Page MenuHomeVyOS Platform
Feed Advanced Search

Dec 22 2021

erkin triaged T4090: Source port and interface support for `commit-archive` as Low priority.
Dec 22 2021, 4:52 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 16 2021

erkin removed a project from T936: Reimplementation of tech-support diagnostic file generation: VyOS 1.3 Equuleus (1.3.0).

I'm not happy with the current one. Ideally, I'd like to rewrite it in Python using better diagnostic collection tools. I don't see it happening in 1.3.0, however.

Dec 16 2021, 4:34 PM · test, VyOS 1.4 Sagitta
erkin closed T2651: Generate CLI abstraction for options passed to CURL and SSH client, a subtask of T3356: Script for remote file transfers, as Resolved N/A.
Dec 16 2021, 4:32 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T2651: Generate CLI abstraction for options passed to CURL and SSH client as Resolved N/A.

This is no longer relevant now that curl has been almost entirely removed from the interface. Source addresses and such can be set for commit-archive, and authentication variables are set individually for each session.

Dec 16 2021, 4:32 PM · VyOS 1.3 Equuleus (1.3.0)
erkin changed the status of T3821: Add latest versions to default config files from In progress to On hold.
Dec 16 2021, 4:22 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta
erkin added a comment to T3506: Migrate loadkey command to op-mode.

I'm going to delete loadkey from 1.4 some time after 1.3 comes out.

Dec 16 2021, 4:21 PM · VyOS 1.4 Sagitta
erkin closed T4037: HTTP transfers do not follow redirects as Resolved.

I assumed the last element of .history[] is the final URL, so I had it display .history[-1]; but it turns out it overwrites .url with the final destination and only keeps the previous redirects in .history[]. Now it just displays .url if .history[] is not empty.

Dec 16 2021, 4:19 PM · VyOS 1.4 Sagitta
erkin closed T2615: Provide an explicit option for server fingerprint in commit archive, and make insecure the default, a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, as Resolved.
Dec 16 2021, 4:18 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T2615: Provide an explicit option for server fingerprint in commit archive, and make insecure the default as Resolved.

The way it's done right now is like this:

Dec 16 2021, 4:18 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T3378: commit-archive source-address broken for IPv6 addresses, a subtask of T3356: Script for remote file transfers, as Resolved.
Dec 16 2021, 4:11 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3378: commit-archive source-address broken for IPv6 addresses as Resolved.

curl is no longer relevant as it was superseded by the new remote module.

Dec 16 2021, 4:11 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T3556: Commit-archive via scp causes 100% CPU on boot, a subtask of T3356: Script for remote file transfers, as Resolved.
Dec 16 2021, 4:10 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3556: Commit-archive via scp causes 100% CPU on boot as Resolved.

Assuming it does not (and I can't replicate this), since the responsible code was rewritten in November to properly use low-level sockets. Let me know if it still persists and I'll try to poke around Paramiko for performance bottlenecks.

Dec 16 2021, 4:10 PM · VyOS 1.4 Sagitta
erkin triaged T4038: Rewrite `vyatta-image-tools.pl` in Python as Low priority.
Dec 16 2021, 4:07 PM · Restricted Project, VyOS 1.4 Sagitta
erkin raised the priority of T3354: Convert strip-private script from Perl to Python from Wishlist to Low.
Dec 16 2021, 4:07 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin reopened T3354: Convert strip-private script from Perl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, as In progress.
Dec 16 2021, 4:06 PM · VyOS 1.5 Circinus
erkin reopened T3354: Convert strip-private script from Perl to Python as "In progress".

Going to backport this to 1.3 as well.

Dec 16 2021, 4:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, as Resolved.
Dec 16 2021, 2:07 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3628: commit-archive source-address Interface Broken as Resolved.
Dec 16 2021, 2:07 PM · VyOS 1.4 Sagitta
erkin closed T4029: Broken SFTP uploads, a subtask of T3356: Script for remote file transfers, as Resolved.
Dec 16 2021, 2:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T4029: Broken SFTP uploads as Resolved.
Dec 16 2021, 2:06 PM · VyOS 1.4 Sagitta

Dec 2 2021

erkin reopened T3356: Script for remote file transfers as "In progress".
Dec 2 2021, 2:44 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin reopened T3356: Script for remote file transfers, a subtask of T3355: Remove all remaining legacy Vyatta code, as In progress.
Dec 2 2021, 2:44 PM · VyOS 1.5 Circinus
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T4038: Rewrite `vyatta-image-tools.pl` in Python.
Dec 2 2021, 2:41 PM · VyOS 1.5 Circinus
erkin added a parent task for T4038: Rewrite `vyatta-image-tools.pl` in Python: T3355: Remove all remaining legacy Vyatta code.
Dec 2 2021, 2:41 PM · Restricted Project, VyOS 1.4 Sagitta
erkin created T4038: Rewrite `vyatta-image-tools.pl` in Python.
Dec 2 2021, 2:41 PM · Restricted Project, VyOS 1.4 Sagitta
erkin added a subtask for T3356: Script for remote file transfers: T4029: Broken SFTP uploads.
Dec 2 2021, 2:32 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin added a parent task for T4029: Broken SFTP uploads: T3356: Script for remote file transfers.
Dec 2 2021, 2:32 PM · VyOS 1.4 Sagitta
erkin added a comment to T3556: Commit-archive via scp causes 100% CPU on boot.

Does this problem persist with the latest rolling version?

Dec 2 2021, 2:31 PM · VyOS 1.4 Sagitta
erkin added a comment to T3628: commit-archive source-address Interface Broken.

The way sockets are handled in the last version should've fixed this once and for all.

Dec 2 2021, 2:30 PM · VyOS 1.4 Sagitta
erkin closed T3950: CLI backtrace on update if DNS not defined as Resolved.

Less scary error messages are produced now.

Dec 2 2021, 2:29 PM · VyOS 1.4 Sagitta
erkin closed T3950: CLI backtrace on update if DNS not defined , a subtask of T3356: Script for remote file transfers, as Resolved.
Dec 2 2021, 2:29 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin changed the status of T4037: HTTP transfers do not follow redirects from Open to In progress.
Dec 2 2021, 2:18 PM · VyOS 1.4 Sagitta
erkin claimed T4029: Broken SFTP uploads.
Dec 2 2021, 2:17 PM · VyOS 1.4 Sagitta

Nov 24 2021

erkin claimed T2615: Provide an explicit option for server fingerprint in commit archive, and make insecure the default.
Nov 24 2021, 5:07 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T3865: loadkey command help text missing escape sequence as Resolved.
Nov 24 2021, 5:02 PM · VyOS 1.4 Sagitta
erkin closed T3865: loadkey command help text missing escape sequence, a subtask of T3506: Migrate loadkey command to op-mode, as Resolved.
Nov 24 2021, 5:02 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3865: loadkey command help text missing escape sequence: T3506: Migrate loadkey command to op-mode.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3506: Migrate loadkey command to op-mode: T3865: loadkey command help text missing escape sequence.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin removed a subtask for T3865: loadkey command help text missing escape sequence: T3506: Migrate loadkey command to op-mode.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin removed a parent task for T3506: Migrate loadkey command to op-mode: T3865: loadkey command help text missing escape sequence.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3506: Migrate loadkey command to op-mode: T3865: loadkey command help text missing escape sequence.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3865: loadkey command help text missing escape sequence: T3506: Migrate loadkey command to op-mode.
Nov 24 2021, 4:36 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3950: CLI backtrace on update if DNS not defined : T3356: Script for remote file transfers.
Nov 24 2021, 4:34 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3356: Script for remote file transfers: T3950: CLI backtrace on update if DNS not defined .
Nov 24 2021, 4:34 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Nov 24 2021, 4:25 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Nov 24 2021, 4:25 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T3710: Upgrade the kernel in 1.3 to 5.10, as Resolved.
Nov 24 2021, 11:40 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin closed T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T2198: Rewrite NAT in new XML/Python style, as Resolved.
Nov 24 2021, 11:40 AM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T1083: Implement persistent/random address and port mapping options for NAT rules as Resolved.

Still works perfectly fine for 1.3 nightly. (1.3-beta-202111240443)

Nov 24 2021, 11:40 AM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

Nov 18 2021

erkin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T3710: Upgrade the kernel in 1.3 to 5.10, from Needs testing to In progress.
Nov 18 2021, 2:05 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T2198: Rewrite NAT in new XML/Python style, from Needs testing to In progress.
Nov 18 2021, 2:05 PM · VyOS 1.3 Equuleus (1.3.0)
erkin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules from Needs testing to In progress.
Nov 18 2021, 2:05 PM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

Nov 11 2021

erkin changed the status of T1634: Commit fails when changing policy route "set table" and adding the table at the same time, results in config deadlock from Open to In progress.
Nov 11 2021, 2:31 PM

Nov 9 2021

erkin closed T3962: Image cannot be built without open-vm-tools as Resolved.
Nov 9 2021, 2:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T2088: Increased boot time from 1.2.4 -> 1.3 rolling by 100%, a subtask of T1230: Improving Boot Time for Large Firewall Configurations, as Resolved.
Nov 9 2021, 1:35 PM · VyOS 1.3 Equuleus (1.3.6)
erkin closed T2088: Increased boot time from 1.2.4 -> 1.3 rolling by 100% as Resolved.

I did a quick test with 1.3.0-epa3 and this config loads in about 6 minutes in my VM (2 GB memory, 1 core at 1,6 GHz) at boot, some WireGuard config errors notwithstanding. After all the performance improvements, I think we can consider this resolved at this point.

Nov 9 2021, 1:35 PM · VyOS 1.3 Equuleus (1.3.0)

Nov 4 2021

erkin claimed T3962: Image cannot be built without open-vm-tools.
Nov 4 2021, 12:38 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Nov 3 2021

erkin changed the status of T3950: CLI backtrace on update if DNS not defined from Open to In progress.
Nov 3 2021, 6:42 PM · VyOS 1.4 Sagitta

Sep 20 2021

erkin closed T3823: strip-private does not filter public IPv6 addresses as Resolved.
Sep 20 2021, 2:06 PM · VyOS 1.4 Sagitta

Sep 17 2021

erkin added a comment to T3823: strip-private does not filter public IPv6 addresses.

Something about commands is meddling with strip-private. I'm looking into it.

Sep 17 2021, 8:10 AM · VyOS 1.4 Sagitta
erkin added a comment to T3823: strip-private does not filter public IPv6 addresses.

Now this is quite strange....

$ echo '2001:1578:2fe:fffd::/64' | strip-private
xxxx:xxxx:2fe:fffd::/64
Sep 17 2021, 8:07 AM · VyOS 1.4 Sagitta
erkin changed the status of T3823: strip-private does not filter public IPv6 addresses from Open to In progress.
Sep 17 2021, 8:04 AM · VyOS 1.4 Sagitta

Sep 11 2021

erkin closed T3275: Disable conntrack helpers by default as Resolved.

Backport to 1.3 is complete. See T3821 for further discussion.

Sep 11 2021, 7:50 PM · VyOS 1.5 Circinus
erkin changed the status of T3821: Add latest versions to default config files from Open to In progress.
Sep 11 2021, 7:50 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta

Sep 1 2021

erkin set Issue type to bug on T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .
Sep 1 2021, 10:59 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
erkin set Issue type to improvement on T239: Improve documentation for the firewall all-ping setting.
Sep 1 2021, 10:59 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Version to - on T208: Ability to ignore default-route from dhcpcd per interface.
Sep 1 2021, 10:59 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Is it a breaking change? to none on T190: two factor authentication for OpenVPN remote VPN tunnels.
Sep 1 2021, 10:59 AM · VyOS 1.5 Circinus
erkin set Why the issue appeared? to none on T177: SSD tweaks.
Sep 1 2021, 10:58 AM · VyOS 1.5 Circinus
erkin changed Issue type from feature to improvement on T175: Add source route option to VTI interfaces.
Sep 1 2021, 10:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Is it a breaking change? to none on T175: Add source route option to VTI interfaces.
Sep 1 2021, 10:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Issue type to improvement on T169: Image install should put correct serial console device in created GRUB menu entry.
Sep 1 2021, 10:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Is it a breaking change? to none on T149: IPv6 support in OpenVPN tunnel.
Sep 1 2021, 10:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1), openvpn
erkin set Issue type to feature on T139: Commit archive backends.
Sep 1 2021, 10:57 AM · VyOS 1.5 Circinus
erkin set Is it a breaking change? to none on T134: If default boot image differs from currently running image, check configurations for differences and alert user.
Sep 1 2021, 10:57 AM · VyOS 1.3 Equuleus (1.3.7)
erkin set Is it a breaking change? to none on T117: Cannot install from ISO via serial console on ttyS1.
Sep 1 2021, 10:57 AM · VyOS 1.3 Equuleus (1.3.6)
erkin set Is it a breaking change? to none on T109: VyOS Can Lose Parts Of Its Config On Reboot - In Certain Situations.
Sep 1 2021, 10:57 AM · VyOS 1.3 Equuleus (1.3.3)
erkin set Why the issue appeared? to none on T102: Add a command like "set service dns dynamic http-request url ...".
Sep 1 2021, 10:57 AM · VyOS 1.3 Equuleus (1.3.7)
erkin set Issue type to feature on T94: commit archive to AWS S3 .
Sep 1 2021, 10:56 AM · VyOS 1.5 Circinus
erkin set Why the issue appeared? to none on T75: NetFlow have impact on performance.
Sep 1 2021, 10:56 AM · VyOS 1.3 Equuleus (1.3.7)
erkin set Is it a breaking change? to none on T56: Add pkcs11 support to OpenVPN interfaces.
Sep 1 2021, 10:56 AM · Invalid
erkin set Is it a breaking change? to none on T50: Better support for tcp-mss.
Sep 1 2021, 10:56 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Issue type to feature on T31: Add VRF support.
Sep 1 2021, 10:56 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Is it a breaking change? to none on T20: duplicate address detection.
Sep 1 2021, 10:56 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Is it a breaking change? to none on T948: integrate aws cloud watch scripts into AMI.
Sep 1 2021, 10:50 AM · VyOS 1.3 Equuleus (1.3.6)
erkin set Issue type to bug on T951: command 'isolate-stations true/false' does not make any changes in the hostapd.conf.
Sep 1 2021, 10:50 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Issue type to bug on T952: Wireless interfaces in managed mode cannot be added to a bridge.
Sep 1 2021, 10:50 AM · Invalid
erkin set Issue type to bug on T954: Using the 10.255.255.0/24 subnet on other interfaces breaks L2TP/IPSec.
Sep 1 2021, 10:50 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Issue type to feature on T970: Hostname Support in NAT and Firewall Rules.
Sep 1 2021, 10:50 AM · VyOS 1.4 Sagitta
erkin set Is it a breaking change? to none on T971: authentication public-keys options quoting issue.
Sep 1 2021, 10:50 AM · VyOS 1.3 Equuleus (1.3.5)
erkin set Issue type to feature on T973: Create Prometheus Exporter for VyOS .
Sep 1 2021, 10:50 AM · VyOS 1.5 Circinus
erkin set Is it a breaking change? to none on T985: New cluster implementation with corosync+pacemaker.
Sep 1 2021, 10:49 AM · VyOS 1.5 Circinus
erkin set Is it a breaking change? to none on T989: Add support for IPoE server.
Sep 1 2021, 10:49 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
erkin set Issue type to feature on T990: Make DNAT/SNAT a valid state in firewall rules. .
Sep 1 2021, 10:49 AM · VyOS 1.4 Sagitta, test

Aug 31 2021

erkin set Issue type to bug on T1000: Broken 6rd tunnel implementation.
Aug 31 2021, 7:23 PM
erkin set Is it a breaking change? to none on T1002: install image - fast install.
Aug 31 2021, 7:23 PM · VyOS 1.5 Circinus
erkin set Is it a breaking change? to none on T1005: Support for multiple SSID in station mode , WPA-EAP.
Aug 31 2021, 7:22 PM · VyOS 1.3 Equuleus (1.3.7)
erkin set Is it a breaking change? to none on T1012: vyos-build configure script should check /etc/issue to avoid confusion.
Aug 31 2021, 7:22 PM · VyOS 1.3 Equuleus (1.3.5), vyos-build
erkin set Issue type to bug on T1014: Mellanox cards, problem with interrupts.
Aug 31 2021, 7:22 PM · VyOS 1.3 Equuleus (1.3.7), test