We use FRR as the backend and it uses logical AND for match entries
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 9 2023
May 9 2023
joshua.hanley renamed T5213: Accel-ppp sending accounting interim updates acct-interim-interval option from Sending account interim upates to Sending accounting interim updates.
joshua.hanley updated the task description for T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.
joshua.hanley updated the task description for T5213: Accel-ppp sending accounting interim updates acct-interim-interval option.
Viacheslav added a comment to T5211: route-map allows both IPv4 and IPv6 in one rule which never match.
c-po added a comment to T2778: Migrate "system syslog" to get_config_dict() to support new features.
c-po changed the status of T2769: Add VRF support for syslog, a subtask of T2778: Migrate "system syslog" to get_config_dict() to support new features, from Open to In progress.
this is cause by
May 8 2023
May 8 2023
c-po changed the status of T2778: Migrate "system syslog" to get_config_dict() to support new features from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX36a60cd14733: T4780: bump firewall version 9 -> 10 (authored by c-po).
PR https://github.com/vyos/vyos-1x/pull/1984
set high-availability disable set high-availability vrrp group GRP01 address 192.0.2.47/32 set high-availability vrrp group GRP01 interface 'eth1' set high-availability vrrp group GRP01 vrid '10'
It doesn't like protocol tcp
vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol tcp 0xff action police rate 300000000 burst 15k flowid 1:a Illegal "match" [edit] vyos@r14#
But it works with protocol 6
vyos@r14# sudo tc filter replace dev eth1 parent 1: protocol all u32 match ip protocol 6 0xff action police rate 300000000 burst 15k flowid 1:a [edit] vyos@r14#
And next fail:
ardware UUID: 4d6f4d29-1ae8-446f-8d2b-3decd9da64c7
On 1.4-rolling-202305080742, speed limit and protocol detection still not worked out correctly too.
Viacheslav updated the task description for T5209: dhclient load-balancing exit hook 04-dhcp-wanlb returned non-zero exit status.
Viacheslav updated the task description for T5202: After removal load-balancing a pid remained which used in dhclient-exit-hooks.
Viacheslav closed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
In T3655#143947, @fernando wrote:it doesn't seem the same problem as here, this logic that was applied over this version was vrf not on the table . Could you share full configuration ? there is some point over vrfs / vrf default /leaking that are not clear. So I can replicate the scenery and we see what is going on .
In T5116#147654, @Viacheslav wrote:I think the only solution is to use network namespaces
https://docs.strongswan.org/docs/5.9/howtos/nameSpaces.html
GitHub <noreply@github.com> committed rVYOSONEX43b4d30ed029: Merge pull request #1964 from indrajitr/ddclient-improvement-round-1 (authored by c-po).
Unknown Object (User) added a comment to T5158: Refactoring the commad '$ sh interfaces counters'.
def _format_show_counters(data: list):
data_entries = []
for entry in data:
Interface = entry.get('ifname')
Rx_Packets = entry.get('rx_packets')
Rx_Packets = entry.get('rx_bytes')
Tx_Packets = entry.get('tx_packets')
Tx_Bytes = entry.get('tx_bytes')
Rx_Dropped = entry.get('rx_dropped')
Tx_Dropped = entry.get('tx_dropped')
Rx_Errors = entry.get('rx_over_errors')
Tx_Errors = entry.get('tx_carrier_errors')
data_entries.append([Interface, Rx_Packets, Rx_Packets, Tx_Packets, Tx_Bytes, Rx_Dropped, Tx_Dropped, Rx_Errors, Tx_Errors])May 7 2023
May 7 2023
Viacheslav changed the subtype of T5053: Vyatta-cfg Post-Removal Hook Tries to Disable Deleted Service from "Task" to "Bug".
May 6 2023
May 6 2023
thanks for the contribution , I've done some test , it seems to work like a champ . @dmbaturin @c-po this script to do the steps necessary to compile the kernel module to use ovpn-dco . Could you check if it's correct or something needs to be improved :
Great, maybe we can use jool to build it!
jworrell closed T5206: ethtool.py:Ethtool.__init__ has always true conditional due to typo as Resolved.
GitHub <noreply@github.com> committed rVYOSONEXd4352bed6685: Merge pull request #1980 from sever-sever/T5203 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX5518738952cd: Merge pull request #1981 from c-po/equuleus (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXf7fc3ea77e4b: Merge pull request #1982 from dmbaturin/T671-interfaces-pl (authored by c-po).
May 5 2023
May 5 2023
Thanks! Setting a router-id fixed it for VPNv4 and VPNv6. It also works without creating a dummy interface.
In T5082#148096, @onedr0p wrote:@c-po I know we're on rolling for 1.4 but is there any way to communicate breaking changes like this in the future? If this was mentioned in the PR or ticket I don't think there would have been any confusion.
As for this tickets status it can be closed.
It should work for 1.4
set policy route foo interface eth1v1
Load-balancing op-mode output generated by https://github.com/vyos/vyatta-wanloadbalance/blob/current/src/lboutput.cc
Unknown Object (User) added a project to T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix: VyOS 1.4 Sagitta.
Unknown Object (User) updated the task description for T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix.
Unknown Object (User) changed Version from - to 1.4-rolling-202304302241 on T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix.
Unknown Object (User) created T5204: DHCPv6-PD: Shouldn't require an interface to assign the delegated prefix.
@c-po I know we're on rolling for 1.4 but is there any way to communicate breaking changes like this in the future? If this was mentioned in the PR or ticket I don't think there would have been any confusion.
Viacheslav renamed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Add systemd unit instead of old vyatta-wanloadbalance.init to load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init.
This can be implemented by multiple daemon instances in separate vrf's.
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to In progress.
Viacheslav changed the status of T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init from Open to In progress.
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from In progress to Needs testing.
Viacheslav changed the status of T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates from In progress to Needs testing.
May 4 2023
May 4 2023
zsdc changed the status of T5190: Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0 from In progress to Needs testing.
@dcplaya yeah that was a transitional error/quirk as we renamed that one during the development cycle.
c-po changed the status of T3891: X550-T2/Possibly other X550/X540 cards no link on VyOS from Open to In progress.
a.apostoliuk changed Version from - to VyOS 1.4 on T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients.
GitHub <noreply@github.com> committed rVYOSONEXba81c15185d7: Merge pull request #1973 from sever-sever/T5171 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXd63641534365: Merge pull request #1977 from dmbaturin/bgp-op-mode (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX3a35eca420c7: Merge pull request #1974 from dmbaturin/T5191-option-hyphens (authored by c-po).
Viacheslav added projects to T2934: proxy-arp-pvlan on VRRP interface: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3).
a.apostoliuk changed the status of T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients from Open to In progress.
It might be a boot/slow DHCP lease issue.
Works in my test
set protocols static table 200 route 192.0.2.35/32 dhcp-interface 'eth4'
Show ip route
vyos@vyos2:~$ vtysh -c "show ip route table 200"
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, F - PBR,
f - OpenFabric,
> - selected route, * - FIB route, q - queued, r - rejected, b - backup
t - trapped, o - offload failure