Page MenuHomeVyOS Platform
Feed All Stories

Dec 19 2020

jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Confirmed to In progress.
Dec 19 2020, 2:38 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 edited a custom field on T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Dec 19 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 claimed T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Dec 19 2020, 1:07 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Open to Confirmed.
Dec 19 2020, 1:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 created T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Dec 19 2020, 1:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Cheeze_It committed rVYOSONEX6451fe281f4b: mpls: T915: Add a bunch of op commands to LDP.
Dec 19 2020, 9:47 AM
GitHub <noreply@github.com> committed rVYOSONEX22308b05dfbc: Merge pull request #649 from Cheeze-It/current (authored by c-po).
Dec 19 2020, 9:47 AM
Cheeze_It added a comment to T915: MPLS Support.

Put in a PR to add op commands for LDP.

Dec 19 2020, 3:39 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Dec 18 2020

SrividyaA closed T3136: Typo in ipsec preshared-secret help (LTS release) as Invalid.
Dec 18 2020, 12:58 PM · Restricted Project
SrividyaA claimed T3136: Typo in ipsec preshared-secret help (LTS release).
Dec 18 2020, 11:47 AM · Restricted Project
SrividyaA created T3136: Typo in ipsec preshared-secret help (LTS release).
Dec 18 2020, 11:01 AM · Restricted Project
SrividyaA added a comment to T3131: Typo in ipsec preshared-secret help.

PR:

Dec 18 2020, 10:57 AM · VyOS 1.3 Equuleus (1.3.0)
SrividyaA updated the task description for T3131: Typo in ipsec preshared-secret help.
Dec 18 2020, 10:56 AM · VyOS 1.3 Equuleus (1.3.0)
SrividyaA removed a project from T3131: Typo in ipsec preshared-secret help: VyOS 1.2 Crux.
Dec 18 2020, 10:55 AM · VyOS 1.3 Equuleus (1.3.0)
afics closed T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length as Resolved.

@runar You're right, my bad.

Dec 18 2020, 7:46 AM
GitHub <noreply@github.com> committed rVYOSONEX2dc688ded021: T3135: bfd template missing newlines (authored by bedmisten).
Dec 18 2020, 6:41 AM
GitHub <noreply@github.com> committed rVYOSONEX889128c7aaec: Merge pull request #648 from bedmisten/current (authored by c-po).
Dec 18 2020, 6:41 AM

Dec 17 2020

bedmisten added a comment to T3135: BFD configurations fail to be applied.

Created PR #648 in vyos-1x

Dec 17 2020, 10:13 PM · VyOS 1.3 Equuleus (1.3.0)
bedmisten created T3135: BFD configurations fail to be applied.
Dec 17 2020, 8:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXe350c7838b69: Debian: xdp: T2666: add build dependencies.
Dec 17 2020, 8:37 PM
c-po committed rVYOSONEX4fbed1dca725: ifconfig: T2653: switch to Python3 f(ormatted) strings.
Dec 17 2020, 8:37 PM
c-po committed rVYOSONEX44fd19cf2870: xdp: T2666: use generic "xdp" option when loading.
Dec 17 2020, 8:37 PM
c-po updated the task description for T3134: DHCPv6 DUID configuration node missing.
Dec 17 2020, 7:50 PM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T3134: DHCPv6 DUID configuration node missing.
Dec 17 2020, 7:49 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3134: DHCPv6 DUID configuration node missing.
Dec 17 2020, 7:49 PM · VyOS 1.3 Equuleus (1.3.0)
sempervictus added a comment to T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree.

So how are userspace packages for this sort of stuff handled? I assume we need to itemize out individual phabricator tickets?
Off the top of my head, relevant things to add to uspace would be:

  1. eoip binary
  2. eoip CLI wrapper
  3. Xtables userspace with GeoIP table data and updater script (we would need to figure out how to deal with rule placement for persistence)
  4. Xtables-related CLI for firewall matching on GeoIP, DNS, etc
  5. Xtables-related CLI for firewall actions to TARPIT or DELUDE
  6. UKSM userspace (or just wrappers for the sysfs interface in CLI)
  7. Hardened Malloc with system-wide LD_PRELOAD or maintain a vyos-specific libc package with it built-in
Dec 17 2020, 7:04 PM · VyOS Rolling
c-po added a comment to T2666: Packet Processing with eBPF and XDP.

The CLI command set interfaces ethernet <interface> offload-options xdp enables the XDP generic mode on the given interface.

Dec 17 2020, 6:16 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2666: Packet Processing with eBPF and XDP from Open to Needs testing.
Dec 17 2020, 6:15 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXbd3ff678b733: xdp: T2666: initial XDP (generic mode) forwarding support.
Dec 17 2020, 5:37 PM
runar added a comment to T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.

In your example the use of ge is redundant as as you have allready specified a limiting subnettmask you cant go outside the boundry of the prefix specified.

Dec 17 2020, 4:42 PM
Viacheslav added a comment to T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.

It's FRR logic.

Dec 17 2020, 3:56 PM
afics renamed T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length from conf; policy prefix-list: ge is not allowed to be the same as prefix lentgh to conf; policy prefix-list: ge is not allowed to be the same as prefix length.
Dec 17 2020, 2:00 PM
afics created T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.
Dec 17 2020, 2:00 PM
jpbede lowered the priority of T3132: Enable egress flow accounting from Normal to Wishlist.
Dec 17 2020, 12:51 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jpbede added a comment to T3132: Enable egress flow accounting.

See PR: https://github.com/vyos/vyos-1x/pull/647

Dec 17 2020, 11:38 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 added a watcher for VyOS 2.0.x: jack9603301.
Dec 17 2020, 11:06 AM
jpbede changed the status of T3132: Enable egress flow accounting, a subtask of T446: Flow accounting enhancements: pre/post NAT, ingress/egress, from Open to In progress.
Dec 17 2020, 9:30 AM · VyOS 1.4 Sagitta
jpbede changed the status of T3132: Enable egress flow accounting from Open to In progress.
Dec 17 2020, 9:30 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jpbede created T3132: Enable egress flow accounting.
Dec 17 2020, 9:30 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) closed T2036: Open Connect VPN Server () support as Resolved.
Dec 17 2020, 8:31 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T2810: Docs for vpn anyconnect-server, a subtask of T2036: Open Connect VPN Server () support, as Resolved.
Dec 17 2020, 8:31 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T2810: Docs for vpn anyconnect-server as Resolved.
Dec 17 2020, 8:31 AM · VyOS 1.3 Equuleus (1.3.0), Restricted Project
jack9603301 updated the task description for T3116: Support back-end L4 level load balancing.
Dec 17 2020, 6:58 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3116: Support back-end L4 level load balancing.
Dec 17 2020, 6:58 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3116: Support back-end L4 level load balancing.
Dec 17 2020, 6:58 AM · VyOS 1.4 Sagitta

Dec 16 2020

Viacheslav assigned T3131: Typo in ipsec preshared-secret help to SrividyaA.
Dec 16 2020, 4:10 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a project to T3131: Typo in ipsec preshared-secret help: VyOS 1.3 Equuleus.
Dec 16 2020, 4:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3131: Typo in ipsec preshared-secret help.
Dec 16 2020, 3:57 PM · VyOS 1.3 Equuleus (1.3.0)
vlesk added a comment to T3124: Cannot add user to group via configuration.

Ok. I will try to use containers, this good idea.
Containers will be more predictable and stable I suppose.

Dec 16 2020, 9:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3124: Cannot add user to group via configuration.

@vlesk once container support is added you have a better way by usibg a dedicates container on your VyOS installation.

Dec 16 2020, 7:17 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3124: Cannot add user to group via configuration.

If your device supports virtualization, you can consider running both VyOS and cups servers in KVM (there are many open source projects that can do this, such as Proxmox Ve)

Dec 16 2020, 7:07 AM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2666: Packet Processing with eBPF and XDP.
Dec 16 2020, 7:00 AM · VyOS 1.3 Equuleus (1.3.0)
vlesk added a comment to T3124: Cannot add user to group via configuration.

Yes I know that I must install printer driver. I successfully solved this problem long time ago by using additional partition. And YES I KNOW that VyOS is not a general server operating system. But some time convenient use ONE universal host instead two or more.

Dec 16 2020, 6:34 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3124: Cannot add user to group via configuration.

Why install the remote print sharing service on the router and use cups, you must install the printer driver on the cups server to make it work. VyOS is not a general server operating system, so you should install cups on a physical server or virtual server

Dec 16 2020, 4:41 AM · VyOS 1.3 Equuleus (1.3.0)
vlesk added a comment to T3124: Cannot add user to group via configuration.

I prefer build images with some additional packages, such as cups. For example in order to administer printer I should add user to group lpadmin. In releases 1.2.x it was easy, but now I necessary after each update do it manually.

Dec 16 2020, 4:38 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 15 2020

c-po added a comment to T3124: Cannot add user to group via configuration.

Why you would line to add a user to an additional group?

Dec 15 2020, 6:48 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3124: Cannot add user to group via configuration as Wontfix.
Dec 15 2020, 6:48 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T858: Full UEFI support.

Where possible, we can consider MBR+UEFI dual boot, which also exists in most distributions

Dec 15 2020, 12:51 PM · VyOS Rolling, VyOS 1.5 Circinus
GitHub <noreply@github.com> committed rVYOSONEX1df239121360: Merge pull request #645 from vyos/revert-644-T3089 (authored by c-po).
Dec 15 2020, 7:23 AM
GitHub <noreply@github.com> committed rVYOSONEX6f9507736769: Revert "interfaces: mirror: T3089: Fix the dependency problem between… (authored by c-po).
Dec 15 2020, 7:23 AM
soxrok2212 added a comment to T2875: WiFi interface configured as station can not be added to bridge.

Furthermore, I've attempted changing the interfaces-wireless.xml.in priority to a value before interfaces-bridge.xml.in and it still fails. Not sure how else I can debug.

Dec 15 2020, 12:58 AM · VyOS 1.3 Equuleus (1.3.0)
soxrok2212 added a comment to T2875: WiFi interface configured as station can not be added to bridge.

I just tested 1.3-rolling-202012141037. It actually seems to be a bug. When applying wifi settings and adding to a bridge in the same commit, I'm hit with

Dec 15 2020, 12:57 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 14 2020

sempervictus updated the task description for T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree.
Dec 14 2020, 6:51 PM · VyOS Rolling
jack9603301 closed T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring as Resolved.
Dec 14 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 committed rVYOSONEXe08b381d07b3: interfaces: mirror: T3089: Fix the dependency problem between interfaces.
Dec 14 2020, 6:24 PM
jack9603301 committed rVYOSONEX57392bec3d1f: interface: mirror: T3089: Improve logic to reduce unnecessary lines of code.
Dec 14 2020, 6:24 PM
GitHub <noreply@github.com> committed rVYOSONEXa6b35825a78b: Merge pull request #644 from jack9603301/T3089 (authored by c-po).
Dec 14 2020, 6:24 PM
c-po closed T3130: Replace vyos-netplug with upstream debian version as Resolved.
Dec 14 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX36eb1b34e9b9: netplug: T3130: use Debian upstream version.
Dec 14 2020, 5:50 PM
c-po changed the status of T3130: Replace vyos-netplug with upstream debian version from Open to In progress.
Dec 14 2020, 5:45 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3130: Replace vyos-netplug with upstream debian version.
Dec 14 2020, 5:45 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 moved T3128: pppoe smoke test failed from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Dec 14 2020, 5:15 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3128: pppoe smoke test failed as Resolved.
Dec 14 2020, 5:09 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX30cc4199e20d: smoketest: webproxy: test cache-peer config.
Dec 14 2020, 4:09 PM
SrividyaA added a comment to T3111: Modifying the permissions of /etc/ppp/chap-secrets.

Pull request submitted to change the permissions:

Dec 14 2020, 4:01 PM · VyOS 1.2 Crux
c-po closed T3129: Update Linux Kernel to v5.4.83, a subtask of T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree, as Resolved.
Dec 14 2020, 3:37 PM · VyOS Rolling
c-po closed T3129: Update Linux Kernel to v5.4.83 as Resolved.
Dec 14 2020, 3:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po edited a custom field on T3129: Update Linux Kernel to v5.4.83.
Dec 14 2020, 3:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3129: Update Linux Kernel to v5.4.83 from Open to In progress.
Dec 14 2020, 3:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3129: Update Linux Kernel to v5.4.83, a subtask of T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree, from Open to In progress.
Dec 14 2020, 3:32 PM · VyOS Rolling
c-po created T3129: Update Linux Kernel to v5.4.83.
Dec 14 2020, 3:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXc941700b7179: smoketest: pppoe: fix regex for IPv6 PD.
Dec 14 2020, 9:09 AM
jack9603301 assigned T3128: pppoe smoke test failed to c-po.
Dec 14 2020, 6:05 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T3128: pppoe smoke test failed.
Dec 14 2020, 6:04 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 13 2020

c-po committed rVYOSONEX86f377f65248: smoketest: pppoe: test three interfaces.
Dec 13 2020, 8:46 PM
c-po committed rVYOSONEX3c16a4290652: smoketest: login: adjust to Kernel 5.0 config options.
Dec 13 2020, 8:46 PM
zub0r created T3127: Load (import) config from JSON.
Dec 13 2020, 5:24 PM · VyOS Rolling
zub0r added a comment to T1773: Make it possible to export config to JSON.
In T1773#46307, @runar wrote:

With this, will there also be possible to parse the same json into an json import? This to allow for a more programatic way to add things than via set commands

Dec 13 2020, 5:10 PM · VyOS 1.2 Crux (VyOS 1.2.7)
jack9603301 added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.

PR: https://github.com/vyos/vyos-1x/pull/644

Dec 13 2020, 9:43 AM · VyOS 1.3 Equuleus (1.3.0)
Robot82 created T3126: unsuppress-map doesn't work for BGP IPv4.
Dec 13 2020, 9:42 AM · VyOS 1.2 Crux (VyOS 1.2.7)
jack9603301 moved T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Dec 13 2020, 3:34 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a project to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails: VyOS 1.3 Equuleus.
Dec 13 2020, 3:34 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 closed T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails as Resolved.
Dec 13 2020, 3:17 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 12 2020

jack9603301 added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.

@primoz Use the latest rolling version test the day after the merge is submitted

Dec 12 2020, 8:50 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed the status of T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails from In progress to Needs testing.
Dec 12 2020, 8:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 committed rVYOSONEX934392a7f30b: interfaces: T3114: Remove some redundant code.
Dec 12 2020, 8:44 PM
jack9603301 committed rVYOSONEXc4048b2047f6: interfaces: T3114: Fix VLAN-aware bridge setting failure.
Dec 12 2020, 8:44 PM
jack9603301 committed rVYOSONEX780573690fad: smoketest: T3114: Completely remove `commit` in `setUp`.
Dec 12 2020, 8:44 PM
jack9603301 committed rVYOSONEX7f2b4a8ba9b9: interfaces: T3114: Improve the processing of enabling logic for `vlan_filter`….
Dec 12 2020, 8:44 PM
jack9603301 committed rVYOSONEX078671898eac: interfaces: T3114: When the VLAN aware option is not detected, the setting of….
Dec 12 2020, 8:44 PM