We are not planing to change the backend to OpenVSwitch
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Today
Today
Yesterday
Yesterday
dmbaturin renamed T8022: Do not assign dynamic prefix assignment mode to transport-mode IPsec tunnels from IPSEC configuration issue to Do not assign dynamic prefix assignment mode to transport-mode IPsec tunnels.
Viacheslav changed the status of T8208: enforce-first-as should be explicitly unset in FRR unless explicity set in Vyos from Open to In progress.
Viacheslav updated the task description for T8208: enforce-first-as should be explicitly unset in FRR unless explicity set in Vyos.
Viacheslav triaged T8208: enforce-first-as should be explicitly unset in FRR unless explicity set in Vyos as High priority.
Related task T7220
rgrant added a comment to T8208: enforce-first-as should be explicitly unset in FRR unless explicity set in Vyos.
Hmmm, forgot to encode patch, sorry
Viacheslav closed T8192: VPP: pppoe server doesn't work with xdp driver, a subtask of T7070: VPP related bugs the root task, as Not Applicable.
Viacheslav changed the status of T7860: VPP DHCP address cannot be assigned on some clouds from Open to Needs testing.
Viacheslav changed the status of T7860: VPP DHCP address cannot be assigned on some clouds, a subtask of T7070: VPP related bugs the root task, from Open to Needs testing.
natali-rs1985 updated the task description for T8207: VPP: Enable ip6-icmp-ra-punt feature on interfaces with DHCPv6 address configured.
Viacheslav added a comment to T8206: Adds support for the MTC_S16209x driver ICs to the LCDd templates.
Viacheslav triaged T8206: Adds support for the MTC_S16209x driver ICs to the LCDd templates as Normal priority.
We can close this as we we remove XDP driver from CLI (https://vyos.dev/T8202)
natali-rs1985 closed T8183: VPP: Incorrect mapping in IPFIX for bond interfaces, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T8183: VPP: Incorrect mapping in IPFIX for bond interfaces from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 closed T7098: VPP MTU misconfiguration, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T7098: VPP MTU misconfiguration from Need Triage to Completed on the VyOS Rolling board.
Viacheslav triaged T8200: Unhandled exception on quit 'compare' conf-mode command output as Normal priority.
Viacheslav triaged T8201: VPP drops packets destined to its local interfaces when using VTI based IPsec as Normal priority.
Viacheslav triaged T8199: Expose strongswan half-open IKE_SA / IKE_SA_INIT throttling & DoS thresholds control via CLI as Normal priority.
Viacheslav triaged T8205: user_module fails to recognize values when using aggregate as Normal priority.
Viacheslav changed the subtype of T8204: System image deletion: Allow deletion of multiple images in one command from "Task" to "Feature Request".
o.kuchmystyi changed the status of T7924: dns-dynamic 0-to-1 probably missing migration of rfc2136 -> nsupdate from Open to In progress.
Sun, Jan 25
Sun, Jan 25
gaige added a comment to T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.
Yes, @GideonKuijt ; this is an intentional change to ansible-core from what I understand. They're trying to make the templating operations much more explicit, so some of the places where we were able to automatically have templating have been broken. Thanks for posting the solution here. I expect we'll see this in a few other places that have src: as well.
Sat, Jan 24
Sat, Jan 24
Minimal fix for the issues I described: https://github.com/vyos/vyos-1x/pull/4954
I think I've traced the issues. There are 3 different bugs:
Dev work is under https://github.com/vyos/vyos.vyos/pull/438
Fri, Jan 23
Fri, Jan 23
This is good - the problem seems more isolated now.
PR which contains an in-memory background operation manager that queues full configure operations as a single job:
natali-rs1985 updated the task description for T8202: Remove the option to manually select XDP as VPP driver.
natali-rs1985 changed Issue type from feature to bug on T8182: Disallow configuration of IPoE server on VPP interface.
a.kudientsov renamed T8201: VPP drops packets destined to its local interfaces when using VTI based IPsec from VPP: local interfaces packets drop using VTI based IPsec to VPP drops packets destined to its local interfaces when using VTI based IPsec.
a.kudientsov updated the task description for T8201: VPP drops packets destined to its local interfaces when using VTI based IPsec.
a.kudientsov updated the task description for T8201: VPP drops packets destined to its local interfaces when using VTI based IPsec.
Thu, Jan 22
Thu, Jan 22
Firefishy added a comment to T8196: MTU adjust-mss currently only modifying TCP SYN MSS in single direction.
Based on feedback from the PR, I will do further investigation, come up with a proper test case and comparison with how others (eg: OpenWRT) implement MSS adjustment.
GitHub <noreply@github.com> committed rVYOSONEX0a619674e6ce: Merge pull request #4942 from natali-rs1985/T8125 (authored by dmbaturin).
c-po changed the status of T8154: "monitor traffic" - traceback on KeyboardInterrupt (Ctrl+C) from Open to In progress.
FRR 10.5 removed support for applying route-maps to connected and kernel routes upon import from zebra. This is a breaking change, even though configs that used that feature are very unlikely to exist in the wild.
Viacheslav closed T7369: Show firewall does not include logged global state policy entries as Resolved.
GitHub <noreply@github.com> committed rVYOSONEX41aa42fec493: Merge pull request #4947 from natali-rs1985/T8183 (authored by dmbaturin).
Viacheslav changed the status of T8196: MTU adjust-mss currently only modifying TCP SYN MSS in single direction from Open to In progress.
SrividyaA added a comment to T8195: "restart ipsec" command does not reinitiate the ipsec connection in DMVPN setup.
On further checking, I found that just starting the openhrp service brings the ipsec tunnel up, so it seems that opennhrp script takes the responsibilty of starting the tunnel in case of dmvpn and restart ipsec utility does not load the dmvpn profile.
@Viacheslav, the thread is closed and I can't find a way to message @hyyram on the forum. Can you or someone with enough rights on the forum, message him/her?
SrividyaA added a comment to T8195: "restart ipsec" command does not reinitiate the ipsec connection in DMVPN setup.
Reset command works but it will not be helpful if the tunnels are down from the start to re-initiate:
Wed, Jan 21
Wed, Jan 21
Firefishy added a comment to T8196: MTU adjust-mss currently only modifying TCP SYN MSS in single direction.
PR: https://github.com/vyos/vyos-1x/pull/4950 , although to be honest I am now perfectly happy with the implementation, there is likely a better way to implement it.
evgmol added a comment to T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.
That's awesome - thanks
GitHub <noreply@github.com> committed rVYOSONEX774de4b11330: Merge pull request #4921 from hedrok/T7664-update-smoketest-script (authored by c-po).
@zsdc After testing on our server this configuration works correctly (no dhcp address but still... no issues with MTU and static address):
yos@he-r650-01# ethtool -i eth3 driver: mlx5_core version: 6.6.117-vyos firmware-version: 16.35.4030 (DEL0000000016) expansion-rom-version: bus-info: 0000:31:00.1 supports-statistics: yes supports-test: yes supports-eeprom-access: no supports-register-dump: no supports-priv-flags: yes
a.apostoliuk updated the task description for T8197: The container does not have access outside if the container network is defined..
a.apostoliuk triaged T8197: The container does not have access outside if the container network is defined. as Normal priority.
Viacheslav added a comment to T8195: "restart ipsec" command does not reinitiate the ipsec connection in DMVPN setup.
@SrividyaA what about reset ?
Firefishy added a comment to T8196: MTU adjust-mss currently only modifying TCP SYN MSS in single direction.
I am happy to produce a pull request which adds the missing forward chain.