Page MenuHomeVyOS Platform
Feed All Stories

Dec 6 2022

Viacheslav changed the subtype of T4861: Openconnect restart on adding users - Aborts all active connections from "Task" to "Feature Request".
Dec 6 2022, 5:05 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4861: Openconnect restart on adding users - Aborts all active connections.

@klase could you make some changes?

sudo nano -c +253 /usr/libexec/vyos/conf_mode/vpn_openconnect.py

and change

call('systemctl restart ocserv.service')

to:

call('systemctl reload-or-restart ocserv.service')
Dec 6 2022, 5:04 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4863: need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting).

Does it do the same?

set firewall interface l2tp* out name 'FOO'
set firewall name FOO rule 10 action 'accept'
set firewall name FOO rule 10 protocol 'tcp'
set firewall name FOO rule 10 tcp flags syn
set firewall name FOO rule 10 tcp mss '1300'

nft

table ip vyos_filter {
	chain VYOS_FW_FORWARD {
		type filter hook forward priority filter; policy accept;
		oifname "l2tp*" counter packets 0 bytes 0 jump NAME_FOO
		jump VYOS_POST_FW
	}
...
	chain NAME_FOO {
		tcp flags & syn == syn tcp option maxseg size 1300 counter packets 0 bytes 0 return comment "FOO-10"
		counter packets 0 bytes 0 drop comment "FOO default-action drop"
	}
}
Dec 6 2022, 2:42 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3499: Podman is not compatible with nat rules.

CNI Plugins compatible with nftables https://github.com/greenpau/cni-plugins/

Dec 6 2022, 2:29 PM · VyOS 1.4 Sagitta
aserkin updated the task description for T4863: need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting).
Dec 6 2022, 1:02 PM · VyOS 1.4 Sagitta
aserkin updated the task description for T4863: need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting).
Dec 6 2022, 1:02 PM · VyOS 1.4 Sagitta
aserkin updated the task description for T4863: need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting).
Dec 6 2022, 1:01 PM · VyOS 1.4 Sagitta
aserkin created T4863: need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting).
Dec 6 2022, 1:01 PM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4862: webproxy domain-block does not work from Open to In progress.
Dec 6 2022, 10:15 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk created T4862: webproxy domain-block does not work.
Dec 6 2022, 10:15 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Viacheslav edited projects for T4853: OpenVPN: unable to commit changes when the interface is down/unknown state, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Dec 6 2022, 9:06 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.9)
klase created T4861: Openconnect restart on adding users - Aborts all active connections.
Dec 6 2022, 9:02 AM · VyOS 1.4 Sagitta

Dec 5 2022

fernando closed T4854: BGP-route reflector allows to apply route-maps as Resolved.
Dec 5 2022, 2:31 PM · VyOS 1.4 Sagitta
Viacheslav closed T4860: Openconnect server incorrect unconfigured check as Resolved.
Dec 5 2022, 12:47 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4848: Minor bug in OpenConnect server with default route from In progress to Needs testing.

@klase will be fixed in the next rolling release

Dec 5 2022, 11:14 AM · VyOS 1.4 Sagitta
Viacheslav closed T4804: PPPoE server incorrect unconfigured check as Resolved.
Dec 5 2022, 9:39 AM · VyOS 1.4 Sagitta

Dec 4 2022

Viacheslav added a comment to T4860: Openconnect server incorrect unconfigured check.

PR https://github.com/vyos/vyos-1x/pull/1693

Dec 4 2022, 1:38 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4860: Openconnect server incorrect unconfigured check from Open to In progress.
Dec 4 2022, 1:12 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4848: Minor bug in OpenConnect server with default route from Open to In progress.
Dec 4 2022, 11:12 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4848: Minor bug in OpenConnect server with default route.

PR https://github.com/vyos/vyos-1x/pull/1692

Dec 4 2022, 11:12 AM · VyOS 1.4 Sagitta
Viacheslav created T4860: Openconnect server incorrect unconfigured check.
Dec 4 2022, 10:06 AM · VyOS 1.4 Sagitta
Viacheslav closed T4825: interfaces veth/veth-pairs -standalone used, a subtask of T4686: Provides support for veth, as Resolved.
Dec 4 2022, 9:20 AM · VyOS 1.4 Sagitta
Viacheslav closed T4825: interfaces veth/veth-pairs -standalone used as Resolved.
Dec 4 2022, 9:20 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav closed T4805: PPPoE server does not restart service if pool was changed as Resolved.
Dec 4 2022, 9:12 AM · VyOS 1.4 Sagitta

Dec 3 2022

sarthurdev added a comment to T478: Firewall address group (multi and nesting).

PR to fix recursion check: https://github.com/vyos/vyos-1x/pull/1691

Dec 3 2022, 11:43 AM · VyOS 1.4 Sagitta
c-po claimed T4792: Add SSTP VPN client.
Dec 3 2022, 7:56 AM · VyOS 1.4 Sagitta
Alfa80 awarded T4792: Add SSTP VPN client a Love token.
Dec 3 2022, 6:14 AM · VyOS 1.4 Sagitta
Viacheslav moved T4858: L3VPN- Route Distinguisher notations from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Dec 3 2022, 2:06 AM · VyOS 1.4 Sagitta

Dec 2 2022

fernando changed the status of T4854: BGP-route reflector allows to apply route-maps from Confirmed to In progress.
Dec 2 2022, 9:44 PM · VyOS 1.4 Sagitta
fernando added a comment to T4854: BGP-route reflector allows to apply route-maps.

PR https://github.com/vyos/vyos-1x/pull/1690

Dec 2 2022, 9:44 PM · VyOS 1.4 Sagitta
fernando closed T4858: L3VPN- Route Distinguisher notations as Resolved.
Dec 2 2022, 8:22 PM · VyOS 1.4 Sagitta
jestabro closed T4820: Support for inter-config-mode script dependencies as Resolved.
Dec 2 2022, 6:37 PM · VyOS 1.4 Sagitta
jestabro closed T4859: Correct calling of config mode script dependencies from http-api.py, a subtask of T4820: Support for inter-config-mode script dependencies, as Resolved.
Dec 2 2022, 6:36 PM · VyOS 1.4 Sagitta
jestabro closed T4859: Correct calling of config mode script dependencies from http-api.py as Resolved.
Dec 2 2022, 6:36 PM · VyOS 1.4 Sagitta
fernando added a comment to T4858: L3VPN- Route Distinguisher notations .

PR : https://github.com/vyos/vyos-1x/pull/1688

Dec 2 2022, 6:10 PM · VyOS 1.4 Sagitta
fernando changed the status of T4858: L3VPN- Route Distinguisher notations from Open to In progress.
Dec 2 2022, 6:09 PM · VyOS 1.4 Sagitta
jestabro updated the task description for T4820: Support for inter-config-mode script dependencies.
Dec 2 2022, 5:30 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T4859: Correct calling of config mode script dependencies from http-api.py: T4820: Support for inter-config-mode script dependencies.
Dec 2 2022, 5:21 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T4820: Support for inter-config-mode script dependencies: T4859: Correct calling of config mode script dependencies from http-api.py.
Dec 2 2022, 5:21 PM · VyOS 1.4 Sagitta
jestabro triaged T4859: Correct calling of config mode script dependencies from http-api.py as Normal priority.
Dec 2 2022, 5:21 PM · VyOS 1.4 Sagitta
fernando claimed T4858: L3VPN- Route Distinguisher notations .
Dec 2 2022, 5:03 PM · VyOS 1.4 Sagitta
n.fort closed T4122: interface ip address config missing after upgrade from 1.2.8 to 1.3.0 (when redirect is configured?) as Resolved.
Dec 2 2022, 4:19 PM · VyOS 1.3 Equuleus (1.3.3)
n.fort closed T1024: Policy Based Routing by DSCP as Resolved.
Dec 2 2022, 4:14 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
n.fort claimed T4839: Dynamic Firewall groups.
Dec 2 2022, 4:12 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort closed T4830: nat66 - Error in port translation rules as Resolved.
Dec 2 2022, 4:09 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4857: SNMP - Implement FRR SNMP recommendations.

We can do it the same way

vyos@r1# set service snmp oid-enable 
Possible completions:
   route-table          Enable routing table OIDs (ipCidrRouteTable inetCidrRouteTable)

so by default they should be disabled

Dec 2 2022, 3:14 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4825: interfaces veth/veth-pairs -standalone used.

PR https://github.com/vyos/vyos-1x/pull/1687

Dec 2 2022, 2:34 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
fernando created T4858: L3VPN- Route Distinguisher notations .
Dec 2 2022, 2:32 PM · VyOS 1.4 Sagitta
n.fort added a project to T2998: SNMP v3 oid "exclude" option doesn't work: VyOS 1.4 Sagitta.
Dec 2 2022, 2:26 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.3 Equuleus (1.3.7)
n.fort added a comment to T2998: SNMP v3 oid "exclude" option doesn't work.

Error also present in vyos-1.4-rolling-202212020318

Dec 2 2022, 2:25 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.3 Equuleus (1.3.7)
n.fort changed the status of T4857: SNMP - Implement FRR SNMP recommendations from Open to Confirmed.
Dec 2 2022, 1:38 PM · VyOS 1.4 Sagitta
n.fort created T4857: SNMP - Implement FRR SNMP recommendations.
Dec 2 2022, 1:37 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4825: interfaces veth/veth-pairs -standalone used.

Verify if you are trying to add a new vethX to exists pair (veth12 link to veth0 should be RaiseConfigerror)

set interfaces virtual-ethernet veth0 peer-name 'veth1'
set interfaces virtual-ethernet veth1 peer-name 'veth0'
set interfaces virtual-ethernet veth12 peer-name 'veth0'
commit

commit

vyos@r1# commit
[ interfaces virtual-ethernet veth12 ]
{'ifname': 'veth12',
 'other_interfaces': {'veth0': {'peer_name': 'veth1'},
                      'veth1': {'peer_name': 'veth0'},
                      'veth12': {'peer_name': 'veth0'}},
 'peer_name': 'veth0'}
VyOS had an issue completing a command.
Dec 2 2022, 1:03 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a comment to T4804: PPPoE server incorrect unconfigured check.

PR https://github.com/vyos/vyos-1x/pull/1686

Dec 2 2022, 12:09 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4767: replace sh to Python (generate_ipsec_debug_archive.sh) from In progress to Needs testing.
Dec 2 2022, 9:46 AM

Dec 1 2022

Viacheslav claimed T4848: Minor bug in OpenConnect server with default route.
Dec 1 2022, 10:38 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4856: DHCP-client exit hook for IPsec is incorrect.
Dec 1 2022, 4:47 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4856: DHCP-client exit hook for IPsec is incorrect.
Dec 1 2022, 4:47 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4856: DHCP-client exit hook for IPsec is incorrect.
Dec 1 2022, 4:46 PM · VyOS 1.4 Sagitta
Viacheslav created T4856: DHCP-client exit hook for IPsec is incorrect.
Dec 1 2022, 4:34 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4805: PPPoE server does not restart service if pool was changed.

PR https://github.com/vyos/vyos-1x/pull/1685

Dec 1 2022, 4:16 PM · VyOS 1.4 Sagitta
jestabro claimed T4770: Rewrite OpenVPN op-mode to vyos.opmode format.
Dec 1 2022, 2:27 PM · VyOS 1.4 Sagitta
dmbaturin created T4855: Trying to create more than one tunnel of the same type to the same address causes unhandled exception.
Dec 1 2022, 1:55 PM · VyOS 1.3 Equuleus (1.3.4)
jestabro closed T4847: Correct calling of config mode script dependencies from pki.py, a subtask of T4820: Support for inter-config-mode script dependencies, as Resolved.
Dec 1 2022, 1:26 PM · VyOS 1.4 Sagitta
jestabro closed T4847: Correct calling of config mode script dependencies from pki.py as Resolved.
Dec 1 2022, 1:26 PM · VyOS 1.4 Sagitta
Viacheslav closed T4841: add fan control as Resolved.
Dec 1 2022, 10:40 AM · VyOS 1.4 Sagitta

Nov 30 2022

fernando claimed T4854: BGP-route reflector allows to apply route-maps.
Nov 30 2022, 3:07 PM · VyOS 1.4 Sagitta
fernando changed the status of T4854: BGP-route reflector allows to apply route-maps from Open to Confirmed.
Nov 30 2022, 3:05 PM · VyOS 1.4 Sagitta
fernando created T4854: BGP-route reflector allows to apply route-maps.
Nov 30 2022, 3:05 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4850: Commit error - Could not get property: Failed to activate service 'org.freedesktop.hostname1':.

No, just try the latest rolling
There were a lot of changes/ bug fixed: etc since 2021

Nov 30 2022, 2:52 PM · VyOS 1.4 Sagitta
SrividyaA created T4853: OpenVPN: unable to commit changes when the interface is down/unknown state.
Nov 30 2022, 2:19 PM · Restricted Project, VyOS 1.3 Equuleus (1.3.9)
pratik.g created T4852: pppoe - static default route deleted automatically with default-route none option.
Nov 30 2022, 9:29 AM · VyOS 1.4 Sagitta
pratik.g added a comment to T4850: Commit error - Could not get property: Failed to activate service 'org.freedesktop.hostname1':.

@Viacheslav Can you point to any existing defect in which this issue was fixed to understand the root case and fix?

Nov 30 2022, 7:35 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4850: Commit error - Could not get property: Failed to activate service 'org.freedesktop.hostname1':.

Outdated image 2021

Nov 30 2022, 7:00 AM · VyOS 1.4 Sagitta
pratik.g created T4851: wwan: error: couldn't find modem.
Nov 30 2022, 6:24 AM · Restricted Project, Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
pratik.g created T4850: Commit error - Could not get property: Failed to activate service 'org.freedesktop.hostname1':.
Nov 30 2022, 6:11 AM · VyOS 1.4 Sagitta

Nov 29 2022

jestabro closed T4845: Add smoketest to detect cycles in config-mode script dependency calls, a subtask of T4820: Support for inter-config-mode script dependencies, as Resolved.
Nov 29 2022, 1:39 PM · VyOS 1.4 Sagitta
jestabro closed T4845: Add smoketest to detect cycles in config-mode script dependency calls as Resolved.
Nov 29 2022, 1:39 PM · VyOS 1.4 Sagitta
mcbridematt added a comment to T4849: Update arm64 kernel config and patches to 5.15.

Pull request: https://github.com/vyos/vyos-build/pull/288

Nov 29 2022, 11:12 AM · Restricted Project, VyOS 1.5 Circinus
mcbridematt created T4849: Update arm64 kernel config and patches to 5.15.
Nov 29 2022, 9:58 AM · Restricted Project, VyOS 1.5 Circinus
klase created T4848: Minor bug in OpenConnect server with default route.
Nov 29 2022, 7:48 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T3810: webproxy squidguard rules don't work properly after rewriting to python. from Needs testing to In progress.
Nov 29 2022, 7:47 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk claimed T3810: webproxy squidguard rules don't work properly after rewriting to python. .
Nov 29 2022, 7:46 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T4842: Routing config broken if mpls config exists.

Fixed in latest 1.4 rolling

Nov 29 2022, 6:41 AM · VyOS 1.4 Sagitta
c-po closed T4842: Routing config broken if mpls config exists as Resolved.
Nov 29 2022, 6:41 AM · VyOS 1.4 Sagitta

Nov 28 2022

jestabro added a subtask for T4820: Support for inter-config-mode script dependencies: T4847: Correct calling of config mode script dependencies from pki.py.
Nov 28 2022, 10:00 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T4847: Correct calling of config mode script dependencies from pki.py: T4820: Support for inter-config-mode script dependencies.
Nov 28 2022, 10:00 PM · VyOS 1.4 Sagitta
jestabro triaged T4847: Correct calling of config mode script dependencies from pki.py as Normal priority.
Nov 28 2022, 10:00 PM · VyOS 1.4 Sagitta
jestabro renamed T4845: Add smoketest to detect cycles in config-mode script dependency calls from Add smoketest to detect cycles in config dependency calls to Add smoketest to detect cycles in config-mode script dependency calls.
Nov 28 2022, 9:42 PM · VyOS 1.4 Sagitta
jestabro added a comment to T4845: Add smoketest to detect cycles in config-mode script dependency calls.

PR:
https://github.com/vyos/vyos-1x/pull/1683

Nov 28 2022, 9:42 PM · VyOS 1.4 Sagitta
fernando created T4846: L3VPN- network command doesn't install direct connected prefix.
Nov 28 2022, 6:02 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T4845: Add smoketest to detect cycles in config-mode script dependency calls: T4820: Support for inter-config-mode script dependencies.
Nov 28 2022, 3:41 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T4820: Support for inter-config-mode script dependencies: T4845: Add smoketest to detect cycles in config-mode script dependency calls.
Nov 28 2022, 3:41 PM · VyOS 1.4 Sagitta
jestabro triaged T4845: Add smoketest to detect cycles in config-mode script dependency calls as Normal priority.
Nov 28 2022, 3:41 PM · VyOS 1.4 Sagitta
a.apostoliuk added a subtask for T3810: webproxy squidguard rules don't work properly after rewriting to python. : T4844: Incorrect permissions of the safeguard DB directory.
Nov 28 2022, 3:08 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk added a parent task for T4844: Incorrect permissions of the safeguard DB directory: T3810: webproxy squidguard rules don't work properly after rewriting to python. .
Nov 28 2022, 3:08 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4844: Incorrect permissions of the safeguard DB directory from Open to In progress.
Nov 28 2022, 3:07 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk claimed T4844: Incorrect permissions of the safeguard DB directory.
Nov 28 2022, 3:07 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk created T4844: Incorrect permissions of the safeguard DB directory.
Nov 28 2022, 3:07 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Viacheslav added a subtask for T4470: Rewrite load-balancing wan to XML/Python: T4362: Wan Load Balancing - Can't create routing tables.
Nov 28 2022, 12:53 PM · VyOS 1.5 Circinus