Page MenuHomeVyOS Platform
Feed Advanced Search

Oct 26 2023

SrividyaA closed T5606: IPSec VPN: Allow multiple CAs certificates as Resolved.
Oct 26 2023, 12:52 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
SrividyaA added a comment to T5606: IPSec VPN: Allow multiple CAs certificates.

Yes, it does. thank you

Oct 26 2023, 12:52 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T3509: No BCP38 for IPv6 on VyOS as Resolved.
Oct 26 2023, 12:49 PM · VyOS 1.4 Sagitta
sarthurdev closed T5568: Install image from live ISO always defaults boot to KVM entry as Resolved.
Oct 26 2023, 12:48 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T5606: IPSec VPN: Allow multiple CAs certificates.

@SrividyaA Can you confirm this is working as you expect?

Oct 26 2023, 12:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T4309: Support network/address-groups and ipv6-network/ipv6-address-groups in "conntrack ignore" as Resolved.
Oct 26 2023, 12:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev added a project to T4309: Support network/address-groups and ipv6-network/ipv6-address-groups in "conntrack ignore": VyOS 1.5 Circinus.
Oct 26 2023, 12:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev moved T4903: Support IPv6 addresses in "set system conntrack ignore" from Finished to Backlog on the VyOS 1.4 Sagitta board.
Oct 26 2023, 12:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev moved T4903: Support IPv6 addresses in "set system conntrack ignore" from Open to Finished on the VyOS 1.5 Circinus board.
Oct 26 2023, 12:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev added a project to T4903: Support IPv6 addresses in "set system conntrack ignore": VyOS 1.5 Circinus.
Oct 26 2023, 12:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T4903: Support IPv6 addresses in "set system conntrack ignore" as Resolved.
Oct 26 2023, 12:39 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev added a comment to T5550: Source validation on interface does not work properly.

@a.apostoliuk Can you confirm this is working as expected?

Oct 26 2023, 12:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort changed the status of T5681: Interface match - Simplified and unified cli from In progress to Needs testing.
Oct 26 2023, 12:19 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
fernando added a comment to T5357: Policy: BGP communities fail to apply when loaded from config file.

@jvoss thanks to confirm !

Oct 26 2023, 10:53 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort added a comment to T5681: Interface match - Simplified and unified cli.

PR for op-mode command that fits new cli: https://github.com/vyos/vyos-1x/pull/2408

Oct 26 2023, 10:26 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5513: Anomalies in show firewall command after refactoring.

PR: https://github.com/vyos/vyos-1x/pull/2408

Oct 26 2023, 10:25 AM · VyOS 1.4 Sagitta
n.fort added a comment to T5564: Both show firewall group and show firewall summary fails.

PR: https://github.com/vyos/vyos-1x/pull/2408

Oct 26 2023, 10:25 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
a.apostoliuk changed the status of T5688: Create the same view of pool configuration for all accel-ppp services, a subtask of T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict, from Open to In progress.
Oct 26 2023, 9:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.apostoliuk added a subtask for T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict: T5688: Create the same view of pool configuration for all accel-ppp services.
Oct 26 2023, 9:55 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.apostoliuk claimed T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict.
Oct 26 2023, 8:00 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5683: reverse-proxy pki filenames mismatch from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 26 2023, 7:26 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5683: reverse-proxy pki filenames mismatch as Resolved.
Oct 26 2023, 7:26 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5357: Policy: BGP communities fail to apply when loaded from config file as Invalid.
Oct 26 2023, 7:12 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5687: Implement ECS settings for PowerDNS recursor.

Do you have any idea for CLI?

Oct 26 2023, 7:09 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a-bali created T5687: Implement ECS settings for PowerDNS recursor.
Oct 26 2023, 5:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jvoss added a comment to T5357: Policy: BGP communities fail to apply when loaded from config file.

Hi @fernando. I can confirm this behavior is still working correctly after this was merged:

Oct 26 2023, 1:09 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 25 2023

fernando changed the status of T5357: Policy: BGP communities fail to apply when loaded from config file from Open to Needs testing.
Oct 25 2023, 7:39 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
fernando added a comment to T5357: Policy: BGP communities fail to apply when loaded from config file.

I've tested this issues in our lasted rolling-realese , after last commit , it seems works without problems :

vyos@vyos# load test.conf
Loading configuration from 'test.conf'
Load complete. Use 'commit' to make changes effective.
[edit]
vyos@vyos# compare
[policy]
+ route-map TEST {
+     rule 10 {
+         action "permit"
+         set {
+             community {
+                 add "65001:1"
+             }
+             large-community {
+                 add "4200000000:100:1"
+             }
+         }
+     }
+ }
Oct 25 2023, 7:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
I-n-d-y added a project to T5679: DHCP relay not working when same interface is used as listen- and downstream-interface: VyOS 1.4 Sagitta.
Oct 25 2023, 3:29 PM
Viacheslav added a project to T5685: Keepalived VRRP prefix is not necessary for the virtual address: VyOS 1.4 Sagitta.
Oct 25 2023, 2:34 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5681: Interface match - Simplified and unified cli.

PR: https://github.com/vyos/vyos-1x/pull/2406

Oct 25 2023, 12:11 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
a.hajiyev added a comment to T5665: radius user not working.

Used one of the latest rolling releases.
Configured the Radius server and VyOS

Oct 25 2023, 11:15 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5683: reverse-proxy pki filenames mismatch.

PR https://github.com/vyos/vyos-1x/pull/2405

Oct 25 2023, 10:31 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5683: reverse-proxy pki filenames mismatch from Open to In progress.
Oct 25 2023, 10:10 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a comment to T5670: bridge: missing member interface validator.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/2402

Oct 25 2023, 4:48 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5670: bridge: missing member interface validator from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.5) board.
Oct 25 2023, 4:36 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5670: bridge: missing member interface validator from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 25 2023, 4:36 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jamcole created T5683: reverse-proxy pki filenames mismatch.
Oct 25 2023, 3:23 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 24 2023

fernando added a project to T5307: QoS - traffic-class-map services : VyOS 1.5 Circinus.
Oct 24 2023, 8:40 PM · VyOS 1.5 Circinus
fernando added a comment to T5307: QoS - traffic-class-map services .

exactly , i'll give an example of what is the improving (or new cli) , we have a policy where we can mach different DSCPs associate with REAL TIME or VIOCE . Current in our cli , it would be something like this :

Oct 24 2023, 8:36 PM · VyOS 1.5 Circinus
Viacheslav added a project to T5682: create more robust access controls for sshd and snmpd: VyOS 1.5 Circinus.
Oct 24 2023, 4:33 PM · VyOS Rolling
danhusan created T5682: create more robust access controls for sshd and snmpd.
Oct 24 2023, 4:21 PM · VyOS Rolling
n.fort changed the status of T5681: Interface match - Simplified and unified cli from Open to In progress.
Oct 24 2023, 2:52 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

Using VyOS 1.5-rolling-202310220123.

Oct 24 2023, 2:28 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
a.hajiyev added a comment to T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors.

Checked in VyOS 1.4-rolling-202310030309

Oct 24 2023, 10:30 AM · VyOS 1.4 Sagitta
Viacheslav added a project to T3722: op-mode IPSec show vpn ike sa always shows L-TIME 0: VyOS 1.5 Circinus.
Oct 24 2023, 6:21 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.5 Circinus
a.hajiyev added a comment to T3722: op-mode IPSec show vpn ike sa always shows L-TIME 0.

LEFT router configuration

Oct 24 2023, 6:17 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.5 Circinus
Viacheslav added a comment to T5307: QoS - traffic-class-map services .

So, do you want to add a new syntax to archive the same behavior that we have for qos policy ?

Oct 24 2023, 6:16 AM · VyOS 1.5 Circinus
Viacheslav closed T5198: Firewall global settings no showing as Invalid.

The global state-policy was dropped from CLI.
Close it for now.

Oct 24 2023, 6:07 AM · VyOS 1.4 Sagitta

Oct 23 2023

fernando added a comment to T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf.

this case was resolved lasted configuration done .

Oct 23 2023, 7:51 PM · VyOS 1.4 Sagitta
fernando closed T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf as Resolved.
Oct 23 2023, 7:51 PM · VyOS 1.4 Sagitta
fernando added a comment to T5307: QoS - traffic-class-map services .

this task is a re-definition from a traffic class , I think it could be more clear if we separate tc-filter in a class-map , so we can define different profiles in our cli based on services :

Oct 23 2023, 7:28 PM · VyOS 1.5 Circinus
fernando closed T5667: BGP label-unicast - enable ecmp as Resolved.
Oct 23 2023, 11:40 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort changed the status of T5564: Both show firewall group and show firewall summary fails from Needs testing to In progress.

1.5 should not have such issues.
1.4: op-mode should be working as expected. Backport for https://github.com/vyos/vyos-1x/pull/2344 failed. I'll submit PR for 1.4 for such feature.

Oct 23 2023, 11:33 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav moved T5254: Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 23 2023, 8:55 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5299: QoS shaper ceiling does not work from Open to Finished on the VyOS 1.5 Circinus board.
Oct 23 2023, 8:54 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.apostoliuk moved T5254: Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond from Open to Finished on the VyOS 1.5 Circinus board.
Oct 23 2023, 8:54 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5299: QoS shaper ceiling does not work, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Oct 23 2023, 8:54 AM · VyOS 1.4 Sagitta
Viacheslav closed T5299: QoS shaper ceiling does not work as Resolved.
Oct 23 2023, 8:54 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 22 2023

Viacheslav changed the status of T5299: QoS shaper ceiling does not work, a subtask of T5048: QoS doesn't work correctly root task, from Open to Needs testing.
Oct 22 2023, 8:05 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5299: QoS shaper ceiling does not work from Open to Needs testing.
Oct 22 2023, 8:05 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5254: Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond as Resolved.
Oct 22 2023, 5:04 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5671: vxlan: change port to IANA assigned default port as Resolved.
Oct 22 2023, 5:03 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po moved T5671: vxlan: change port to IANA assigned default port from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 22 2023, 5:03 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5299: QoS shaper ceiling does not work.

PR https://github.com/vyos/vyos-1x/pull/2391

Oct 22 2023, 1:25 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hronro added a comment to T5673: Enable `CONFIG_DEBUG_INFO_DWARF5` and `CONFIG_DEBUG_INFO_BTF` in the Linux kernel.

Should debug code really be part of production releases?

Wouldnt it be sufficient that you can enable this on your own if you want a debug build being made?

Oct 22 2023, 9:47 AM
Apachez added a comment to T5673: Enable `CONFIG_DEBUG_INFO_DWARF5` and `CONFIG_DEBUG_INFO_BTF` in the Linux kernel.

Should debug code really be part of production releases?

Oct 22 2023, 8:48 AM
hronro created T5673: Enable `CONFIG_DEBUG_INFO_DWARF5` and `CONFIG_DEBUG_INFO_BTF` in the Linux kernel.
Oct 22 2023, 6:40 AM

Oct 21 2023

Viacheslav added a comment to T5018: Redirect to IFB removed after change in qos policy.

@rayzilt Could you re-check and close it if solved?

Oct 21 2023, 3:03 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5541: Zone-Based Firewalling in VyOS Sagitta 1.4 from In progress to Needs testing.
Oct 21 2023, 1:48 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
dmbaturin closed T5414: dhcp-server does not allow valid bootfile-names as Resolved.

@Apachez I suppose it is.

Oct 21 2023, 1:41 PM · VyOS 1.4 Sagitta
dmbaturin closed T5670: bridge: missing member interface validator as Resolved.
Oct 21 2023, 1:37 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
dmbaturin claimed T5504: Make it possible to set more than one peer-address in unicast VRRP.
Oct 21 2023, 1:37 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.3 Equuleus (1.3.7)
dmbaturin closed T5617: Add an option to exclude single values to the numeric validator as Resolved.
Oct 21 2023, 1:32 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
dmbaturin added a comment to T5603: Deprecate vyatta-biosdevname package.
  • biosdevname is called by scripts in the initrd, so we can't remove it just yet.
  • it's not completely abandoned and had quite a few releases since the point when Vyatta forked it.
  • I sent a PR to allow biosdevname to run in VMs (that's the only thing that vyatta-biosdevname has and that's used in scripts): https://github.com/dell/biosdevname/pull/12
Oct 21 2023, 1:32 PM · VyOS 1.5 Circinus
dmbaturin closed T4770: Rewrite OpenVPN op-mode to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Oct 21 2023, 1:16 PM · VyOS Rolling
dmbaturin closed T4770: Rewrite OpenVPN op-mode to vyos.opmode format as Resolved.
Oct 21 2023, 1:16 PM · VyOS 1.4 Sagitta
dmbaturin closed T3433: A review of the use of racist language in VyOS as Resolved.

I could not find any uses of "slave" in current VyOS versions. If anyone finds any, feel free to start a discussion. VRRP "master" terminology cannot be changed because it's a part of the protocol spec itself, and, as said above, its counterpart is "backup".

Oct 21 2023, 1:15 PM · VyOS 1.4 Sagitta
dmbaturin created T5672: Remove the old-style command definition importer.
Oct 21 2023, 1:03 PM · VyOS 1.4 Sagitta
dmbaturin closed T2719: Standardized op mode script structure as Resolved.

The new-style op mode is well-established now, it's time to close the task.

Oct 21 2023, 12:53 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
dmbaturin closed T4604: bgpd eats huge amount of memory (about 500Megs a day) as Resolved.

The problem was resolved in the forum. Whether the underlying cause in FRR was resolves is another question...

Oct 21 2023, 12:40 PM · VyOS 1.4 Sagitta
dmbaturin closed T4591: Delete my account VyOS Platform as Invalid.
Oct 21 2023, 12:38 PM · VyOS 1.4 Sagitta
dmbaturin closed T4432: Display load average normalized according to the number of CPU cores as Resolved.
Oct 21 2023, 12:37 PM · VyOS 1.4 Sagitta
dmbaturin reopened T4427: Remove the vyos-utils package list from vyos-build as "Open".
Oct 21 2023, 12:32 PM · VyOS 1.4 Sagitta
dmbaturin closed T4427: Remove the vyos-utils package list from vyos-build as Resolved.
Oct 21 2023, 12:31 PM · VyOS 1.4 Sagitta
dmbaturin closed T4416: Convert 'traceroute' operation to the new syntax and expand available options using python as Resolved.
Oct 21 2023, 12:30 PM · VyOS 1.4 Sagitta
dmbaturin closed T4402: OpenVPN client-ip-pool option is broken as Resolved.
Oct 21 2023, 12:28 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
dmbaturin merged task T4359: Copyright notices get wiped along with documentation files for image size optimization into T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size.
Oct 21 2023, 12:28 PM · VyOS 1.4 Sagitta
dmbaturin closed T5191: Replace underscores with hyphens in command-line options generated by vyos.opmode as Resolved.
Oct 21 2023, 12:26 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
dmbaturin closed T5172: Set Python3 version dependency for vyos-1x to 3.10 as Resolved.
Oct 21 2023, 12:25 PM · VyOS 1.4 Sagitta
dmbaturin closed T4956: 'show hardware cpu' issue on arm64 as Resolved.
Oct 21 2023, 12:25 PM · VyOS 1.4 Sagitta
dmbaturin closed T4837: Expose "show ip route summary" in the op mode API, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Oct 21 2023, 12:24 PM · VyOS Rolling
dmbaturin closed T4837: Expose "show ip route summary" in the op mode API as Resolved.
Oct 21 2023, 12:24 PM · VyOS 1.4 Sagitta
dmbaturin closed T4657: op-mode scripts with type hints in `return` do not work as Resolved.
Oct 21 2023, 12:22 PM · VyOS 1.4 Sagitta
dmbaturin renamed T5261: Add AWS gateway load-balanceing tunnel handler (gwlbtun) from Add aws gateway load-balance -tunnel-handler gwlbtun to Add AWS gateway load-balanceing tunnel handler (gwlbtun).
Oct 21 2023, 12:21 PM · VyOS 1.4 Sagitta
dmbaturin closed T5260: Python3 module crypt is deprecated as Resolved.
Oct 21 2023, 12:20 PM · VyOS 1.4 Sagitta

Oct 20 2023

n.fort added a comment to T5541: Zone-Based Firewalling in VyOS Sagitta 1.4.

PR for Saggita: https://github.com/vyos/vyos-1x/pull/2388

Oct 20 2023, 8:22 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5671: vxlan: change port to IANA assigned default port from Open to Finished on the VyOS 1.5 Circinus board.
Oct 20 2023, 7:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po added a comment to T5671: vxlan: change port to IANA assigned default port.

PR for 1.5 https://github.com/vyos/vyos-1x/pull/2386

Oct 20 2023, 7:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po claimed T5671: vxlan: change port to IANA assigned default port.
Oct 20 2023, 7:34 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus