-interval, a subtask of T6004: Missing RPKI boot priority prevents it from loading, as Resolved.
c-po moved T6023: rpki: add support for CLI knobs expire-interval and retry-interval from Open to Finished on the VyOS 1.4 Sagitta board.
syncer edited projects for T2612: HTTPS API, changing API key fails but goes through, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T5624: Remove /etc/debian_version from the image, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T5761: Allow PPPoE interface to be assigned IPv6 address via DHCPv6, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T681: Traffic-policy (shaper), returns: 'lowdelay unknown DSCP value', added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
Feb 10 2024, 9:25 AM · Restricted Project
syncer edited projects for T660: 802.1p CoS priority support, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
Feb 10 2024, 9:24 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
syncer edited projects for T1161: Does Vyos take advantage of linux's improved security features?, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1244: Add support for StartupResync in conntrack-sync, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
Feb 10 2024, 9:23 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
syncer edited projects for T1487: DNS (pdns_recursor) stats logs not saved to disk, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1790: OSPF Exchanged Routes marked as invalid when run through a GRE PTMP/PTP OSPF between peers , added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T1941: Config mismatch with FRR on misconfiguration of V6 peer, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2003: BGP FQDN capability has improper hostname after new image install, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2005: Two CEASE notifications sent to BGP peers during reboot, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2044: RPKI doesn't boot properly, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2113: OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
Feb 10 2024, 9:21 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), openvpn
syncer edited projects for T2145: openvpn: server default topology net30 is incompatible with static client IPs for Windows clients, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2195: Support for encrypted DNS: dnscrypt, DoH, DoT, anonymized DNS, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2196: Dynamic ipv4 interface list hairpin, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2207: IPv6 route install failed, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2251: VRF communication breaks when utilizing zone-based firewalling, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2287: LLDP not working on X710 adapter, i40e driver, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2498: Expected error when deleting vif that has dhcp-server configured, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2616: BFD Configuration causes flapping, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2700: Redirecting traffic from PPPoE interface to IFB fails, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2762: VRF: when SSHd is VRF bound all commands are executed in VRF context, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2869: Intel ethernet driver defaults sub-optimal, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).
syncer edited projects for T2840: "beep-if-fully-booted" beeps too early, added: VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).