Page MenuHomeVyOS Platform
Feed All Stories

Sep 10 2023

c-po moved T5557: bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Sep 10 2023, 2:14 PM · VyOS 1.3 Equuleus (1.3.4)
c-po closed T5557: bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802 as Unknown Status.
Sep 10 2023, 2:14 PM · VyOS 1.3 Equuleus (1.3.4)
c-po added a comment to T5557: bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802.

Added backport for FRR 7.5 https://github.com/FRRouting/frr/pull/14381

Sep 10 2023, 2:02 PM · VyOS 1.3 Equuleus (1.3.4)
c-po committed rVYOSONEX0ad6d33f2fb1: Debian: bump package version to 1.5dev0.
Sep 10 2023, 1:50 PM
c-po committed rVYOSONEX769770d7619e: T5567: Increase allowed range for maximum-object-size to 1000000 KB for the… (authored by alainlamar).
Sep 10 2023, 1:31 PM
Viacheslav changed the status of T5564: Both show firewall group and show firewall summary fails from Open to Needs testing.
Sep 10 2023, 1:30 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
alainlamar committed rVYOSONEX4401c6920fed: T5567: Increase allowed range for maximum-object-size to 1000000 KB for the….
Sep 10 2023, 1:29 PM
GitHub <[email protected]> committed rVYOSONEX8baceafce0cd: Merge pull request #2232 from alainlamar/T5567 (authored by c-po).
Sep 10 2023, 1:29 PM
Viacheslav committed rVYOSONEX9daac1632df9: T5564: Fix show firewall group and show firewall summary.
Sep 10 2023, 1:29 PM
GitHub <[email protected]> committed rVYOSONEXaf0a4667326b: Merge pull request #2235 from sever-sever/T5564 (authored by c-po).
Sep 10 2023, 1:29 PM
Viacheslav added a comment to T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.

I guess we should use the current ip neighbor xxx instead of old arp. I hope it does the same.

sudo ip neighbor add proxy 192.0.2.1 dev eth0
sudo ip -6 neigh add proxy aa::1 dev eth0

Show

vyos@r1# sudo ip neighbor show proxy
192.168.122.11 dev eth0  proxy
192.0.2.1 dev eth0  proxy
aa::1 dev eth0  proxy
[edit]
vyos@r1#
Sep 10 2023, 1:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5529: Missing symbolic link in linux-firmware package. as Resolved.
Sep 10 2023, 1:00 PM · VyOS 1.4 Sagitta
Viacheslav closed T5565: Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp as Resolved.
Sep 10 2023, 12:49 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5564: Both show firewall group and show firewall summary fails.

PR https://github.com/vyos/vyos-1x/pull/2235

Sep 10 2023, 11:46 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav committed rVYOSONEXa36443810dbf: T4309: Fix conntrack teamplate group.
Sep 10 2023, 11:00 AM
GitHub <[email protected]> committed rVYOSONEX3f4c320cbcd3: Merge pull request #2234 from sever-sever/T4309 (authored by Viacheslav).
Sep 10 2023, 11:00 AM
vfreex committed rVYOSONEX95c6046e7a15: T5518: pim6: Fix smoketests.
Sep 10 2023, 7:47 AM
GitHub <[email protected]> committed rVYOSONEX25c36d678b90: Merge pull request #2233 from vfreex/fix-mld-smoketests (authored by c-po).
Sep 10 2023, 7:47 AM
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

The failed smoketest test_interfaces_ethernet.py can be seen at:

Sep 10 2023, 6:14 AM · VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

The failed smoketest test_protocols_pim6.py seems to have been taken care of by:

Sep 10 2023, 6:13 AM · VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Regarding the failing smoketest test_system_conntrack.py (test_conntrack_ignore):

Sep 10 2023, 6:12 AM · VyOS 1.5 Circinus
vfreex added a comment to T5518: Add MLD protocol support.

https://github.com/vyos/vyos-1x/pull/2233 to fix the smoketest.

Sep 10 2023, 5:37 AM · VyOS 1.4 Sagitta
vfreex added a comment to T5518: Add MLD protocol support.

Something is broken in smoketest test_protocols_pim6.py:

https://github.com/vyos/vyos-rolling-nightly-builds/actions/runs/6133954453/job/16646294279

See "Run smoketests" line 28676 and forward.

Sep 10 2023, 5:27 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5518: Add MLD protocol support.

Something is broken in smoketest test_protocols_pim6.py:

Sep 10 2023, 5:18 AM · VyOS 1.4 Sagitta

Sep 9 2023

alainlamar changed the status of T5567: vyos-1x: webproxy: maximum-object-size allowed ranges not in sync with Equuleus from Open to In progress.
Sep 9 2023, 5:46 PM · VyOS 1.4 Sagitta
alainlamar created T5567: vyos-1x: webproxy: maximum-object-size allowed ranges not in sync with Equuleus.
Sep 9 2023, 5:42 PM · VyOS 1.4 Sagitta
alainlamar closed T5540: vyos-1x: Wrong VHT configuration for WiFi 802.11ac as Resolved.
Sep 9 2023, 5:12 PM · VyOS 1.4 Sagitta
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Still errors in:

Sep 9 2023, 5:05 PM · VyOS 1.5 Circinus
vfreex committed rVYOSONEX99ed6c9edd07: T5518: Add basic MLD support.
Sep 9 2023, 3:21 PM
GitHub <[email protected]> committed rVYOSONEX312370c9ef5c: Merge pull request #2179 from vfreex/add-mld (authored by c-po).
Sep 9 2023, 3:21 PM
Apachez added a comment to T5564: Both show firewall group and show firewall summary fails.

Related: https://vyos.dev/T5513

Sep 9 2023, 3:09 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5566: Disable 802.3az/EEE (energy efficient ethernet).

Related: https://vyos.dev/T5311

Sep 9 2023, 1:26 PM · VyOS 1.5 Circinus
Apachez created T5566: Disable 802.3az/EEE (energy efficient ethernet).
Sep 9 2023, 1:25 PM · VyOS 1.5 Circinus
ServerForge created T5565: Builds as vyos-999-timestamp instead of vyos-1.4-rolling-timestamp.
Sep 9 2023, 12:25 PM · VyOS 1.4 Sagitta
Viacheslav moved T4426: Add arpwatch to the image from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Sep 9 2023, 11:43 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav closed T5423: ipsec: no output for op-cmd "show vpn ike secrets" as Resolved.
Sep 9 2023, 11:40 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Backport Candidates to Finished on the VyOS 1.5 Circinus board.
Sep 9 2023, 11:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T4754: Improvement: system login: show configured 2FA OTP key, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to Needs testing.
Sep 9 2023, 10:56 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav changed the status of T4754: Improvement: system login: show configured 2FA OTP key from Open to Needs testing.
Sep 9 2023, 10:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

PR created (fixes https://github.com/vyos/vyos-build/commit/a863fe0): https://github.com/vyos/vyos-build/pull/395

Sep 9 2023, 10:34 AM · VyOS 1.5 Circinus
Viacheslav added a reverting change for rVYOSONEX7a99a59b338f: Create build.yml: rVYOSONEX7ebdaead30f3: Revert "Create build.yml".
Sep 9 2023, 10:33 AM
Viacheslav committed rVYOSONEX7ebdaead30f3: Revert "Create build.yml".
Sep 9 2023, 10:33 AM
GitHub <[email protected]> committed rVYOSONEXc53cde781508: Merge pull request #2231 from sever-sever/sonar-sag (authored by Viacheslav).
Sep 9 2023, 10:33 AM
Viacheslav committed rVYOSONEXffb227da757f: T4754: Fix path for popen moved to utils process.
Sep 9 2023, 10:28 AM
Viacheslav committed rVYOSONEX849499f44f6e: T5562: Cleanup netns for smoketest load-balancing wan.
Sep 9 2023, 10:28 AM
GitHub <[email protected]> committed rVYOSONEX795fcb74b646: Merge pull request #2230 from sever-sever/T5562 (authored by c-po).
Sep 9 2023, 10:28 AM
Apachez created T5564: Both show firewall group and show firewall summary fails.
Sep 9 2023, 10:00 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

PR https://github.com/vyos/vyos-1x/pull/2230

Sep 9 2023, 9:55 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5554: Disable sudo for PAM RADIUS, a subtask of T3191: PAM RADIUS freezing when accounting does not configured on RADIUS server, from Open to In progress.
Sep 9 2023, 8:04 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5554: Disable sudo for PAM RADIUS from Open to In progress.
Sep 9 2023, 8:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5554: Disable sudo for PAM RADIUS.

PR for 1.3.x https://github.com/vyos/vyos-1x/pull/2225

Sep 9 2023, 8:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po committed rVYOSONEXed47ac6560d0: container: T5563 Fix environment replaced by label (authored by hlhc).
Sep 9 2023, 7:45 AM
GitHub <[email protected]> committed rVYOSONEXb2383561158a: Merge pull request #2229 from c-po/sagitta (authored by Viacheslav).
Sep 9 2023, 7:45 AM
hlhc committed rVYOSONEX79a46675b031: container: T5563 Fix environment replaced by label.
Sep 9 2023, 7:25 AM
GitHub <[email protected]> committed rVYOSONEXf494325bfde2: Merge pull request #2228 from hlhc/fix/env-replaced-by-label (authored by c-po).
Sep 9 2023, 7:25 AM
c-po closed T3700: Support VLAN tunnel mapping of VLAN aware bridges, a subtask of T3137: Let VLAN aware bridge approach the behavior of professional equipment, as Resolved.
Sep 9 2023, 5:28 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po closed T3700: Support VLAN tunnel mapping of VLAN aware bridges, a subtask of T5415: Upgrade FRR to version 9.0, as Resolved.
Sep 9 2023, 5:28 AM · VyOS 1.4 Sagitta
c-po closed T3700: Support VLAN tunnel mapping of VLAN aware bridges as Resolved.
Sep 9 2023, 5:28 AM · VyOS 1.4 Sagitta
c-po added a comment to T3700: Support VLAN tunnel mapping of VLAN aware bridges.
set interfaces bridge br0 member interface vxlan0
set interfaces vxlan vxlan0 external
set interfaces vxlan vxlan0 source-interface 'dum0'
set interfaces vxlan vxlan0 vlan-to-vni 10 vni '10010'
set interfaces vxlan vxlan0 vlan-to-vni 11 vni '10011'
set interfaces vxlan vxlan0 vlan-to-vni 30 vni '10030'
set interfaces vxlan vxlan0 vlan-to-vni 31 vni '10031'
Sep 9 2023, 5:18 AM · VyOS 1.4 Sagitta
c-po committed rVYOSONEXcfe1dbd7ab9c: vxlan: T3700: support VLAN tunnel mapping of VLAN aware bridges.
Sep 9 2023, 5:18 AM
c-po committed rVYOSONEX7f6624f5a6f8: vxlan: T3700: support VLAN tunnel mapping of VLAN aware bridges.
Sep 9 2023, 5:16 AM
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

For the tests above, which configs are actually being used?

Sep 9 2023, 2:22 AM · VyOS 1.5 Circinus
Apachez added a comment to T5562: Smoketests fail for vyos:current (test_netns.py).

Some observations:

Sep 9 2023, 1:36 AM · VyOS 1.5 Circinus

Sep 8 2023

hlhc claimed T5563: container: Container environment variable cannot be set.

PR https://github.com/vyos/vyos-1x/pull/2228

Sep 8 2023, 9:21 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hlhc created T5563: container: Container environment variable cannot be set.
Sep 8 2023, 9:07 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
mgolisch added a comment to T5531: Containers add label option.

This pr breaks environment variable processing as it resets env_opt to an empty string when startting to process the labels.

Sep 8 2023, 9:01 PM · VyOS 1.4 Sagitta
unity renamed T5562: Smoketests fail for vyos:current (test_netns.py) from Smoketests fail for vyos:current to Smoketests fail for vyos:current (test_netns.py).
Sep 8 2023, 8:39 PM · VyOS 1.5 Circinus
c-po changed the status of T3700: Support VLAN tunnel mapping of VLAN aware bridges, a subtask of T3137: Let VLAN aware bridge approach the behavior of professional equipment, from On hold to In progress.
Sep 8 2023, 8:38 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3700: Support VLAN tunnel mapping of VLAN aware bridges, a subtask of T5415: Upgrade FRR to version 9.0, from On hold to In progress.
Sep 8 2023, 8:38 PM · VyOS 1.4 Sagitta
c-po changed the status of T3700: Support VLAN tunnel mapping of VLAN aware bridges from On hold to In progress.
Sep 8 2023, 8:38 PM · VyOS 1.4 Sagitta
unity attached a referenced file: F3848966: 10_Run smoketests.txt.zip.
Sep 8 2023, 8:31 PM · VyOS 1.5 Circinus
unity created T5562: Smoketests fail for vyos:current (test_netns.py).
Sep 8 2023, 8:31 PM · VyOS 1.5 Circinus
Viacheslav committed rVYOSONEXa5be6427daa9: T5489: Add sysctl TCP congestion control by default to BBR.
Sep 8 2023, 6:35 PM
GitHub <[email protected]> committed rVYOSONEX2a8a76c40c70: Merge pull request #2224 from sever-sever/T5489-sag (authored by Viacheslav).
Sep 8 2023, 6:35 PM
Viacheslav committed rVYOSONEX7cb85a8b4970: T5423: Fix for op-mode show vpn ike secrets.
Sep 8 2023, 6:34 PM
GitHub <[email protected]> committed rVYOSONEX540939473421: Merge pull request #2226 from sever-sever/T5423-sag (authored by Viacheslav).
Sep 8 2023, 6:34 PM
Viacheslav committed rVYOSONEX7682e148fcf7: T5554: Disable sudo for PAM RADIUS.
Sep 8 2023, 6:33 PM
GitHub <[email protected]> committed rVYOSONEX5e47f1aaea44: Merge pull request #2227 from sever-sever/T5554-sag (authored by Viacheslav).
Sep 8 2023, 6:33 PM
n.fort committed rVYOSONEX1772c0a72327: T4072: add firewall bridge filtering. First implementation only applies for….
Sep 8 2023, 3:36 PM
GitHub <[email protected]> committed rVYOSONEXa12559a72831: Merge pull request #2222 from nicolas-fort/T4072-fwall-bridge (authored by c-po).
Sep 8 2023, 3:36 PM
Viacheslav committed rVYOSONEX01b30eb6d83c: T5554: Disable sudo for PAM RADIUS.
Sep 8 2023, 3:36 PM
GitHub <[email protected]> committed rVYOSONEX28ccebeac2ee: Merge pull request #2220 from sever-sever/T5554 (authored by c-po).
Sep 8 2023, 3:36 PM
Viacheslav moved T5423: ipsec: no output for op-cmd "show vpn ike secrets" from Open to Finished on the VyOS 1.5 Circinus board.
Sep 8 2023, 3:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro claimed T5546: Failed upgrade from 1.4-rolling-202212310809 to 1.4-rolling-202309030023.
Sep 8 2023, 3:17 PM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav added a project to T5423: ipsec: no output for op-cmd "show vpn ike secrets": VyOS 1.5 Circinus.

Cherry-pick to 1.4 https://github.com/vyos/vyos-1x/pull/2226

Sep 8 2023, 3:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
GitHub <[email protected]> committed rVYOSONEX8d3b9b6729ac: Merge pull request #2223 from vyos/sonar (authored by Viacheslav).
Sep 8 2023, 3:01 PM
goodNETnick <[email protected]> committed rVYOSONEX0c51111829dc: login: T4754: show configured 2FA OTP key.
Sep 8 2023, 12:35 PM
GitHub <[email protected]> committed rVYOSONEX76cf45917de5: Merge branch 'current' into goodnetnick-shloginotp-T4754 (authored by c-po).
Sep 8 2023, 12:35 PM
GitHub <[email protected]> committed rVYOSONEXfd091eacbd24: Merge pull request #1602 from goodNETnick/goodnetnick-shloginotp-T4754 (authored by Viacheslav).
Sep 8 2023, 12:35 PM
Viacheslav added a comment to T5489: Change to BBR as TCP congestion control, or at least make it an config option.

PR for 1.4 https://github.com/vyos/vyos-1x/pull/2224

Sep 8 2023, 12:10 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T4426: Add arpwatch to the image as Resolved.
Sep 8 2023, 12:05 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav moved T5489: Change to BBR as TCP congestion control, or at least make it an config option from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Sep 8 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5489: Change to BBR as TCP congestion control, or at least make it an config option: VyOS 1.5 Circinus.
Sep 8 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5502: Firewall - wrong parser for inbound and/or outbound interface from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:46 AM · VyOS 1.4 Sagitta
Viacheslav moved T5460: Firewall - remove config-trap from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:45 AM · VyOS 1.4 Sagitta
Viacheslav moved T5450: Firewall interface group - Allow inverted matcher from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 8 2023, 11:45 AM · VyOS 1.4 Sagitta
n.fort changed the status of T5561: NAT - Inbound or outbound interface should not be mandatory from Open to Confirmed.
Sep 8 2023, 10:48 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort created T5561: NAT - Inbound or outbound interface should not be mandatory.
Sep 8 2023, 10:47 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXa0e3d29ee33e: Revert "Create build.yml".
Sep 8 2023, 10:37 AM