I think this should be considered expected behaviour, during the several iterations of the firewall (including Vyatta era - without explicit tables and chains) we've not changed the logic of enabling conntrack.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Feb 28 2025
Feb 28 2025
I did more tests. If I create any rule called conntrack (in input, forward, with different conditions), Conntrack affects all traffic that passes through or to the router.
Viacheslav moved T7204: Containers add capability CAP_MKNOD from Need Triage to Completed on the VyOS Rolling board.
c-po raised the priority of T7208: Some sysctl options like nf_conntrack_buckets are different between a clean install and the first reboot from High to Urgent!.
SrividyaA triaged T7207: OpenVPN Op-cmd: Client ip address is not displayed in the server-bridge mode as Normal priority.
Feb 27 2025
Feb 27 2025
Viacheslav moved T7204: Containers add capability CAP_MKNOD from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin edited projects for T7166: VXLAN interfaces disappear if the parent wireguard interface was changed, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
Viacheslav added projects to T7204: Containers add capability CAP_MKNOD: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2).
Feb 26 2025
Feb 26 2025
dmbaturin renamed T7171: Add port option to GENEVE tunnels from Add dstport option to GENEVE tunnels to Add port option to GENEVE tunnels.
dmbaturin renamed T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none) from LLDP receive-only to Add an option to configure LLDP operation mode (receive, transmit, both, or none).
Viacheslav updated the task description for T7134: Add hwloc package to get info and generate CPU NUMA topology.
Viacheslav changed the status of T7116: Adding community 'internet' throws an exception from Open to In progress.
Alright - I've created PRs https://github.com/vyos/vyos-1x/pull/4371 and https://github.com/vyos/vyos-documentation/pull/1603 for this one.
Feb 25 2025
Feb 25 2025
c-po moved T7180: Unhandled exception in SNMP v3 configuration without engineid. from Need Triage to Completed on the VyOS Rolling board.
c-po moved T7180: Unhandled exception in SNMP v3 configuration without engineid. from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
c-po moved T7180: Unhandled exception in SNMP v3 configuration without engineid. from Open to Finished on the VyOS 1.5 Circinus board.
a.apostoliuk changed the status of T7180: Unhandled exception in SNMP v3 configuration without engineid. from In progress to Needs testing.
c-po moved T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none) from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a comment to T6847: Kernel: update intel OOT (Out Of Tree) drivers for i40e, ixgbe and ice.
We can build ixgbe, ixgbevf and ice drivers from GitHut source for Kernel 6.6
c-po moved T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none) from Need Triage to Completed on the VyOS Rolling board.
c-po closed T7192: Bridge allows to specify the same member interface more than one time as Resolved.
c-po moved T7192: Bridge allows to specify the same member interface more than one time from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T7192: Bridge allows to specify the same member interface more than one time from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
natali-rs1985 changed the status of T7166: VXLAN interfaces disappear if the parent wireguard interface was changed from Open to In progress.
Feb 24 2025
Feb 24 2025
Viacheslav changed the status of T7190: Allow configuring more timeouts for HAProxy from In progress to Needs testing.
Viacheslav added projects to T7190: Allow configuring more timeouts for HAProxy: VyOS Rolling, VyOS 1.5 Circinus.
c-po moved T7192: Bridge allows to specify the same member interface more than one time from Need Triage to Completed on the VyOS Rolling board.
c-po changed the status of T7192: Bridge allows to specify the same member interface more than one time from Open to In progress.
c-po changed the status of T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none) from Open to In progress.
Cannot reproduce it. It is necessary to get a configuration:
I tested this config and all works fine
VyOS 1.5-rolling-202502220006 + latest vyos-1x
set load-balancing haproxy backend bk01 server srv01 address '192.168.122.16' set load-balancing haproxy backend bk01 server srv01 check set load-balancing haproxy backend bk01 server srv01 port '8000' set load-balancing haproxy backend bk01 server srv02 address '192.168.122.16' set load-balancing haproxy backend bk01 server srv02 check set load-balancing haproxy backend bk01 server srv02 port '8888' set load-balancing haproxy service web backend 'bk01' set load-balancing haproxy service web port '80'
natali-rs1985 moved T6628: Add an option to assign static IP address to IPoE server users from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
natali-rs1985 moved T6628: Add an option to assign static IP address to IPoE server users from Open to Finished on the VyOS 1.5 Circinus board.
@Viacheslav Yes, I will test it once it is included in the next rolling release.
Feb 23 2025
Feb 23 2025
c-po added a comment to T7192: Bridge allows to specify the same member interface more than one time.
c-po updated the task description for T7192: Bridge allows to specify the same member interface more than one time.
c-po changed the status of T7191: Incomplete error message on trying to add a physical interfaces to more than one bonding interface from Open to In progress.
Feb 22 2025
Feb 22 2025
Viacheslav changed the status of T7178: Enable vDPA (VirtIO Data Path Acceleration) Support from Open to Needs testing.
Feb 21 2025
Feb 21 2025
sarthurdev changed the status of T7187: haproxy op-mode missing after rename from Open to Needs testing.
@talmakion I think it good idea is removed , this attribute was added by cisco in the early day of internet, as you mentioned , it can be solved using 0:0 in a RM.
sarthurdev moved T5200: Static routing tables are not created with dhcp route from Open to Finished on the VyOS 1.5 Circinus board.
Can't reproduce the issue
Looks like this was deprecated in FRR a while ago: https://github.com/FRRouting/frr/commit/81a57d81812115bdbab25168e86e509e2db607a1
Feb 20 2025
Feb 20 2025
It looks like the problem is in this `key_mangling', it's probably that function where these kind of errors are given:
sarthurdev added a project to T7148: Global state-policy invalid cannot be set to action reject: VyOS 1.5 Circinus.
I've extend the test in the enviorment , it looks like there is a problem with names in our policies : eg , where it brokes the configuration :
@daniel.arconada are you able to test it with the next rolling release? Those options will be included.
@daniel.arconada are you able to test it with the next rolling release? Those options will be included.
c-po moved T7161: "redistribute table" option in BGP does not work correctly from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
c-po closed T7163: Add route-map and metric options to "redistribute table" in BGP, a subtask of T7161: "redistribute table" option in BGP does not work correctly, as Resolved.
c-po closed T7163: Add route-map and metric options to "redistribute table" in BGP, a subtask of T6747: frr: upgrade routing suite to 10.2, as Resolved.
c-po moved T7163: Add route-map and metric options to "redistribute table" in BGP from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
c-po edited projects for T7163: Add route-map and metric options to "redistribute table" in BGP, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
c-po moved T7163: Add route-map and metric options to "redistribute table" in BGP from Open to Finished on the VyOS 1.5 Circinus board.
jestabro moved T7170: Fix sed pattern for change in OPAM install.sh from Need Triage to Completed on the VyOS Rolling board.
jestabro moved T7170: Fix sed pattern for change in OPAM install.sh from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Restricted Repository Identity closed T6628: Add an option to assign static IP address to IPoE server users as Resolved by committing rVYOSONEX6be2553c5d5e: Merge pull request #4352 from natali-rs1985/T6628-fix.
Feb 19 2025
Feb 19 2025
sarthurdev moved T6692: DHCP Exclude IP - Error Config from Open to Finished on the VyOS 1.5 Circinus board.
jestabro moved T7182: vyos-netplug-dhcp-client requires Config instead of ConfigTreeQuery from Need Triage to Completed on the VyOS Rolling board.
jestabro moved T7182: vyos-netplug-dhcp-client requires Config instead of ConfigTreeQuery from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
jestabro closed T7182: vyos-netplug-dhcp-client requires Config instead of ConfigTreeQuery as Resolved.
sarthurdev closed T4443: Wan Load Balancing Multiple Regressions, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Not Applicable.
sarthurdev closed T4587: wan load balance issues with 3 or more WANs, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Not Applicable.
c-po added a subtask for T6747: frr: upgrade routing suite to 10.2: T5810: Add support for RPKI source IP.
c-po added a parent task for T5810: Add support for RPKI source IP: T6747: frr: upgrade routing suite to 10.2.