Provide a minimal example of configuration (set commands) to reproduce.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 21 2024
Jun 21 2024
Viacheslav changed the status of T6488: Firewall op mode output incomplete from In progress to Needs testing.
Viacheslav added a comment to T6502: Load balancer reverse proxy does not allow forwarding SSH port.
This is not resolved on my side.
Viacheslav triaged T6506: Add a linting rule for checking executable bits on scripts as Normal priority.
My current understanding, and memory of its introduction, is that the settings os.environ[SUDO_*] were more than needed at the time, with a possible later use in mind: the only critical setting for vyos-configd as a dispatcher of config mode scripts is the preceding line: setgid(cfg_group.gid), allowing the config group access to generated files. Note that the environment variables are not currently used by conf-mode scripts, other than system_login.py, leading to the above bug.
Jun 20 2024
Jun 20 2024
Draft PR passes configtests; dramatically faster:
https://github.com/vyos/vyos-1x/pull/3692
Minor integration and other testing remain before ready for review.
Just some quick testing with 2 VyOS instances connected via 2 straight ethernet into a virtual switch. eth0 on the remote has been given a description of "ETHZERO".
dmbaturin edited projects for T2115: VyOS cannot load configs when running in a container, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T3159: L2TP MTU mismatch between client and server, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4001: Cannot use local-subnet or remote-subnet when using transport mode, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4455: smp-affinity required by some platforms but doesn't exists in the CLI, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5570: PAM config RADIUS ignore for default and success, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5790: ISIS invalid format of hello packet when interface mtu is between 1501 and 1535, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5926: IPSEC does not apply after l2tp configuration was changed, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2207: IPv6 route install failed, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2287: LLDP not working on X710 adapter, i40e driver, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T3204: Performance system option destroy defined sysctl custom params, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4280: dhcp-relay: does not work with wireguard uplink, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T3393: IPoE does not assign IPv6 PD or WAN address, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4281: System users migration can lead to inaccessible shell, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4600: Closing IPV6CP by client closes PPPoE link completely, even if IPv6 is optional, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
Jun 19 2024
Jun 19 2024
Command to restart when ssh running on default vrf:
Works fine:
set load-balancing reverse-proxy backend bk01 server srv01 address '192.168.122.16' set load-balancing reverse-proxy backend bk01 server srv01 port '22' set load-balancing reverse-proxy service ssh backend 'bk01' set load-balancing reverse-proxy service ssh mode 'tcp' set load-balancing reverse-proxy service ssh port '22' set service ssh disable-host-validation set service ssh port '2222'
c-po moved T6500: openconnect: add support for new multi ca-certificate CLI node from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6500: openconnect: add support for new multi ca-certificate CLI node from Open to In progress.
a.apostoliuk added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.
After deep testing, we saw that if we reset the peer on the initiator side, strongswan does not reinitiate the connection by itself.
Need to add a connection initiation in the reset function on the initiator side.
a.apostoliuk changed the status of T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down from Open to In progress.
a.apostoliuk edited projects for T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
a.apostoliuk moved T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down from In Progress to Open on the VyOS 1.4 Sagitta board.
n.fort changed the status of T6488: Firewall op mode output incomplete from Confirmed to In progress.
Viacheslav triaged T6502: Load balancer reverse proxy does not allow forwarding SSH port as Normal priority.
natali-rs1985 changed the status of T5710: PPPoE-server add option permit any-login from Open to In progress.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed from Open to In progress.
c-po changed the status of T6489: Add/Improve support for CLI config scripts that change the underlying actual configuration and make them work with vyos-configd from In progress to Needs testing.
Viacheslav triaged T6500: openconnect: add support for new multi ca-certificate CLI node as Normal priority.
Jun 18 2024
Jun 18 2024
@zsdc @fernando @a.apostoliuk we need retest this
c-po moved T6425: WiFi: Beamformer support for 802.11ac (VHT at 5GHz) is broken from Open to Finished on the VyOS 1.5 Circinus board.
c-po edited projects for T6425: WiFi: Beamformer support for 802.11ac (VHT at 5GHz) is broken, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta (1.4.0-GA).
Thanks to dleroy@labn.net, who has finished my PR, the Nhrp Cisco auth was merged today.
https://github.com/FRRouting/frr/pull/16172
Looking at it, T5816 already attempted to fix this and is probably better for users - doesn't give the full flexibility of regex and doesn't handle '_' at all, but does have a strict format expectation.
Looking at the code in FRR, it just expands '_' to the full match '(^|[,{}()]|$)' and sends that whole match off to regexec().
All working nicely in current rolling.
@Thunderstorm looks like this one made it to the current rolling, if you're able to try it out?
Viacheslav triaged T6497: CGNAT conntrack connections should be deleted if address or port range is changed as Wishlist priority.
HollyGurza moved T5949: Disable USB autosuspend from Open to In Progress on the VyOS 1.5 Circinus board.
Jun 17 2024
Jun 17 2024
all work!
Thank you
natali-rs1985 changed the status of T6492: Check if all migrators have the executable bit set from Open to In progress.
@pavel-altair can you please re-test with VyOS 1.5-rolling-202406170021
Jun 16 2024
Jun 16 2024
syncer changed the status of T6494: Add branches of vyos-1x project, a subtask of T6493: GitHub integration with SonarCloud root task, from Open to In progress.
syncer changed the status of T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic from Open to In progress.
syncer set Forum thread to https://forum.vyos.io/t/outbound-ipsec-filtering-by-firewall-would-like-some-dev-opinions/14710 on T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.
Jun 15 2024
Jun 15 2024
@zsdc if that completed, please close this task