Generated rules:
vyos@r14# cat /run/nftables-ct.conf #!/usr/sbin/nft -f
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 30 2025
Apr 30 2025
jestabro moved T6695: Machine-readable operational mode support for traceroute from Open to Finished on the VyOS 1.5 Circinus board.
jestabro moved T5743: HTTPS API ability to import PKI certificates from Open to Finished on the VyOS 1.5 Circinus board.
jestabro moved T4406: Make an API endpoint for for anonymous host info retrieval (e.g. by a login page) from Open to Finished on the VyOS 1.5 Circinus board.
jestabro added a comment to T7393: HTTPS API listens on all addresses after changing its listen-address.
In short, setting listen-address requires an explicit 'systemctl restart nginx' instead of the existing 'systemctl reload-or-restart nginx'; a workaround before merge of the PR is to call the restart.
dmbaturin added a project to T6773: Finalise RFC-2136 DDNS updates for Kea DHCP server.: VyOS 1.5 Circinus.
Apr 29 2025
Apr 29 2025
dmbaturin added projects to T7370: Add "show log conntrack" op command: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0).
dmbaturin changed Issue type from bug to feature on T7359: Image update: confirm image name is available before accepting.
dmbaturin edited projects for T7359: Image update: confirm image name is available before accepting, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.0).
dmbaturin edited projects for T7322: Addition and deletion of allowed-vlans on a bridge member is slow, added: VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
GitHub <noreply@github.com> committed rVYOSONEXb6a43b7810c8: Merge pull request #4464 from nvollmar/T7382 (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX64849ac111bb: Merge pull request #4479 from dmbaturin/T7410-tech-support-usb (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXce74e456b670: Merge pull request #4477 from c-po/kernel-option-quiet (authored by dmbaturin).
I've issued a PR for this at https://github.com/vyos/vyos-1x/pull/4482, attempting to address a few things T5816 missed.
yzguy renamed T7412: containers: Allow privileged option from containers; Allow privileged option to containers: Allow privileged option.
PR
https://github.com/vyos/vyos-http-api-tools/pull/22
Opt to upgrade h11 package version only; cf. comments there.
Apr 28 2025
Apr 28 2025
Viacheslav added a comment to T7410: The tech support script fails on machines without a USB controller.
I'm close to having a PR ready for this. I'm finishing up all the smoketests and then will be ready to PR.
c-po moved T7405: kpartx is missing for arm64 build container in vyos-build from Need Triage to Completed on the VyOS Rolling board.
Adding a simple condition seems to do the work:
zsdc changed the status of T7411: FRRouting Configuration Loss on Abnormal Service Restart from Open to Confirmed.
Viacheslav added a comment to T7384: T7384 accel-ppp: Radius patch for Dns-Server-IPv6-Address attribute.
@AlexFT Could you recheck the latest rolling to confirm that all works as expected?
Viacheslav closed T7384: T7384 accel-ppp: Radius patch for Dns-Server-IPv6-Address attribute as Resolved.
Viacheslav triaged T7406: ARM64 Kernel config with virtio-gpu and pl011 console support as Normal priority.
adestis added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
You are right, when a correct "base" address for the prefix is used.
If not the prefix is silently discarded (192.0.0.0/24 vs. 192.0.0.8/24).
I am ok with it. Just important for documentation.
tjh added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
In T5493#222631, @adestis wrote:@Embezzle you are only supporting IP addresses but no prefixes as 192.0.0.8/24 ?
Do you have plans to also support networks/prefixes?
adestis added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
A lot of the original proposed features would be left aside if the implementation would stop here.
Or maybe I am the only one complaining here.
adestis added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
@Embezzle you are only supporting IP addresses but no prefixes as 192.0.0.8/24 ?
Do you have plans to also support networks/prefixes?
adestis added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
We tested the solution implemented by @Embezzle and it seems to work.
Apr 27 2025
Apr 27 2025
@canoziia Yes you can close, I marked as resolved this time, thanks!
Viacheslav closed T7220: Add the option to disable enforce-first-as at peer level, a subtask of T6747: frr: upgrade routing suite to 10.2, as Resolved.
curtdept added a comment to T7394: Image upgrade fails when the "system option kernel" subtree is empty .
Thanks :) I saw it in the commit notes, they must not be working correctly still :(
Should I close this task?
canoziia added a comment to T7394: Image upgrade fails when the "system option kernel" subtree is empty .
In T7394#222617, @curtdept wrote:Still happening somewhere
{F14387702}
curtdept added a comment to T7394: Image upgrade fails when the "system option kernel" subtree is empty .
Still happening somewhere
Apr 26 2025
Apr 26 2025
c-po updated the task description for T7397: Add "system kernel option quiet" to suppress boot messages.
c-po changed the status of T7397: Add "system kernel option quiet" to suppress boot messages from Open to In progress.
c-po renamed T7397: Add "system kernel option quiet" to suppress boot messages from Need system option quiet to suppress boot messages to Add "system kernel option quiet" to suppress boot messages.
@dmbaturin is this what you had in mind?
Apr 25 2025
Apr 25 2025
Viacheslav added a parent task for T7402: VPP failire with DPDK/XDP on supported hardware: T7070: VPP related bugs the root task.
c-po moved T7400: smoketest: fix unbound variable issue when checking for VXLAN remote and group error from Need Triage to Completed on the VyOS Rolling board.
c-po moved T7400: smoketest: fix unbound variable issue when checking for VXLAN remote and group error from Open to Finished on the VyOS 1.5 Circinus board.