The idea so far is to try to increase the IFNAMSIZ constant in the kernel and see if it works or blows up with applications we use.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 12 2024
Apr 12 2024
dmbaturin closed T6216: Firewall group names that contain the '+' character break the config, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
dmbaturin closed T6216: Firewall group names that contain the '+' character break the config as Resolved.
dmbaturin added a comment to T6223: The number of symbols for iproute2 kernel interface name is limited.
dmbaturin edited projects for T5878: Make the list of SSH server ciphers configurable, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5874: ipsec site-to-site: Support binding multiple tunnels to one VTI, customizing local and remote traffic selectors, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5873: ipsec remote access VPN: support VTI interfaces, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5351: VyOS deployed with cloud-init improperly saves config.boot, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
dmbaturin removed a project from T5323: VRF-aware Multicast diagnostic commands support: VyOS 1.4 Sagitta.
dmbaturin removed a project from T5682: create more robust access controls for sshd and snmpd: VyOS 1.4 Sagitta.
dmbaturin edited projects for T5636: Add GeoIP matching support for policy route, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5635: Policy local-route ability with uid or gid, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin changed the status of T5631: Ability to export the current configuration in JSON format from Unknown Status to Resolved.
dmbaturin renamed T5631: Ability to export the current configuration in JSON format from Ability to have the current configuration in JSON format to Ability to export the current configuration in JSON format.
dmbaturin edited projects for T5535: Move disable-directed-broadcast to firewall global-options, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5497: Add ability to resequence rule numbers for firewall, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
Already implemented
vyos@r4# set interfaces macsec macsec0 security static Possible completions: key MACsec static key +> peer MACsec peer name
dmbaturin edited projects for T4777: Ability to get logs in machine readable format, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5569: Make it possible to verify the signature of an installed image, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5454: Add zebra dplane limit as a configurable option of FRR, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin removed a project from T5451: Firewall: Support combined ipv4&6 rules using netfilter family inet: VyOS 1.4 Sagitta.
dmbaturin removed a project from T5442: Allow configuring where container overlays are stored: VyOS 1.4 Sagitta.
dmbaturin edited projects for T5441: Add the ability to mount an external device, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5433: Include memtest86+ as boot-option, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5397: NETEM (Network Emulator) - Please add configurable jitter, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5396: Swarm Client, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5395: Swarm discovery PoC, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5394: Swarm node evolution PoC, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5393: Swarm Service VyOS configuration and tooling, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5392: Swarm consent PoC, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5391: Swarm Service, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5390: VyOS public/private Swarm, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5381: Extend VyOS Configuration for joining kubelet service, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5378: Request for clearing single entry multicast route, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5375: It should be possible to set multiple advertised speed/duplex with autoneg on through config, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5371: "system name-server" is not vrf aware, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5813: Update from mounted ISO, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin removed a project from T5786: Add set/show system image to /image endpoint: VyOS 1.4 Sagitta.
dmbaturin removed a project from T5735: Add CLI and configuration scripts for stunnel: VyOS 1.4 Sagitta.
Viacheslav changed the subtype of T6072: https api cors allow-origin not applied from "Bug" to "Feature Request".
Viacheslav updated subscribers of T6082: BGP doesn't allow the same local AS and remote AS in peer groups.
@cuongdt1994 could you add an example of integration and configuration?
Viacheslav added a comment to T6099: Suppress unsupported interfaces from appearing in messages log by Telegraf .
@Giggum yes you can choose which image will be booted
vyos@r4:~$ set system image default-boot The following images are available: 1: 1.5-rolling-202404120636 (running) (default boot) 2: 1.5-rolling-202404090019 Select an image to set as default:
dmbaturin edited projects for T4797: External address/network lists for firewall (Local and remote), added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav edited projects for T6099: Suppress unsupported interfaces from appearing in messages log by Telegraf , added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T3410: Unsafe processing of special characters in CLI autocomplete, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.4 Sagitta.
dmbaturin removed a project from T5294: Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups): VyOS 1.4 Sagitta.
dmbaturin edited projects for T5278: custome firewall network-group and update CIDR from a file, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5263: Generalization of REST configure endpoint, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5205: Rewrite load-balancing op-mode to vyos.opmode format, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5189: bgp: add evpn anycast gateway support, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5177: Make the chain policy configurable, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5119: "fib" statement support for firewall and nat configuration, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5116: Better VRF support, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5067: Recursively change group names in firewall rules, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5046: CLI for password complexity enforcement PAM module, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5041: PMTU per route-based , added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5019: Add tunnel type bareudp, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5016: Policy Route - Add load balancer capabilities, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T5000: Extend NAT66 NPTv6 to support dynamic prefix mapping , added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4996: Exposing bgp received and advertised routes via the GraphQL HTTP-API, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4984: Firewall add mark for outgoing packets, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4982: OpenConnect should have TLS 1.0 and TLS 1.1 disabled by default, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta (1.4.0-epa1).
dmbaturin edited projects for T4972: Support FQDN and IPv6 addresses for RADIUS servers in accel-ppp-backed protocols, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4945: Telegraf- allow the plugin to run custom-script, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4936: Certificate Auto Enrollment via SCEP, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4931: Failed to build firmware for arm64, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4930: Allow using domain names for WireGuard peer addresses, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4921: Miniupnpd only allows for IGDv2 while IGDv1 is mostly common used and supported, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T4915: Minisign verification failure == pass??, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
Viacheslav removed a project from T2818: Add the possibility to passthrough LLDP, LACP, etc.: VyOS 1.4 Sagitta.
The kernel still does not support it without patches
root@r4:/home/vyos# echo "65535" | tee /sys/class/net/br2/bridge/group_fwd_mask 65535 tee: /sys/class/net/br2/bridge/group_fwd_mask: Invalid argument root@r4:/home/vyos#
@tjh Do you still need this package? As it was relevant for ipset/iptables
iprange/stable 1.0.4+ds-2 amd64 optimizing ipsets for iptables