Related task T2133
I guess we should drop this option ipv6 disable-forwarding
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 6 2023
Sep 6 2023
Viacheslav added a comment to T5552: 'set system option performance throughput' enables IPv6 forwarding even if it's explicitly disabled with 'set system ipv6 disable-forwarding'.
Sep 5 2023
Sep 5 2023
Viacheslav added a comment to T5521: Home owner directory changed to vyos for the user after reboot.
In T5521#158836, @c-po wrote:Please re-test with latest rolling-release if the issue persists.
Cannot pass smoketest for virtual-server which also uses vrrp
@dmbaturin Can we close it?
Viacheslav changed the status of T5548: HAProxy renders timeouts incorrectly from In progress to Needs testing.
@mhamzahkhan Will be fixed in the next rolling release, could you re-check it?
In T2444#158779, @Apachez wrote:If the FRR/vrrpd is good enough then the main benefit is that the FRR/vrrpd is already included so no need to also include and use keepalived (unnecessary files and binaries and dependencies).
Things to verify however before a switch is performed (and keepalived is thrown out) is support for vrf/namespaces, various interface and other tracking and multicast vs unicast (it seems that keepalived supports them all - dunno about FRR/vrrpd).
Viacheslav added a comment to T5489: Change to BBR as TCP congestion control, or at least make it an config option.
To check if it works just use ss -tin, for example:
vyos@r14:~$ ss -tin State Recv-Q Send-Q Local Address:Port Peer Address:Port Process ESTAB 0 0 192.168.122.14:22 192.168.122.1:45446 bbr wscale:7,7 rto:201 rtt:0.103/0.048 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:140 ssthresh:138 bytes_sent:126383 bytes_acked:126383 bytes_received:20969 segs_out:2460 segs_in:2592 data_segs_out:2445 data_segs_in:341 bbr:(bw:503652048bps,mrtt:0.018,pacing_gain:1.25,cwnd_gain:2) send 15745242718bps lastsnd:3003449 lastrcv:3005252 lastack:3003448 pacing_rate 623269416bps delivery_rate 503652168bps delivered:2446 app_limited busy:2029ms rcv_space:14600 rcv_ssthresh:64076 minrtt:0.018 snd_wnd:64128 ESTAB 0 36 192.168.122.14:22 192.168.122.1:51320 bbr wscale:7,7 rto:201 rtt:0.427/0.555 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:148 ssthresh:136 bytes_sent:1779503 bytes_retrans:68 bytes_acked:1779399 bytes_received:167865 segs_out:12061 segs_in:12088 data_segs_out:11899 data_segs_in:3996 bbr:(bw:530564808bps,mrtt:0.068,pacing_gain:1.25,cwnd_gain:2) send 4015063232bps lastsnd:30 lastrcv:31 lastack:31 pacing_rate 525259160bps delivery_rate 458772272bps delivered:11899 app_limited busy:27667ms unacked:1 retrans:0/1 dsack_dups:1 rcv_rtt:392993 rcv_space:65229 rcv_ssthresh:84348 minrtt:0.024 snd_wnd:1344128 vyos@r14:~$
It should be disabled by default for all daemons. I guess it will be implemented in T4020
For your issue solution is set system frr snmp ldpd.
Viacheslav changed the status of T5423: ipsec: no output for op-cmd "show vpn ike secrets" from Open to In progress.
Viacheslav awarded T5433: Include memtest86+ as boot-option a Dislike token.
For now, commands are generated by XML to node.def
I don't see an easy way to add the alias feature. Some scripts expect the exact sequence of an argument and it could be broken with this feature.
Don't have this issue
@dcplaya Could you re-check in the newest rolling image?
Viacheslav changed the status of T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to In progress.
Close it if this issue is solved.
Viacheslav changed the status of T5499: initial arm64 support for RPI4 and QEMU VM from In progress to Needs testing.
Viacheslav edited projects for T2444: Remove keepalived in favor of FRR for VRRP, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav moved T2958: DHCP server doesn't work from a live CD from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Viacheslav edited projects for T2958: DHCP server doesn't work from a live CD, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).
Should be executed there, for future debugs https://github.com/vyos/vyatta-wanloadbalance/blob/c7708bc6ef689f5744272a15a601a56a03890afa/src/lbdecision.cc#L429
Just waiting for upstream updates
Viacheslav moved T5524: Add config directory to liveCD from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Viacheslav edited projects for T5545: sflow is not working, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T5548: HAProxy renders timeouts incorrectly from Open to In progress.
There definitely should be a second, i.e., max value 3600 seconds.
PR for 1.3.4 https://github.com/vyos/vyos-build/pull/393
Sep 4 2023
Sep 4 2023
Viacheslav changed the status of T5480: Ability to disable SNMP for VRRP keepalived service from Open to In progress.
Viacheslav moved T5506: Container bridge interfaces do not have a link-local address from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Viacheslav moved T5533: Keepalived VRRP IPv6 group enters in FAULT state from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T5533: Keepalived VRRP IPv6 group enters in FAULT state , added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).
@syncer At first glance, the generated config is correct for VyOS 1.3-stable-202308240442
set protocols igmp interface eth0 join 239.1.2.3 source '192.0.2.1' set protocols igmp interface eth1 join 239.1.2.3 set protocols igmp interface eth2
Sep 3 2023
Sep 3 2023
Viacheslav changed the status of T5542: ipoe-server: external-dhcp(dhcp-relay) not woking / not implemented from Open to Needs testing.
Sep 1 2023
Sep 1 2023
Viacheslav changed the status of T5536: show dhcp client leases caues No module named 'vyos.validate' from In progress to Needs testing.
Viacheslav changed the status of T5536: show dhcp client leases caues No module named 'vyos.validate' from Open to In progress.
At the moment of applying vrrp configuration eth1 IPv6 address
inet6 2001:db8::3/125 scope global tentative
Then
inet6 2001:db8::3/125 scope global
Viacheslav added a project to T4754: Improvement: system login: show configured 2FA OTP key: VyOS 1.5 Circinus.
Viacheslav edited projects for T3214: OpenVPN IPv6 fixes, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav edited projects for T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav edited projects for T160: Support NAT64, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Aug 31 2023
Aug 31 2023
Close it for now.
There are no requirements to do it.
Viacheslav added a comment to T5534: VRRP rfc3768-compatibility broken after build 1.4-rolling-202308260020.
Try restart vrrp
There could be this bug https://vyos.dev/T5533
Just use /usr/bin/accel-cmd -p 2001 pppoe interface add "xxx"
Viacheslav moved T3546: Add support for running scripts on PPPoE server session events from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Viacheslav changed the status of T3546: Add support for running scripts on PPPoE server session events from Unknown Status to Resolved.
Still bug
vyos@r1# set service webproxy
Possible completions:
append-domain
Default domain name
> authentication
Proxy Authentication Settings
+> cache-peer Specify other caches in a hierarchy
cache-size Disk cache size in MB (default: 100)
default-port Default Proxy Port (default: 3128)
disable-access-log
Disable logging of HTTP accesses
+ domain-block Domain name to block
+ domain-noncache
Domain name to access without caching
+> listen-address
IPv4 listen-address for WebProxy [REQUIRED]
maximum-object-size
Maximum size of object to be stored in cache in kilobytes
mem-cache-size
Memory cache size in MB
minimum-object-size
Maximum size of object to be stored in cache in kilobytes
outgoing-address
Outgoing IP address for webproxy
+ reply-block-mime
MIME type to block
reply-body-max-size
Maximum reply body size in KB
> url-filtering
URL filtering settingsViacheslav closed T4855: Trying to create more than one tunnel of the same type to the same address causes unhandled exception as Resolved.
Fixed VyOS 1.3-stable-202308240442
set interfaces tunnel tun1 encapsulation 'gre' set interfaces tunnel tun1 remote '203.0.113.254' set interfaces tunnel tun1 source-address '203.0.113.1'
Viacheslav added a project to T5533: Keepalived VRRP IPv6 group enters in FAULT state : VyOS 1.3 Equuleus (1.3.5).
Viacheslav updated the task description for T5532: After add system image the boot stuck and works again after the second reboot.
Viacheslav renamed T5532: After add system image the boot stuck and works again after the second reboot from After add system image the boot stack and works again after the second reboot to After add system image the boot stuck and works again after the second reboot.
Viacheslav renamed T5532: After add system image the boot stuck and works again after the second reboot from Afterf add system image the boot stack to After add system image the boot stack and works again after the second reboot.
Viacheslav updated the task description for T5532: After add system image the boot stuck and works again after the second reboot.
Viacheslav moved T4874: Add Warning message to Equuleus from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Viacheslav moved T5140: Firewall network-group problems from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Fixed VyOS 1.3-stable-202308240442
vyos@r1# set firewall group network-group NG network 198.51.100.0/24 [edit] vyos@r1# commit [edit] vyos@r1# set firewall group network-group NG network 198.51.100.99/32 [edit] vyos@r1# commit [edit] vyos@r1#