Page MenuHomeVyOS Platform
Feed All Stories

Dec 17 2022

roedie updated subscribers of T4884: Missing a community6 in snmpd config.

Had a quick look at the 1.3 implementation and it seems the bug isn't present there. So no back-porting needed @c-po

Dec 17 2022, 4:52 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po committed rVYOSONEXc83b70c93db2: GitHub: sync to author assign workflow changed from current.
Dec 17 2022, 3:59 PM
GitHub <noreply@github.com> committed rVYOSONEX0cbd24fb4a73: Merge pull request #1716 from c-po/equuleus (authored by Viacheslav).
Dec 17 2022, 3:59 PM
c-po committed rVYOSONEXd9ab07c3d7d9: sstp: T4384: disable compression and creacke exclusive lock file.
Dec 17 2022, 11:48 AM
c-po committed rVYOSONEX8d5c63338540: sstp: T4384: remote server is mandatory in client mode.
Dec 17 2022, 11:48 AM
vfreex committed rVYOSONEXcca7ec3efbf6: T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925).
Dec 17 2022, 10:35 AM
GitHub <noreply@github.com> committed rVYOSONEX526357566f2a: Merge pull request #1669 from vfreex/dhcp-v6-only-option-1.4 (authored by c-po).
Dec 17 2022, 10:35 AM
c-po committed rVYOSONEX31775f71a514: op-mode: T707: remove dedicated calls to sudo in vpn_ipsec.
Dec 17 2022, 10:12 AM
GitHub <noreply@github.com> committed rVYOSONEX588aa7398ab4: Merge pull request #1715 from c-po/current (authored by c-po).
Dec 17 2022, 10:12 AM
c-po committed rVYOSONEX672b6cc486f1: op-mode: T707: explicitly use sudo when working with RAID devices.
Dec 17 2022, 10:01 AM
GitHub <noreply@github.com> committed rVYOSONEXb56917451dbb: Merge pull request #1714 from c-po/current (authored by c-po).
Dec 17 2022, 10:01 AM
hensur added a reverting change for rVYOSONEX45a2a7d0adc7: Revert "backport: T4515: T4219: policy local-route6 and inbound-interface…: rVYOSONEXb832ab05d168: Revert "Revert "backport: T4515: T4219: policy local-route6 and inbound….
Dec 17 2022, 10:01 AM
hensur committed rVYOSONEXb832ab05d168: Revert "Revert "backport: T4515: T4219: policy local-route6 and inbound….
Dec 17 2022, 10:01 AM
hensur committed rVYOSONEX9fc6dba84177: policy: T4151: remove left over fwmk check.
Dec 17 2022, 10:00 AM
hensur committed rVYOSONEX45734d25f6b4: correctly set fwmk from current config on removals, fix smoketest.
Dec 17 2022, 10:00 AM
hensur committed rVYOSONEX19e85acabcbc: respect table changes for remove_rule.
Dec 17 2022, 10:00 AM
hensur committed rVYOSONEXfac820cadcf7: local-route6: use ipv6 value help for source.
Dec 17 2022, 10:00 AM
hensur committed rVYOSONEX93ee3651a850: policy: local-route(6): set priority property.
Dec 17 2022, 10:00 AM
GitHub <noreply@github.com> committed rVYOSONEX04c6326d31a3: Merge pull request #1259 from hensur/equuleus-ipv6-local-route (authored by c-po).
Dec 17 2022, 10:00 AM
c-po committed rVYOSONEXa3444c686427: op-mode: T4767: drop sudo calls when working with QAT/acceleration subsystem.
Dec 17 2022, 9:41 AM
GitHub <noreply@github.com> committed rVYOSONEX3ef1de3846e7: Merge pull request #1713 from c-po/current (authored by c-po).
Dec 17 2022, 9:41 AM
GitHub <noreply@github.com> committed rVYOSONEXc8d0b28fba89: GitHub: use private access token for review assignment (authored by c-po).
Dec 17 2022, 9:36 AM
GitHub <noreply@github.com> committed rVYOSONEX4ca32ee0d4ca: GitHub: update access token (authored by c-po).
Dec 17 2022, 9:12 AM
GitHub <noreply@github.com> committed rVYOSONEX8baca28bbc27: GitHub: fix team reviewer assignment (authored by c-po).
Dec 17 2022, 7:36 AM
c-po committed rVYOSONEXfe80ae5533be: bonding: T4878: use more is_node_changed() over leaf_node_changed().
Dec 17 2022, 7:33 AM
n.fort committed rVYOSONEX9a5dfb4b7ec9: T4780: Firewall: add firewall groups in firewall. Extend matching criteria so….
Dec 17 2022, 7:30 AM
GitHub <noreply@github.com> committed rVYOSONEX8637b02bb60b: Merge pull request #1626 from nicolas-fort/fwall_group_interface (authored by c-po).
Dec 17 2022, 7:30 AM
goodNETnick <pknet@ya.ru> committed rVYOSONEX551cb56cf752: login: T4751: 2FA OTP key generator in VyOS CLI.
Dec 17 2022, 7:28 AM
GitHub <noreply@github.com> committed rVYOSONEXd7a67aa4a7e7: Merge pull request #1599 from goodNETnick/goodnetnick-loginotpgenerator-T4751 (authored by c-po).
Dec 17 2022, 7:28 AM
initramfs committed rVYOSONEX7709663c61f9: firewall: T4709: adjust TCP MSS clamping ranges and options.
Dec 17 2022, 7:27 AM
GitHub <noreply@github.com> committed rVYOSONEXa5068f5a7292: Merge pull request #1557 from initramfs/equuleus-fix-tcp-mss (authored by c-po).
Dec 17 2022, 7:27 AM
c-po closed T4884: Missing a community6 in snmpd config as Unknown Status.
Dec 17 2022, 7:27 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie committed rVYOSONEX03d49fe0fc50: T4884: snmpd: add community6 fallback.
Dec 17 2022, 7:27 AM
GitHub <noreply@github.com> committed rVYOSONEX972e52ff308e: Merge pull request #1711 from roedie/T4884 (authored by c-po).
Dec 17 2022, 7:27 AM
initramfs committed rVYOSONEX1c9bd9375765: firewall: T4882: add missing ICMPv6 type names.
Dec 17 2022, 7:23 AM
GitHub <noreply@github.com> committed rVYOSONEX03862071cfbc: Merge pull request #1709 from initramfs/current-T4882 (authored by c-po).
Dec 17 2022, 7:23 AM
c-po closed T3810: webproxy squidguard rules don't work properly after rewriting to python. as Unknown Status.
Dec 17 2022, 7:21 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEXe78235213c74: webproxy: T3810: multiple squidGuard fixes (authored by aapostoliuk <108394744+aapostoliuk@users.noreply.github.com>).
Dec 17 2022, 7:21 AM
c-po closed T4809: radvd: Allow use of AdvRASrcAddress as Unknown Status.
Dec 17 2022, 7:20 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie committed rVYOSONEX13071a4a534b: T4809: radvd: Allow the use of AdvRASrcAddress.
Dec 17 2022, 7:20 AM
GitHub <noreply@github.com> committed rVYOSONEX86a2d0fc2bfe: Merge pull request #1712 from roedie/T4809-2 (authored by c-po).
Dec 17 2022, 7:20 AM
Viacheslav committed rVYOSONEX932af7f09880: routing: T1237: Add new feature failover route.
Dec 17 2022, 7:12 AM
GitHub <noreply@github.com> committed rVYOSONEXc44cd46619ba: Merge pull request #1358 from sever-sever/T1237 (authored by c-po).
Dec 17 2022, 7:12 AM

Dec 16 2022

roedie added a comment to T4809: radvd: Allow use of AdvRASrcAddress.

After screwin up the previous PR:
https://github.com/vyos/vyos-1x/pull/1712

Dec 16 2022, 10:00 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie added a comment to T4884: Missing a community6 in snmpd config.

https://github.com/vyos/vyos-1x/pull/1711

Dec 16 2022, 9:04 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie changed the status of T4884: Missing a community6 in snmpd config from Open to In progress.
Dec 16 2022, 8:54 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie claimed T4884: Missing a community6 in snmpd config.
Dec 16 2022, 8:53 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
roedie created T4884: Missing a community6 in snmpd config.
Dec 16 2022, 8:53 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
fernando changed the status of T4846: L3VPN- network command doesn't install direct connected prefix from Open to Needs testing.
Dec 16 2022, 1:41 PM · VyOS 1.4 Sagitta
fernando added a comment to T4846: L3VPN- network command doesn't install direct connected prefix.

FRR fixed it , it seems the issues were associate with next-hop tracking protocol when a prefix is imported using network command (if we used redistributed connected next-hop tracking will not be done):

Dec 16 2022, 1:41 PM · VyOS 1.4 Sagitta
zsdc closed T4878: Any interface bonding changes cause interface flapping as Unknown Status.
Dec 16 2022, 10:42 AM · VyOS 1.4 Sagitta

Dec 15 2022

fernando added a comment to T4846: L3VPN- network command doesn't install direct connected prefix.

yes, it's already configured , share here my full configuration on FRR :

Dec 15 2022, 8:41 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4878: Any interface bonding changes cause interface flapping from In progress to Needs testing.
Dec 15 2022, 3:15 PM · VyOS 1.4 Sagitta
dmbaturin triaged T4883: Add a description field for routing tables as Normal priority.
Dec 15 2022, 2:06 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
dcplaya added a comment to T4014: Add “command” and “arg” configuration options for containers.

Certbot (specifically certbot/dns-cloudflare container) is another situation where a command & argument is required. Currently, I get around it by running a task-schedule to run the podman command directly (its a task because the container runs to completion). But having a way to do this via VyOS CLI would be extra helpful.

Dec 15 2022, 1:18 PM · VyOS 1.4 Sagitta
zsdc committed rVYOSONEX837357071135: bonding: T4878: Fixed unnecessary bonding flapping during commit.
Dec 15 2022, 12:13 PM
GitHub <noreply@github.com> committed rVYOSONEX28c7960b6cc9: Merge pull request #1708 from zdc/T4878-sagitta (authored by Viacheslav).
Dec 15 2022, 12:13 PM
initramfs claimed T4882: Missing ICMPv6 type names in firewall configuration.

Relevant PR:

Dec 15 2022, 11:31 AM · VyOS 1.4 Sagitta
initramfs created T4882: Missing ICMPv6 type names in firewall configuration.
Dec 15 2022, 11:23 AM · VyOS 1.4 Sagitta
initramfs closed T4671: linux-firmware package is missing symlinks defined in WHENCE file as Resolved.
Dec 15 2022, 11:17 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
initramfs added a comment to T4878: Any interface bonding changes cause interface flapping.

@zsdc Yeah I see the bug now, I made the assumption that the config level by default was set to the bond (i.e. interfaces bonding bondX), good catch. Tested in a VM and I can confirm no regression in existing bonding behavior.

Dec 15 2022, 11:03 AM · VyOS 1.4 Sagitta
zsdc changed the status of T4878: Any interface bonding changes cause interface flapping from Confirmed to In progress.

I agree that internal logic can be better, but I think that in this specific case the problem is much simpler: https://github.com/vyos/vyos-1x/pull/1708

Dec 15 2022, 9:50 AM · VyOS 1.4 Sagitta
zsdc changed the status of T4878: Any interface bonding changes cause interface flapping from Open to Confirmed.
Dec 15 2022, 8:57 AM · VyOS 1.4 Sagitta
initramfs added a comment to T4878: Any interface bonding changes cause interface flapping.

I couldn't find an effective way to get all the new members added to the bond via config at commit-time without comparing the members to the running/effective config (the function leaf_node_changed() only gets the removed interfaces). Not doing so either causes runtime commit failures (where the bond fails to add/remove members) or boot failures (where the bond fails to add all it's members on boot).

Dec 15 2022, 8:56 AM · VyOS 1.4 Sagitta
Viacheslav added a project to T2044: RPKI doesn't boot properly: VyOS 1.4 Sagitta.
Dec 15 2022, 8:31 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav updated subscribers of T4856: DHCP-client exit hook for IPsec is incorrect.
Dec 15 2022, 8:28 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4846: L3VPN- network command doesn't install direct connected prefix.

Did you tried no bgp network import-check ?

Dec 15 2022, 7:08 AM · VyOS 1.4 Sagitta

Dec 14 2022

fernando added a comment to T4846: L3VPN- network command doesn't install direct connected prefix.

FRR issues regarding this incorrect behavior ,

Dec 14 2022, 9:28 PM · VyOS 1.4 Sagitta
jestabro renamed T4880: Expose 'add/delete container image' in HTTP-API from Expose 'add/delete containter image' in HTTP-API to Expose 'add/delete container image' in HTTP-API.
Dec 14 2022, 7:50 PM · VyOS 1.4 Sagitta
jestabro closed T4881: Return opmode.Error on openconnect.py show_sessions as Resolved.
Dec 14 2022, 7:46 PM · VyOS 1.4 Sagitta
jestabro committed rVYOSONEXc4e56fe4f4d7: ocserv: T4881: return vyos.opmode.Errors on failure.
Dec 14 2022, 6:08 PM
GitHub <noreply@github.com> committed rVYOSONEX4c10181bf2b1: Merge pull request #1707 from jestabro/op-mode-openconnect (authored by Viacheslav).
Dec 14 2022, 6:08 PM
jestabro added a comment to T4881: Return opmode.Error on openconnect.py show_sessions.

PR: https://github.com/vyos/vyos-1x/pull/1707

Dec 14 2022, 5:51 PM · VyOS 1.4 Sagitta
jestabro triaged T4881: Return opmode.Error on openconnect.py show_sessions as Normal priority.
Dec 14 2022, 5:45 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T4879: IPSec migration failed with missing remote-id: VyOS 1.4 Sagitta.

Related task IPsec syntax overhaul T4118

Dec 14 2022, 4:24 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4878: Any interface bonding changes cause interface flapping.
Dec 14 2022, 3:49 PM · VyOS 1.4 Sagitta
Viacheslav updated subscribers of T4878: Any interface bonding changes cause interface flapping.
Dec 14 2022, 3:46 PM · VyOS 1.4 Sagitta
Viacheslav awarded T4880: Expose 'add/delete container image' in HTTP-API a Like token.
Dec 14 2022, 3:42 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4878: Any interface bonding changes cause interface flapping.
Dec 14 2022, 3:37 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4878: Any interface bonding changes cause interface flapping.
Dec 14 2022, 3:34 PM · VyOS 1.4 Sagitta
jestabro triaged T4880: Expose 'add/delete container image' in HTTP-API as Normal priority.
Dec 14 2022, 3:33 PM · VyOS 1.4 Sagitta
rob created T4879: IPSec migration failed with missing remote-id.
Dec 14 2022, 3:29 PM · VyOS 1.4 Sagitta
jestabro closed T4875: Replace Python validator 'interface-name' to avoid Python startup cost, a subtask of T4795: Cleanup custom python validators, as Unknown Status.
Dec 14 2022, 3:09 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
jestabro closed T4875: Replace Python validator 'interface-name' to avoid Python startup cost as Unknown Status.
Dec 14 2022, 3:09 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro added a project to T4875: Replace Python validator 'interface-name' to avoid Python startup cost: VyOS 1.3 Equuleus (1.3.3).
Dec 14 2022, 3:09 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro closed T4798: Migrate the file-exists validator away from Python, a subtask of T4795: Cleanup custom python validators, as Unknown Status.
Dec 14 2022, 3:09 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
jestabro closed T4798: Migrate the file-exists validator away from Python as Unknown Status.
Dec 14 2022, 3:09 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro committed rVYOSONEX046bb9ccd56a: validators: T4798: replace python file-exists validator with file-path.
Dec 14 2022, 3:07 PM
GitHub <noreply@github.com> committed rVYOSONEX92aa324fef80: Merge pull request #1706 from jestabro/validator-file-exists (authored by jestabro).
Dec 14 2022, 3:07 PM
jestabro committed rVYOSONEXf0bc6c62016d: validators: T4875: use file-path to replace validator 'interface-name'.
Dec 14 2022, 3:06 PM
GitHub <noreply@github.com> committed rVYOSONEX6095dfec48ce: Merge pull request #1705 from jestabro/validator-interface-name (authored by jestabro).
Dec 14 2022, 3:06 PM
Viacheslav created T4878: Any interface bonding changes cause interface flapping.
Dec 14 2022, 2:27 PM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4877: Need verification in using import vrf and import vpn, export vpn commands from Open to In progress.
Dec 14 2022, 1:34 PM · VyOS 1.4 Sagitta
a.apostoliuk claimed T4877: Need verification in using import vrf and import vpn, export vpn commands.
Dec 14 2022, 1:33 PM · VyOS 1.4 Sagitta
a.apostoliuk created T4877: Need verification in using import vrf and import vpn, export vpn commands.
Dec 14 2022, 1:22 PM · VyOS 1.4 Sagitta

Dec 13 2022

Viacheslav changed the status of T4874: Add Warning message to Equuleus from In progress to Needs testing.
Dec 13 2022, 6:23 PM · VyOS 1.3 Equuleus (1.3.4)
initramfs added a comment to T4709: TCP MSS clamping broken in equuleus.

@c-po While I was wrong about the MSS clamp not being applied, the missing clamp-mss-to-pmtu feature and the incorrect MSS limits are both still problems that PR 1557 addresses. I believe we can close this after those issues are addressed.

Dec 13 2022, 12:14 PM · VyOS 1.3 Equuleus (1.3.3)
Viacheslav changed the status of T4838: Vagrant auth failure on new vagrant images? from Open to In progress.
Dec 13 2022, 10:25 AM

Dec 12 2022

fernando renamed T4876: mpls - LSP broken on FRR 8.4.1 from mpls - lsp broke on FRR 8.4.1 to mpls - LSP broken on FRR 8.4.1.
Dec 12 2022, 11:12 PM · VyOS 1.4 Sagitta
a.apostoliuk committed rVYOSONEX32da48397ed1: T4874: Added Warning message.
Dec 12 2022, 10:11 PM