This is on a virtio interface:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 17 2023
Nov 17 2023
Simple reproducer - doesn't need to be an upgrade, just apply this to 1.4
Nov 16 2023
Nov 16 2023
Unknown Object (User) created T5755: Running set pki ca NAME certificate with a name with spaces breaks the config.
Unknown Object (User) added a comment to T5754: Update to StrongSwan 5.9.11.
Unknown Object (User) created T5754: Update to StrongSwan 5.9.11.
jestabro committed rVYOSONEX8f94262e8fa2: image: T4516: Added system image tools (authored by zsdc).
GitHub <noreply@github.com> committed rVYOSONEXd4f9d6ce726e: Merge pull request #1768 from zdc/T4516-sagitta (authored by jestabro).
c-po changed the status of T5753: Add VXLAN vnifilter support, a subtask of T3700: Support VLAN tunnel mapping of VLAN aware bridges, from Open to In progress.
Things to note that I'm not sure if they play a part:
jestabro added a project to T4516: Rewrite system image manipulation tools in Python: VyOS 1.5 Circinus.
vyos-1.4.log165 KBDownload
Re-Opening. this need to be extended to bridge firewall
mkorobeinikov <92354771+mkorobeinikov@users.noreply.github.com> committed rVYOSONEXbb5baa44ef82: T4940: new interfaces debugging command equuleus.
GitHub <noreply@github.com> committed rVYOSONEX471e26233e2e: Merge pull request #2492 from mkorobeinikov/equuleus (authored by c-po).
Viacheslav updated the task description for T5749: Show MAC address VRF and MTU by default for "show interfaces".
GitHub <noreply@github.com> committed rVYOSONEX65df99de6bca: Merge pull request #2497 from vyos/mergify/bp/sagitta/pr-2495 (authored by c-po).
Viacheslav changed the status of T5747: op-mode add MAC VRF and MTU for show interfaces summary from Open to Needs testing.
c-po renamed T5748: Tunnel class Interface method get_mac() returns IP address for the tunnel interface from Class Interface method get_mac() retruns IP address for the tunnel interface to Tunnel class Interface method get_mac() returns IP address for the tunnel interface.
c-po added a comment to T5748: Tunnel class Interface method get_mac() returns IP address for the tunnel interface.
>>> from vyos.ifconfig import Interface
>>> Interface('tun0').get_mac()
'192.0.2.1'c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5595: Multicast - PIM bfd feature enable , a subtask of T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features, as Resolved.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.5 Circinus board.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX2d02c347a848: T3983: show pki certificate Doesnt show x509 certificates (authored by JeffWDH).
GitHub <noreply@github.com> committed rVYOSONEX71823db0fcee: Merge pull request #2489 from vyos/mergify/bp/sagitta/pr-2476 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX36de14913e0f: T3983: show pki certificate Doesnt show x509 certificates (authored by JeffWDH).
GitHub <noreply@github.com> committed rVYOSONEX96ed4f8f130a: Merge pull request #2495 from JeffWDH/current (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXcab0d62af86c: Merge pull request #2496 from vyos/mergify/bp/sagitta/pr-2481 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXe0efc61a6ffc: smoketest: Extend HTTP-API tests (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX4131b6cb6b63: Merge pull request #2481 from sever-sever/smoketest-api (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXccf8a0a0466c: Merge pull request #2494 from vyos/mergify/bp/sagitta/pr-2491 (authored by c-po).
giuavo added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
I would like to contribute with a PR about this. At the same, time I would need some guidance on identifying the conditions requiring the onlink option to be added.
c-po committed rVYOSONEXbd873274d462: T5747: op-mode add MAC and MTU for show interfaces summary (authored by Viacheslav).
a.hajiyev changed the status of T2816: Rewrite IPsec scripts with the new XML/Python approach from Needs testing to In progress.
n.fort changed the status of T4072: Feature Request: Firewall on bridge interfaces from Needs testing to In progress.
As I undestand it is possible now to create multiple auth ID's
vyos@r4# set vpn ipsec authentication psk FOO id Possible completions: <text> ID used for authentication
Not sure about other options.
Viacheslav added a project to T5747: op-mode add MAC VRF and MTU for show interfaces summary: VyOS 1.4 Sagitta.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX59b57b97f80f: T5747: op-mode add MAC and MTU for show interfaces summary (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX181c8d5c5715: Merge pull request #2491 from sever-sever/T5747 (authored by c-po).
Viacheslav renamed T5747: op-mode add MAC VRF and MTU for show interfaces summary from op-mode add MAC and MTU for show interfaces to op-mode add MAC VRF and MTU for show interfaces summary.
Tested in VyOS 1.4-rolling-202311100309 (AES)
GitHub <noreply@github.com> committed rVYOSONEXc1754c4c0610: Merge pull request #2493 from vyos/mergify/bp/sagitta/pr-2490 (authored by c-po).
Tested in VyOS 1.4-rolling-202311100309 (3DES)
Viacheslav closed T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix as Resolved.
Viacheslav changed the status of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Needs testing.
In VyOS 1.3.4
Configs:
I have a similar setup where I have two VyOS VMs used as VPN routers with some firewalling enabled. Since I use OSPF for dynamic routing I am not able to synchronize the sessions between both routers so in case one VPN router fails the other one can't take over flawlessly. Having conntrack-sync configuration separated from VRRP would be a great benefit.
I tested in VyOS 1.4-rolling-202311100309
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXdc80f64212a7: op-mode: vrf: T5150: add "show vrf vni" and "show vrf <name> vni" commands (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXc3d96163b3e6: Merge pull request #2490 from c-po/op-mode-vni-t5150 (authored by c-po).