Page MenuHomeVyOS Platform
Feed All Stories

Jul 29 2021

dmbaturin edited projects for T3090: Move 'adjust-mss' firewall options to the interface section., added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Jul 29 2021, 8:50 AM · VyOS 1.4 Sagitta
dmbaturin added a project to T3070: Firewall going OOM, possible related to nftables migration: test.
Jul 29 2021, 8:50 AM · VyOS 1.3 Equuleus (1.3.4)
dmbaturin renamed T3022: Allow to provide custom TLS certificates for the HTTP virtual hosts from Allow to provide custom TLS certificates for the "https" service to Allow to provide custom TLS certificates for the HTTP virtual hosts.
Jul 29 2021, 8:50 AM · VyOS 1.4 Sagitta (1.4.0)
dmbaturin added a project to T2941: Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py: test.
Jul 29 2021, 8:49 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
dmbaturin added a project to T2947: Nat translation many-many with prefix does not map 1-1.: test.
Jul 29 2021, 8:48 AM · VyOS 1.4 Sagitta
dmbaturin created test.
Jul 29 2021, 8:12 AM
Viacheslav added a subtask for T3706: Add proper priorities for systemd daemons: T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.
Jul 29 2021, 6:52 AM · Bugs, VyOS Rolling
Viacheslav added a parent task for T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable: T3706: Add proper priorities for systemd daemons.
Jul 29 2021, 6:52 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.

It was a lot of problems with high CPU utilization with these mibs T1705.
https://forum.vyos.io/t/high-cpu-usage-by-bgpd-when-snmp-is-active

Jul 29 2021, 6:51 AM · VyOS 1.4 Sagitta

Jul 28 2021

fernando created T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.
Jul 28 2021, 7:44 PM · VyOS 1.4 Sagitta
Viacheslav renamed T3708: isisd and gre-bridge commit error from isisd and gre-bgidge commit error to isisd and gre-bridge commit error.
Jul 28 2021, 10:52 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav created T3708: isisd and gre-bridge commit error.
Jul 28 2021, 10:44 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav renamed T3707: Ping incorrect ip host checks from Ping incorrect host checks to Ping incorrect ip host checks.
Jul 28 2021, 10:40 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav created T3707: Ping incorrect ip host checks.
Jul 28 2021, 10:33 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Jul 27 2021

c-po committed rVYOSONEXc48116a95ba6: Revert "ifconfig: drop unused classes for pppoe and vti".
Jul 27 2021, 7:40 PM
c-po added a reverting change for rVYOSONEXe4d697b1d3aa: ifconfig: drop unused classes for pppoe and vti: rVYOSONEXc48116a95ba6: Revert "ifconfig: drop unused classes for pppoe and vti".
Jul 27 2021, 7:40 PM
Viacheslav added a comment to T3702: Policy: Allow routing by fwmark.

PR https://github.com/vyos/vyos-1x/pull/944

Jul 27 2021, 6:38 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
fetzerms added a comment to T3702: Policy: Allow routing by fwmark.

Wireguard has its own fwmark setting, such as:

Jul 27 2021, 5:11 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Viacheslav updated the task description for T3706: Add proper priorities for systemd daemons.
Jul 27 2021, 11:27 AM · Bugs, VyOS Rolling
Viacheslav created T3706: Add proper priorities for systemd daemons.
Jul 27 2021, 11:23 AM · Bugs, VyOS Rolling
dmbaturin committed rVYOSONEX503bdbd444d9: T3697: wait for charon to get started before trying to restart it..
Jul 27 2021, 11:20 AM
Viacheslav added a comment to T3702: Policy: Allow routing by fwmark.

@fetzerms The feature "policy local-route" in the 1.3/1.4 only.

Jul 27 2021, 11:01 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
c-po committed rVYOSONEX9e18f625dfdd: ipsec: T3705: bugfix for VTI interfaces no honoring default-esp-group.
Jul 27 2021, 10:24 AM

Jul 26 2021

c-po committed rVYOSONEX5a016d0e1653: smoketest: config: azure: also utilize "default-esp-group" feature.
Jul 26 2021, 8:31 PM
c-po committed rVYOSONEX57fa30de709a: smoketest: config: azure: also utilize "default-esp-group" feature.
Jul 26 2021, 8:28 PM
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.134 / 5.10.52 to Update Linux Kernel to v5.4.135 / 5.10.53.
Jul 26 2021, 8:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX1d876af9e5d7: ipsec: T1210: remote-access connections only work with IKEv2.
Jul 26 2021, 8:07 PM
c-po committed rVYOSONEXc31488f0e320: ipsec: T1210: extend support for iOS profile generation.
Jul 26 2021, 7:56 PM
c-po created T3705: IPSec: VTI interface does not honor default-esp-group.
Jul 26 2021, 6:41 PM · VyOS 1.4 Sagitta
zsdc changed the status of T3704: Add ability to interact with Areca RAID adapers from Open to In progress.

PR: https://github.com/vyos/vyos-build/pull/179

Jul 26 2021, 6:39 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
zsdc created T3704: Add ability to interact with Areca RAID adapers.
Jul 26 2021, 5:18 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
fetzerms added a comment to T3702: Policy: Allow routing by fwmark.

Thanks for the info. I think (indeed) that *might* work for wireguard. But never the less, it would be cool to have the possibility to route by fwmark.

Jul 26 2021, 4:39 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
m1nus created T3703: Syslog to Remote Server: Invalid facility type.
Jul 26 2021, 3:49 PM
Viacheslav added a comment to T3702: Policy: Allow routing by fwmark.

We only have source routing now:

Jul 26 2021, 11:25 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
Unknown Object (User) reopened T2432: dhcpd: Can't create new lease file: Permission denied as "Open".

I think we need to reopen this task. Sometimes (one per hour) some users and I got similar messages on version 1.3-rc4/rc5

Jul 26 2021, 10:08 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
fetzerms created T3702: Policy: Allow routing by fwmark.
Jul 26 2021, 8:28 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta

Jul 25 2021

Cheeze_It added a comment to T3693: ISIS Route redistribution ipv6 support missing.

Put in a PR for this....

Jul 25 2021, 8:30 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEXc4bbf20ffc5a: vrf: T31: add missind import for cmd().
Jul 25 2021, 8:19 PM
c-po committed rVYOSONEX67a5ca7fa372: tunnel: T3366: re-order migration scripts.
Jul 25 2021, 7:17 PM
c-po committed rVYOSONEX05e77af9b869: vrf: T31: ignore iproute2 errors.
Jul 25 2021, 7:11 PM
c-po committed rVYOSONEXfb94d0b6091e: smoketest: add shim for every test to re-use common tasts.
Jul 25 2021, 7:11 PM
c-po committed rVYOSONEX855351be628c: ifconfig: T2653: obey conding style.
Jul 25 2021, 7:10 PM
c-po committed rVYOSONEXc114e1904571: tunnel: T3173: add new options "no-pmtu-discovery" and "ignore-df".
Jul 25 2021, 7:10 PM
c-po committed rVYOSONEX7a85dbfb8b97: ifconfig: backport ifconfig framework from 1.4 to support new tunnel options.
Jul 25 2021, 7:10 PM
c-po committed rVYOSONEXe4d697b1d3aa: ifconfig: drop unused classes for pppoe and vti.
Jul 25 2021, 7:10 PM
c-po committed rVYOSONEX2ababc4f3329: vyos.util: backport 1.4 changes on dict_search().
Jul 25 2021, 7:10 PM
c-po committed rVYOSONEXb5250fa28f22: smoketest: openvpn: fix deprecated option warning for key generation.
Jul 25 2021, 7:10 PM
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 7:02 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 6:59 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX08614557b679: ifconfig: T2653: obey conding style.
Jul 25 2021, 5:27 PM
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 4:54 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 4:48 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 4:48 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 4:47 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX82ee846c43d8: xml: tunnel: use source-interface building block.
Jul 25 2021, 10:44 AM
c-po added a project to T3173: Need 'nopmtudisc' option for tunnel interface: VyOS 1.3 Equuleus.
Jul 25 2021, 8:52 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:51 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:39 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:38 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:38 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:31 AM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 25 2021, 8:30 AM · VyOS 1.4 Sagitta

Jul 24 2021

yun committed rVYOSONEX19696edc2097: openvpn: T65: Fix auth-user-pass authentication only.
Jul 24 2021, 10:15 PM
GitHub <noreply@github.com> committed rVYOSONEX298f3ec051b5: Merge pull request #942 from yunzheng/T65 (authored by c-po).
Jul 24 2021, 10:15 PM
c-po committed rVYOSONEX794fa2206659: ipsec: T1210: add RADIUS authentication for remote-access IKEv2 VPN.
Jul 24 2021, 10:15 PM
c-po committed rVYOSONEX937f1e43ebb9: xml: add building block for RADIUS nas-identifier.
Jul 24 2021, 10:15 PM
c-po committed rVYOSONEX861945045ca0: ipsec: T1210: move DHCP server configuration unter remote-access node.
Jul 24 2021, 10:15 PM
ernstjo added a comment to T3694: Static routes not installed into kernel nor frr.

Does disabling of vyos-configd has any impact in production?

Jul 24 2021, 7:11 PM · VyOS 1.4 Sagitta
dmbaturin committed rVYOSONEX8279745ace5c: Merge branch 'equuleus' of https://github.com/vyos/vyos-1x into equuleus.
Jul 24 2021, 3:42 PM
dmbaturin committed rVYOSONEXa374e94a72d6: T3697: fix a conditional..
Jul 24 2021, 3:42 PM
dmbaturin committed rVYOSONEXbdfceaaaab1b: Merge branch 'equuleus' of https://github.com/vyos/vyos-1x into equuleus.
Jul 24 2021, 3:42 PM
dmbaturin committed rVYOSONEX7011f58991d4: Merge branch 'equuleus' of https://github.com/vyos/vyos-1x into equuleus.
Jul 24 2021, 10:45 AM
dmbaturin committed rVYOSONEXd7ec4e8b3307: T3697: hopefully complete fix for checking whether IPsec should start..
Jul 24 2021, 10:45 AM
GitHub <noreply@github.com> committed rVYOSONEXd6ae62a4a93b: Merge pull request #940 from yunzheng/T3681 (authored by c-po).
Jul 24 2021, 9:30 AM
yun committed rVYOSONEX9ee239cd4857: vyos-1x-vmware: T3681: don't bytecompile ether-resume.py.
Jul 24 2021, 9:30 AM
yun committed rVYOSONEX96acb4f233ca: vyos-1x-vmware: T3682: remove dhclient from ether-resume.py.
Jul 24 2021, 9:30 AM
GitHub <noreply@github.com> committed rVYOSONEX165ac2ef628b: Merge pull request #941 from yunzheng/T3682 (authored by c-po).
Jul 24 2021, 9:30 AM
dmbaturin committed rVYOSONEX483e0b332791: T3697: return an empty dict when IPsec isn't fully configured.
Jul 24 2021, 4:46 AM

Jul 23 2021

jack9603301 updated the task description for T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 23 2021, 6:51 PM · VyOS 1.4 Sagitta
jack9603301 added a comment to T3700: Support VLAN tunnel mapping of VLAN aware bridges.

PR: https://github.com/vyos/vyos-1x/pull/938

Jul 23 2021, 6:48 PM · VyOS 1.4 Sagitta
sarthurdev <965089+sarthurdev@users.noreply.github.com> committed rVYOSONEX77a9473915b4: pki: T3642: Add ability to write generated certificates/keys to specified….
Jul 23 2021, 5:35 PM
GitHub <noreply@github.com> committed rVYOSONEX7273a6a0a05a: Merge pull request #939 from sarthurdev/pki_file (authored by c-po).
Jul 23 2021, 5:35 PM
c-po committed rVYOSONEXa55585a833a2: frr: T2175: remove no longer required loop when removing routing protocols.
Jul 23 2021, 5:35 PM
c-po closed T3699: login: verify selected "system login user" name is not already used by the base system. as Resolved.
Jul 23 2021, 5:33 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX4791195ae206: login: T3699: verify system username does not conflict with Linux base users.
Jul 23 2021, 5:33 PM
c-po committed rVYOSONEX7292631373ea: login: T3699: verify system username does not conflict with Linux base users.
Jul 23 2021, 5:32 PM
c-po added a project to T3699: login: verify selected "system login user" name is not already used by the base system.: VyOS 1.4 Sagitta.
Jul 23 2021, 5:29 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3699: login: verify selected "system login user" name is not already used by the base system. from Open to In progress.
Jul 23 2021, 5:29 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
ramaxlo added a comment to T3688: Fail to save configuration via scp/sftp.

Have tried as you suggested, and confirmed it works.

Jul 23 2021, 1:27 PM · VyOS 1.3 Equuleus (1.3.6)
Viacheslav changed the status of T3694: Static routes not installed into kernel nor frr from Open to Confirmed.

I can confirm that happens only if you ssh via vrf and set static route6 in default vrf
And it works without debug, if you stop vyos-configd service

Jul 23 2021, 10:29 AM · VyOS 1.4 Sagitta
ernstjo added a comment to T3694: Static routes not installed into kernel nor frr.

I can reproduce this issue on different routers (Baremetal or VMs). Debug mode on, ipv6 routes install. Debug mode off, static route config is missing in frr, thus not installed into the kernel.

Jul 23 2021, 9:50 AM · VyOS 1.4 Sagitta
ernstjo added a comment to T3694: Static routes not installed into kernel nor frr.

Do you use standard user (vyos) or not?
yes, standard vyos user

Jul 23 2021, 9:06 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3683: VXLAN not accept ipv6 and source-interface options and mtu bug from Open to Needs testing.
Jul 23 2021, 9:01 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
Viacheslav added a comment to T3694: Static routes not installed into kernel nor frr.

I can't reproduce it in any version.
Let's check what is different, and why only in your case do you have a problem, but other users never have this issue.

Jul 23 2021, 8:57 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3671: Webproxy not functional in 1.2.8 update.

The latest .deb with fixed in pr above

Jul 23 2021, 8:44 AM · VyOS 1.2 Crux (VyOS 1.2.9)
ernstjo added a comment to T3694: Static routes not installed into kernel nor frr.

It happens on different versions and not fixed in the latest version.

Jul 23 2021, 8:37 AM · VyOS 1.4 Sagitta
stavros created T3701: ipoe server fails to start when configuring radius dynamic-author on ipoe.
Jul 23 2021, 7:39 AM · VyOS 1.4 Sagitta
jack9603301 removed a subtask for T1354: Add support for VLAN-Aware bridges: T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 23 2021, 7:22 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jack9603301 added a subtask for T3137: Let VLAN aware bridge approach the behavior of professional equipment: T3700: Support VLAN tunnel mapping of VLAN aware bridges.
Jul 23 2021, 7:22 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 edited parent tasks for T3700: Support VLAN tunnel mapping of VLAN aware bridges, added: T3137: Let VLAN aware bridge approach the behavior of professional equipment; removed: T1354: Add support for VLAN-Aware bridges.
Jul 23 2021, 7:22 AM · VyOS 1.4 Sagitta