Not the bug, because it is internally translated to the proper value: https://github.com/vyos/vyos-1x/blob/b01f27b3bb3f4cbc6096011856d83009d0440313/data/templates/ipsec/swanctl/peer.j2#L90
Feed Search
Aug 31 2022
Aug 31 2022
zsdc changed the status of T4646: USB serial output console does not work from Open to Needs testing.
Aug 30 2022
Aug 30 2022
zsdc renamed T4658: Rename DPD action `hold` to `trap` from DPD action values are outdated to Rename DPD action `hold` to `trap`.
zsdc changed the subtype of T4658: Rename DPD action `hold` to `trap` from "Bug" to "Feature Request".
zsdc changed the status of T4657: op-mode scripts with type hints in `return` do not work from Open to In progress.
zsdc added a parent task for T4516: Rewrite system image manipulation tools in Python: T4548: GRUB loader configuration rework.
Aug 27 2022
Aug 27 2022
zsdc reopened T2460: Migrate vyatta-nat-translations.pl to Python, a subtask of T2198: Rewrite NAT in new XML/Python style, as Open.
zsdc reopened T2460: Migrate vyatta-nat-translations.pl to Python as "Open".
I need to reopen this, because after T3781 op-mode CLI references were reverted as well, and now we are in the strange situation when show_nat_translations.py is in the system, but CLI still refers to the old vyatta-nat-translations.pl.
The old script uses too much CPU and RAM, and can even crash on big conntrack tables.
We should backport updates from sagitta to op-mode scripts and replace CLI references to use them.
Aug 25 2022
Aug 25 2022
zsdc updated the task description for T4647: Add Google Virtual NIC (gVNIC) support.
zsdc added a project to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer: VyOS 1.4 Sagitta.
Aug 25 2022, 7:48 AM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
Aug 24 2022
Aug 24 2022
Aug 5 2022
Aug 5 2022
Aug 2 2022
Aug 2 2022
Jul 28 2022
Jul 28 2022
zsdc added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
True, marking packets can help. I would only be very careful because we use marks a lot for PBR, LB, etc. Not sure if they can conflict with each other. Also, the performance is the question - better to check how marking each packet on an interface affects it.
Jul 28 2022, 9:13 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
zsdc added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.
I have no proof now of any obvious negative issues. Moreover, in my personal opinion - if some protocol or interface type requires a default MTU that is not assigned to it by the kernel, this is the problem that should be solved by configuration script for that particular interface.
Jul 27 2022
Jul 27 2022
zsdc changed the status of T4572: Add an option to force interface MTU to the value received from DHCP from Open to Confirmed.
Jul 22 2022
Jul 22 2022
Jul 20 2022
Jul 20 2022
Jul 19 2022
Jul 19 2022
zsdc changed the status of T4546: Does not connect Cisco spoke to VyOS hub. from Confirmed to In progress.
PR for 1.4: https://github.com/vyos/vyos-1x/pull/1418
zsdc changed the status of T4542: route-map: "match prefix-len" incorrect behavior from Open to Confirmed.
This is a behavior "by design". The prefix-len option cannot be used for BGP routes. We should add this notice to the CLI.
Check: http://docs.frrouting.org/en/latest/routemap.html#clicmd-match-ip-address-prefix-len-0-32
Jul 18 2022
Jul 18 2022
Jul 8 2022
Jul 8 2022
zsdc changed the status of T4516: Rewrite system image manipulation tools in Python from Open to In progress.
Jul 7 2022
Jul 7 2022
Jul 4 2022
Jul 4 2022
zsdc added a comment to T4508: Problem with values of the same environment in different event handlers.
Jun 10 2022
Jun 10 2022
Jun 8 2022
Jun 8 2022
Jun 2 2022
Jun 2 2022
zsdc added a comment to T4288: IPsec tunnel will break when ESP timeout.
@m.korobeinikov I believe that I already posted this some time ago, but just in case...
Not all combinations of DPD and close-action are safe. Actually, most of them sooner or later will lead to issues with IPSec. So, I created the next scheme. It is from 2020, so I will not say that nothing was changed from that time, however, it shows well how careful you should be while configuring IPSec. On the scheme, you can see the only safe configuration of the close-action option, depending on how the peer is configured, but the same logic can be applied to DPD.
May 31 2022
May 31 2022
May 25 2022
May 25 2022
May 13 2022
May 13 2022
May 5 2022
May 5 2022
zsdc changed the status of T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size from Open to In progress.
PR for 1.3: https://github.com/vyos/vyos-build/pull/231
PR for 1.4: https://github.com/vyos/vyos-build/pull/230
May 3 2022
May 3 2022
zsdc changed the status of T4407: Network-config v2 is broken in Cloud-init 22.1 and VyOS 1.3 from Open to Needs testing.
Resolved in https://github.com/vyos/vyos-cloud-init/pull/54
Apr 30 2022
Apr 30 2022
Apr 25 2022
Apr 25 2022
Apr 14 2022
Apr 14 2022
zsdc added a comment to T4028: FRR 8.1 routes not being applied to routing table after reboot if an interface has 2 ip addresses.
Theoretically, must be fixed in https://github.com/FRRouting/frr/pull/11004
Apr 11 2022
Apr 11 2022
Apr 1 2022
Apr 1 2022
zsdc changed the status of T4305: Global log facility does not have consistent default settings, and doesn't change when modified from Open to Confirmed.
Hi, @dberlin ! Thanks, you are right about the root cause.
I believe that we need to remove the max-size and action-on-max-size from rsyslog.conf. So, leave everything related to rotating logs to logrotate, and to sending logs to rsyslog - UNIX-way. :)
Mar 31 2022
Mar 31 2022
Mar 26 2022
Mar 26 2022
zsdc added a comment to T2117: Update Cloud-init version and actualize our changes to it.
Updated to 22.1 in 1.4.
The current branch now must be compatible with 1.3, and merged to equuleus if there no new incompatibilities will be found during tests.
Mar 24 2022
Mar 24 2022
zsdc changed the status of T2117: Update Cloud-init version and actualize our changes to it from Needs testing to In progress.
Updated: we need to update 20.4 to 22.1 because 20.4 cannot extract SSH keys from the Azure Stack Hub data source.
Mar 15 2022
Mar 15 2022
zsdc added a comment to T4301: The "arp-monitor" option in bonding interface settings does not work.
The same issue with set interfaces bonding bond0 arp-monitor interval 'X' option. Also extra conversion between variable types.
Added the fix to the same PR.
zsdc edited a custom field on T4301: The "arp-monitor" option in bonding interface settings does not work.
zsdc changed the status of T4301: The "arp-monitor" option in bonding interface settings does not work from Open to In progress.
zsdc changed the status of T4300: Extend list of supported interfaces for Cloud-init Network Configuration from Open to In progress.
Mar 12 2022
Mar 12 2022
zsdc closed T4002: firewall group network-group long names restriction incorrect behavior as Resolved.
zsdc moved T4296: Interface config injected by Cloud-Init may interfere with VyOS native from Open to Finished on the VyOS 1.4 Sagitta board.
zsdc closed T4296: Interface config injected by Cloud-Init may interfere with VyOS native as Resolved.
Mar 11 2022
Mar 11 2022
Mar 7 2022
Mar 7 2022
zsdc closed T2613: add logrotate options for syslog, a subtask of T3774: atop logs are not limited in size, as Resolved.
Resolved in https://phabricator.vyos.net/T3774, but it will not be backported to 1.2.
zsdc added a parent task for T2613: add logrotate options for syslog: T3774: atop logs are not limited in size.
zsdc added a subtask for T3774: atop logs are not limited in size: T2613: add logrotate options for syslog.
zsdc changed the status of T4250: Organize logrotate settings to avoid duplicates from Open to In progress.
Should be fixed in https://github.com/vyos/vyos-1x/pull/1241
zsdc edited projects for T4002: firewall group network-group long names restriction incorrect behavior, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
zsdc triaged T4002: firewall group network-group long names restriction incorrect behavior as Normal priority.
Mar 6 2022
Mar 6 2022
zsdc changed the status of T4002: firewall group network-group long names restriction incorrect behavior from Confirmed to In progress.
Should be fixed by https://github.com/vyos/vyatta-cfg-firewall/pull/32
Mar 2 2022
Mar 2 2022
Feb 18 2022
Feb 18 2022
Feb 16 2022
Feb 16 2022
Feb 10 2022
Feb 10 2022
Feb 4 2022
Feb 4 2022
Feb 3 2022
Feb 3 2022
Jan 26 2022
Jan 26 2022
zsdc added a comment to T3397: getty forces --keep-baud in 1.2.x.
We confirmed the problem - some serial consoles continue to work well, some are not initialized properly with the --keep-baud option. For example, this can be reproduced in the SOS console in Equinix Metal.
Originally, the problem comes from a systemd service template.
Since it is not completely clear if the option is necessary in one case or another, it seems that the best solution would be to provide the ability to set/remove it from the CLI, so everyone may configure what works best for his hardware.
Jan 13 2022
Jan 13 2022
Dec 30 2021
Dec 30 2021
Suggested fix: https://github.com/vyos/vyatta-op/pull/52
Dec 29 2021
Dec 29 2021
zsdc added a comment to T4121: Nameservers from DHCP client cannot be used in specific cases.
PR to fix the problem: https://github.com/vyos/vyos-1x/pull/1128
It is compatible with both 1.3 and 1.4, so can be cherry-picked from sagitta to equuleus.
zsdc changed the status of T4121: Nameservers from DHCP client cannot be used in specific cases from Open to In progress.
Dec 17 2021
Dec 17 2021
Nov 26 2021
Nov 26 2021
Nov 10 2021
Nov 10 2021
Nov 9 2021
Nov 9 2021
Hardcoded version of the fix for 1.4:
https://github.com/vyos/vyos-1x/pull/1068
https://github.com/vyos/vyos-build/pull/201