I stumbled over it today on my 1.4 boxes. It would be nice to have the possibilty to exclude forwarding traffic from conntrack.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 5 2025
Jun 5 2025
Jun 4 2025
Jun 4 2025
natali-rs1985 changed the status of T7515: VPP NAT44 timeouts does not work, a subtask of T7070: VPP related bugs the root task, from Open to In progress.
natali-rs1985 changed the status of T7515: VPP NAT44 timeouts does not work from Open to In progress.
Sorry, my bad, capturing traffic send from the haproxy to the backend actually contains the X-Forwarded-For header. Simply close my request and thanks for the quick answer / interaction.
Would you like to create a PR?
You're right, headers for port and protocol are being added but not the host.
It already should work if the backend mode http https://github.com/vyos/vyos-1x/blob/a711ceb80158a1dcdeecd1570ca705684d636327/data/templates/load-balancing/haproxy.cfg.j2#L199-L203
Can you re-check?
Well, it could be an option in the load-balancing haproxy service definition, something like "option forwardedfor" that would enable the http header and feed it with real client IP.
Any idea for CLI?
Viacheslav moved T7514: Smoketest QoS limiter fails from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Viacheslav triaged T7518: VPP after reboot cannot ping anything and do not have ARP entries as High priority.
Viacheslav added a project to T7514: Smoketest QoS limiter fails: VyOS 1.5 Circinus (1.5-stream-2025-Q2).
Jun 3 2025
Jun 3 2025
Viacheslav added a comment to T7509: show * bgp neighbors * advertised-routes detail or show * bgp neighbors *received-routes detail missing.
Created a separated Feature request https://vyos.dev/T7516
dmbaturin edited projects for T7509: show * bgp neighbors * advertised-routes detail or show * bgp neighbors *received-routes detail missing, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta.
c-po changed the status of T7208: Some sysctl options like nf_conntrack_buckets are different between a clean install and the first reboot from Open to In progress.
c-po added a comment to T7208: Some sysctl options like nf_conntrack_buckets are different between a clean install and the first reboot.
Different values originate from the Kernel source code depending on the actual available amount of system memory:
- min value 1024
- up to 4GB RAM 65536
- more then 4GB RAM 262144
Caused by this commit that merges iproute2-next into the main branch of iproute2 and introduced in v6.15.0 which was pushed to debian-backports a couple of days ago.
Viacheslav added a subtask for T7070: VPP related bugs the root task: T7515: VPP NAT44 timeouts does not work.
Viacheslav added a parent task for T7515: VPP NAT44 timeouts does not work: T7070: VPP related bugs the root task.
Viacheslav added a comment to T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.
The same bug with nat44
set interfaces ethernet eth0 address '192.168.122.14/24' set interfaces ethernet eth0 description 'WAN' set interfaces ethernet eth1 address '100.64.0.1/24' set interfaces ethernet eth1 description 'LAN'
Jun 2 2025
Jun 2 2025
Viacheslav updated the task description for T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.
Thanks, will do.
Fork the repo vyos-1x do your changes and create a PR, there are several open PR's for example https://github.com/vyos/vyos-1x/pulls
Refer to the task number T7511 in the commit message and PR header.
In T7511#225850, @Viacheslav wrote:Thanks @red55
Would you like to create a PR to fix this?
Viacheslav triaged T7511: Unable to apply OpenConnect RADIUS accounting settings as Normal priority.
Thanks @red55
Would you like to create a PR to fix this?
Viacheslav added a comment to T7509: show * bgp neighbors * advertised-routes detail or show * bgp neighbors *received-routes detail missing.
Probably another task, but nice to have reset all connections soft in and soft out
vyos@r14:~$ reset ip bgp all Possible completions: <Enter> Execute the current command
Jun 1 2025
Jun 1 2025
red55 updated the task description for T7511: Unable to apply OpenConnect RADIUS accounting settings.
May 31 2025
May 31 2025
sarthurdev changed the status of T7237: NAT checking translation address is an expensive operation, a subtask of T6302: The root task for bugs and improvements related to commit time and boot, from Open to Needs testing.
sarthurdev changed the status of T7237: NAT checking translation address is an expensive operation from Open to Needs testing.
May 30 2025
May 30 2025
jestabro added a parent task for T7508: Fix default commit-confirm action: T7500: Fix commit-confirm action 'reboot'.
jestabro added a subtask for T7500: Fix commit-confirm action 'reboot': T7508: Fix default commit-confirm action.
PR created: https://github.com/vyos/vyos-1x/pull/4534 welcome to any feedback and or suggestions!
Viacheslav renamed T7507: FRR add the ability to set a tag for the static routes from Add the ability to set a tag for the static routes to FRR add the ability to set a tag for the static routes.
Viacheslav triaged T7507: FRR add the ability to set a tag for the static routes as Normal priority.
May 29 2025
May 29 2025
@tarik.haddouchi I just merged the changes into current and thus will be in the next rolling release. I also encountered this weirdness. CA keys have been moved to OpenSSH public/private keys, see updated documentation: https://docs.vyos.io/en/latest/configuration/service/ssh.html
jestabro closed T7498: Extend HTTP API load/merge request to allow passing config in body as Resolved.
jestabro moved T7498: Extend HTTP API load/merge request to allow passing config in body from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav triaged T7505: Add the ability to upgrade images via API with the VRF option as Normal priority.
natali-rs1985 added a comment to T7169: If cannot connect to VPP while committing interface disappears.
dmbaturin moved T7415: QoS match TCP ACK not working from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7415: QoS match TCP ACK not working from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
dmbaturin moved T7395: Add support for renew in REST Server from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7395: Add support for renew in REST Server from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
dmbaturin edited projects for T7395: Add support for renew in REST Server, added: VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.
Viacheslav changed the status of T7503: Add smoketest and config test for VPP NAT from Open to In progress.