Some info
To make hardware offloading works, the NIC should be programmable to load forwarding rules like flowtable and this is what switchdev doing
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 2 2024
Jul 2 2024
Viacheslav added a comment to T6526: hardware flowtables not working on supposedly supported hardware.
Viacheslav changed the status of T6523: Error: "nft table ip vyos_filter not found" when commiting prometheus-client from In progress to Needs testing.
@SamLue will be available in the next rolling release, can you check when it will be available?
In T6486#193845, @Viacheslav wrote:@adestis Can you add an example of the expected configuration if use-lzo-compression is configured and not configured?
https://github.com/vyos/vyos-1x/blob/e270712f7ebd76e4e1be598766d999cef4f05e26/src/op_mode/generate_ovpn_client_file.py#L57
I have similar problem, testing setup:
VyOS 1.5-rolling-202407010024 as VM in proxmox 8.2
Intel x710 card in pci-e passthrow to the VM
There are some nuances with it, until we do not have a route from to default VRF to the peer it won't work
set vrf bind-to-all set vrf name first table '123'
n.fort changed the status of T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) from Open to In progress.
Viacheslav changed the status of T6538: Allow adding a geneve interface to the vrf. from Open to In progress.
Viacheslav changed the status of T6523: Error: "nft table ip vyos_filter not found" when commiting prometheus-client from Open to In progress.
natali-rs1985 changed the status of T6505: Support VXLAN VLAN-VNI range mapping in CLI from Open to In progress.
Viacheslav changed the status of T4025: OpenVPN server with TAP interface, client didn’t see network from Open to Needs testing.
Jul 2 2024, 6:55 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
We are not going to implement it.
Viacheslav added a comment to T6379: "generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients.
Should fix it https://github.com/vyos/vyos-1x/pull/3747
Viacheslav added a comment to T6486: Generate openvpn client-config ignores configured protocol type.
PR https://github.com/vyos/vyos-1x/pull/3747
Also it should fix T6379
Viacheslav moved T5487: OPENVPN -DEPRECATED OPTION: --cipher from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Viacheslav moved T6477: Adding Loki plugin to Telegraf from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Viacheslav changed the status of T6486: Generate openvpn client-config ignores configured protocol type from Open to In progress.
Viacheslav changed the status of T6535: NAT66 Prefix Translation not working anymore from Resolved to Invalid.
Jul 1 2024
Jul 1 2024
So with nftables output apparently the rule is correctly in place.
fernando changed the status of T6516: ISIS - advertise-passive-only not install route in the RIB from Open to Confirmed.
I've created the FRR bug report :
syncer triaged T6533: add reusable workflows for vyatta-cfg-system - sagitta branch as Normal priority.
Viacheslav changed the status of T6535: NAT66 Prefix Translation not working anymore from Open to Needs reporter action.
dmbaturin renamed T6460: Showing DHCPv6 leases can fail due to DUID parsing issues from Showing DHCPv6 leases fails to Showing DHCPv6 leases can fail due to DUID parsing issues.
We do not use iptables, we use nftables.
Check the rules with sudo nft list ruleset
What exactly does not work?
dmbaturin removed a project from T6464: sstpc: interface not restarted when updating SSL certificate via PKI: VyOS 1.5 Circinus.
dmbaturin removed a project from T6463: reverse-proxy: service not reloaded when updating SSL certificate via PKI: VyOS 1.5 Circinus.
dmbaturin renamed T6454: Explicitly set the default reverse proxy mode to HTTP from Add a default value to reverse-proxy mode to Explicitly set the default reverse proxy mode to HTTP.