Page MenuHomeVyOS Platform
Feed All Stories

Apr 7 2022

c-po committed rVYOSONEX440a7a1c965b: ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family.
Apr 7 2022, 6:48 PM
n.fort added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

With shared config, I'm not getting high times while loading config (at least not that high as exposed in this task)

Apr 7 2022, 6:46 PM · VyOS 1.3 Equuleus (1.3.6)
c-po committed rVYOSONEXcae4d9c959a1: vyos.base: T4346: add common DeprecationWarning() class.
Apr 7 2022, 5:59 PM
c-po committed rVYOSONEXed976b809d2a: ipv6: T4346: deprecate CLI command to disable IPv6 address family.
Apr 7 2022, 5:59 PM
GitHub <noreply@github.com> committed rVYOSONEX25d65249bd81: Merge pull request #1276 from c-po/t4346-deprecate-ipv6-disable (authored by c-po).
Apr 7 2022, 5:59 PM
c-po moved T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 7 2022, 5:34 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel.

VyOS 1.3 (equuleus) PR https://github.com/vyos/vyos-1x/pull/1276

Apr 7 2022, 5:15 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022, 5:15 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX0f7e5371e702: ipv6: T4346: deprecate CLI command to disable IPv6 address family.
Apr 7 2022, 4:35 PM
c-po committed rVYOSONEX957f73ed8c2c: vyos.base: T4346: add common DeprecationWarning() class.
Apr 7 2022, 4:35 PM
c-po updated the task description for T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel.
Apr 7 2022, 4:34 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po changed the status of T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel from Open to In progress.
Apr 7 2022, 3:24 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po created T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel.
Apr 7 2022, 3:24 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po closed T4319: The command "set system ipv6 disable" doesn't work as expected. as Resolved.
Apr 7 2022, 3:21 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po closed T4330: MTU settings cannot be applied when IPv6 is disabled as Resolved.
Apr 7 2022, 3:20 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4330: MTU settings cannot be applied when IPv6 is disabled from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022, 3:20 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po closed T4336: isis: add support for MD5 authentication password on a circuit as Resolved.
Apr 7 2022, 3:20 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4336: isis: add support for MD5 authentication password on a circuit from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022, 3:20 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po closed T4341: login: disable user-account prior to deletion and wait until deletion is complete as Resolved.
Apr 7 2022, 3:19 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4341: login: disable user-account prior to deletion and wait until deletion is complete from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 7 2022, 3:19 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4341: login: disable user-account prior to deletion and wait until deletion is complete from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022, 3:19 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
daniel.arconada added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

@n.fort Sorry yes this AC-1 vyos was on 1.2.1 I will a test tomorrow with a version 1.2.6-S1 to have the path i was mention..

Apr 7 2022, 3:04 PM · VyOS 1.3 Equuleus (1.3.6)
c-po committed rVYOSONEX982cb6768f8b: isis: T4336: add support for MD5 authentication password on a circuit.
Apr 7 2022, 2:27 PM
c-po committed rVYOSONEXb8b336aeaaff: smoketest: isis: extend testcase to verify 'is-type level-2-only' can be set.
Apr 7 2022, 2:27 PM
GitHub <noreply@github.com> committed rVYOSONEX7bd5a1c76ed3: Merge pull request #1264 from c-po/t4336-isis-equuleus (authored by dmbaturin).
Apr 7 2022, 2:27 PM
c-po committed rVYOSONEX7b4a9a871ad8: smoketest: ssh: verify login of valid and invalid test user.
Apr 7 2022, 2:26 PM
c-po committed rVYOSONEXce1073f08d24: smoketest: ssh: verify SSH service is stopped on removal.
Apr 7 2022, 2:26 PM
c-po committed rVYOSONEX187ae2cdb841: login: T4341: disable user account prior to deletion.
Apr 7 2022, 2:26 PM
c-po committed rVYOSONEX68917f8107ad: smoketest: login: verify test accounts are properly deleted.
Apr 7 2022, 2:26 PM
c-po committed rVYOSONEXa8d2c25802e2: login: T4341: busy wait on userdel(8) until the account was deleted successfully.
Apr 7 2022, 2:26 PM
GitHub <noreply@github.com> committed rVYOSONEXd77945022cf9: Merge pull request #1268 from c-po/t4341-ssh-login (authored by dmbaturin).
Apr 7 2022, 2:26 PM
c-po committed rVYOSONEXe3626da307d6: vyos.util: T4319: add is_ipv6_enabled() helper function.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX138d8ecd528e: vrf: T4319: do not add IPv6 localhost address if IPv6 is disabled.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX24ffc55877ac: vyos.ifconfig: T4319: add_addr() should not add IPv6 address if it's disabled.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX9da1b20e40b9: smoketest: T4319: verify correct assignment of loopback IP addresses.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEXb99043b645eb: smoketest: vrf: verify routes via FRR cli.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX18ac045fe6d1: test: vyos.util build time tests should import all functions.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX8ab73ce0f84e: vyos.ifconfig: T4330: bugfix changing MTU when IPv6 is disabled.
Apr 7 2022, 2:19 PM
c-po committed rVYOSONEX5b11ad002455: vyos.ifconfig: T4330: MTU must be configured prior to any IPv6 option change.
Apr 7 2022, 2:19 PM
GitHub <noreply@github.com> committed rVYOSONEX155aa912a59f: Merge pull request #1261 from c-po/t4319-disable-ipv6-equuleus (authored by dmbaturin).
Apr 7 2022, 2:19 PM
n.fort added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

Thanks for sharing.
It this ok?

Apr 7 2022, 12:36 PM · VyOS 1.3 Equuleus (1.3.6)
daniel.arconada added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

@n.fort yes . This is an example os our AC-1 enviroment (the one i have used for the first test)

Apr 7 2022, 11:26 AM · VyOS 1.3 Equuleus (1.3.6)
n.fort added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

Can you share your config @daniel.arconada ?

Apr 7 2022, 11:18 AM · VyOS 1.3 Equuleus (1.3.6)
daniel.arconada added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

tried also with vyos-1.4-rolling-202203070319-amd64.iso and same issue with the migration

Apr 7 2022, 8:33 AM · VyOS 1.3 Equuleus (1.3.6)
c-po committed rVYOSONEX0bf386cee9b0: qos: T4284: rename "traffic-policy" node to "qos policy".
Apr 7 2022, 8:29 AM
c-po committed rVYOSONEX7581a5c6cbbc: qos: T4284: verify mirror/redirect target interface exists.
Apr 7 2022, 8:29 AM
c-po committed rVYOSONEX4ecf558f53d1: qos: T4284: support mirror and redirect on vlan subinterfaces.
Apr 7 2022, 8:29 AM
c-po committed rVYOSONEX37c6d9fae517: qos: T4284: support mirror and redirect on all interface types.
Apr 7 2022, 8:29 AM
daniel.arconada added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

Hi @Viacheslav I have tried this morning upgrading from vyos 1.2.6-S1 to vyos-1.4-rolling-202204060217-amd64.iso but something went wrong with the firewall config load and all the firewall rules and objets were removed from config so impossible to test.. :(

Apr 7 2022, 8:07 AM · VyOS 1.3 Equuleus (1.3.6)
c-po closed T4337: isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError as Resolved.
Apr 7 2022, 8:02 AM · VyOS 1.3 Equuleus (1.3.2)
c-po moved T4337: isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022, 8:02 AM · VyOS 1.3 Equuleus (1.3.2)

Apr 6 2022

ajgnet added a comment to T2518: Add support for IPv6 NAT (NPTv6).

Is there a way to get this to work with a dynamically assigned /64 PD from my ISP?

Apr 6 2022, 9:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
devon added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

@Viacheslav Link local addresses were added successfully on boot on 1.4-rolling-202204060217.

Apr 6 2022, 8:40 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEX25069b949eb9: dns: forwarding: T4343: add CLI option for PowerDNS network-timeout (authored by brackendawson).
Apr 6 2022, 7:18 PM
c-po added a comment to T4345: New firewall code does not accept "rate/time interval" syntax used in old config.

Thank you very much @sdev !

Apr 6 2022, 7:02 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

@daniel.arconada it should be fixed in 1.4
Can you check it?

Apr 6 2022, 5:34 PM · VyOS 1.3 Equuleus (1.3.6)
sarthurdev committed rVYOSONEXc514cea0ad94: firewall: T4345: Fix incorrect rule limit rate syntax.
Apr 6 2022, 2:38 PM
GitHub <noreply@github.com> committed rVYOSONEXa101f6d66a05: Merge pull request #1275 from sarthurdev/firewall_limit (authored by c-po).
Apr 6 2022, 2:38 PM
sarthurdev changed the status of T4345: New firewall code does not accept "rate/time interval" syntax used in old config from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1275

Apr 6 2022, 2:11 PM · VyOS 1.4 Sagitta
SrividyaA closed T4308: Op-comm "Show log frr" to view specific protocol logs as Resolved.
Apr 6 2022, 1:54 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
SrividyaA committed rVYOSONEX8626a7b8602e: op-comm: ospf : error for ospf neighbor address command.
Apr 6 2022, 12:30 PM
GitHub <noreply@github.com> committed rVYOSONEX15f48b521780: Merge pull request #1274 from srividya0208/T4342 (authored by c-po).
Apr 6 2022, 12:30 PM
daniel.arconada added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

Do we have any news when this feature (-n option) will be included? We have lot of vyos on 1.2.X with booting times between 20 and 40 minutes and commits about 3-5 minutes.

Apr 6 2022, 12:11 PM · VyOS 1.3 Equuleus (1.3.6)
sarthurdev moved T4345: New firewall code does not accept "rate/time interval" syntax used in old config from Open to In Progress on the VyOS 1.4 Sagitta board.
Apr 6 2022, 12:01 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T4345: New firewall code does not accept "rate/time interval" syntax used in old config from Open to In progress.
Apr 6 2022, 12:01 PM · VyOS 1.4 Sagitta
SrividyaA added a comment to T4342: "show ip ospf neighbor address x.x.x.x" gives "unknown command" error.

submitted PR: https://github.com/vyos/vyos-1x/pull/1274

Apr 6 2022, 11:59 AM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX537f0b9e0543: isis: T4337: IETF SPF delay algorithm can not be configured.
Apr 6 2022, 10:59 AM
c-po committed rVYOSONEX32de937c96fa: smoketest: isis: T4337: verify IETF SPF delay algorithm.
Apr 6 2022, 10:59 AM
GitHub <noreply@github.com> committed rVYOSONEX8ca5b232877f: Merge pull request #1265 from c-po/t4337-isis-equuleus (authored by dmbaturin).
Apr 6 2022, 10:59 AM
c-po committed rVYOSONEX1ff1df87de88: dns: forwarding: T3804: bugfix DHCP name-servers used for recursion.
Apr 6 2022, 10:55 AM
GitHub <noreply@github.com> committed rVYOSONEX1a9f52d3aab0: Merge pull request #1269 from c-po/t3804-dns-equuleus (authored by dmbaturin).
Apr 6 2022, 10:55 AM
c-po committed rVYOSONEXd321a62815aa: smoketest: http: test API authentication.
Apr 6 2022, 9:25 AM
c-po committed rVYOSONEX2e4b965cb235: smoketest: http: verify nginx config file.
Apr 6 2022, 9:25 AM
c-po assigned T4345: New firewall code does not accept "rate/time interval" syntax used in old config to sarthurdev.
Apr 6 2022, 8:22 AM · VyOS 1.4 Sagitta
c-po moved T4331: IPv6 link local addresses are not configured when an interface is in a VRF from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 6 2022, 8:16 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4341: login: disable user-account prior to deletion and wait until deletion is complete from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 6 2022, 8:16 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

PR for 1.3 (equuleus) https://github.com/vyos/vyos-1x/pull/1273

Apr 6 2022, 7:57 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX5b57c536b5f5: smoketest: vrf: T4331: IPv6 link-local addresses not configured for interface….
Apr 6 2022, 7:41 AM
c-po committed rVYOSONEX8b7a0155af12: dns: forwarding: T3804: fix warning message about "system name-server".
Apr 6 2022, 7:41 AM
c-po added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

@Viacheslav fix verified - also the new smoketest detected the bug prior to your fix and no longer seen the bug after your fix.

Apr 6 2022, 7:38 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po edited projects for T4331: IPv6 link local addresses are not configured when an interface is in a VRF, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
Apr 6 2022, 7:31 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4331: IPv6 link local addresses are not configured when an interface is in a VRF from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 6 2022, 7:31 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 5 2022

lucasec created T4345: New firewall code does not accept "rate/time interval" syntax used in old config.
Apr 5 2022, 10:36 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4315: Telegraf - Output to prometheus.

@NceAirport do you have a minimum required configuration?
As I see it should be something like:

set service monitoring xxx prometheus authentication login xxx
set service monitoring xxx prometheus authentication password xxx
set service monitoring xxx prometheus port 9273
set service monitoring xxx prometheus network 192.0.2.0/24
Apr 5 2022, 7:19 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
harris7139 created T4344: DHCP statistics not matching, conf-mode generates incorrect pool name with dash.
Apr 5 2022, 6:04 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
brackendawson created T4343: Expose powerdns network-timeout for service dns forwarding.
Apr 5 2022, 5:44 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

@devon Will be fixed in the next rolling release, could you check it?

Apr 5 2022, 5:34 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEXbe57ae38bb7c: Merge pull request #1270 from sever-sever/T4331 (authored by c-po).
Apr 5 2022, 4:35 PM
Viacheslav committed rVYOSONEXd6e22b28887c: interfaces: T4331: Fix assign link-local static IPv6 addr to vrf.
Apr 5 2022, 4:35 PM
n.fort added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

Applying patch from the PR I could not reproduce issue anymore

Apr 5 2022, 3:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T2580: Support for ip pools for ippoe.

cherry-pick for 1.3 https://github.com/vyos/vyos-1x/pull/1271

Apr 5 2022, 1:44 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
n.fort claimed T990: Make DNAT/SNAT a valid state in firewall rules. .
Apr 5 2022, 12:18 PM · VyOS 1.4 Sagitta, test
Viacheslav added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.

PR https://github.com/vyos/vyos-1x/pull/1270

Apr 5 2022, 11:45 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav changed the status of T4331: IPv6 link local addresses are not configured when an interface is in a VRF from Open to In progress.
Apr 5 2022, 10:16 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav claimed T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
Apr 5 2022, 10:16 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
SrividyaA claimed T4342: "show ip ospf neighbor address x.x.x.x" gives "unknown command" error.
Apr 5 2022, 8:27 AM · VyOS 1.4 Sagitta
SrividyaA created T4342: "show ip ospf neighbor address x.x.x.x" gives "unknown command" error.
Apr 5 2022, 8:26 AM · VyOS 1.4 Sagitta
Viacheslav moved T2580: Support for ip pools for ippoe from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Apr 5 2022, 7:28 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a project to T2580: Support for ip pools for ippoe: VyOS 1.4 Sagitta.
Apr 5 2022, 7:27 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX806ff50bf1a9: dns: forwarding: T3804: bugfix DHCP name-servers used for recursion.
Apr 5 2022, 7:04 AM