I also agree that the "default" stripping-behaviour should definitely be rethought for certain parts of the config. For example: the full public-key gets shown of the wireguard-peers on interfaces.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 17 2024
May 17 2024
Viacheslav closed T6350: CGNAT add op-mode to get current port allocation mapping, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
a.apostoliuk changed the status of T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses from In progress to Open.
Viacheslav changed the status of T6350: CGNAT add op-mode to get current port allocation mapping, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6350: CGNAT add op-mode to get current port allocation mapping from Open to In progress.
May 16 2024
May 16 2024
aga added a comment to T6355: Make the strip-private filter obfuscate only passwords and private keys.
jestabro changed the status of T6149: Update node_data when merging nodes in reference tree generation from Unknown Status to Resolved.
PR https://github.com/vyos/vyos-1x/pull/3466
vyos@r4:~$ show nat cgnat allocation Internal IP External IP Port range ------------- --------------- ------------ 100.64.0.0 192.168.122.222 1024-3023 100.64.0.1 192.168.122.222 3024-5023 100.64.0.2 192.168.122.222 5024-7023 100.64.0.3 192.168.122.222 7024-9023 100.64.0.4 192.168.122.222 9024-11023 100.64.0.5 192.168.122.222 11024-13023 100.64.0.6 192.168.122.222 13024-15023 100.64.0.7 192.168.122.222 15024-17023 100.64.0.8 192.168.122.222 17024-19023 100.64.0.9 192.168.122.222 19024-21023 100.64.0.10 192.168.122.222 21024-23023 100.64.0.11 192.168.122.222 23024-25023 100.64.0.12 192.168.122.222 25024-27023 100.64.0.13 192.168.122.222 27024-29023 100.64.0.14 192.168.122.222 29024-31023 100.64.0.15 192.168.122.222 31024-33023 vyos@r4:~$
Viacheslav changed the status of T6351: CGNAT add check if external and internal pools exists, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6351: CGNAT add check if external and internal pools exists from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/3464
set nat cgnat pool external ext1 external-port-range '1024-65535' set nat cgnat pool external ext1 per-user-limit port '2000' set nat cgnat pool external ext1 range 192.168.122.222/32 set nat cgnat pool internal int1 range '100.64.0.0/28' set nat cgnat rule 10 source pool 'fake-pool' set nat cgnat rule 10 translation pool 'ext1'
Viacheslav updated the task description for T6351: CGNAT add check if external and internal pools exists.
I think a warning is better than to block it from being set, specially since the workaround to load it through already existing config still remains.
Viacheslav changed the status of T6347: CGNAT external pools containing dashes cause Traceback error, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6347: CGNAT external pools containing dashes cause Traceback error from Open to In progress.
natali-rs1985 changed Is it a breaking change? from none to compatible on T6348: SNAT op-mode fails with flowtable offload entries.
natali-rs1985 changed the status of T6348: SNAT op-mode fails with flowtable offload entries from Open to In progress.
Viacheslav triaged T6350: CGNAT add op-mode to get current port allocation mapping as Wishlist priority.
Viacheslav updated the task description for T6348: SNAT op-mode fails with flowtable offload entries.
Viacheslav updated the task description for T6348: SNAT op-mode fails with flowtable offload entries.
Viacheslav triaged T6347: CGNAT external pools containing dashes cause Traceback error as Normal priority.
Viacheslav changed the status of T6058: Commit-Archive Save doesn't use https_proxy from Needs reporter action to Open.
sorry for the late reply.You don't need any special commands. The only thing you have to set is the proxy and the commit archive.
c-po moved T6333: non-free-firmware to trixie from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0) board.
zsdc moved T6038: Losing default route after first reboot (cloud-init & DHCP) from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-GA) board.
zsdc changed the status of T6038: Losing default route after first reboot (cloud-init & DHCP), a subtask of T5907: cloud-init root task for 1.5 and 1.4 , from Open to Needs testing.
zsdc changed the status of T6038: Losing default route after first reboot (cloud-init & DHCP) from Open to Needs testing.
@thannaske it would be very nice if you could re-check now this with VyOS 1.5. It should be fixed by https://github.com/vyos/vyos-cloud-init/commit/70304ff90d931265cb736ace692967242c9b9729
May 15 2024
May 15 2024
syncer closed T4909: Rewrite the NTP op mode in the new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
jestabro changed the status of T3876: Replace vyos-netplug with a VyOS link state monitor service from In progress to On hold.
This was a worthwhile investigation, with the goal of using Cython as a method of easily wrapping the standard netlink headers. Although workable, it appeared more trouble than it's worth, as one still has to cheat to navigate e.g. pass by reference (1), and limitations of Cython at the time (2). A much better approach would be a standard Python extension module ... set to 'on hold' for reference and until we have a plan for development, as has been recently discussed.
Unknown Object (User) created T6340: Test task.
dmbaturin renamed T6339: Display the flavor name and build comment in "show version" from Display the flavor name in "show version" to Display the flavor name and build comment in "show version".
masterit added a comment to T5647: Extend failover route functionality to use dynamically assigned interface next hops.
Is there any movement on implementing this? As per T2760 this is the only way to resolve IPsec on dynamic ip's
syncer moved T5566: Disable 802.3az/EEE (energy efficient ethernet) from Finished to Open on the VyOS 1.5 Circinus board.
syncer moved T5900: Improve reliability of the vyos powerdns recursor implementation from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Viacheslav moved T5900: Improve reliability of the vyos powerdns recursor implementation from Open to Finished on the VyOS 1.5 Circinus board.
syncer edited projects for T5900: Improve reliability of the vyos powerdns recursor implementation, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
Viacheslav closed T5900: Improve reliability of the vyos powerdns recursor implementation as Resolved.
syncer moved T5566: Disable 802.3az/EEE (energy efficient ethernet) from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
syncer changed the status of T5566: Disable 802.3az/EEE (energy efficient ethernet) from Unknown Status to Resolved.
syncer moved T6335: Add/update EVPN op commands from Open to 1.4.0-GA on the VyOS 1.4 Sagitta board.
syncer edited projects for T2004: BGP FQDN capability not sending domain name, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T2207: IPv6 route install failed, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T2287: LLDP not working on X710 adapter, i40e driver, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T2840: "startup-beep" beeps too early, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T3529: vyos.frr class has no support for multi-line modify_section, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T5892: container network interface and policy fails to apply after reboot, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T6058: Commit-Archive Save doesn't use https_proxy, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T2468: Passwords with special characters fail in commit-archive, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T6101: IPsec some proposal combinations could be invalid and the service strongswan stops, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T6097: vrf_zones blocking ipv6 traffic, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer edited projects for T6122: Protocols under VRF config run in a single pass against their conf_mode scripts, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).
syncer moved T5069: BGP large-community-list regex validation is incomplete from 1.4.0-epa3 to 1.4.0-GA on the VyOS 1.4 Sagitta board.
syncer moved T5487: OPENVPN -DEPRECATED OPTION: --cipher from 1.4.0-epa3 to 1.4.0-GA on the VyOS 1.4 Sagitta board.
syncer moved T5752: Check compatibility of new image tools with XCP-NG images from 1.4.0-epa3 to 1.4.0-GA on the VyOS 1.4 Sagitta board.
syncer moved T6301: DHCPv6 client address causes long commits from 1.4.0-epa3 to 1.4.0-GA on the VyOS 1.4 Sagitta board.