Should be fixed
@primoz Could you check it again?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 13 2022
Oct 13 2022
Viacheslav added a comment to T4488: allow manual configuration changes of interfaces created by high-availability with rfc3768-compatibility option .
As a workaround, you can try to use the "transition script" to manipulate with interfaces
Viacheslav changed the status of T4728: Crontab file for vyos-wwan is ignored due to missing newline at EOF from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEXae975a29418a: Merge pull request #1593 from sever-sever/T4312-eq (authored by Viacheslav).
ISC-DHCP-Server does not support vrf's
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcpd
danhusan awarded T1237: Static Route Path Monitoring, failover a Orange Medal token.
Viacheslav added a project to T4733: Feature Request: dhcp server: add VRF support: VyOS 1.4 Sagitta.
I can't reproduce it
vyos@r14:~$ show conf com | match "vrf|tele" set interfaces ethernet eth1 vrf 'mgmt' set service monitoring telegraf influxdb authentication organization 'log@in.local' set service monitoring telegraf influxdb authentication token 'GuRJc12tIzfjnYdKRAIYbxdWd2aTpOT9PVYNddzDnFV4HkAcD7u7-kndTFXjGuXzJN6TTxmrvPODB4mnFcseDV==' set service monitoring telegraf influxdb port '8086' set service monitoring telegraf influxdb url 'https://foo.local' set service monitoring telegraf prometheus-client set service monitoring telegraf vrf 'mgmt' set vrf name mgmt table '1010' vyos@r14:~$
After reboot, the service telegraf works correctly
vyos@r14:~$ sudo systemctl status telegraf
● telegraf.service - The plugin-driven server agent for reporting metrics into InfluxDB
Loaded: loaded (/lib/systemd/system/telegraf.service; disabled; vendor preset: enabled)
Drop-In: /etc/systemd/system/telegraf.service.d
└─10-override.conf
Active: active (running) since Thu 2022-10-13 15:24:23 EEST; 1min 19s ago
Docs: https://github.com/influxdata/telegraf
Main PID: 1868 (telegraf)
Tasks: 10 (limit: 9404)
Memory: 54.4M
CPU: 2.650s
CGroup: /system.slice/telegraf.service
└─vrf
└─mgmt
└─1868 /usr/bin/telegraf --config /run/telegraf/telegraf.conf --config-directory /etc/telegraf/telegraf.d --pidfile /run/telegraf/telegraf.pidViacheslav closed T4716: SSH ability to configure RekeyLimit, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
KEA DHCP have some hook limitations https://kea.readthedocs.io/en/kea-2.2.0/arm/hooks.html?#available-hook-libraries
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1593
GitHub <noreply@github.com> committed rVYOSONEX02f2535dda08: Merge pull request #1592 from sever-sever/T4746 (authored by c-po).
Viacheslav changed the status of T4746: Monitoring nft. table vyos_filter by default does not exist but telegraf checks this table from Open to In progress.
Viacheslav moved T4312: Telegraf configuration doesn't accept IPs for URL from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX219944361140: Merge pull request #1591 from sever-sever/T4312 (authored by c-po).
Viacheslav changed the status of T4312: Telegraf configuration doesn't accept IPs for URL from Open to In progress.
Viacheslav added a project to T4312: Telegraf configuration doesn't accept IPs for URL: VyOS 1.4 Sagitta.
i dont know if this is good or not, next version of radvd will include options la RFC8781 which are not even though for frrouting, even im opening them a request for such feature but i dont expect it to be available anytime soon.
Oct 12 2022
Oct 12 2022
Viacheslav changed the status of T4744: BGP directly connected neighbors don't compatible with ebgp-multihop from In progress to Needs testing.
goodNETnick <pknet@ya.ru> committed rVYOSONEX9821465445b4: system login: T874: add 2FA support for local and ssh authentication. Bugfix.
GitHub <noreply@github.com> committed rVYOSONEX74c39157c732: Merge pull request #1585 from goodNETnick/ssh_login_bugfix (authored by jestabro).
GitHub <noreply@github.com> committed rVYOSONEXa057a5c1388a: Merge pull request #1586 from sever-sever/T4744 (authored by c-po).
Viacheslav added a comment to T4744: BGP directly connected neighbors don't compatible with ebgp-multihop.
PR https://github.com/vyos/vyos-1x/pull/1586
vyos@r14# commit [ protocols bgp ] Ebgp-multihop can not be used with directly connected neighbor "eth0"
Viacheslav changed the status of T4744: BGP directly connected neighbors don't compatible with ebgp-multihop from Open to In progress.
Unknown Object (User) added a comment to T4734: Feature Request: openvpn: add OTP 2FA support.
It is highly desirable to reflect this feature in the documentation
Now it is not clear how to configure and use it
For 1.4 was implemented in T3834
That does not change the behavior. I get five messages on session start from bfdd, bgpd, ospfd processes, and 16 messages from all FRR daemons on session stop.
The only way to get rid of them is 'log syslog emergencies' but this filters important events as well.
Viacheslav added a project to T4734: Feature Request: openvpn: add OTP 2FA support: VyOS 1.3 Equuleus (1.3.3).
GitHub <noreply@github.com> committed rVYOSONEXf54f1387c7e5: Merge pull request #1582 from sever-sever/T4730-eq (authored by Viacheslav).
@aserkin as workaround try to change facility level
vtysh -c "conf t" -c "log facility local0"
But it can affect to bgp logs
+1 for @Viacheslav proposal.
Any suggestions on the problem, guys?
I see a lot of messages regarding these messages appearing in various scenarios since 2017 or even earlier in FRR community. But did not find any solution actually.
goodNETnick <pknet@ya.ru> committed rVYOSONEX765f84386b6e: system login: T874: add 2FA support for local and ssh authentication.
GitHub <noreply@github.com> committed rVYOSONEX6951fa7ef6ea: Merge pull request #1555 from goodNETnick/ssh_otp (authored by c-po).
@thetooth There is a new feature failover route where you can set metrics
https://github.com/vyos/vyos-1x/pull/1358
It could be extended to some "load-balancing"
I have used this feature in the past but not anymore due to the issues listed in the regressions task. We are now running pfsense purely for LB since this (mostly) works as advertised. Looking back at this current implementation there are some very useful features that are missing.
Oct 11 2022
Oct 11 2022
Viacheslav removed a project from T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6): VyOS 1.3 Equuleus (1.3.3).
Viacheslav changed the status of T4747: Monitoring influxdb template input exec plugin does not work from In progress to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEXb74f297d8a74: Merge pull request #1584 from sever-sever/T4747 (authored by c-po).
PR https://github.com/vyos/vyos-1x/pull/1584
vyos@r14# cat /run/telegraf/telegraf.conf | grep 'inputs.exec' -A 8
[[inputs.exec]]
commands = [
"/etc/telegraf/custom_scripts/show_firewall_input_filter.py",
"/etc/telegraf/custom_scripts/show_interfaces_input_filter.py",
"/etc/telegraf/custom_scripts/vyos_services_input_filter.py"
]
timeout = "10s"
data_format = "influx"
[edit]
vyos@r14#Viacheslav changed the status of T4747: Monitoring influxdb template input exec plugin does not work from Open to In progress.
Viacheslav moved T4680: Telegraf prometheus-client listen-address invalid format from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEXbf949ddcc1b9: Merge pull request #1583 from sever-sever/T4680-eq (authored by c-po).
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1583
Viacheslav changed the status of T4740: Show conntrack table ipv6 fail from In progress to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX7f7705da4def: Merge pull request #1574 from Cheeze-It/current (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX25b7d6a5a4e0: Merge pull request #1547 from initramfs/current-limiter-actions (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXcecab72057ab: Merge pull request #1580 from aapostoliuk/T4492-sagitta (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX72cf07cc8df5: Merge pull request #1581 from sever-sever/T4740 (authored by c-po).
I believe the ISC DHCP is now officially deprecated and EOLed:
Viacheslav added a comment to T4730: Conntrack-sync error - listen-address is not the correct type in config as it should be.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1582
PR https://github.com/vyos/vyos-1x/pull/1581
vyos@r14:~$ show conntrack table ipv6 Entries not found vyos@r14:~$
In T4729#135230, @pasik wrote:Ah, yeah, that's a valid point for gretap.
Anyway, my point was, it would be good to test if the issue/bug also affects plain 'gre', as behind the scenes 'gre' and 'gretap' are handled and configured differently, even though they might seem as very similar in vyos cli/config.
The bug might affect both, but it would be good to check and verify.
a.apostoliuk changed the status of T4492: Incorrect list of neighbors in help for "show bgp vrf VRF neighbors" from Open to In progress.
a.apostoliuk changed the status of T4704: Allow to set metric (MED) to rtt with rtt,+rtt or -rtt from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX428c5f43ad9c: Merge pull request #1578 from sarthurdev/build_test (authored by c-po).
Oct 10 2022
Oct 10 2022
PR https://github.com/vyos/vyos-1x/pull/1579
set service dns dynamic interface eth2 ipv6-enable set service dns dynamic interface eth2 service dynv6 host-name 'xxx.dynv6.net' set service dns dynamic interface eth2 service dynv6 login 'none' set service dns dynamic interface eth2 service dynv6 password 'passWorD' set service dns dynamic interface eth2 service dynv6 protocol 'dyndns2' set service dns dynamic interface eth2 service dynv6 server 'dynv6.com'
Viacheslav changed the status of T4716: SSH ability to configure RekeyLimit, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from In progress to Needs testing.
Viacheslav changed the status of T4716: SSH ability to configure RekeyLimit from In progress to Needs testing.
Viacheslav changed the status of T4743: Enable IPv6 address for Dynamic DNS from Open to In progress.
Viacheslav changed the subtype of T4743: Enable IPv6 address for Dynamic DNS from "Bug" to "Feature Request".