Accel-ppp does not work with VPP
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 10 2024
Jun 10 2024
dmbaturin triaged T6463: reverse-proxy: service not reloaded when updating SSL certificate via PKI as High priority.
dmbaturin triaged T6464: sstpc: interface not restarted when updating SSL certificate via PKI as High priority.
dmbaturin triaged T6461: Create a workflow, that checks existence of codeowners file in repo, if not create one. as Normal priority.
dmbaturin triaged T6457: Update strip-private function to improve op command output for IPs as Low priority.
vyos@vyos:~$ dpkg -l | grep vyos-1x ii vyos-1x 1.5dev0-1669-g77cb661d8 amd64 VyOS configuration scripts and data ii vyos-1x-vmware 1.5dev0-1669-g77cb661d8 amd64 VyOS configuration scripts and data for VMware vyos@vyos:~$
drw_08 updated subscribers of T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules .
GitHub <[email protected]> committed rVYOSONEXa8b4d4219155: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX9702d66355cc: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <[email protected]>).
GitHub <[email protected]> committed rVYOSONEXa9347037ccfd: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <[email protected]>).
Vijayakumar changed the status of T6467: Add sagitta for vyos-1x workflows trigger branch list, a subtask of T6309: Check code quality with CodeQL, from Open to In progress.
Vijayakumar changed the status of T6467: Add sagitta for vyos-1x workflows trigger branch list from Open to In progress.
Vijayakumar closed T6466: Add PR checks as mandatory for vyos-1x, a subtask of T6309: Check code quality with CodeQL, as Resolved.
Giggum added a comment to T5633: op-cmd: Interrupting the "tech-support report" command generates error.
Updated task description to denote two issues (Bug 1 and Bug 2) with show tech-support report.
Jun 10 2024, 4:24 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Giggum updated the task description for T5633: op-cmd: Interrupting the "tech-support report" command generates error.
Jun 10 2024, 4:23 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Jun 9 2024
Jun 9 2024
@blueish - thanks! Yes, apt-mirror works now - but will it continue to work with the new storage too?
BTW, good to see "deb-src" - but only a few source packages are in there. I think it would be great to have corresponding source for all these *.deb packages in the Debian source package format, then anyone who wants to contribute will be able to use dpkg-buildpackage to rebuild them.
Please share the output of dpkg -l | grep vyos-1x
c-po added a comment to T6464: sstpc: interface not restarted when updating SSL certificate via PKI.
c-po changed the status of T6464: sstpc: interface not restarted when updating SSL certificate via PKI from Open to In progress.
c-po updated the task description for T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs.
vyos@vyos# show vpn ipsec | commands set esp-group vpn lifetime '3600' set esp-group vpn pfs 'enable' set esp-group vpn proposal 10 encryption 'aes128gcm128' set esp-group vpn proposal 10 hash 'sha256' set ike-group vpn key-exchange 'ikev2' set ike-group vpn lifetime '7200' set ike-group vpn proposal 10 dh-group '14' set ike-group vpn proposal 10 encryption 'aes128gcm128' set ike-group vpn proposal 10 hash 'sha256' set interface 'eth0' set options virtual-ip set remote-access connection support authentication client-mode 'eap-mschapv2' set remote-access connection support authentication local-id 'ipsec.somedomain' set remote-access connection support authentication local-users username test password 'test' set remote-access connection support authentication server-mode 'x509' set remote-access connection support authentication x509 ca-certificate 'isrgrootx1' set remote-access connection support authentication x509 ca-certificate 'lets-encrypt-r3' set remote-access connection support authentication x509 certificate 'vpn2' set remote-access connection support description 'support remote access' set remote-access connection support esp-group 'vpn' set remote-access connection support ike-group 'vpn' set remote-access connection support local-address 'ip on eth0' set remote-access connection support pool 'support' set remote-access pool support name-server '1.1.1.1' set remote-access pool support name-server '9.9.9.9' set remote-access pool support prefix '192.168.120.64/27' [edit] vyos@vyos#
Please share your full ipsec configuration
vyos@vyos:~$ generate ipsec profile windows-remote-access support remote ipsec.somedomain
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/ikev2_profile_generator.py", line 154, in <module>
cert = load_certificate(pki['certificate'][cert_name]['certificate'])
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^
KeyError: 'certificate'
vyos@vyos:~$ show ver
Version: VyOS 1.5-rolling-202406060020
Release train: current
Release flavor: genericReporter action missing - running this setup in production so does not feel like a bug.
c-po changed the status of T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs from Open to In progress.
GitHub <[email protected]> committed rVYOSONEX2d98f3b17e11: Merge pull request #3608 from vyos/mergify/bp/sagitta/pr-3596 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXd296f1b15058: Merge pull request #3605 from vyos/mergify/bp/sagitta/pr-3598 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX723e2ab61480: Merge pull request #3604 from vyos/mergify/bp/sagitta/pr-3592 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX23d02fae78b0: Merge pull request #3603 from vyos/mergify/bp/sagitta/pr-3589 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX264037d4cc3d: Merge pull request #3602 from vyos/mergify/bp/sagitta/pr-3573 (authored by c-po).
This was merged Thu May 30 16:35:43 2024 +0200 and your image is from 2024-05-30.
Good afternoon I heard that the solution based on nftables is no longer new, but you took it as a basis.
At the same time, I heard that VyOS added support for VPP. Maybe it makes sense to use two implementations?
I don’t want to offend you in any way, I appreciate everything you do.
https://s3-docs.fd.io/vpp/22.06/cli-reference/clis/clicmd_src_plugins_nat_det44.html
Embezzle changed the status of T6454: Explicitly set the default reverse proxy mode to HTTP from In progress to Needs testing.
talmakion added a comment to T4667: DMVPN IPSec allows cleartext GRE over the internet when reconnecting.
I may have figured something out in https://vyos.dev/T4694.
It looks like outbound encap can be matched via routing expressions:
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXba9b1723f90d: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX29ae4044a6d4: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX395bd4eb850f: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
c-po moved T6460: Showing DHCPv6 leases can fail due to DUID parsing issues from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
GitHub <[email protected]> committed rVYOSONEXc4a3a55516cf: Merge pull request #3600 from nvollmar/T6460 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXed291814eb8b: reverse-proxy: T6454: Set default value of http for haproxy mode (authored by Embezzle).
c-po moved T6454: Explicitly set the default reverse proxy mode to HTTP from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6454: Explicitly set the default reverse proxy mode to HTTP from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a project to T6454: Explicitly set the default reverse proxy mode to HTTP: VyOS 1.4 Sagitta (1.4.1).
GitHub <[email protected]> committed rVYOSONEXbd8016060c8f: Merge pull request #3598 from Embezzle/T6454 (authored by c-po).
Vijayakumar updated the task description for T6449: PR title/commit message check workfow to add comment to PR incase of title is not compliant.
c-po committed rVYOSONEX6ec4be553be8: xml: T6423: enforce priority on nodes having an owner (authored by natali-rs1985).
c-po moved T6423: Require command definition nodes that have an owner to also have a priority from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5793af2132e9: grub: T6453: Fixed GRUB variables parsing (authored by zsdc).
c-po edited projects for T6423: Require command definition nodes that have an owner to also have a priority, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.5 Circinus, VyOS 1.4 Sagitta.
c-po moved T6423: Require command definition nodes that have an owner to also have a priority from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6453: GRUB variables with `=` in a value are parsed improperly from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6453: GRUB variables with `=` in a value are parsed improperly from In Progress to Finished on the VyOS 1.5 Circinus board.
c-po edited projects for T6453: GRUB variables with `=` in a value are parsed improperly, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXdfca15cda0ca: xml: T6423: enforce priority on nodes having an owner (authored by natali-rs1985).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX083e15c224be: vxlan: T6401: Avoid calling get_vxlan_vni_filter() unless we need it (authored by Andrew Topp <[email protected]>).
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Finished to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po edited projects for T6401: Attempts to delete vlan-to-vni option causes an unhandled exception, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Open to Finished on the VyOS 1.5 Circinus board.
PR created: https://github.com/vyos/vyos-1x/pull/3601
Jun 8 2024
Jun 8 2024
Created a PR with a fix
Added an example how to reproduce it
nvollmar updated the task description for T6460: Showing DHCPv6 leases can fail due to DUID parsing issues.
Currently I'm not sure, might be related to changes from T4519
please , Could you share configuration on how to replicate it ? it's also here the guideline about report a bug :
Apachez added a comment to T6457: Update strip-private function to improve op command output for IPs.
The suggested change as in matching number of "x" with number of characters in each octet/hextet in the IPv4/IPv6 address will be less anonymizing than todays method.
L0crian updated the task description for T6457: Update strip-private function to improve op command output for IPs.
@blueish want to do a docs article for this?
If you can use the APT then you can create mirror as well - the same way APT talks to the repository. There is no need for additional protocols like rsync.
Draft PR Added: https://github.com/vyos/vyos-1x/pull/3599