In T6136#180149, @n.fort wrote:And a simple note for your usage @wenzk
Change
set firewall ipv4 name WAN_IN rule 30 icmp
to this:
set firewall ipv4 name WAN_IN rule 30 protocol icmp
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Mar 19 2024
Mar 19 2024
HollyGurza changed the status of T6106: Improve the commit error message for the case when route-reflector-client option is defined in a peer-group from Open to In progress.
wenzk added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.
Mar 18 2024
Mar 18 2024
c-po added a project to T6127: Ability to view logs for rules with Offload not functional: VyOS 1.5 Circinus.
馃憤
Thanks
Fix to docs pending:
https://github.com/vyos/vyos-documentation/pull/1331
Well that is a fault of the docs; I will add now. Thanks !
@jestabro this is perfect, I am so sorry for creating a false feature request. The doc does not mention it, I should have looked into the server code to check first. My bad, all good now.
curl -k -X POST -Fkey=baz -Fdata='{"op": "exists", "path": ["service","no","such","subpath"]}' https://192.168.122.238/retrieve|jq
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 340 100 47 100 293 547 3414 --:--:-- --:--:-- --:--:-- 4000
{
"success": true,
"data": false,
"error": null
}@penetal does the operation 'exists' not suffice for your needs ?
n.fort changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from Confirmed to In progress.
n.fort added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.
And a simple note for your usage @wenzk
Change
set firewall ipv4 name WAN_IN rule 30 icmp
to this:
set firewall ipv4 name WAN_IN rule 30 protocol icmp
Viacheslav changed the status of T6121: Extend service config-sync for sections vpn, policy, vrf from Open to Needs testing.
Viacheslav triaged T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/ as Normal priority.
Viacheslav changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from Open to Confirmed.
Viacheslav triaged T6137: dhcp files and directory permission not correct after image uprgading as Normal priority.
Mar 17 2024
Mar 17 2024
Here's the generated configuration from /run/conntrackd/conntrackd.conf:
# Synchronizer settings
Sync {
Mode FTFW {
DisableExternalCache on
}
Multicast {
IPv4_address 225.0.0.50
Group 3780
IPv4_interface 192.168.15.3
Interface bond0.110
SndSocketBuffer 104857600
RcvSocketBuffer 104857600
Checksum on
}
}
Helper {
Type rpc inet tcp {
QueueNum 3
Policy rpc {
ExpectMax 1
ExpectTimeout 300
}
}
Type rpc inet udp {
QueueNum 4
Policy rpc {
ExpectMax 1
ExpectTimeout 300
}
}
Type tns inet tcp {
QueueNum 5
Policy tns {
ExpectMax 1
ExpectTimeout 300
}
}
}penetal updated the task description for T6135: HTTPS API endpoint to check if an empty config exists.
c-po changed the status of T6129: bgp: add route-map option "as-path exclude all" from Open to In progress.
c-po changed the status of T6129: bgp: add route-map option "as-path exclude all", a subtask of T5788: frr: update to 9.1 release, from Open to In progress.
Mar 16 2024
Mar 16 2024
We'll update the key and make a post about it soon, sorry for the lengthy mix-up.
robertoberto added a comment to T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/.
comments above are for https://vyos.net/get/nightly-builds/
@jestabro I have tested my usecase now and it seems the problem is fixed and the API no longer segfaults. Thank you so much for the fix and the fantastic turn around on this.
Mar 15 2024
Mar 15 2024
n.fort added a comment to T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity.
PR for 1.5: https://github.com/vyos/vyos-1x/pull/3137
daniil renamed T6125: Support 802.1ad (0x88a8) vlan filtering for bridge from Support 802.1ad (0x88a8) for bridge to Support 802.1ad (0x88a8) vlan filtering for bridge.
Viacheslav changed the status of T6109: remote syslog does not get all the logs from Open to Needs reporter action.
@m.serdienis Add set of configuration commands to reproduce.
Viacheslav triaged T6105: Service HTTPS using ACME certificate does not present full chain as Normal priority.
I don't think it is expected to get speed to the node itself.
A router is generally used for forwarding traffic. It is better to use iperf to check the speed between 2 hosts.
c-po moved T6118: radvd: RFC8781: add nat64prefix support from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0) board.
Giggum changed Version from - to VyOS 1.4.0-epa1 on T6123: Limit NTP allow-client config to internal addresses by default.
Mar 14 2024
Mar 14 2024
L0crian updated the task description for T6122: Protocols under VRF config run in a single pass against their conf_mode scripts.
c-po moved T6118: radvd: RFC8781: add nat64prefix support from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6118: radvd: RFC8781: add nat64prefix support from Open to 1.4.0 on the VyOS 1.4 Sagitta board.
Viacheslav triaged T6122: Protocols under VRF config run in a single pass against their conf_mode scripts as Normal priority.
PR https://github.com/vyos/vyos-1x/pull/3132
set service config-sync mode 'load' set service config-sync secondary address '192.0.2.1' set service config-sync secondary key 'xxx' set service config-sync section firewall set service config-sync section interfaces pseudo-ethernet set service config-sync section interfaces virtual-ethernet set service config-sync section nat set service config-sync section nat66 set service config-sync section protocols static set service config-sync section pki set service config-sync section vrf
Change some section:
vyos@r4# set nat source rule 100 outbound-interface name 'eth0' [edit] vyos@r4# set nat source rule 100 source address '10.0.0.0/24' [edit] vyos@r4# set nat source rule 100 translation address 'masquerade' [edit] vyos@r4# commit INFO:vyos_config_sync:Config synchronization: Mode=load, Secondary=192.0.2.1 [edit] vyos@r4#
natali-rs1985 added a comment to T5504: Make it possible to set more than one peer-address in unicast VRRP.
PR for 1.3: https://github.com/vyos/vyos-1x/pull/3130
Unknown Object (User) created T6120: integration speedtest cli.
Mar 13 2024
Mar 13 2024
I have tested FRR NHRP with IPv6 as an overlay and I found some issues.
HollyGurza changed the status of T1871: Add MTU option to "traffic-policy limiter" from Open to In progress.
dongjunbo added a comment to T5892: container network interface and policy fails to apply after reboot.
Can we let local-route support group options both in destination and source ?
set policy local-route rule 10 destination Possible completions: + address IPv4 address or prefix port Port number used by connection
Mar 12 2024
Mar 12 2024
PR for 1.4 https://github.com/vyos/vyos-build/pull/528
Close the task due to the reporter not responding.
Reopen if you still have this bug.
Seems fixed, checked on VyOS 1.5-rolling-202403110024
vyos@r4# rollback Possible completions: <N> Rollback to revision N (currently requires reboot)
The similar task T5956
dmbaturin renamed T3202: Enable wireguard debug messages by default from enable wireguard debug messages per default to Enable wireguard debug messages by default.
dmbaturin changed the status of T6020: VRRP health-check script is not applied correctly in keepalived.conf from Unknown Status to Resolved.
dmbaturin renamed T6020: VRRP health-check script is not applied correctly in keepalived.conf from vrrp health-check script not applied correctly in keepalived.conf to VRRP health-check script is not applied correctly in keepalived.conf.
dmbaturin edited projects for T6020: VRRP health-check script is not applied correctly in keepalived.conf, added: VyOS 1.4 Sagitta (1.4.0-epa2); removed VyOS 1.4 Sagitta (1.4.0-epa1).
Viacheslav added a comment to T6096: Config commits are not synced properly because 00vyos-sync is deleted by vyos-router.
For 1.3 you have to add a separate PR
Viacheslav added a comment to T5504: Make it possible to set more than one peer-address in unicast VRRP.
Do we need it for 1.3?
If yes, a separate PR should exist, as a backport is impossible.
Viacheslav moved T2998: SNMP v3 oid "exclude" option doesn't work from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.7) board.
Mar 11 2024
Mar 11 2024
dmbaturin closed T5504: Make it possible to set more than one peer-address in unicast VRRP as Resolved.
dmbaturin closed T6083: ethtool: move string parsing to JSON parsing, a subtask of T6078: Update ethtool to 6.6, as Resolved.