We use FRR as the backend and it uses logical AND for match entries
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 9 2023
May 9 2023
joshua.hanley renamed T5213: Accel-ppp sending accounting interim updates acct-interim-interval option from Sending account interim upates to Sending accounting interim updates.
joshua.hanley updated the task description for T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.
joshua.hanley updated the task description for T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.
Viacheslav added a comment to T5211: route-map allows both IPv4 and IPv6 in one rule which never match.
c-po added a comment to T2778: Migrate "system syslog" to get_config_dict() to support new features.
c-po changed the status of T2769: Add VRF support for syslog, a subtask of T2778: Migrate "system syslog" to get_config_dict() to support new features, from Open to In progress.
this is cause by
May 8 2023
May 8 2023
c-po changed the status of T2778: Migrate "system syslog" to get_config_dict() to support new features from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1984
set high-availability disable set high-availability vrrp group GRP01 address 192.0.2.47/32 set high-availability vrrp group GRP01 interface 'eth1' set high-availability vrrp group GRP01 vrid '10'
It doesn't like protocol tcp
vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol tcp 0xff action police rate 300000000 burst 15k flowid 1:a Illegal "match" [edit] vyos@r14#
But it works with protocol 6
vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol 6 0xff action police rate 300000000 burst 15k flowid 1:a [edit] vyos@r14#
And next fail:
ardware UUID: 4d6f4d29-1ae8-446f-8d2b-3decd9da64c7
On 1.4-rolling-202305080742, speed limit and protocol detection still not worked out correctly too.
Viacheslav updated the task description for T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status.
Viacheslav updated the task description for T5202: After removal load-balancing a pid remained which used in dhclient-exit-hooks.
Viacheslav closed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
In T3655#143947, @fernando wrote:it doesn't seem the same problem as here, this logic that was applied over this version was vrf not on the table . Could you share full configuration ? there is some point over vrfs / vrf default /leaking that are not clear. So I can replicate the scenery and we see what is going on .
In T5116#147654, @Viacheslav wrote:I think the only solution is to use network namespaces
https://docs.strongswan.org/docs/5.9/howtos/nameSpaces.html
def _format_show_counters(data: list):
data_entries = []
for entry in data:
Interface = entry.get('ifname')
Rx_Packets = entry.get('rx_packets')
Rx_Packets = entry.get('rx_bytes')
Tx_Packets = entry.get('tx_packets')
Tx_Bytes = entry.get('tx_bytes')
Rx_Dropped = entry.get('rx_dropped')
Tx_Dropped = entry.get('tx_dropped')
Rx_Errors = entry.get('rx_over_errors')
Tx_Errors = entry.get('tx_carrier_errors')
data_entries.append([Interface, Rx_Packets, Rx_Packets, Tx_Packets, Tx_Bytes, Rx_Dropped, Tx_Dropped, Rx_Errors, Tx_Errors])May 7 2023
May 7 2023
Viacheslav changed the subtype of T5053: Vyatta-cfg Post-Removal Hook Tries to Disable Deleted Service from "Task" to "Bug".
May 6 2023
May 6 2023
thanks for the contribution , I've done some test , it seems to work like a champ . @dmbaturin @c-po this script to do the steps necessary to compile the kernel module to use ovpn-dco . Could you check if it's correct or something needs to be improved :
Great, maybe we can use jool to build it!
jworrell closed T5206: ethtool.py:Ethtool.__init__ has always true conditional due to typo as Resolved.
May 5 2023
May 5 2023
Thanks! Setting a router-id fixed it for VPNv4 and VPNv6. It also works without creating a dummy interface.
In T5082#148096, @onedr0p wrote:@c-po I know we're on rolling for 1.4 but is there any way to communicate breaking changes like this in the future? If this was mentioned in the PR or ticket I don't think there would have been any confusion.
As for this tickets status it can be closed.
It should work for 1.4
set policy route foo interface eth1v1
Load-balancing op-mode output generated by https://github.com/vyos/vyatta-wanloadbalance/blob/current/src/lboutput.cc
samip537 updated the task description for T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix.
samip537 changed Version from - to 1.4-rolling-202304302241 on T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix.
@c-po I know we're on rolling for 1.4 but is there any way to communicate breaking changes like this in the future? If this was mentioned in the PR or ticket I don't think there would have been any confusion.
Viacheslav renamed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Add systemd unit instead of old vyatta-wanloadbalance.init to load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init.
This can be implemented by multiple daemon instances in separate vrf's.
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to In progress.
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Open to In progress.
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from In progress to Needs testing.
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from In progress to Needs testing.
May 4 2023
May 4 2023
zsdc changed the status of T5190: Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0 from In progress to Needs testing.
@dcplaya yeah that was a transitional error/quirk as we renamed that one during the development cycle.
c-po changed the status of T3891: X550-T2/Possibly other X550/X540 cards no link on VyOS from Open to In progress.
a.apostoliuk changed Version from - to VyOS 1.4 on T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients.
Viacheslav added projects to T2934: proxy-arp-pvlan on VRRP interface: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3).
a.apostoliuk changed the status of T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients from Open to In progress.
It might be a boot/slow DHCP lease issue.
Works in my test
set protocols static table 200 route 192.0.2.35/32 dhcp-interface 'eth4'
Show ip route
vyos@vyos2:~$ vtysh -c "show ip route table 200"
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
f - OpenFabric,
> - selected route, * - FIB route, q - queued, r - rejected, b - backup
t - trapped, o - offload failureMay 3 2023
May 3 2023
sarthurdev renamed T5200: Static routing tables are not created with dhcp route from Static routing tables are not created to Static routing tables are not created with dhcp route.
I've identified the root cause of the problem. It seems to be the control plane filter (local firewall) applied to the router that is preventing connections from the localhost to localhost:2004.
Hi, the reason why the modem does not show up is because usb0 interfaces do not match the prefix we use to distinguish between interfaces.
c-po changed Version from - to 1.4-rolling-202303160317 on T5196: wwan: op-mode should inform user if there is no WWAN interface.
May 2 2023
May 2 2023
Tested successfully! Modem showed up as usb0 in ip link, but not in show interfaces.
Viacheslav added a comment to T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP.
VPP 23.02 failing on Debian 12 (bookworm) https://jira.fd.io/browse/VPP-2075
PR https://github.com/vyos/vyos-1x/pull/1975
set policy route-map foo rule 10 action 'permit' set policy route-map foo rule 10 match protocol 'connected' set policy route-map foo rule 20 action 'permit' set policy route-map foo rule 20 match protocol 'bgp'
Viacheslav changed the status of T5163: Policy route-map add match source-protocol from Open to In progress.
Jool package was added to the vyos-build repo in https://github.com/vyos/vyos-build/commit/d9f711f500ea21288a50f54640dff833cd1da153
a.apostoliuk changed the status of T5042: Command 'show vpn ipsec remote-access' does not work from In progress to Needs testing.
May 1 2023
May 1 2023
Apr 30 2023
Apr 30 2023
Added requested config option to Kernel for 1.4