This can be solved with the already existing source-address option. When it's set, advertisments are sent from a unicast IPv6 address, if it's assigned. If it's not assigned, they are not sent.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Fri, Jan 16
Fri, Jan 16
dmbaturin renamed T7819: VPP mistakenly tries to override drivers twice from VPP: enable vpp for two network interfaces fails on AWS to VPP mistakenly tries to override drivers twice.
dmbaturin closed T8011: VPP logs are duplicating in systemd journal, a subtask of T7070: VPP related bugs the root task, as Resolved.
Viacheslav removed a project from T8174: Issue while bypassing Chelsio NIC into proxmox - csiostor module: VyOS 1.4 Sagitta (1.4.4).
Viacheslav moved T8174: Issue while bypassing Chelsio NIC into proxmox - csiostor module from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Viacheslav closed T8174: Issue while bypassing Chelsio NIC into proxmox - csiostor module as Resolved.
Viacheslav changed the status of T7101: Add hardware watchdog support via systemd from In progress to Needs testing.
Thu, Jan 15
Thu, Jan 15
PR was not accepted
c-po added a comment to T8165: Add operational commands to display PKI private keys and certificate bundles in PEM format.
We already show the full private key in our configuration as we only have admin mode.
GitHub <noreply@github.com> committed rVYOSONEX06eed816c29c: Merge pull request #4923 from alexandr-san4ez/T7633-current (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX3f3e9d2e9d62: Merge pull request #4843 from Firefishy/T7101 (authored by dmbaturin).
natali-rs1985 updated the task description for T8183: VPP: Incorrect mapping in IPFIX for bond interfaces.
natali-rs1985 updated the task description for T8183: VPP: Incorrect mapping in IPFIX for bond interfaces.
natali-rs1985 updated the task description for T8183: VPP: Incorrect mapping in IPFIX for bond interfaces.
natali-rs1985 changed the status of T8183: VPP: Incorrect mapping in IPFIX for bond interfaces from Open to In progress.
Viacheslav changed the status of T8181: The kernel CONFIG_MODULE_SIG is missed for the ARM64 from Open to In progress.
natali-rs1985 updated the task description for T8143: VPP: Set 'vpp-cp' option automatically if interface is in VPP.
natali-rs1985 added a comment to T8143: VPP: Set 'vpp-cp' option automatically if interface is in VPP.
natali-rs1985 closed T7203: VPP add op-mode to show bridge-domain, a subtask of T7221: VPP related features the root task, as Resolved.
natali-rs1985 moved T7203: VPP add op-mode to show bridge-domain from Need Triage to Completed on the VyOS Rolling board.
You cannot just restart vpp
Viacheslav triaged T8175: Invalid BGP commands show bgp neighbors <interface> received-routes etc. as Normal priority.
It is already fixed in T8100.
jestabro added a comment to T8179: [SECURITY][API][Rolling] Authenticated user can execute arbitrary OS commands via built-in API path injection.
@AnNK6 thank you for the report and details. The fact is that until privilege separation is implemented (https://vyos.dev/T7583), authentication allows sudo privileges implicitly (via the config system) if not explicitly. In that sense the issue is mooted until the work on the op-mode runner and related is complete, but be assured that alongside the work in T7583 and related, a general audit of shell escape mechanisms is ongoing in preparation; your report is quite useful for that current work. That being said, my quick test of the above against a local KVM system gives a different result (below), so I will need to take a closer look to reproduce.
Wed, Jan 14
Wed, Jan 14
Note that for 1.4.x there may be a separate cause of the false positive due to the older migration system (revised in 1.5); this is under investigation.
Note that this was fixed in https://vyos.dev/T7319 and backported for inclusion in 1.4.4. However, it will necessarily only apply to any upgrades from that version forward, e.g. 1.4.4 -> 1.4.5
Viacheslav changed the status of T8178: Separate flavors dir based on architecture from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX0c373c7c9cf0: Merge pull request #4940 from hedrok/T8171-update-vyos-smoketest-script (authored by dmbaturin).
a.kudientsov updated the task description for T8176: VPP: fails to start if restarted with an active pppoe session.
natali-rs1985 renamed T8143: VPP: Set 'vpp-cp' option automatically if interface is in VPP from VPP: Add a Warning for PPPoE server with VPP if vpp-cp option is not enabled to VPP: Set 'vpp-cp' option automatically if interface is in VPP.
a.kudientsov updated the task description for T8176: VPP: fails to start if restarted with an active pppoe session.
Tue, Jan 13
Tue, Jan 13
GitHub <noreply@github.com> committed rVYOSONEX5f2336389512: Merge pull request #4939 from c-po/vrf-pbr (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX1eeb8e5776e1: Merge pull request #4941 from sever-sever/T8170 (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXc576ed3bf156: Merge pull request #4943 from sever-sever/T7876 (authored by Viacheslav).
Viacheslav triaged T8167: VPP: Kernel crash on Azure ARM64 instances during VPP activation as High priority.
Viacheslav added a comment to T8174: Issue while bypassing Chelsio NIC into proxmox - csiostor module.
Viacheslav changed the status of T8174: Issue while bypassing Chelsio NIC into proxmox - csiostor module from Open to In progress.
Viacheslav changed the status of T8172: VPP: pppoe doesn't work with vpp in circinus, a subtask of T7070: VPP related bugs the root task, from Open to Needs testing.
Viacheslav changed the status of T8172: VPP: pppoe doesn't work with vpp in circinus from Open to Needs testing.
Rebuild vyos-1x
And missed backport https://github.com/vyos/vyos-build/pull/1081
natali-rs1985 renamed T8143: VPP: Set 'vpp-cp' option automatically if interface is in VPP from VPP: Disallow configuration of IPoE/PPPoE server with VPP unless vpp-cp option is enabled to VPP: Add a Warning for PPPoE server with VPP if vpp-cp option is not enabled.
Problem reproduces in latest circinus build as well:
Mon, Jan 12
Mon, Jan 12
a.kudientsov reassigned T8172: VPP: pppoe doesn't work with vpp in circinus from sever to Viacheslav.
a.kudientsov reassigned T8172: VPP: pppoe doesn't work with vpp in circinus from Viacheslav to sever.
a.kudientsov added a parent task for T8172: VPP: pppoe doesn't work with vpp in circinus: T7070: VPP related bugs the root task.
Viacheslav added a parent task for T8141: Update VPP version to the stable 25.10: T7221: VPP related features the root task.
Viacheslav added a subtask for T7221: VPP related features the root task: T8141: Update VPP version to the stable 25.10.
Viacheslav closed T7978: Bump VPP version to v25.10, a subtask of T7221: VPP related features the root task, as Invalid.
Duplicate of https://vyos.dev/T8141
Viacheslav changed the status of T7876: VPP: Increase allowable num-rx-desc limit for DPDK from Open to In progress.
Viacheslav changed the status of T7876: VPP: Increase allowable num-rx-desc limit for DPDK, a subtask of T7221: VPP related features the root task, from Open to In progress.
Viacheslav changed the status of T7704: Add operational mode for VPP with recommended configuration options and calculations from In progress to Open.
Viacheslav changed the status of T7704: Add operational mode for VPP with recommended configuration options and calculations, a subtask of T7221: VPP related features the root task, from In progress to Open.
Viacheslav added a comment to T8170: VPP: 'show vpp ipfix' unhandled exception when vpp is not enabled.
PR https://github.com/vyos/vyos-1x/pull/4941
vyos@r14:~$ show vpp ipfix interfaces "vpp ipfix interface" is not configured vyos@r14:~$ vyos@r14:~$ show vpp ipfix collectors "vpp ipfix collector" is not configured vyos@r14:~$ vyos@r14:~$ show vpp ipfix table "vpp ipfix" is not configured vyos@r14:~$
Viacheslav changed the status of T8170: VPP: 'show vpp ipfix' unhandled exception when vpp is not enabled, a subtask of T7070: VPP related bugs the root task, from Open to In progress.
Viacheslav changed the status of T8170: VPP: 'show vpp ipfix' unhandled exception when vpp is not enabled from Open to In progress.