Page MenuHomeVyOS Platform
Feed Advanced Search

Jul 12 2023

syncer edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:40 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
syncer edited projects for T4818: IPv6 NDP not working everytime, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:40 PM · VyOS Rolling, Restricted Project
syncer edited projects for T4930: Allow WireGuard peers via DNS hostname, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:39 PM · VyOS Rolling
syncer edited projects for T4933: Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:39 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
syncer edited projects for T5153: OpenConnect route restriction via iptables is ignored, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:39 PM
syncer edited projects for T5191: Replace underscores with hyphens in command-line options generated by vyos.opmode, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:39 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
syncer edited projects for T4734: Feature Request: openvpn: add OTP 2FA support, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 9:38 PM · VyOS 1.4 Sagitta
fernando added a comment to T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf.

I've summited an issues case on FRR , where explain the problematic :

Jul 12 2023, 8:52 PM · VyOS 1.4 Sagitta
n.fort closed T5161: BFD Static Route Monitoring as Resolved.
Jul 12 2023, 7:50 PM · VyOS 1.4 Sagitta
a.apostoliuk moved T4927: Need to change restart to reload-or-restart in Webproxy module from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Jul 12 2023, 7:50 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk closed T4927: Need to change restart to reload-or-restart in Webproxy module as Resolved.
Jul 12 2023, 7:49 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
n.fort added a comment to T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups.

as stated before, in 1.4 now it's possible to specify corresponding interface.

Jul 12 2023, 5:05 PM · Restricted Project, VyOS Rolling
n.fort closed T5105: DHCP Server - Wrong error message as Resolved.
Jul 12 2023, 5:02 PM · VyOS 1.4 Sagitta
syncer closed T4959: Add container registry authentication config for containers as Resolved.
Jul 12 2023, 3:27 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
syncer closed T425: AWS CloudWatch monitoring scripts, a subtask of T5129: Add AWS build flavour, as Resolved.
Jul 12 2023, 3:26 PM · VyOS 1.4 Sagitta
syncer moved T5246: QOS: WRED Implementation to use DiffServ from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Jul 12 2023, 3:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
syncer moved T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Jul 12 2023, 3:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta, wpa
syncer removed a project from T4722: Improve abbreviation/acronym consistency: VyOS 1.3 Equuleus (1.3.2).
Jul 12 2023, 3:24 PM · VyOS 1.4 Sagitta
syncer moved T3835: vyos router 1.2.7 snmp Dos bug from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Jul 12 2023, 3:24 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
syncer closed T3835: vyos router 1.2.7 snmp Dos bug as Resolved.

@zoenan7 thanks for getting back to me
it looks like it is now fixed in upstream so I will close this ticket

Jul 12 2023, 3:24 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro closed T5347: Compare commit revision bug as Resolved.
Jul 12 2023, 2:34 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T5347: Compare commit revision bug: T5353: config-mgmt: normalize archive updates and commit log entries.
Jul 12 2023, 2:33 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T5353: config-mgmt: normalize archive updates and commit log entries: T5347: Compare commit revision bug.
Jul 12 2023, 2:33 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro triaged T5353: config-mgmt: normalize archive updates and commit log entries as Normal priority.
Jul 12 2023, 2:33 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5352: Fix missing dependency for netavark: VyOS 1.4 Sagitta.
Jul 12 2023, 2:12 PM · VyOS 1.4 Sagitta
jestabro changed the status of T5006: Http api segfault with concurrent requests from Resolved to Unknown Status.

Bug introduced in 1.3.x with upgrade of FastAPI framework in:
https://vyos.dev/T5176

Jul 12 2023, 1:07 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
jestabro changed the status of T5305: REST API configure operation should not be defined as async from Resolved to Unknown Status.

Yes; it was not evident in 1.3.x until the upgrade of the FastAPI framework for
https://vyos.dev/T5176
and will be backported.

Jul 12 2023, 1:05 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
zoenan7 added a comment to T3835: vyos router 1.2.7 snmp Dos bug.

I did not report it to the upstream, but another vendor helped me to report it to the upstream and gave me the relevant CVE number. You can check the following link about netsnmp: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016139

Jul 12 2023, 12:41 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
n.fort added a comment to T5250: Firewall - show firewall group.

PR in firewall refactor: https://github.com/vyos/vyos-1x/pull/2016

Jul 12 2023, 10:13 AM · VyOS 1.4 Sagitta
n.fort changed the status of T5301: NTP: chrony only allows one bind address from Open to In progress.
Jul 12 2023, 10:07 AM · VyOS 1.4 Sagitta
n.fort claimed T5301: NTP: chrony only allows one bind address.
Jul 12 2023, 10:06 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5347: Compare commit revision bug.

It seems to work fine (VyOS 1.4-rolling-202307120317).

vyos@r14# set interfaces ethernet eth1 description 123
[edit]
vyos@r14# commit
[edit]
vyos@r14# compare 1
[interfaces ethernet eth1]
+ description "123"
Jul 12 2023, 8:03 AM · VyOS 1.4 Sagitta
dongjunbo added a comment to T5305: REST API configure operation should not be defined as async.

VyOS 1.3.3 Still have such an issue. Any plan to fix it on VyOS 1.3?

Jul 12 2023, 3:57 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta

Jul 11 2023

jestabro claimed T5350: Confusing warning message when committing VRRP config.
Jul 11 2023, 10:04 PM · VyOS 1.4 Sagitta
syncer reassigned T2665: vyos.xml.defaults for tag nodes from thomas-mangin to jestabro.
Jul 11 2023, 10:02 PM · VyOS 1.4 Sagitta
syncer triaged T5351: VyOS deployed with cloud-init improperly saves config.boot as Low priority.
Jul 11 2023, 9:59 PM · VyOS 1.4 Sagitta (1.4.0-GA)
syncer assigned T5351: VyOS deployed with cloud-init improperly saves config.boot to zsdc.
Jul 11 2023, 9:59 PM · VyOS 1.4 Sagitta (1.4.0-GA)
greywolfe created T5351: VyOS deployed with cloud-init improperly saves config.boot.
Jul 11 2023, 9:51 PM · VyOS 1.4 Sagitta (1.4.0-GA)
syncer closed T2523: Upgrade from 1.2.5 to 1.3-rolling-202005261512 results in broken network config on second boot, a subtask of T2838: Ethernet device names changing, multiple hw-id being added, as Wontfix.
Jul 11 2023, 9:48 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
syncer added a subtask for T5160: Firewall refactor: T5080: Disable conntrack by default.
Jul 11 2023, 9:37 PM · VyOS 1.4 Sagitta
syncer added a parent task for T5080: Disable conntrack by default: T5160: Firewall refactor.
Jul 11 2023, 9:37 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
syncer reassigned T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups from jestabro to n.fort.
Jul 11 2023, 9:34 PM · Restricted Project, VyOS Rolling
sarthurdev added a comment to T5080: Disable conntrack by default.

@syncer Will address this after T5160 is merged

Jul 11 2023, 9:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev moved T5275: Add op mode commands for exporting certificates to PEM files with correct headers from Open to In Progress on the VyOS 1.4 Sagitta board.
Jul 11 2023, 9:26 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
sarthurdev changed the status of T5275: Add op mode commands for exporting certificates to PEM files with correct headers from Open to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/2087

Jul 11 2023, 9:25 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
JonSanMan closed T5314: QOS Default classes are not configured with correct qdisc as Resolved.
Jul 11 2023, 9:03 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5341: Improve CLI for high-availability virtual-server to work with multiple ports from In progress to Needs testing.
Jul 11 2023, 6:59 PM · VyOS 1.4 Sagitta
jestabro added a comment to T5347: Compare commit revision bug.

PR:
https://github.com/vyos/vyos-1x/pull/2086

Jul 11 2023, 5:50 PM · VyOS 1.4 Sagitta
jestabro added a comment to T5347: Compare commit revision bug.

@zsdc thanks for the detailed explanation; @Viacheslav confirmed this is the case on update, and I will adopt your suggestion.

Jul 11 2023, 4:08 PM · VyOS 1.4 Sagitta
a.apostoliuk closed T4790: RADIUS login does not work if sum of timeouts more than 50s as Unknown Status.
Jul 11 2023, 4:05 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
a.apostoliuk moved T3810: webproxy squidguard rules don't work properly after rewriting to python. from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Jul 11 2023, 4:02 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk moved T4862: webproxy domain-block does not work from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Jul 11 2023, 4:01 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk moved T4844: Incorrect permissions of the safeguard DB directory from Open to Finished on the VyOS 1.4 Sagitta board.
Jul 11 2023, 4:01 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk closed T4862: webproxy domain-block does not work as Resolved.
Jul 11 2023, 4:00 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
a.apostoliuk closed T3810: webproxy squidguard rules don't work properly after rewriting to python. as Resolved.
Jul 11 2023, 3:56 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk closed T4844: Incorrect permissions of the safeguard DB directory, a subtask of T3810: webproxy squidguard rules don't work properly after rewriting to python. , as Resolved.
Jul 11 2023, 3:53 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk closed T4844: Incorrect permissions of the safeguard DB directory as Resolved.
Jul 11 2023, 3:53 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
n.fort closed T4815: Fix various name server config issues as Resolved.

I'm marking this task as resolved, since it's been in 'Needs Testing' status for more than 6 months

Jul 11 2023, 3:15 PM · VyOS 1.4 Sagitta
n.fort closed T4813: L3VPN over GRE Tunnels as Resolved.
Jul 11 2023, 3:13 PM · VyOS 1.4 Sagitta
n.fort closed T4810: Op-mode show/monitor log pppoe interface does not show any logs as Resolved.

I'm marking this task as resolved, since it's been in 'Needs Testing' status for more than 6 months.

Jul 11 2023, 3:12 PM · VyOS 1.4 Sagitta
Viacheslav closed T4758: Rewrite show dhcp server to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Jul 11 2023, 2:57 PM · VyOS Rolling
Viacheslav closed T4758: Rewrite show dhcp server to vyos.opmode format as Resolved.
Jul 11 2023, 2:57 PM · VyOS 1.4 Sagitta
n.fort added a comment to T4713: vyos@vyos:~$ show nat destination rules | doesn't work.

@icyfire0573 Can you re-check if nat op-mode commands works for you?

Jul 11 2023, 2:40 PM · VyOS 1.4 Sagitta
n.fort closed T4701: Firewall - Implement global option to use one single general chian as Invalid.

Marking as invalid, since firewall cli should move to a more organized and flexible cli strycture.

Jul 11 2023, 2:34 PM · VyOS 1.4 Sagitta
n.fort closed T1928: Is the 'Welcome to VyOS' message when using SSH an information leak? as Resolved.
Jul 11 2023, 2:20 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
jestabro added a subtask for T5319: Remove remaining workarounds for incorrect defaults: T5350: Confusing warning message when committing VRRP config.
Jul 11 2023, 1:51 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T5330: Keep track of source of config dict value when merging defaults: T5350: Confusing warning message when committing VRRP config.
Jul 11 2023, 1:51 PM · VyOS 1.4 Sagitta
jestabro added parent tasks for T5350: Confusing warning message when committing VRRP config: T5330: Keep track of source of config dict value when merging defaults, T5319: Remove remaining workarounds for incorrect defaults.
Jul 11 2023, 1:51 PM · VyOS 1.4 Sagitta
jestabro added a comment to T5350: Confusing warning message when committing VRRP config.

Thanks, @dex, agreed that this is misleading: this will be refined once the PR
https://github.com/vyos/vyos-1x/pull/2079
is merged.

Jul 11 2023, 1:49 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T5350: Confusing warning message when committing VRRP config: VyOS 1.4 Sagitta.
Jul 11 2023, 1:49 PM · VyOS 1.4 Sagitta
syncer reassigned T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static from dmbaturin to n.fort.
Jul 11 2023, 1:32 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
syncer lowered the priority of T3505: Commits do not respect changes in FRR that are not stored in a config from High to Low.
Jul 11 2023, 1:27 PM · VyOS 1.4 Sagitta (1.4.0-GA)
syncer assigned T3505: Commits do not respect changes in FRR that are not stored in a config to zsdc.
Jul 11 2023, 1:27 PM · VyOS 1.4 Sagitta (1.4.0-GA)
syncer closed T3827: interfaces migration script fails on AWS hosts as Wontfix.
Jul 11 2023, 1:23 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.4 Sagitta
syncer added a comment to T3835: vyos router 1.2.7 snmp Dos bug.

@zoenan7 have you managed to report to upstream?

Jul 11 2023, 1:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
syncer closed T3852: DHCP client issue - interface has two dhclient processes when link is unpluged and then plug again, a subtask of T3471: DHCP hook is not able to detect all running DHCP instances, as Resolved.
Jul 11 2023, 1:19 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
Viacheslav changed the status of T5341: Improve CLI for high-availability virtual-server to work with multiple ports from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/2084

Jul 11 2023, 1:01 PM · VyOS 1.4 Sagitta
syncer moved T4025: OpenVPN server with TAP interface, client didn’t see network from Open to Backlog on the VyOS 1.4 Sagitta board.
Jul 11 2023, 12:36 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
syncer lowered the priority of T4025: OpenVPN server with TAP interface, client didn’t see network from High to Low.
Jul 11 2023, 12:35 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
syncer lowered the priority of T4288: IPsec tunnel will break when ESP timeout from High to Low.
Jul 11 2023, 12:30 PM · VyOS 1.4 Sagitta
n.fort closed T4542: route-map: "match prefix-len" incorrect behavior as Resolved.
Jul 11 2023, 12:29 PM · VyOS 1.4 Sagitta
syncer lowered the priority of T5080: Disable conntrack by default from High to Low.

@sdev, so what is the state of this?

Jul 11 2023, 12:27 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
syncer closed T4943: Radius SSH login displays "permission denied" on 1.4 rolling release as Resolved.
Jul 11 2023, 12:26 PM · VyOS 1.4 Sagitta
n.fort closed T4460: nhrp not starting due to missing cisco-authentication value as Resolved.
Jul 11 2023, 12:25 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
n.fort closed T4262: install image doesn't respect chosen root partition size as Resolved.

Closing this task since it has been in "Needs Testing" status for more than one year, for both 1.3 and 1.4 projects.

Jul 11 2023, 11:53 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
n.fort closed T1877: Feature Request: Allow NAT to use network and address groups as Resolved.
Jul 11 2023, 11:32 AM · VyOS 1.4 Sagitta
n.fort added a comment to T3973: Feature Request: Multicast ping. Change TTL in Echo-reply from VyOS.

Once we move to new firewall and re-work on mangle/PBR, this could be achieved easily.

Jul 11 2023, 11:24 AM · Restricted Project, VyOS Rolling
n.fort closed T4392: Multiline login banner text reports error on commit as Resolved.

Working on latest build:

Jul 11 2023, 10:52 AM · VyOS 1.4 Sagitta
n.fort added a comment to T1928: Is the 'Welcome to VyOS' message when using SSH an information leak?.

As said in previous comments, login banner is available, both on 1.3 and 1.4
I think this task can be marked as resolved

Jul 11 2023, 10:22 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
nicodier created T5349: DHCP range-parameters.
Jul 11 2023, 10:15 AM · Invalid
eronlloyd added a comment to T3955: Allow commit-confirm through http API.

Possible duplicate? https://vyos.dev/T4190

Jul 11 2023, 1:54 AM · VyOS Rolling
eronlloyd added a comment to T4591: Delete my account VyOS Platform.

Perhaps this request should be moved to the forums or somewhere a sysadmin can be reached for assistance?

Jul 11 2023, 1:41 AM · VyOS 1.4 Sagitta
fernando added a comment to T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf.

well , I've had an idea how to make a workaround , I've used explicit-null label to add next-hop from the network-address connected sudo ip route add 10.0.0.1/32 encap mpls 0 via 10.0.0.2 dev eth1

Jul 11 2023, 12:05 AM · VyOS 1.4 Sagitta

Jul 10 2023

fernando changed the status of T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf from Open to Confirmed.
Jul 10 2023, 9:27 PM · VyOS 1.4 Sagitta
fernando added a comment to T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf.

I've done extra test , I confirm this behavior is associated transport label that can't be allocated when using interfaces directed connected to created ldp session without IGP protocols(ospf/isis) . let's see what is going on :

Jul 10 2023, 9:15 PM · VyOS 1.4 Sagitta
n.fort closed T762: Include rulseset in firewall as Resolved.

Jump action is available in 1.4
Then, I'm setting this task as resolved

Jul 10 2023, 7:21 PM · VyOS 1.4 Sagitta
n.fort closed T3578: Prefix-List(6) update cause empty prefix-list(6) as Resolved.
Jul 10 2023, 7:03 PM · VyOS 1.4 Sagitta
jestabro claimed T5347: Compare commit revision bug.
Jul 10 2023, 6:18 PM · VyOS 1.4 Sagitta
jestabro added a comment to T5347: Compare commit revision bug.

There are several issues mentioned in this task so far, and they will be separated out to respective tasks. Firstly, we will address an obvious bug in the implementation that misnumbers entries in the commit log compared to archived commit files ...

Jul 10 2023, 6:17 PM · VyOS 1.4 Sagitta
zsdc added a comment to T5347: Compare commit revision bug.

During installation, this happens: https://github.com/vyos/vyatta-cfg-system/blob/bac61854acd40b4eae8b12e47be54306171f5c3c/scripts/install/install-image-existing#L201C3-L201C3

Jul 10 2023, 5:05 PM · VyOS 1.4 Sagitta