Page MenuHomeVyOS Platform
Feed All Stories

May 16 2020

c-po created T2470: Update to PowerDNS recursor 4.3.
May 16 2020, 4:47 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2469: Update Linux Kernel to v4.19.123.
May 16 2020, 4:44 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2198: Rewrite NAT in new XML/Python style as Resolved.
May 16 2020, 4:39 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX9e305400f281: Merge branch 'nat-nftables' of github.com:c-po/vyos-1x into current.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd8891acde69b: Debian: add required dependency on systemd.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2ba8c8499f86: nat: T2198: remove "tcp_udp" from "show nat dest stat"x.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2a0d1e77e650: nat: T2198: add common ip-protocol validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX6f349ee3b4d3: nat: T2198: use Jinja2 macro for common ruleset for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd7662ecfff55: nat: T2198: restructure DNAT template part for less duplicated code.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcf6dcb61e1f1: nat: T2198: add support for SNAT based on source addresses.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXe89f19c5bb0f: nat: T2198: set default protocol to all to be backwards compatible.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX8062afa8a5be: nat: T2198: sync generated SNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX9cec8471dae5: nat: T2198: sync generated DNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf75db67c495c: nat: T2198: do not run DNAT rule if rule is disabled.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXb2ead2d037b8: nat: T2198: verify translation address for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX682bfd2c869a: nat: T2198: restructure DNAT template.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX5abe2db17a6e: nat: T2198: extend verify() for destination ports.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd0b24799d900: nat: T2198: migrate "log enable" node to only "log".
May 16 2020, 4:37 PM
c-po committed rVYOSONEX756e36da2cf4: nat: T2198: add protocol completion helper and regex constraint.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf233a9e4073f: nat: T2198: migrate "show nat" commands to XML and Python.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1e7d01e5b5a1: nat: T2198: add some basic verify() rules.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXac4f99ac3b17: nat: T2198: split nat-address-port include into individual files.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1330898ed095: nat: T2198: add ipv4-{address,prefix,rage}-exclude validators.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX728e1c6073cb: nat: T2198: add new ipv4-range validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXfda762065c03: nat: T2198: implement deletion of NAT subsystem.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcc2ad34ce61e: nat: T2198: make use of jmespath when walking nftables JSON output.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1c6ae6f7e7cf: nat: T2198: automatically determine handler numbers.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXa927192af240: nat: T2198: move from iptables to nftables.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXa5650abb6d57: nat: T2198: migrate to common template for source/destination NAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX7caf1568bbb6: nat: T2198: destination nat template for iptables-restore.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX40e8938667b0: nat: T2198: initial XML and Python representation.
May 16 2020, 4:37 PM
jjakob added a comment to T2463: DHCP-received nameserver not added to vyos-hostsd.

After 2 release dhcp interface eth1 and one renew dhcp interface eth1, I now have 2 dhclients running, so there is a bug in the op-mode release/renew code.

4079 ?        Ss     0:00 /sbin/dhclient -4 -nw -cf /var/lib/dhcp/dhclient_eth1.conf -pf /var/lib/dhcp/dhclient_eth1.pid -lf /var/lib/dhcp/dhclient_eth1.leases eth1
4305 ?        Ss     0:00 /sbin/dhclient -q -nw -cf /var/lib/dhcp/dhclient_eth1.conf -pf /var/lib/dhcp/dhclient_eth1.pid -lf /var/lib/dhcp/dhclient_eth1.leases eth1
May 16 2020, 8:48 AM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a comment to T2468: Passwords with special characters fail in commit-archive.

Passing passwords via command line arguments is very bad practice. Curl has a -u option, if passed just the user it prompts for the password on stdin. This can simply be passed via shell redirection.

May 16 2020, 8:21 AM · VyOS Rolling, Bugs
trae32566 created T2468: Passwords with special characters fail in commit-archive.
May 16 2020, 8:05 AM · VyOS Rolling, Bugs
kroy added a comment to T2467: Restarting flow accounting fails with systemd error.

@dmbaturin Maybe just anything that contains systemctl? Surely 100% of those will need it. But that also assumes anything called via /usr/lib/python3/dist-packages/vyos/util.py

May 16 2020, 5:10 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a comment to T2467: Restarting flow accounting fails with systemd error.

Sometimes I wonder if we should just silently wrap every op mode command in sudo, at least those in the families other than show. It's hard to name a command that doesn't need sudo, and everyone (myself included!) has forgotten to add it at least once.

May 16 2020, 4:58 AM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX02ee6b7bf1bc: Merge pull request #410 from kroy-the-rabbit/patch-3 (authored by dmbaturin).
May 16 2020, 4:55 AM
kroy changed the status of T2467: Restarting flow accounting fails with systemd error from Open to Needs testing.

PR510 should add the necessary sudo

May 16 2020, 4:52 AM · VyOS 1.3 Equuleus (1.3.0)
trae32566 created T2467: Restarting flow accounting fails with systemd error.
May 16 2020, 4:39 AM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2466: live-build encounters apt dependency problem when building with local packages as Resolved.
May 16 2020, 12:25 AM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T2466: live-build encounters apt dependency problem when building with local packages from Open to In progress.
May 16 2020, 12:05 AM · VyOS 1.3 Equuleus (1.3.0)

May 15 2020

absolutesantaja created T2465: DHCP isn't updating host file when hostfile-update enabled..
May 15 2020, 10:33 PM
jjakob updated the task description for T2464: DNS bugs (parent task).
May 15 2020, 9:37 PM · VyOS Rolling
jjakob added a parent task for T103: DHCP server prepends shared network name to hostnames: T2464: DNS bugs (parent task).
May 15 2020, 9:37 PM · VyOS 1.2 Crux (VyOS 1.2.6)
jjakob added a parent task for T659: Static DHCP mappings aren't available on DNS: T2464: DNS bugs (parent task).
May 15 2020, 9:37 PM · VyOS Rolling, Bugs
jjakob added a parent task for T1286: DHCP hostfile-update isn't removing hostfile entries on expiry.: T2464: DNS bugs (parent task).
May 15 2020, 9:37 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a parent task for T1751: DNS server addresses from DHCPv6 are not added to resolv.conf: T2464: DNS bugs (parent task).
May 15 2020, 9:36 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
jjakob added a parent task for T1715: System DNS Server Order Incorrect: T2464: DNS bugs (parent task).
May 15 2020, 9:36 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a parent task for T2054: Changing "system name-server" doesn't update dns forwarding config, neither does "restart dns forwarding": T2464: DNS bugs (parent task).
May 15 2020, 9:36 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a parent task for T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS: T2464: DNS bugs (parent task).
May 15 2020, 9:36 PM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.7)
jjakob added a parent task for T2463: DHCP-received nameserver not added to vyos-hostsd: T2464: DNS bugs (parent task).
May 15 2020, 9:36 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added subtasks for T2464: DNS bugs (parent task): T2463: DHCP-received nameserver not added to vyos-hostsd, T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS, T2054: Changing "system name-server" doesn't update dns forwarding config, neither does "restart dns forwarding", T1715: System DNS Server Order Incorrect, T1751: DNS server addresses from DHCPv6 are not added to resolv.conf, T659: Static DHCP mappings aren't available on DNS, T103: DHCP server prepends shared network name to hostnames, T1286: DHCP hostfile-update isn't removing hostfile entries on expiry..
May 15 2020, 9:36 PM · VyOS Rolling
jjakob triaged T2464: DNS bugs (parent task) as Normal priority.
May 15 2020, 9:35 PM · VyOS Rolling
jjakob triaged T2463: DHCP-received nameserver not added to vyos-hostsd as High priority.
May 15 2020, 9:09 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a parent task for T2462: LLDP op-mode exception: IndexError: list index out of range: T2322: CLI [op-mode] bugs. Root task.
May 15 2020, 8:38 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a subtask for T2322: CLI [op-mode] bugs. Root task: T2462: LLDP op-mode exception: IndexError: list index out of range.
May 15 2020, 8:38 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob triaged T2462: LLDP op-mode exception: IndexError: list index out of range as Normal priority.
May 15 2020, 8:38 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob closed T2449: 'ipv6 address autoconf' and 'address dhcpv6' don't work because interfaces have accept_ra=1 (they should have accept_ra=2 when forwarding=1) as Resolved.
May 15 2020, 8:26 PM · VyOS 1.3 Equuleus (1.3.0)
robertoberto created T2461: documentation firewall state .
May 15 2020, 4:32 AM · Restricted Project

May 14 2020

c-po updated the task description for T2459: Migrate vyatta-show-nat-rules.pl to Python.
May 14 2020, 4:32 PM
c-po reassigned T2460: Migrate vyatta-nat-translations.pl to Python from c-po to thomas-mangin.
May 14 2020, 4:31 PM · VyOS 1.3 Equuleus (1.3.3)
c-po triaged T2460: Migrate vyatta-nat-translations.pl to Python as Normal priority.
May 14 2020, 4:31 PM · VyOS 1.3 Equuleus (1.3.3)
c-po renamed T2459: Migrate vyatta-show-nat-rules.pl to Python from Migrate to Migrate vyatta-show-nat-rules.pl to Python.
May 14 2020, 4:27 PM
c-po triaged T2459: Migrate vyatta-show-nat-rules.pl to Python as Normal priority.
May 14 2020, 4:27 PM
jack9603301 awarded T2023: Add support for 802.1ae MACsec a Like token.
May 14 2020, 1:59 PM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2023: Add support for 802.1ae MACsec.
May 14 2020, 1:43 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a comment to T2457: IPv6 ping by address not working.

Why not just use the OS's ping command? It does address resolution. Resolving a IP address as hostname would leak the IP via DNS as well.

May 14 2020, 1:19 PM
c-po assigned T2457: IPv6 ping by address not working to thomas-mangin.
May 14 2020, 1:09 PM
jack9603301 added a comment to T2380: After PPPoE 0 is restarted, the default static route is lost.

@jjakob @c-po Execute the following command. Although the default route can be generated automatically, it may be a bug in the current PPPoE function. In a specific environment, restarting PPPoE dialing will not maintain dialing status!

May 14 2020, 12:17 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2458: Update FRR to 7.3.1 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 14 2020, 11:59 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2458: Update FRR to 7.3.1 as Unknown Status.
May 14 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po created T2458: Update FRR to 7.3.1.
May 14 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
Unknown Object (User) closed T2456: netflow source-ip cannot be configured as Resolved.
May 14 2020, 8:51 AM · VyOS 1.3 Equuleus (1.3.0)

May 13 2020

Unknown Object (User) changed the status of T2457: IPv6 ping by address not working from Open to Confirmed.

Issue with socket.gethostbyname()

May 13 2020, 9:24 PM
Unknown Object (User) changed the status of T2443: NHRP: Add debugging information to syslog from Resolved to Unknown Status.
May 13 2020, 7:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
Unknown Object (User) added a project to T2443: NHRP: Add debugging information to syslog: Ready for Crux (1.2.x).
May 13 2020, 7:11 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
daniil created T2457: IPv6 ping by address not working.
May 13 2020, 6:55 PM
Unknown Object (User) changed the status of T2456: netflow source-ip cannot be configured from In progress to Needs testing.
May 13 2020, 6:49 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEXe5edc073c297: Merge pull request #406 from runborg/T2267 (authored by c-po).
May 13 2020, 6:43 PM
GitHub <noreply@github.com> committed rVYOSONEX439a7bbe4df5: Merge pull request #409 from DmitriyEshenko/fix-flow-acct01 (authored by c-po).
May 13 2020, 6:43 PM
Unknown Object (User) changed the status of T2456: netflow source-ip cannot be configured from Confirmed to In progress.

PR https://github.com/vyos/vyos-1x/pull/409

May 13 2020, 6:39 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a comment to T2380: After PPPoE 0 is restarted, the default static route is lost.

Maybe you need pppoe option +ipv6 ipv6cp-use-ipaddr?
https://askubuntu.com/questions/56890/ipv6-over-pppoe
I don't use IPv6 over PPPoE so I don't know much more unfortunately.
Edit: if I understand that option correctly, it tells pppd to assign the address itself, so you don't need (must not use) ipv6 address autoconf in that case. It all depends on how your ISP implements IPv6 - autoconf is for SLAAC only.

May 13 2020, 6:31 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 lowered the priority of T2380: After PPPoE 0 is restarted, the default static route is lost from High to Normal.
May 13 2020, 6:08 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2380: After PPPoE 0 is restarted, the default static route is lost.

@c-po I suspect that the problem has been found, but after I executed the restart PPPoE command, the default travel was lost. My configuration name wrote the following static route:

May 13 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 renamed T2380: After PPPoE 0 is restarted, the default static route is lost from After setting PPPoE to obtain IPv6 from ISP, you must restart the system to take effect to After PPPoE 0 is restarted, the default static route is lost.
May 13 2020, 5:55 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 awarded T118: Native Zabbix Support a Like token.
May 13 2020, 4:01 PM · Restricted Project, VyOS 1.4 Sagitta
jack9603301 awarded T365: OVS as replacement of Linux bridge a Like token.
May 13 2020, 3:59 PM
jack9603301 awarded T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP a Like token.
May 13 2020, 3:58 PM
jjakob added a comment to T2456: netflow source-ip cannot be configured.

One of the functions in Section (python/vyos/ifconfig/section.py) should provide a replacement

May 13 2020, 2:54 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) edited the content of The VyOS Hacker Toolkit.
May 13 2020, 2:44 PM
zsdc changed the status of T2456: netflow source-ip cannot be configured from Open to Confirmed.
May 13 2020, 2:14 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc created T2456: netflow source-ip cannot be configured.
May 13 2020, 2:13 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T2294: ipoe-server broken (jinja2 template issue) as Resolved.
May 13 2020, 12:23 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created The VyOS Hacker Toolkit.
May 13 2020, 12:22 PM
Viacheslav added a parent task for T2455: No support for the IPv6 VTI: T2353: Interface [conf_mode] errors parent task.
May 13 2020, 12:12 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T2353: Interface [conf_mode] errors parent task: T2455: No support for the IPv6 VTI.
May 13 2020, 12:12 PM · VyOS 1.3 Equuleus (1.3.6)
jack9603301 added a comment to T2380: After PPPoE 0 is restarted, the default static route is lost.

There are still some problems about IPv6, even when I restart it, I can't get IPv6 immediately. I don't know when it has some impact on my ISP environment, but it may be a bug that is hard to find. In a previous version of 1.2, IPv6 was acquired normally. Is it necessary for the official to cross compare with the latest version of 1.2.3? (may be 1.2.3, I hope I remember correctly)

May 13 2020, 12:02 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2380: After PPPoE 0 is restarted, the default static route is lost.

How does vyos timeout PPPoE?

May 13 2020, 11:48 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2455: No support for the IPv6 VTI.
May 13 2020, 11:24 AM · VyOS 1.4 Sagitta
Unknown Object (User) closed T2443: NHRP: Add debugging information to syslog as Resolved.

Successfully tested on the VyOS 1.3-rolling-202005130117.
Full opennhrp logs might be enabled by the following command

May 13 2020, 10:59 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)