https://www.kernel.org/doc/html/latest/networking/bonding.html#mii-monitor-operation
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 30 2021
Apr 30 2021
@c-po I have implemented a simple script in 1.4. It works normally, but I can't count the port and protocol information
This requires a fix to https://github.com/FRRouting/frr/issues/8403 first
@Viacheslav
set service dns dynamic interface eth0 rfc2136 greywolfe.family key '/config/auth/rndc.key'
should cause the following in ddclient.conf, but instead leaves it blank
password=/config/auth/rndc.key
@greywolfe Can you explain, which records/params do you expect?
Is that correct?
Will be adding the BGP op commands for it as well eventually...
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.114 / 5.10.32 to Update Linux Kernel to v5.4.115 / 5.10.33.
Any chance this gets looked at? Probably 5 minute fix, since it's just an error of the config key not being assigned.
Apr 29 2021
Apr 29 2021
Already in 1.4
set protocols bgp address-family ipv4-flowspec
Already in 1.3 and 1.4
Looks good on 1.4-rolling-202104280417:
Looks good on 1.4-rolling-202104280417 and 1.3-rolling-202104280642:
erkin added a subtask for T3356: Script for remote file transfers: T3506: Migrate loadkey command to op-mode.
erkin added a parent task for T3506: Migrate loadkey command to op-mode: T3356: Script for remote file transfers.
erkin added a parent task for T3506: Migrate loadkey command to op-mode: T3355: Remove all remaining legacy Vyatta code.
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T3506: Migrate loadkey command to op-mode.
Already in 1.3.
Viacheslav reopened T2512: vyatta-op-quagga [show ip] to XML format, a subtask of T2511: Migrate vyatta-op-quagga to new XML format, as Open.
ipv6 still in old format
Viacheslav closed T2512: vyatta-op-quagga [show ip] to XML format, a subtask of T2511: Migrate vyatta-op-quagga to new XML format, as Resolved.
A possible reason it tried to remove " neighbor 10.0.0.2 remote-as 65002" after " neighbor 10.0.0.2 interface peer-group foo"
But if we delete " neighbor 10.0.0.2 interface peer-group foo" it also delete and "" neighbor 10.0.0.2 remote-as 65002"
So it can't delete this string
@Dmitry Is it works if you include config as "global parameter" without patching?
Viacheslav added a subtask for T3116: Support back-end L4 level load balancing: T3209: Load balancing rules in firewall.
Viacheslav added a parent task for T3209: Load balancing rules in firewall: T3116: Support back-end L4 level load balancing.
Apr 28 2021
Apr 28 2021
vyos@r4-1.3:~$ show ipv6 route vrf all
Codes: K - kernel route, C - connected, S - static, R - RIPng,
O - OSPFv3, I - IS-IS, B - BGP, N - NHRP, T - Table,
v - VNC, V - VNC-Direct, A - Babel, D - SHARP, F - PBR,
f - OpenFabric,
> - selected route, * - FIB route, q - queued route, r - rejected routePR's for Equuleus, save frr configurations.
https://github.com/vyos/vyatta-cfg/pull/39
https://github.com/vyos/vyatta-cfg-quagga/pull/75
Viacheslav added a comment to T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not..
For crux we use parser of " ipsec statusall {peer}"
Output if IKE established and esp SA not installed
vyos@r2-lts:~$ sudo ipsec statusall peer-192.0.2.1-tunnel-vti | grep Connections -A 50 Connections: peer-192.0.2.1-tunnel-vti: 192.0.2.2...192.0.2.1 IKEv1 peer-192.0.2.1-tunnel-vti: local: [192.0.2.2] uses pre-shared key authentication peer-192.0.2.1-tunnel-vti: remote: [192.0.2.1] uses pre-shared key authentication peer-192.0.2.1-tunnel-vti: child: 0.0.0.0/0 === 0.0.0.0/0 TUNNEL Security Associations (2 up, 0 connecting): peer-192.0.2.1-tunnel-vti[3]: ESTABLISHED 12 minutes ago, 192.0.2.2[192.0.2.2]...192.0.2.1[192.0.2.1] peer-192.0.2.1-tunnel-vti[3]: IKEv1 SPIs: 0ab8c2ee5815350e_i 271fba46aab245da_r*, pre-shared key reauthentication in 29 minutes peer-192.0.2.1-tunnel-vti[3]: IKE proposal: AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
zsdc changed the status of T3505: Commits do not respect changes in FRR that are not stored in a config from Open to Confirmed.
Viacheslav edited projects for T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not., added: VyOS 1.2 Crux (VyOS 1.2.8); removed VyOS 1.2 Crux.
Viacheslav added a comment to T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not..
PR for Equuleus https://github.com/vyos/vyos-1x/pull/823
Apr 27 2021
Apr 27 2021
c-po committed rVYOSONEXbb34c495ae80: ecmp: T3502: fix check for "layer4-hashing" key (authored by stepler).
c-po moved T3503: "route-reflector-client" fails when "remote-as" is "internal" from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3502: "system ip multipath layer4-hashing" doesn't work from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3502: "system ip multipath layer4-hashing" doesn't work from Need Triage to Finished on the VyOS 1.3 Equuleus board.
GitHub <noreply@github.com> committed rVYOSONEXc76389156c41: Merge pull request #821 from bstepler/T3502 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXd2044c0eac44: Merge pull request #822 from bstepler/T3503 (authored by c-po).
stepler changed the status of T3503: "route-reflector-client" fails when "remote-as" is "internal" from Open to In progress.
stepler changed the status of T3502: "system ip multipath layer4-hashing" doesn't work from Open to In progress.
jestabro moved T2946: Calling 'stty_size' causes show interfaces API to fail from Need Triage to Finished on the VyOS 1.3 Equuleus board.
jestabro added a project to T2946: Calling 'stty_size' causes show interfaces API to fail: VyOS 1.4 Sagitta.
sever-sever <v.gletenko@vyos.io> committed rVYOSONEX1572fb3ccd54: ipsec: T3473: Decode byte csa-name for op-mode.
GitHub <noreply@github.com> committed rVYOSONEXe5e61c36939d: Merge pull request #820 from sever-sever/T3473 (authored by c-po).
sever-sever <v.gletenko@vyos.io> committed rVYOSONEXb141b56e6779: container: T2216: Add binding for ports and volumes.
GitHub <noreply@github.com> committed rVYOSONEXaf108d812d15: Merge pull request #818 from sever-sever/T2216-ports (authored by c-po).
Viacheslav changed the status of T3425: Scripts from the /config/scripts/ folder do not run on live system from In progress to Needs testing.
@joolli Re-check please it in any Linux system with the option "-I "
Is it different?
ping -I dum0 10.0.12.40
Viacheslav moved T3455: system users can not be added in "edit" from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Works perfect in VyOS 1.4-rolling-202104260417
sa_data wrong format
vyos@r6-roll:~$ show vpn ipsec sa [[b'peer-203.0.113.2-tunnel-vti', 'up', '4m33s', '168B/168B', '2/2', '203.0.113.2', 'N/A', 'AES_CBC_256/HMAC_SHA1_96/MODP_1024'], ['peer-192.0.2.2-tunnel-vti', 'down', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A']] Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal ------------------------------ ------- -------- -------------- ---------------- ---------------- ----------- ---------------------------------- b'peer-203.0.113.2-tunnel-vti' up 4m33s 168B/168B 2/2 203.0.113.2 N/A AES_CBC_256/HMAC_SHA1_96/MODP_1024 peer-192.0.2.2-tunnel-vti down N/A N/A N/A N/A N/A N/A vyos@r6-roll:~$
This bug is still present in VyOS 1.4-rolling-202104061143.
To reproduce the bug, we need to add a source nat rule first.
configure set nat source rule 100 outbound-interface 'eth0' set nat source rule 100 source address '192.168.0.0/24' set nat source rule 100 translation address masquerade commit save exit
Then if we try to list the nat tables with iptables iptables -t nat -L, we will get error like table 'nat' is incompatible, use 'nft' tool.
Next, if we use podman to create a container sudo podman run -d ubuntu:latest, podman will return the error because it will look up nat rules with iptables.
Unknown Object (User) added a project to T3494: DHCPv6 leases traceback when PD using: VyOS 1.3 Equuleus.
Work as expected on 1.4-rolling-202104260417
vyos@R1:~$ show dhcpv6 server leases IPv6 address State Last communication Lease expiration Remaining Type Pool IAID_DUID ------------------ ------- -------------------- ------------------- ----------- ----------------- ----------- ----------------------------------------------------- 2001:db8:290::/64 active 2021/04/23 14:52:48 prefix delegation VyOS-DHCPv6 00:00:00:00:00:01:00:01:28:15:9b:bd:50:00:00:06:00:00 2001:db8:3456::15b active 2021/04/27 05:07:51 2021/04/27 17:07:51 10:28:27 non-temporary VyOS-DHCPv6 00:00:00:00:00:01:00:01:28:15:9b:bd:50:00:00:06:00:00
c-po closed T3489: NUMA has been disabled for the past few years and no-one has noticed as Unknown Status.
Apr 26 2021
Apr 26 2021
Unknown Object (User) committed rVYOSONEXee4891fe9ad6: dhcpv6-server: T3494: Get address from network to correct sorting.
GitHub <noreply@github.com> committed rVYOSONEX41152d41a18f: Merge pull request #819 from DmitriyEshenko/1x-fix-dhcpv6-26042021 (authored by c-po).
c-po added a comment to T3487: Specifying an invalid "interface address" like dhcph leads to commit error.
Fixed in
@Yuanandyuan Can you reproduce it with vyos cli? Or it raw podman commands?
Unknown Object (User) changed the status of T3494: DHCPv6 leases traceback when PD using from Open to Needs testing.
Apr 25 2021
Apr 25 2021
c-po changed the status of T3489: NUMA has been disabled for the past few years and no-one has noticed from Open to Needs testing.