Page MenuHomeVyOS Platform
Feed All Stories

Sep 19 2023

GitHub <noreply@github.com> committed rVYOSONEXda4006c2a784: Merge pull request #2282 from nicolas-fort/T5594-equuleus (authored by c-po).
Sep 19 2023, 4:49 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX42b06ec46f3c: isis: T5597: add new features from FRR 9 (authored by c-po).
Sep 19 2023, 4:49 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX7f08523bb7c5: bgp: T5596: add new features from FRR 9 (authored by c-po).
Sep 19 2023, 4:49 PM
c-po committed rVYOSONEXd28535571670: bgp: T5596: add new features from FRR 9.
Sep 19 2023, 4:48 PM
c-po committed rVYOSONEXf7d35c15256e: isis: T5597: add new features from FRR 9.
Sep 19 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEXdb53c8e77cd9: Merge pull request #2284 from c-po/t5596-bgp (authored by c-po).
Sep 19 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEXdcdcc18b2097: Merge pull request #2285 from c-po/T5597-isis (authored by c-po).
Sep 19 2023, 4:48 PM
sarthurdev committed rVYOSONEX41133869c50c: firewall: T4502: Update to flowtable CLI.
Sep 19 2023, 4:48 PM
sarthurdev committed rVYOSONEXbbe32749e66c: firewall: ethernet: T4502: Add interface offload node and verify interface….
Sep 19 2023, 4:48 PM
sarthurdev committed rVYOSONEX0984a36f6d64: bridge: T4072: Prevent error when removing firewall bridge config.
Sep 19 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEXe570044ff8a8: Merge pull request #2288 from sarthurdev/flowtable (authored by c-po).
Sep 19 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEX89f650f3db2d: Merge pull request #2287 from vyos/mergify/bp/sagitta/pr-2281 (authored by c-po).
Sep 19 2023, 4:48 PM
Viacheslav updated the task description for T5599: Firewall unexpectedly changes some sysctl options.
Sep 19 2023, 3:40 PM · VyOS Rolling, Bugs
Viacheslav created T5599: Firewall unexpectedly changes some sysctl options.
Sep 19 2023, 3:36 PM · VyOS Rolling, Bugs
syncer changed the subtype of T2612: HTTPS API, changing API key fails but goes through from "Task" to "Bug".
Sep 19 2023, 3:01 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5598: unknown parameter 'nf_conntrack_helper' ignored.
Sep 19 2023, 2:34 PM · VyOS 1.5 Circinus
Viacheslav added a comment to T5217: Add firewall SYNPROXY .

First tests unsecseful

Sep 19 2023, 12:42 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5588: Add kernel conntrack_bridge module from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/416

Sep 19 2023, 11:01 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5388: Something is fishy with commit and boot times when more than a few hundred static routes are being used.

Im guessing that what this task complains about has a huge part of the time it takes to complete smoketests.

Sep 19 2023, 10:46 AM · VyOS Rolling, Bugs
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX967751b12c98: T5594: vrrp: extend function is_ipv6_tentative to analysis all type of ipv6… (authored by n.fort).
Sep 19 2023, 10:42 AM
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

PR updated (again): https://github.com/vyos/vyos-1x/pull/2280

Sep 19 2023, 7:57 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5591: Cleanup of FRR daemons-file and various FRR fixes from Open to In progress.
Sep 19 2023, 6:14 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5590: Firewall "log enable" logs every packet from In progress to Needs testing.
Sep 19 2023, 6:12 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
swanduron added a comment to T5376: Conntrack FTP helper does not work properly.

Hello @sdev Sorry to bother you. The issue hasn't been fixed in the recent rolling release: VyOS 1.5-rolling-202309170024

Sep 19 2023, 1:33 AM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus

Sep 18 2023

Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

PR updated: https://github.com/vyos/vyos-1x/pull/2280

Sep 18 2023, 9:47 PM · VyOS 1.5 Circinus
c-po committed rVYOSONEX38cab26959de: frr: T5239: use vyos.base.warning().
Sep 18 2023, 8:08 PM
c-po changed the status of T5597: isis: add new features from FRR 9. from Open to In progress.
Sep 18 2023, 7:57 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po created T5597: isis: add new features from FRR 9..
Sep 18 2023, 7:55 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po changed the status of T5596: bgp: add new features from FRR 9 from Open to In progress.
Sep 18 2023, 7:52 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po created T5596: bgp: add new features from FRR 9.
Sep 18 2023, 7:51 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort committed rVYOSONEX93cc0b65c2cb: T5590: firewall log rule: fix order which rule are processed. Log options….
Sep 18 2023, 7:30 PM
GitHub <noreply@github.com> committed rVYOSONEX53999243705b: Merge pull request #2283 from nicolas-fort/T5590-fwall-log (authored by c-po).
Sep 18 2023, 7:30 PM
sarthurdev committed rVYOSONEX4c9c2e372aa5: github: Update PR template with section of related PRs.
Sep 18 2023, 6:44 PM
sarthurdev committed rVYOSONEX416faf18d087: nat: Remove deprecated kernel check.
Sep 18 2023, 6:44 PM
sarthurdev committed rVYOSONEX734d84f69694: conntrack: T5571: Refactor conntrack to be independent conf script from….
Sep 18 2023, 6:44 PM
sarthurdev committed rVYOSONEXfb3ef9af5e39: conntrack: T5217: Add tcp flag matching to `system conntrack ignore`.
Sep 18 2023, 6:44 PM
GitHub <noreply@github.com> committed rVYOSONEXcf4759be20c4: Merge pull request #2276 from sarthurdev/conntrack (authored by Viacheslav).
Sep 18 2023, 6:44 PM
n.fort changed the status of T5590: Firewall "log enable" logs every packet from Confirmed to In progress.
Sep 18 2023, 6:12 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5590: Firewall "log enable" logs every packet.

PR: https://github.com/vyos/vyos-1x/pull/2283

Sep 18 2023, 6:06 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
fernando claimed T5595: Multicast - PIM bfd feature enable .
Sep 18 2023, 5:16 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
fernando created T5595: Multicast - PIM bfd feature enable .
Sep 18 2023, 5:16 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
indrajitr committed rVYOSONEX79131a5d923b: ddclient: T5573: Fix smoketest for updated ddclient config.
Sep 18 2023, 4:49 PM
GitHub <noreply@github.com> committed rVYOSONEX404fc9090629: Merge pull request #2278 from indrajitr/ddclient-cache-fix-smoketest (authored by c-po).
Sep 18 2023, 4:49 PM
Viacheslav committed rVYOSONEX12887ccd7e05: GitHub: Add smoketest result menu.
Sep 18 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEX55612d822fe7: Merge pull request #2279 from sever-sever/smoketest (authored by c-po).
Sep 18 2023, 4:48 PM
n.fort committed rVYOSONEXb6ae59354b5d: T5594: vrrp: extend function is_ipv6_tentative to analysis all type of ipv6….
Sep 18 2023, 4:48 PM
GitHub <noreply@github.com> committed rVYOSONEX9620a233c093: Merge pull request #2281 from nicolas-fort/T5594 (authored by c-po).
Sep 18 2023, 4:48 PM
Viacheslav moved T5586: Disable by default SNMP for Keepalived VRRP from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 18 2023, 3:45 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

How does FRR/vrrpd work regarding SNMP compatability?

Im thinking if the keepalived could be replaced in favour of FRR/vrrpd?

And for now keep keepalived around only for virtual-server (unless that too can be dealt with by FRR/vrrpd)?

Sep 18 2023, 3:44 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5594: VRRP - Error if using IPv6 Link Local as hello source address.

PR for latest: https://github.com/vyos/vyos-1x/pull/2281
PR for Equuleus: https://github.com/vyos/vyos-1x/pull/2282

Sep 18 2023, 2:09 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

PR created: https://github.com/vyos/vyos-1x/pull/2280

Sep 18 2023, 1:49 PM · VyOS 1.5 Circinus
Viacheslav triaged T5594: VRRP - Error if using IPv6 Link Local as hello source address as High priority.
Sep 18 2023, 1:43 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez claimed T5591: Cleanup of FRR daemons-file and various FRR fixes.
Sep 18 2023, 1:21 PM · VyOS 1.5 Circinus
n.fort changed the status of T5594: VRRP - Error if using IPv6 Link Local as hello source address from Open to In progress.
Sep 18 2023, 1:18 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
n.fort created T5594: VRRP - Error if using IPv6 Link Local as hello source address.
Sep 18 2023, 1:18 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez closed T5431: Services not enabled or configured are started anyway within frr-family as Wontfix.

I will put this as "wontfix" because a fix would need additional work of stopping/starting correct FRR-service (if this occurs in future then this task can be reopened).

Sep 18 2023, 1:08 PM · VyOS 1.4 Sagitta
Apachez closed T5419: Software/Hardware fastpath with nftables flowtable as Resolved.

I will close this task as a duplicate of https://vyos.dev/T4502 where work is in progress.

Sep 18 2023, 1:01 PM · VyOS 1.4 Sagitta
Apachez closed T5575: ARP/NDP table-size isnt set properly as Resolved.

Using VyOS 1.5-rolling-202309170024.

Sep 18 2023, 12:58 PM · VyOS 1.5 Circinus
n.fort changed the status of T5590: Firewall "log enable" logs every packet from Open to Confirmed.
Sep 18 2023, 12:57 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5593: Further shrink VyOS imagesize.

So what remains is how to solve point 1.

Sep 18 2023, 11:31 AM · VyOS 2.0.x
Apachez added a comment to T5593: Further shrink VyOS imagesize.

It looks like point 3 can be taken care of:

Sep 18 2023, 11:30 AM · VyOS 2.0.x
Viacheslav added a comment to T2472: Ability to configure EIGRP protocol.
r4# show version 
FRRouting 9.0.1 (r4) on Linux(6.1.53-amd64-vyos)

Still has bugs
For example with redistribute

r4# conf t
r4(config)# router eigrp 65001
r4(config-router)# redistribute connected 
% Configuration failed.
Sep 18 2023, 9:49 AM · VyOS Rolling
indrajitr added a comment to T5573: Fix ddclient cache entries.

Added PR https://github.com/vyos/vyos-1x/pull/2278 for smoketest fix.

Sep 18 2023, 9:31 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5554: Disable sudo for PAM RADIUS.
Sep 18 2023, 7:28 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5554: Disable sudo for PAM RADIUS.

Ok, I was thinking if that then waited for some password or such.

Sep 18 2023, 7:27 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
trae32566 added a comment to T5554: Disable sudo for PAM RADIUS.

I haven't tried anything else since I rebooted back into 1.4, but I did try sudo su - which gave the same error.

Sep 18 2023, 7:13 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5554: Disable sudo for PAM RADIUS.

How does a simple "sudo bash" work?

Sep 18 2023, 7:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5573: Fix ddclient cache entries.

Cannot pass the smoketest:

 DEBUG - ======================================================================
DEBUG - FAIL: test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 82, in test_01_dyndns_service_standard
DEBUG -     self.assertIn(f'use=if', ddclient_conf)
DEBUG - AssertionError: 'use=if' not found in '### Autogenerated by dns_dynamic.py ###\ndaemon=300\nsyslog=yes\nssl=yes\npid=/run/ddclient/ddclient.pid\ncache=/run/ddclient/ddclient.cache\nweb=googledomains use=no            \n # Web service dynamic DNS configuration for cloudflare: [cloudflare, test.ddns.vyos.io]\nusev4=ifv4, \\\nifv4=eth0, \\\nprotocol=cloudflare, \\\nzone=vyos.io, \\\npassword=paSS_@4ord \\\ntest.ddns.vyos.io'
DEBUG - 
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 4 tests in 11.489s
DEBUG - 
DEBUG - FAILED (failures=1)
Sep 18 2023, 6:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5593: Further shrink VyOS imagesize.

Testing point 2 above with VyOS 1.5-rolling-202309170024.

Sep 18 2023, 6:41 AM · VyOS 2.0.x
trae32566 added a comment to T5554: Disable sudo for PAM RADIUS.

I think this broke a whole lot of things for RADIUS users (these work fine in 1.4-rolling-202308040317, but are broken in 1.5-rolling-202309170024):

Sep 18 2023, 6:25 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez created T5593: Further shrink VyOS imagesize.
Sep 18 2023, 5:53 AM · VyOS 2.0.x

Sep 17 2023

Apachez added a comment to T5532: After add system image the boot stuck and works again after the second reboot.

This is the one I was thinking of:

Sep 17 2023, 7:05 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5532: After add system image the boot stuck and works again after the second reboot.

This seems to have been resolved since a few days (1.5-rolling nightly).

Sep 17 2023, 7:01 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr committed rVYOSONEX090319c0e9cf: ddclient: T5573: Update config generation aligning with caching fixes.
Sep 17 2023, 5:36 PM
GitHub <noreply@github.com> committed rVYOSONEX665523ac1b00: Merge pull request #2251 from indrajitr/ddclient-cache-fix (authored by c-po).
Sep 17 2023, 5:36 PM
c-po moved T5592: salt: upgrade minion to 3005.2 from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5592: salt: upgrade minion to 3005.2 from Open to Finished on the VyOS 1.5 Circinus board.
Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a comment to T5592: salt: upgrade minion to 3005.2.

PR for sagitta https://github.com/vyos/vyos-build/pull/415

Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po renamed T5592: salt: upgrade minion to 3005.2 from salt: upgrade minion to 3006.3 to salt: upgrade minion to 3005.2.
Sep 17 2023, 5:29 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
vfreex added a comment to T4502: Consider implementing (NAT/other) flow table offload.

@Apachez The empty table inet vyos_offload is to ensure the table exists before deleting its content. Regarding hardware offload, I don't have a hardware supporting that. The implementation is totally based on documentation and I don't add any checks before applying the nftables config.

Sep 17 2023, 1:04 PM · VyOS 1.4 Sagitta
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Output of ps auxww | grep -i frr after proposed v3 is applied:

Sep 17 2023, 12:47 PM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Update of proposed changes (Ill call them proposed v3).

Sep 17 2023, 12:25 PM · VyOS 1.5 Circinus
c-po changed the status of T5592: salt: upgrade minion to 3005.2 from Open to In progress.
Sep 17 2023, 9:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a parent task for T3761: Bump salt-minion to 3000: T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:11 AM · VyOS 1.2 Crux (VyOS 1.2.9)
c-po added a parent task for T4364: salt-minion: Upgrade to 3004 and migrate to get_config_dict(): T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:11 AM · VyOS 1.4 Sagitta
c-po added subtasks for T5592: salt: upgrade minion to 3005.2: T4364: salt-minion: Upgrade to 3004 and migrate to get_config_dict(), T3761: Bump salt-minion to 3000.
Sep 17 2023, 9:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po created T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:10 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Update of proposed changes (Ill call them proposed v2).

Sep 17 2023, 7:38 AM · VyOS 1.5 Circinus
c-po added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

If we alter the Jinja2 file we should also update the syntax - just ospf an example but its valid for all other SNMP stuff:

Sep 17 2023, 7:08 AM · VyOS 1.5 Circinus
c-po added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

mgmtd can not be disabled. It's a mandatory FRR process.

Sep 17 2023, 7:05 AM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

I can create a PR if everyone agrees upon the proposed changes above however I have limited capability to test each and everyone of these changes.

Sep 17 2023, 6:03 AM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Proposed data/templates/frr/daemons.frr.tmpl:

Sep 17 2023, 6:00 AM · VyOS 1.5 Circinus
Apachez created T5591: Cleanup of FRR daemons-file and various FRR fixes.
Sep 17 2023, 5:58 AM · VyOS 1.5 Circinus

Sep 16 2023

rayzilt created T5590: Firewall "log enable" logs every packet.
Sep 16 2023, 5:41 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev changed the status of T5571: Firewall does not delete networks from the table raw from Confirmed to Needs testing.

Fixed in PR: https://github.com/vyos/vyos-1x/pull/2276

Sep 16 2023, 11:45 AM · VyOS 1.5 Circinus
Apachez created T5589: Nonstripped binaries exists in VyOS.
Sep 16 2023, 11:04 AM · VyOS 1.5 Circinus
c-po committed rVYOSONEXa8036a3867fe: frr: T2472: disable eigrp daemon.
Sep 16 2023, 10:58 AM
GitHub <noreply@github.com> committed rVYOSONEX8f79a5cb4ee9: Merge pull request #2267 from vyos/mergify/bp/sagitta/pr-2253 (authored by c-po).
Sep 16 2023, 10:58 AM
GitHub <noreply@github.com> committed rVYOSONEX50bbac2a4227: Merge pull request #2275 from c-po/sagitta (authored by c-po).
Sep 16 2023, 10:58 AM
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.

PR created: https://github.com/vyos/vyos-build/pull/414

Sep 16 2023, 8:34 AM · VyOS 1.4 Sagitta