Page MenuHomeVyOS Platform
Feed All Stories

Mon, Oct 5

Viacheslav changed the status of T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, from Open to In progress.
Mon, Oct 5, 11:55 AM · VyOS Rolling, Bugs
Viacheslav changed the status of T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs from Open to In progress.
Mon, Oct 5, 11:55 AM · VyOS Rolling
Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs.
Mon, Oct 5, 11:52 AM · VyOS Rolling, Bugs
Viacheslav added a parent task for T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs: T6302: The root task for bugs and improvements related to commit time and boot.
Mon, Oct 5, 11:52 AM · VyOS Rolling
Viacheslav triaged T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs as Normal priority.
Mon, Oct 5, 11:50 AM · VyOS Rolling
Viacheslav added a parent task for T9379: policy: prefix-list duplicate check is quadratic: T6302: The root task for bugs and improvements related to commit time and boot.
Mon, Oct 5, 11:49 AM · VyOS Rolling
Viacheslav added a subtask for T6302: The root task for bugs and improvements related to commit time and boot: T9379: policy: prefix-list duplicate check is quadratic.
Mon, Oct 5, 11:49 AM · VyOS Rolling, Bugs
Viacheslav closed T9379: policy: prefix-list duplicate check is quadratic as Resolved.
Mon, Oct 5, 11:48 AM · VyOS Rolling
Viacheslav triaged T9380: `qos policy cake` without `bandwidth` is silently applied as `unlimited` and causes packet loss as Normal priority.
Mon, Oct 5, 11:46 AM · VyOS Rolling
Viacheslav triaged T9381: Suricata on pre-SSE4.2 CPUs dies with SIGILL and enters a restart loop as Normal priority.
Mon, Oct 5, 11:45 AM · VyOS Rolling
Viacheslav closed T9382: PPPoE server default LCP echo settings (10s interval x 3 failures = 30s) cause spurious session teardown as Invalid.

You can add documentation without a task number.
As this value is configurable, I do not see any problem here.

Mon, Oct 5, 11:44 AM · VyOS Rolling
Viacheslav closed T9383: Default `/var/log/messages` rotation keeps only ~24h, making intermittent faults undiagnosable as Invalid.

This option is configurable.
I'm not seeing any bugs here at the moment.
Reopen PR with the minimal set of commands to reproduce if you configure log rotation, and something does not work.

Mon, Oct 5, 11:37 AM · VyOS Rolling
Viacheslav closed T9384: `show pppoe-server sessions` uptime format is ambiguous (`1.06:16:20` vs `15:42:11`) as Wontfix.

This behavior has always been in the upstream, and many users are familiar with this format. So it is not a question of the op-mode scripts that we use.
For parsers, the uptime-raw format probably should be used. https://github.com/accel-ppp/accel-ppp-ng/blob/1210a0b84b7c22837676571cae42522d6f265873/accel-pppd/cli/show_sessions.c#L513
I do not see any bugs here, and I am closing the task.

Mon, Oct 5, 11:29 AM · VyOS Rolling
Viacheslav triaged T9387: cloud-init: add strict mode for vyos_config_commands as Wishlist priority.
Mon, Oct 5, 11:15 AM · VyOS Rolling
Viacheslav triaged T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer as Normal priority.
Mon, Oct 5, 11:12 AM · VyOS Rolling
Viacheslav triaged T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy as Normal priority.
Mon, Oct 5, 11:09 AM · VyOS Rolling
Viacheslav closed T9323: Fix spurious CI errors as Resolved.
Mon, Oct 5, 11:08 AM · VyOS Rolling
asklymenko created T9400: Update APT repo keys to use SHA256 or higher.
Mon, Oct 5, 11:01 AM · VyOS Rolling
a.kudientsov added a comment to T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy.

https://github.com/vyos/vyos-1x/pull/5533

Mon, Oct 5, 10:21 AM · VyOS Rolling
Viacheslav closed T9338: mpls inter-as - l3vpn-multi-domain-switching as Resolved.
Mon, Oct 5, 9:59 AM · VyOS Rolling
sarthurdev closed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default as Resolved.
Mon, Oct 5, 9:50 AM · VyOS Rolling
sarthurdev closed T9129: Migrate podman to systemd quadlets as Resolved.
Mon, Oct 5, 9:50 AM · VyOS Rolling
sarthurdev closed T9129: Migrate podman to systemd quadlets, a subtask of T7557: Use Debian trixie as a build base for Docker and the VyOS image, as Resolved.
Mon, Oct 5, 9:50 AM · VyOS Rolling
a.kudientsov created T9399: config-mgmt: the post-commit hook builds the full config twice to write one archive copy.
Mon, Oct 5, 9:48 AM · VyOS Rolling
Viacheslav triaged T9389: dhcp-interface static routes (VRF and default) not restored after FRR daemons restart (watchfrr/crash) as Normal priority.
Mon, Oct 5, 9:48 AM · VyOS Rolling
Viacheslav triaged T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration as Normal priority.
Mon, Oct 5, 9:38 AM · VyOS Rolling
Viacheslav triaged T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values as Normal priority.
Mon, Oct 5, 9:33 AM · VyOS Rolling
Viacheslav triaged T9398: service ssh trusted-user-ca only supports RSA CAs as Normal priority.
Mon, Oct 5, 9:29 AM · VyOS Rolling
Viacheslav closed T8464: Accel-PPP remote DoS - Case: Missing Service-name tag in PPPoE PADR as Resolved.
Mon, Oct 5, 9:10 AM · VyOS Rolling
Viacheslav closed T8473: Accel-PPP remote DoS - Case: Multiple Rapid-commit options in DHCPv6 SOLICIT msg as Resolved.
Mon, Oct 5, 9:10 AM · VyOS Rolling
Viacheslav closed T8474: Accel-PPP remote DoS - Case: Bad AFTR-Name option in DHCPv6 SOLICIT as Resolved.
Mon, Oct 5, 9:10 AM · VyOS Rolling
Viacheslav closed T8475: Accel-PPP remote DoS - Case: crafted DHCPv6 Relay-forward packet with multiple (>HOP_COUNT_LIMIT) nested relay layers as Resolved.
Mon, Oct 5, 9:10 AM · VyOS Rolling
Viacheslav closed T8526: Accel-PPP: Missing RADIUS Response Authenticator Verification as Resolved.
Mon, Oct 5, 9:09 AM · VyOS Rolling
Viacheslav closed T8543: Accel-PPP: parse_framed_route stack buffer overflow via RADIUS Framed-Route in Access-Accept message as Resolved.
Mon, Oct 5, 9:09 AM · VyOS Rolling
Viacheslav closed T8545: Accel-PPP: Unexpected validation failure for correct Response Authenticator (RADIUS Accounting-Response message) as Resolved.
Mon, Oct 5, 9:09 AM · VyOS Rolling
Viacheslav closed T8549: Accel-PPP: DHCPv6 Status Code option causes accel-pppd crash via OOB read in print_status() as Resolved.
Mon, Oct 5, 9:09 AM · VyOS Rolling
Viacheslav closed T8550: Accel-PPP: SSTP zero-length packet causes infinite CPU loop (pre-auth remote DoS) as Resolved.
Mon, Oct 5, 9:09 AM · VyOS Rolling
Viacheslav closed T8611: Accel-PPP: stack buffer overflow via oversized RADIUS Accel-VRF-Name as Resolved.
Mon, Oct 5, 9:08 AM · VyOS Rolling
Viacheslav closed T8825: Accel-PPP: Crash via oversized Host-Uniq tag leading to buffer overflow as Resolved.
Mon, Oct 5, 9:08 AM · VyOS Rolling
Viacheslav closed T8830: Accel-PPP: Unvalidated PPP header length in control protocol response handlers causes heap information disclosure as Resolved.
Mon, Oct 5, 9:08 AM · VyOS Rolling
Viacheslav changed the visibility for T8464: Accel-PPP remote DoS - Case: Missing Service-name tag in PPPoE PADR.
Mon, Oct 5, 9:00 AM · VyOS Rolling
Viacheslav changed the visibility for T8473: Accel-PPP remote DoS - Case: Multiple Rapid-commit options in DHCPv6 SOLICIT msg.
Mon, Oct 5, 9:00 AM · VyOS Rolling
Viacheslav changed the visibility for T8474: Accel-PPP remote DoS - Case: Bad AFTR-Name option in DHCPv6 SOLICIT.
Mon, Oct 5, 9:00 AM · VyOS Rolling
Viacheslav changed the visibility for T8475: Accel-PPP remote DoS - Case: crafted DHCPv6 Relay-forward packet with multiple (>HOP_COUNT_LIMIT) nested relay layers.
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8526: Accel-PPP: Missing RADIUS Response Authenticator Verification.
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8543: Accel-PPP: parse_framed_route stack buffer overflow via RADIUS Framed-Route in Access-Accept message.
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8545: Accel-PPP: Unexpected validation failure for correct Response Authenticator (RADIUS Accounting-Response message).
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8549: Accel-PPP: DHCPv6 Status Code option causes accel-pppd crash via OOB read in print_status().
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8550: Accel-PPP: SSTP zero-length packet causes infinite CPU loop (pre-auth remote DoS).
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8611: Accel-PPP: stack buffer overflow via oversized RADIUS Accel-VRF-Name.
Mon, Oct 5, 8:58 AM · VyOS Rolling
Viacheslav changed the visibility for T8825: Accel-PPP: Crash via oversized Host-Uniq tag leading to buffer overflow.
Mon, Oct 5, 8:58 AM · VyOS Rolling
Viacheslav changed the visibility for T8830: Accel-PPP: Unvalidated PPP header length in control protocol response handlers causes heap information disclosure.
Mon, Oct 5, 8:57 AM · VyOS Rolling
insertjokehere created T9398: service ssh trusted-user-ca only supports RSA CAs.
Mon, Oct 5, 8:48 AM · VyOS Rolling
c-po added a comment to T9385: Update Linux Kernel to 6.18.55 | 6.6.158.

https://github.com/vyos/vyos-build/pull/1317

Mon, Oct 5, 5:24 AM · VyOS Rolling
c-po updated the task description for T9385: Update Linux Kernel to 6.18.55 | 6.6.158.
Mon, Oct 5, 5:14 AM · VyOS Rolling
c-po renamed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 from Update Linux Kernel to 6.18.54 to Update Linux Kernel to 6.18.55 | 6.6.158.
Mon, Oct 5, 5:14 AM · VyOS Rolling

Sun, Oct 4

evgmol added a comment to T6887: Document how to create new modules.

https://internal.confluence.vyos.com/wiki/x/HIDeSw # for rest.vyos

Sun, Oct 4, 8:38 PM · VyOS Ansible Collection
a.kudientsov created T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values.
Sun, Oct 4, 9:24 AM · VyOS Rolling
syncer created T9396: config-sync: CLI options to verify the secondary's TLS certificate (PKI CA reference + peer fingerprint).
Sun, Oct 4, 9:11 AM
t.shiroma added a comment to T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.

pull-req: github.com/vyos/vyos-1x/pull/5531

Sun, Oct 4, 6:42 AM · VyOS Rolling
c-po added a comment to T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration.

https://github.com/vyos/vyos-1x/pull/5532

Sun, Oct 4, 6:40 AM · VyOS Rolling
Viacheslav closed T9378: `load` silently drops unknown/invalid configuration nodes (no error, service keeps running) as Wontfix.

It is on user to set correct configuration and format. It is not recommended but possible to edit the file.

Sun, Oct 4, 6:30 AM · VyOS Rolling
c-po created T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration.
Sun, Oct 4, 6:24 AM · VyOS Rolling
t.shiroma created T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.
Sun, Oct 4, 5:50 AM · VyOS Rolling
evgmol created T9393: "Ansible-Ready" Roles.
Sun, Oct 4, 1:04 AM · VyOS Ansible Collection

Sat, Oct 3

sarthurdev added a comment to T9392: Enable '-k' behaviour for keeping objects of kernel builds by default.

PR: https://github.com/vyos/vyos-build/pull/1316

Sat, Oct 3, 5:21 PM · VyOS Rolling
sarthurdev renamed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default from Enable '-k' keep objects argument for kernel builds by default to Enable '-k' behaviour for keeping objects of kernel builds by default.
Sat, Oct 3, 5:15 PM · VyOS Rolling
sarthurdev renamed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default from Enable '-k' keep objects argument for kernel builds to Enable '-k' keep objects argument for kernel builds by default.
Sat, Oct 3, 4:50 PM · VyOS Rolling
sarthurdev created T9392: Enable '-k' behaviour for keeping objects of kernel builds by default.
Sat, Oct 3, 4:50 PM · VyOS Rolling

Fri, Oct 2

jestabro added a comment to T9390: http-api: bump supporting package pyjwt to 2.15.0.

PR:
https://github.com/vyos/vyos-http-api-tools/pull/69

Fri, Oct 2, 2:27 PM · VyOS Rolling
jestabro created T9390: http-api: bump supporting package pyjwt to 2.15.0.
Fri, Oct 2, 2:05 PM · VyOS Rolling
o.kuchmystyi added a comment to T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF.

PR: https://github.com/vyos/vyos-1x/pull/5528

Fri, Oct 2, 1:30 PM · VyOS Rolling
natali-rs1985 closed T9274: Add more telegraf configuration as Resolved.
Fri, Oct 2, 10:11 AM · VyOS Rolling
natali-rs1985 closed T9303: VPP IPsec algorithm-compatibility check ignored as Resolved.
Fri, Oct 2, 9:39 AM · VyOS Rolling
Artolink created T9389: dhcp-interface static routes (VRF and default) not restored after FRR daemons restart (watchfrr/crash).
Fri, Oct 2, 9:14 AM · VyOS Rolling
balin added a comment to T6528: Move from fuse-overlayfs to native rootless overlay storage.

Thanks for closing this out. Could you point to the commit or release that implemented it? I can't find it in the source on rolling:

Fri, Oct 2, 8:59 AM · VyOS Rolling
_mrplow closed T9353: Interface speed & duplex modes are hardcoded to anything BaseT as Resolved.

My PR was merged after requested changes by c-po were adressed.

Fri, Oct 2, 4:58 AM · VyOS Rolling
yzguy added a comment to T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer.

Similar https://vyos.dev/T6049

Fri, Oct 2, 1:43 AM · VyOS Rolling
yzguy created T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer.
Fri, Oct 2, 1:40 AM · VyOS Rolling

Thu, Oct 1

hybridops created T9387: cloud-init: add strict mode for vyos_config_commands.
Thu, Oct 1, 8:10 PM · VyOS Rolling
c-po closed T9354: op-mode: replace "reset connection" with "reconnect interface" as Resolved.
Thu, Oct 1, 7:41 PM · VyOS Rolling
c-po closed T9361: Remove debug noise when running config load tests as Resolved.
Thu, Oct 1, 7:30 PM · VyOS Rolling
c-po closed T9357: pppoe-server requires local username to be set even when any-login is in use as Resolved.
Thu, Oct 1, 7:29 PM · VyOS Rolling
ordex created T9386: openvpn: reject AEAD data-ciphers-fallback with shared-secret-key.
Thu, Oct 1, 7:18 PM · VyOS Rolling
c-po closed T9356: PPPoE: traceback if IPv6 is unavailable on BRAS as Resolved.
Thu, Oct 1, 7:11 PM · VyOS Rolling
c-po closed T9362: pim: prevent killing an already dead/non-existing PID as Resolved.
Thu, Oct 1, 7:01 PM · VyOS Rolling
c-po added a comment to T9385: Update Linux Kernel to 6.18.55 | 6.6.158.

https://github.com/vyos/vyos-build/pull/1315

Thu, Oct 1, 7:01 PM · VyOS Rolling
c-po closed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 as Resolved.
Thu, Oct 1, 7:00 PM · VyOS Rolling
jestabro closed T9343: http-api: bump supporting package anyio to 4.14.2 as Resolved.
Thu, Oct 1, 5:40 PM · VyOS Rolling
jestabro closed T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache as Resolved.
Thu, Oct 1, 5:39 PM · VyOS Rolling
c-po renamed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 from T9287: Update Linux Kernel to 6.18.54 to Update Linux Kernel to 6.18.54.
Thu, Oct 1, 4:21 PM · VyOS Rolling
c-po created T9385: Update Linux Kernel to 6.18.55 | 6.6.158.
Thu, Oct 1, 4:21 PM · VyOS Rolling
a.kudientsov added a comment to T9379: policy: prefix-list duplicate check is quadratic.

https://github.com/vyos/vyos-1x/pull/5525

Thu, Oct 1, 4:15 PM · VyOS Rolling
a.kudientsov added a comment to T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs.

https://github.com/vyos/vyos-1x/pull/5524

Thu, Oct 1, 4:01 PM · VyOS Rolling
a.kudientsov added a comment to T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node.

https://github.com/vyos/vyatta-cfg/pull/156

Thu, Oct 1, 3:44 PM · VyOS Rolling
a.kudientsov added a comment to T9375: vyos1x-config: duplicate-children check re-sorts the list on every step.

https://github.com/vyos/vyos1x-config/pull/96

Thu, Oct 1, 3:27 PM · VyOS Rolling
jestabro reassigned T9374: vyos1x-config: config parsing is cubic in the number of entries in one list from jestabro to a.kudientsov.
Thu, Oct 1, 3:21 PM · VyOS Rolling
jestabro added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.

Thanks, @a.kudientsov feel free to re-assign this task to yourself: I hadn't realized you already had a fix. Thanks ! and I will review under Jira task when created.

Thu, Oct 1, 3:17 PM · VyOS Rolling
a.kudientsov added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.

@jestabro added a pr - https://github.com/vyos/vyos1x-config/pull/95

Thu, Oct 1, 3:12 PM · VyOS Rolling
a.kudientsov added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.
Thu, Oct 1, 3:11 PM · VyOS Rolling