Page MenuHomeVyOS Platform
Feed All Stories

Jul 18 2020

jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Is it possible to report an error or warning when on-demand dialing is enabled without negotiation between remote IP and local IP? If warned, an error fallback should be supported

Jul 18 2020, 8:18 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

I have no clue what you are talking about

Jul 18 2020, 8:18 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

I already know what the problem is, using dial on demand requires negotiation to be disabled (specify remote IP and local IP explicitly)?

Jul 18 2020, 8:17 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Issue can not be reproduced:

Jul 18 2020, 8:09 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2704: connect/disconnect Missing newline in op-mode tab completion helper as Resolved.
Jul 18 2020, 7:59 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T380: Add system service fail2ban.

@c-po Why stop the implementation of this function? My original idea was to implement the automatic configuration and operation of the service in vyos-1x. It seems that you already have an idea?

Jul 18 2020, 7:22 AM · Invalid
c-po merged T2711: Support fail2ban to prevent SSH from being brutally cracked into T380: Add system service fail2ban.
Jul 18 2020, 6:57 AM · Invalid
c-po merged task T2711: Support fail2ban to prevent SSH from being brutally cracked into T380: Add system service fail2ban.
Jul 18 2020, 6:57 AM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX6897aaf40e32: vyos.ifconfig: T2673: Fix admin state if the mac address is changed for an… (authored by srividya0208 <68350089+srividya0208@users.noreply.github.com>).
Jul 18 2020, 6:50 AM
jack9603301 created T2711: Support fail2ban to prevent SSH from being brutally cracked.
Jul 18 2020, 6:02 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a comment to T2704: connect/disconnect Missing newline in op-mode tab completion helper.

This only happens when there are multiple <path> options.

Jul 18 2020, 5:03 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin committed rVYOSONEXfc5c2d59ecc9: T2704: force newlines after listActiveNode output..
Jul 18 2020, 5:02 AM
dmbaturin committed rVYOSONEXf40ecce733c7: T2710: make most "run show interfaces $type" commands work again..
Jul 18 2020, 5:02 AM
dmbaturin created T2710: Many op mode "show interfaces $type" commands no longer work.
Jul 18 2020, 4:44 AM · Bugs, VyOS 1.3 Equuleus (1.3.9)

Jul 17 2020

SrividyaA added a comment to T2623: Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation”.

The issue did not reproduce in the VyOS 1.3-rolling-202007140117 version. Also commit fails if the local-ip is missing

Jul 17 2020, 10:22 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
SrividyaA changed the status of T2673: After the bridge is configured with Mac, bridge is automatically disabled from Open to In progress.

Reproduced in VyOS 1.3-rolling-202007140117 version
When the mac address is added to the interface manually, the interface is marked down.

A PR #502 is created to fix the issue:
https://github.com/vyos/vyos-1x/pull/502

Jul 17 2020, 9:59 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed the status of T2706: Support NDP protocol monitoring from In progress to Needs testing.
Jul 17 2020, 7:50 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX3b81646aaba2: Merge pull request #496 from jack9603301/current (authored by c-po).
Jul 17 2020, 7:42 PM
jestabro committed rVYOSONEXa64910c3c0e2: config: T2689: cache config_dict.
Jul 17 2020, 5:10 PM
jjakob changed the subtype of T2709: Destination NAT translation port without address fails to commit from "Task" to "Bug".
Jul 17 2020, 1:43 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob triaged T2709: Destination NAT translation port without address fails to commit as High priority.
Jul 17 2020, 1:42 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 updated subscribers of T2706: Support NDP protocol monitoring.

@c-po Please review my PR

Jul 17 2020, 3:18 AM · VyOS 1.3 Equuleus (1.3.0)
blackhole added a comment to T2592: dhcp-relay discarding packets on valid interfaces.

I spoke too soon, I rebooted and nothing yet again until i ran

Jul 17 2020, 2:12 AM · VyOS 1.3 Equuleus (1.3.0)
blackhole added a comment to T2592: dhcp-relay discarding packets on valid interfaces.

Resolved: It seems either my config or something else has changed but I figured it out just now after a coffee and some noodle scratching.

Jul 17 2020, 12:54 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 16 2020

blackhole added a comment to T2592: dhcp-relay discarding packets on valid interfaces.

Just did a test that I havent before for unknown reasons

Jul 16 2020, 11:37 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX7291da42df3b: Merge pull request #501 from srividya0208/new_change (authored by c-po).
Jul 16 2020, 7:51 PM
SrividyaA changed the status of T2626: Changing pseudo-ethernet mode, throws CLI error from Open to In progress.

This is issue is reproduced in the VyOS 1.3-rolling-202007140117 version.
While changing the mode of the pseudo-ethernet interface, the error "RTNETLINK answers: Invalid argument" is received

Jul 16 2020, 6:44 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed Is it a breaking change? from none to compatible on T2706: Support NDP protocol monitoring.
Jul 16 2020, 3:31 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro added a comment to T2707: Allow alternative initialization data for Config.

https://github.com/vyos/vyos-1x/pull/499

Jul 16 2020, 2:53 PM · VyOS 1.3 Equuleus (1.3.0)
SrividyaA added a comment to T2658: Interface description comment display error.

@thomas-mangin please fix it

Jul 16 2020, 1:55 PM · VyOS 1.3 Equuleus (1.3.0)
thomas-mangin added a comment to T2658: Interface description comment display error.

@SrividyaA the task is assigned to you, if you are going to fix it, all good, otherwise happy to do so.

Jul 16 2020, 9:01 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 triaged T2706: Support NDP protocol monitoring as Normal priority.
Jul 16 2020, 4:57 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed the status of T2706: Support NDP protocol monitoring from Open to In progress.
Jul 16 2020, 4:56 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2659: Add fastnetmon (DDoS detection) support.

Can I make a suggestion? Since this DDoS detection supports user script processing, it is better to migrate the script during the vyos upgrade to prevent script loss

Jul 16 2020, 2:42 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 15 2020

dmbaturin created T2708: "show flow-accounting" should not display script's "usage" help.
Jul 15 2020, 9:42 PM · VyOS 1.3 Equuleus (1.3.0)
Maltahl added a comment to T1802: Wireguard QR code in cli for mobile devices.

PR created https://github.com/vyos/vyos-1x/pull/498

Jul 15 2020, 8:22 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Maltahl added a comment to T1802: Wireguard QR code in cli for mobile devices.

Did the changes on dependencies file here: https://github.com/Maltahl/vyos-1x/commit/27400e09b27d98b6ee34568fe25828cff1d14770

Jul 15 2020, 8:07 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro committed rVYOSONEX305c0910f08c: xml: T2588: defaults should return gracefully on key error.
Jul 15 2020, 8:06 PM
GitHub <noreply@github.com> committed rVYOSONEX32e2124d2df3: Merge pull request #497 from zdc/T2695 (authored by dmbaturin).
Jul 15 2020, 7:21 PM
c-po added a comment to T1802: Wireguard QR code in cli for mobile devices.

this implementation would ba an operational mode command. THose are deinfed here: https://github.com/vyos/vyos-1x/blob/current/op-mode-definitions/wireguard.xml and package dependencies life here https://github.com/vyos/vyos-1x/blob/current/debian/control

Jul 15 2020, 7:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a comment to T2690: Add VRF support to the add system image command.

@moepman can you please try if the change introduced in T2651 is already sufficient for your usecase?

Jul 15 2020, 7:00 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2596: Allow specifying source IP for 'add system image' as Resolved.
Jul 15 2020, 6:59 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2596: Allow specifying source IP for 'add system image', a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, as Resolved.
Jul 15 2020, 6:59 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2596: Allow specifying source IP for 'add system image'.

Implemented as of T2651

Jul 15 2020, 6:59 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXc24cecc325de: Merge branch 'curlrc' of github.com:c-po/vyos-1x into current.
Jul 15 2020, 6:59 PM
c-po committed rVYOSONEX63052b890687: http-client: T2651: support specifying source-interface/address for curl.
Jul 15 2020, 6:59 PM
c-po committed rVYOSONEXbee479c9baa9: xml: T2651: provide general source-interface include file.
Jul 15 2020, 6:59 PM
Maltahl updated the task description for T1802: Wireguard QR code in cli for mobile devices.
Jul 15 2020, 6:26 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro changed the status of T2707: Allow alternative initialization data for Config, a subtask of T2582: Script daemon to offload processing during commit, from In progress to Needs testing.
Jul 15 2020, 6:22 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T2707: Allow alternative initialization data for Config from In progress to Needs testing.

Final tests before PR.

Jul 15 2020, 6:22 PM · VyOS 1.3 Equuleus (1.3.0)
Maltahl added a comment to T1802: Wireguard QR code in cli for mobile devices.

If someone could point me in the direction where wireguard config files are stored in VyOS i will be happy to test it out further.

Jul 15 2020, 6:12 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Maltahl added a comment to T1802: Wireguard QR code in cli for mobile devices.

I tested by just adding default debian buster repos and run

sudo apt install qrencode
Jul 15 2020, 6:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
SrividyaA changed the status of T2658: Interface description comment display error from Open to Confirmed.

This is issue is reproduced in the VyOS 1.3-rolling-202007140117 version. The interface description is showing up-to 23 characters in the "show interface output" only.
It shows correctly in the command output of 'sudo ip l" Tested for different interface types.

Jul 15 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
Maltahl updated the task description for T1802: Wireguard QR code in cli for mobile devices.
Jul 15 2020, 5:53 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro added a subtask for T2582: Script daemon to offload processing during commit: T2707: Allow alternative initialization data for Config.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro added a parent task for T2707: Allow alternative initialization data for Config: T2582: Script daemon to offload processing during commit.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T2707: Allow alternative initialization data for Config from Open to In progress.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

https://github.com/vyos/vyos-1x/pull/496

Jul 15 2020, 2:44 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2706: Support NDP protocol monitoring.

https://github.com/vyos/vyos-1x/blob/current/debian/control

Jul 15 2020, 2:38 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

Please prompt me the correct path to the vyos-1x dependency list @runar

Jul 15 2020, 2:30 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

I am about to make an amendment

Jul 15 2020, 2:28 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2706: Support NDP protocol monitoring.

Hi! This PR does the wrong approach for adding this command to the vyos system. As this is a utility that should be used from within the CLI it should be added to the cliwith the xml framework inside vyos-1x, and rhen should be a dependency of vyos-1x, and not to vyos-build

Jul 15 2020, 2:25 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.
Jul 15 2020, 2:00 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 claimed T2706: Support NDP protocol monitoring.
Jul 15 2020, 1:58 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 closed T2705: Support NDP protocol monitoring as Invalid.
Jul 15 2020, 1:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T2706: Support NDP protocol monitoring.
Jul 15 2020, 1:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T2705: Support NDP protocol monitoring.
Jul 15 2020, 1:44 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 closed T2675: DNS service failed to start as Resolved.
Jul 15 2020, 4:57 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 triaged T2675: DNS service failed to start as Normal priority.
Jul 15 2020, 3:27 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed the status of T2675: DNS service failed to start from Open to Needs testing.
Jul 15 2020, 3:26 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 14 2020

c-po updated subscribers of T2704: connect/disconnect Missing newline in op-mode tab completion helper.

@dmbaturin was there anything changed on the handling of op-mode? As I remember that this used to work.

Jul 14 2020, 8:49 PM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2704: connect/disconnect Missing newline in op-mode tab completion helper.
Jul 14 2020, 8:01 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2704: connect/disconnect Missing newline in op-mode tab completion helper.
Jul 14 2020, 8:01 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX2dd1392cfe28: Merge pull request #494 from jack9603301/current (authored by c-po).
Jul 14 2020, 7:25 PM
Viacheslav claimed T1316: Support for IS-IS .
Jul 14 2020, 6:42 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2598: Error when commiting firewall groups to SrividyaA.
Jul 14 2020, 6:22 PM · VyOS 1.2 Crux
zsdc assigned T2626: Changing pseudo-ethernet mode, throws CLI error to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2623: Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation” to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
zsdc assigned T2658: Interface description comment display error to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2673: After the bridge is configured with Mac, bridge is automatically disabled to SrividyaA.
Jul 14 2020, 6:20 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro updated subscribers of T2689: Add helper functions to query changes between session and effective configs.

Current version linked below, as an example for further discussion. As these ideas have been circulating for a while, it is important to have examples to debunk/revise/reject. My guess is that one likely wants much less than this, and that @dmbaturin is quite right in his recent comment "we should not rely on diffs unless there's absolutely no other way to do it --- not just about computational expense, but also readability".

Jul 14 2020, 3:36 PM · VyOS 1.3 Equuleus (1.3.0)
kroy created T2703: VMWare OVA won't deploy an ed25519 key.
Jul 14 2020, 12:45 AM · VyOS 1.2 Crux

Jul 13 2020

kroy created T2702: Broken completion error displayed for passwords in 1.2.5.
Jul 13 2020, 7:41 PM · VyOS 1.2 Crux
zsdc changed the status of T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from Open to In progress.

https://github.com/vyos/vyatta-cfg-vpn/pull/34

Jul 13 2020, 4:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
thomas-mangin added a comment to T2666: Packet Processing with eBPF and XDP.

https://lwn.net/Articles/822744/

Jul 13 2020, 1:46 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 claimed T2675: DNS service failed to start.
Jul 13 2020, 1:32 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

After local testing, we decided to submit pr

Jul 13 2020, 1:31 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

I have prepared a repair pudding, I use the solution of a, I am hesitating whether to mention PR, otherwise, it should be noted in the document that the writing of B should be ignored in the vyos configuration

Jul 13 2020, 1:19 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

I need someone to give me a good choice. I prefer standard writing. That is a

Jul 13 2020, 1:09 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

@c-po @jjakob I've found the root cause of the problem. When my domain is written in fully qualified format, there will be one more point in the generated Lua script. There are currently the following solutions to this problem:

Jul 13 2020, 1:07 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

No one's dealing with it?

Jul 13 2020, 12:58 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2701: `vpn ipsec pfs enable` doesn't work with IKE groups.
Jul 13 2020, 12:51 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
zsdc closed T1100: Spoke site dynamic IP over NAT connect to Hub site as Invalid.

Closed in favor of https://phabricator.vyos.net/T1101

Jul 13 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Jul 12 2020

jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

@c-po Please forgive me that I didn't react until it told me that this is a patch. It has solved the problem. In this case, if it is confirmed that the patch is available, then it is not necessary to discuss the cause of the problem. What we need to do is to apply the patch and conduct relevant tests

Jul 12 2020, 7:21 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

https://github.com/vyos/vyatta-wanloadbalance/commit/ab841d3588c88e0e8ef86693471281badce92a9f

Jul 12 2020, 7:18 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2696: Some bugfixes of vyatta-wanloadbalance as Resolved.
Jul 12 2020, 7:17 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

@jack9603301 the approach from @banditos13 is perfectly fine. Despite the fact that a PR would be the non plus ultra - a problem was identified and a fix was provided - works for me.

Jul 12 2020, 7:13 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

If so, you should make it clear that the diff is your own patch. If you are sure that the patch is available in the latest rolling image, you can consider submitting a PR yourself (please refer to the contributor's Guide) to seek consolidation

Jul 12 2020, 7:10 PM · VyOS 1.3 Equuleus (1.3.0)
banditos13 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

This is worked patches for me. I suggest including my corrections in the main code

Jul 12 2020, 7:08 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I thought you were asking for help and trying to report a bug to the community for a fix, so you need more information to help identify the problem, rather than a diff who doesn't know where to find it

Jul 12 2020, 7:05 PM · VyOS 1.3 Equuleus (1.3.0)