Should probably add "-M rpki" permanently to FRR/bgp.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Sep 14 2023
Sep 14 2023
Could the error from latest nightly be due to that rpki module isnt loaded for FRR/bgp?
@fernando This is really nice. Thank you for the testing!
Could https://vyos.dev/T2044 be related to the failed nightly build from last night?
GitHub <noreply@github.com> committed rVYOSONEXc803cf3bae09: Merge pull request #2259 from vyos/mergify/bp/sagitta/pr-2252 (authored by c-po).
Added PR here https://github.com/vyos/vyos-1x/pull/2263
Sep 13 2023
Sep 13 2023
This is still the case in VyOS 1.5-rolling-202309130022:
Suggestion of "hidden" ruleset (visible when doing show firewall and show firewall statistics):
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.
PR created: https://github.com/vyos/vyos-build/pull/406
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.
Found out that mksquashfs supports -ef EXCLUDE_FILE as a file that (line by line) defines which files and directories to be excluded during creation of filesystem.squashfs. Adding -wildcard will make it possible to use wildcards within the EXCLUDE_FILE.
PR for 1.5: https://github.com/vyos/vyos-1x/pull/2256
PR updated: https://github.com/vyos/vyos-1x/pull/2255
Something like this console command but more handy in op-mode?
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX73b027586805: T671: do not preserve old tech-support report implementation (authored by jestabro).
GitHub <noreply@github.com> committed rVYOSONEX0a0aff848be6: Merge pull request #2260 from jestabro/legacy-tech-support (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX84e245a71250: T5576: Add BGP remove-private-as all option (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXe8fb2d22c45f: Merge pull request #2252 from sever-sever/T5576 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXde70690fb9b6: op-mode: T5581: add "show ip nht" command (IPv4 nexthop tracking table) (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXa8fecd96b9c3: Merge pull request #2257 from c-po/t5581-ip-nht (authored by c-po).
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Backlog to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po changed the status of T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from Open to In progress.
@sdev greats !!!
n.fort added a subtask for T5160: Firewall refactor: T5579: Log firewall - Wrong command after firewall refactor.
n.fort added a parent task for T5579: Log firewall - Wrong command after firewall refactor: T5160: Firewall refactor.
n.fort changed the status of T5579: Log firewall - Wrong command after firewall refactor from Open to Confirmed.
PR created: https://github.com/vyos/vyos-1x/pull/2255
Turns out that the values who override the vyos-config values are set in /etc/sysctl.d/30-vyos-router.conf:
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX67e95d828747: frr: T5239: T2061: prevent writing logs to /var/log/frr/frr.log (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3bde0d7b96cb: frr: T5239: fix process startup order (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX1bc808742f55: Merge pull request #2245 from c-po/t5239-frr (authored by c-po).
sarthurdev changed the status of T5571: Firewall does not delete networks from the table raw from Open to Confirmed.
n.fort changed the status of T5561: NAT - Inbound or outbound interface should not be mandatory from Confirmed to In progress.
I can confirm that setting these values AFTER boot (and doing commit) they will be properly set.
Viacheslav changed the status of T5576: Add bgp remove-private-as all option from Open to In progress.
Viacheslav edited projects for T5578: "ikev2-reauth" description contains outdated information, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
PR for 1.3.x https://github.com/vyos/vyatta-cfg-quagga/pull/102
PR for the current https://github.com/vyos/vyos-1x/pull/2252
a.apostoliuk changed the status of T5578: "ikev2-reauth" description contains outdated information from Open to In progress.
zsdc added a parent task for T5554: Disable sudo for PAM RADIUS: T5577: Optimize PAM configs for RADIUS/TACACS+.
zsdc added a parent task for T5570: PAM config RADIUS ignore for default and success: T5577: Optimize PAM configs for RADIUS/TACACS+.
Which VyOS 1.4-rolling will have the fixes made by FRRouting?
indrajitr triaged T5574: Support per-service cache management for dynamic dns providers as Normal priority.
Apachez added a comment to T5572: Add capability for sending Gratuitous ARP (GARP) and the equal for IPv6.
Turns out to exist an RFC for this regarding IPv6 along with a naming:
Sep 12 2023
Sep 12 2023
Apachez renamed T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT from Selective proxy-arp when doing SNAT to Selective proxy-arp/proxy-ndp when doing SNAT/DNAT.
command on 1.5 :
@Apachez note that all lb commands take --debug and --verbose: using 'lb build --debug' in scripts/build-vyos-image will output the full mksquashfs command.
GitHub <noreply@github.com> committed rVYOSONEX3d9a0b02d031: Merge pull request #2237 from vfreex/fix-nat-problem-with-vrf-sagitta (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5056cfb7825d: T4309: Conntrack ignore fix to handle interface any (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX4a51fb08e73d: Merge pull request #2249 from sever-sever/T4309 (authored by c-po).
@vfreex I've tested in my labs related this issues , I can confirm that it work as expected . this original zone solved the problem when there was a src-nat /dst-nat with different VRFs or leaking with them ,Thanks you for this contribution .
In T2405#159522, @Apachez wrote:Note that command = command.lstrip() for def cmd in python/vyos/utils/process.py was reverted yesterday.
Causes funny problems during smoketests.
Note that command = command.lstrip() for def cmd in python/vyos/utils/process.py was reverted yesterday.
I created a PR for Git support here: https://github.com/vyos/vyos-1x/pull/2241
I have created a PR upstream which hopefully resolves why the logging didnt work as expected in VyOS (since the binary_rootfs in vyos-live-build isnt used by the nightly build who uses vyos-build and the deb-package of live-build from Debian 12.x (bookworm)):
n.fort removed a project from T4072: Feature Request: Firewall on bridge interfaces: VyOS 1.3 Equuleus (1.3.5).
GitHub <noreply@github.com> committed rVYOSONEX87ab93326dfd: Merge pull request #2247 from sever-sever/T5562-sag (authored by Viacheslav).
n.fort changed the status of T4072: Feature Request: Firewall on bridge interfaces from In progress to Needs testing.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX63cf32004caf: T5562: Cleanup netns for smoketest load-balancing wan (authored by Viacheslav).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5ecfa73fbb6d: T4754: Fix path for popen moved to utils process (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXb47a866c2fdf: Merge pull request #2244 from vyos/mergify/bp/sagitta/pr-2235 (authored by Viacheslav).
Sep 11 2023
Sep 11 2023
100% agree. If this isn't too big of a hassle to implement, I would very much appreciate the approach/workaround of @Apachez, until nftables supports this feature ootb...
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXb0a9782a4a61: T5564: Fix show firewall group and show firewall summary (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXb2c3ff90c605: Create test.txt (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX13a352e9357e: GitHub: add MergifyIo action (authored by c-po).
Checked with #netfilter irc-channel.
jestabro changed the status of T5353: config-mgmt: normalize archive updates and commit log entries, a subtask of T5347: Compare commit revision bug, from Unknown Status to Resolved.