PR https://github.com/vyos/vyos-1x/pull/3720
set service monitoring telegraf loki url 'http://localhost' set service monitoring telegraf loki metric-name-label 'r123'
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 27 2024
Jun 27 2024
Viacheslav triaged T6520: update vyos-1x workkflow package-smoketest permission for adding comment as Normal priority.
Jun 26 2024
Jun 26 2024
Viacheslav closed T6412: CGNAT allocation calculation may sometimes be incorrect, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Jun 25 2024
Jun 25 2024
Viacheslav triaged T6516: ISIS - advertise-passive-only not install route in the RIB as Normal priority.
@Vijayakumar This package is deprecated as per https://vyos.dev/T6507
Jun 24 2024
Jun 24 2024
Viacheslav changed the status of T5735: Add CLI and configuration scripts for stunnel, a subtask of T4783: Add support for stunnel, from Open to Needs testing.
Viacheslav changed the status of T5735: Add CLI and configuration scripts for stunnel from Open to Needs testing.
The no-verify options exists
vyos@vyos# set load-balancing reverse-proxy backend bk01 ssl Possible completions: ca-certificate Certificate Authority in PKI configuration no-verify Do not attempt to verify SSL certificates for backend servers
Added in the T6242
Jun 22 2024
Jun 22 2024
Jun 21 2024
Jun 21 2024
Viacheslav changed the status of T6488: Firewall op mode output incomplete from In progress to Needs testing.
Viacheslav added a comment to T6502: Load balancer reverse proxy does not allow forwarding SSH port.
Provide a minimal example of configuration (set commands) to reproduce.
Viacheslav triaged T6506: Add a linting rule for checking executable bits on scripts as Normal priority.
Jun 20 2024
Jun 20 2024
Jun 19 2024
Jun 19 2024
Works fine:
set load-balancing reverse-proxy backend bk01 server srv01 address '192.168.122.16' set load-balancing reverse-proxy backend bk01 server srv01 port '22' set load-balancing reverse-proxy service ssh backend 'bk01' set load-balancing reverse-proxy service ssh mode 'tcp' set load-balancing reverse-proxy service ssh port '22' set service ssh disable-host-validation set service ssh port '2222'
Viacheslav triaged T6502: Load balancer reverse proxy does not allow forwarding SSH port as Normal priority.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed from Open to In progress.
Viacheslav triaged T6500: openconnect: add support for new multi ca-certificate CLI node as Normal priority.
Jun 18 2024
Jun 18 2024
Viacheslav triaged T6497: CGNAT conntrack connections should be deleted if address or port range is changed as Wishlist priority.
Jun 17 2024
Jun 17 2024
Jun 14 2024
Jun 14 2024
Viacheslav triaged T6486: Generate openvpn client-config ignores configured protocol type as Normal priority.
Jun 13 2024
Jun 13 2024
Viacheslav renamed T6482: LLDP shows description instead of remote port from LLDP shows description instread of remote port to LLDP shows description instead of remote port.
Viacheslav moved T6403: nat64 input validation required from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav triaged T6478: Allow OpenVPN to reload clients' configs without service restart as Normal priority.
Jun 12 2024
Jun 12 2024
@nvollmar Do you want to claim the task?
Viacheslav changed the subtype of T6477: Adding Loki plugin to Telegraf from "Task" to "Feature Request".
It will be easy to add; you need to generate a new CLI like with "prometheus-client" for example https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/interface-definitions/service_monitoring_telegraf.xml.in#L188-L250
And add template changes https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/data/templates/telegraf/telegraf.j2#L45-L58
Viacheslav closed T6442: CGNAT add address allocation logs to syslog during commit, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Jun 11 2024
Jun 11 2024
Viacheslav triaged T6470: Deleting a Firewall addrerss-group object that is tied to a NAT rule or other resources doesn't error out, it hangs. as Normal priority.
@lclements0 Add a simple set of commands to reproduce.
Jun 10 2024
Jun 10 2024
Viacheslav changed the status of T6442: CGNAT add address allocation logs to syslog during commit, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6442: CGNAT add address allocation logs to syslog during commit from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/3621
set nat cgnat log-allocation set nat cgnat pool external ext-01 external-port-range '1024-65535' set nat cgnat pool external ext-01 per-user-limit port '2000' set nat cgnat pool external ext-01 range 192.168.122.222/32 set nat cgnat pool internal int-01 range '100.64.0.0/28' set nat cgnat rule 10 source pool 'int-01' set nat cgnat rule 10 translation pool 'ext-01'
check logs:
Jun 10 14:10:02 r4 sudo[9057]: vyos : TTY=pts/0 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/sh -c ' /usr/libexec/vyos/conf_mode/nat_cgnat.py' Jun 10 14:10:02 r4 sudo[9057]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1003) Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.0, external host: 192.168.122.222, Port range: 1024-3023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.1, external host: 192.168.122.222, Port range: 3024-5023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.2, external host: 192.168.122.222, Port range: 5024-7023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.3, external host: 192.168.122.222, Port range: 7024-9023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.4, external host: 192.168.122.222, Port range: 9024-11023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.5, external host: 192.168.122.222, Port range: 11024-13023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.6, external host: 192.168.122.222, Port range: 13024-15023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.7, external host: 192.168.122.222, Port range: 15024-17023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.8, external host: 192.168.122.222, Port range: 17024-19023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.9, external host: 192.168.122.222, Port range: 19024-21023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.10, external host: 192.168.122.222, Port range: 21024-23023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.11, external host: 192.168.122.222, Port range: 23024-25023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.12, external host: 192.168.122.222, Port range: 25024-27023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.13, external host: 192.168.122.222, Port range: 27024-29023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.14, external host: 192.168.122.222, Port range: 29024-31023 Jun 10 14:10:03 r4 cgnat[9059]: Internal host: 100.64.0.15, external host: 192.168.122.222, Port range: 31024-33023 Jun 10 14:10:03 r4 sudo[9057]: pam_unix(sudo:session): session closed for user root
Accel-ppp does not work with VPP
Jun 7 2024
Jun 7 2024
Viacheslav assigned T5633: op-cmd: Interrupting the "tech-support report" command generates error to Giggum.
Jun 7 2024, 7:33 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Jun 6 2024
Jun 6 2024
At the meeting, we concluded that tables should not intersect with protocols static table x
This PR was just to make this use case when they intersect and have a more flexible configuration.
Without using the same tables, it makes no sense in this PR.
That's why it was closed
In T6448#191156, @HappyShr00m wrote:I have not used it since I thought it would delete even running instances or stop them. if it doesn't, then may I suggest adding a description to the command to indicate that it will not impact the running containers. thanks
Viacheslav added a comment to T6445: config-sync should be saved on receiving peer, after auto-commit.
In T6445#191083, @Apachez wrote:Yes but this is what the peer would do on its own - if the opposite device is lost in connectivity it can rollback to previous config which is enabled by default (that is history of configs).
It will delete all unused images
Did you try this command, as the command does not work?
Jun 5 2024
Jun 5 2024
Viacheslav moved T6431: monitor traceroute broken VRF support from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
@talmakion Good catch! Thanks for contributing!
Viacheslav changed the status of T6412: CGNAT allocation calculation may sometimes be incorrect from Open to In progress.
Viacheslav changed the status of T6412: CGNAT allocation calculation may sometimes be incorrect, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav added a comment to T6445: config-sync should be saved on receiving peer, after auto-commit.
In T6445#191034, @Apachez wrote:This can be handled just like "how others does it" as in if the peer is lost after a sync then the peer will automatically return to previous config.
Viacheslav changed the status of T6430: Allow larger table ids in policy route from Open to In progress.
Viacheslav triaged T6444: "config-sync section service dhcp-server" should swap remote/source-address during sync as Wishlist priority.
Viacheslav changed the subtype of T6444: "config-sync section service dhcp-server" should swap remote/source-address during sync from "Bug" to "Feature Request".
Swap/change/hide config entries are not implemented.
It is not a bug but a feature request.
Viacheslav triaged T6445: config-sync should be saved on receiving peer, after auto-commit as Wishlist priority.
The config-sync is not a HA.
I don't think config-sync should save, reboot, or do something else.
Imagine if, due to config-sync, you lose access to the secondary node and if it was saved by config-sync.
Jun 3 2024
Jun 3 2024
Viacheslav triaged T6442: CGNAT add address allocation logs to syslog during commit as Wishlist priority.
If you add this config after the server is configured, it works as it requires a restart of the service
sudo systemctl restart accel-ppp@pppoe.service
Or reconfigure the service again
Viacheslav added a comment to T6338: Ability to use per-user traffic shaper or policy limits based on the network.
@L0crian Some TC combinations are affected by locks, so they are impossible to use with, for example, /16 networks.
Add the set of commands to reproduce.
Viacheslav added a parent task for T6304: Rewrite commit-archive to more structured CLI format: T139: Commit archive backends.
Viacheslav changed the status of T6373: QoS Policy Limiter - classes for marked traffic do not work from Open to Needs testing.
Viacheslav changed the status of T6439: QoS: Filtering on Mark broken between 1.4.0-epa2 and 1.4.0-epa3 from Open to Needs testing.
Viacheslav added a comment to T6439: QoS: Filtering on Mark broken between 1.4.0-epa2 and 1.4.0-epa3.
Should be fixed in T6373
Jun 1 2024
Jun 1 2024
Duplicate
Viacheslav triaged T6423: Require command definition nodes that have an owner to also have a priority as Wishlist priority.
Viacheslav changed the status of T6422: Ability to configure multiple NS records in the authoritative DNS server configuration from Open to Needs testing.
Viacheslav moved T6409: Remove unused parameter node from reverse-proxy backend from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.