An additional "nice to have" would be a hook that runs on route state change.
Examples:
set protocols failover route 0.0.0.0/0 next-hop 100.100.100.1 hook '/config/scripts/failover-hook-100.100.100.1'
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 12 2023
Oct 12 2023
GitHub <noreply@github.com> committed rVYOSONEXe55f07932349: Merge pull request #2277 from aapostoliuk/T5254-1-sagitta (authored by dmbaturin).
JeffWDH added a comment to T5647: Extend failover route functionality to use dynamically assigned interface next hops.
jestabro triaged T5649: vyos-1x should generate XML cache after building command templates for less cryptic error on typo as Normal priority.
Viacheslav updated the task description for T5647: Extend failover route functionality to use dynamically assigned interface next hops.
Viacheslav removed a project from T1237: Static Route Path Monitoring, failover: VyOS 1.3 Equuleus (1.3.3).
Viacheslav moved T1237: Static Route Path Monitoring, failover from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX526f19eaf795: Merge pull request #2353 from dmbaturin/T5634-no-more-blowfish (authored by jestabro).
Oct 11 2023
Oct 11 2023
Viacheslav renamed T5645: Add template for PPPoE-server with custom RADIUS attributes for QoS policy and firewall from Add template for PPPoE server with custom RADIUS attributes for QoS policy and firewall to Add template for PPPoE-server with custom RADIUS attributes for QoS policy and firewall.
GitHub <noreply@github.com> committed rVYOSONEX759c2d8afd09: Merge pull request #2354 from vyos/mergify/bp/sagitta/pr-2352 (authored by jestabro).
n.fort changed the status of T5644: Firewall groups deletion can break config from Open to Confirmed.
a.apostoliuk changed the status of T5642: op cmd: generate tech-support archive: does not work from Open to In progress.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX575f5ab52bf3: T5165: Implement policy local-route source and destination port (authored by Viacheslav).
Viacheslav changed the status of T5165: Policy local-route ability set protocol and port from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEXf51c3b07daf2: Merge pull request #2342 from sever-sever/T5165 (authored by Viacheslav).
Oct 10 2023
Oct 10 2023
jestabro moved T2612: HTTPS API, changing API key fails but goes through from Backlog to Backport Candidates on the VyOS 1.4 Sagitta board.
jestabro moved T2612: HTTPS API, changing API key fails but goes through from Open to Finished on the VyOS 1.5 Circinus board.
n.fort changed the status of T5643: NAT - Allow interface groups on nat rules from Confirmed to In progress.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX9c7a4b43278e: http-api: T2612: reload server within configsession for api self-config (authored by jestabro).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX09adc91eda58: http-api: T2612: send response before reconfiguring api server (authored by jestabro).
GitHub <noreply@github.com> committed rVYOSONEXf48727eee9cb: Merge pull request #2352 from jestabro/api-self-config (authored by dmbaturin).
show conntrack statistics shows only sudo conntrack -S command
This won't show any logs
In T5497#161764, @Apachez wrote:I assume this will end up in config mode aswell before this task can be set to resolved?
Simply because this is a few more steps:
- Use the command
- Copy the output
- Delete current firewall
- Paste command output
- Commit
than this:
- Use the command
- Commit
n.fort changed the status of T5643: NAT - Allow interface groups on nat rules from Open to Confirmed.
I assume this will end up in config mode aswell before this task can be set to resolved?
Once PR https://github.com/vyos/vyos-1x/pull/2344 is merged, counters and logs for default action should be available once again.
It's an op-mode command, so it does not changes configuration. User may get something different from what he expected, so at least on this very first attempt of re-generating and re-ordering firewall rules, it's done in op-mode command with no impact on running configuration.
The syntax seems to have changed from "produce" to "generate" during this task?
Updated scan performed on VyOS 1.5-rolling-202310090023 (see attached file).
show conntrack statistics still fails in VyOS 1.5-rolling-202310090023:
Apachez closed T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled as Resolved.
Seems to be fixed in VyOS 1.5-rolling-202310090023:
Problem remains with "N/D" is being used in show firewall groups instead of "None".
Apachez closed T5489: Change to BBR as TCP congestion control, or at least make it an config option as Resolved.
Verified in VyOS 1.5-rolling-202310090023:
Verified in VyOS 1.5-rolling-202310090023:
Works as expected:
Oct 9 2023
Oct 9 2023
dmbaturin renamed T5634: Remove support for Blowfish and DES from OpenVPN from Remove support for Blowfish from OpenVPN to Remove support for Blowfish and DES from OpenVPN.
Unknown Object (User) updated the task description for T5619: Update the Intel ixgbe driver due to issues with Intel X533.
Final testing before PR, the following corrects behavior when configuring the http-api using the http-api, for example:
PR created: https://github.com/vyos/vyos-build/pull/435
Oct 8 2023
Oct 8 2023
As @twan mentioned previously...
Turns out that packages/linux-kernel/arch/x86/configs/vyos_defconfig doesnt include xz as option for initrd:
Will attempt to:
I see, looks like a way more streamlined approach. Thank you for the information and the quick response!
A new firewall frontend engine was implemented in VyOS 1.4-rolling-202308040557.
Good to hear that this was implemented, thank you! Could you elaborate in which release this feature will be available?
In T5635#161656, @freebsdjlu wrote:I think it depends on nftables , https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation#Matching_by_socket_UID_.2F_GID , it is first handled by nftables and mark , then use rule .
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXf7ecf80824cc: Change to BBR as TCP congestion control, or at least make it an config option (authored by Apachez).
GitHub <noreply@github.com> committed rVYOSONEX1280734bc53b: Merge pull request #2349 from Apachez-/T5489 (authored by c-po).
Apachez added a comment to T5489: Change to BBR as TCP congestion control, or at least make it an config option.
PR created: https://github.com/vyos/vyos-1x/pull/2349
GitHub <noreply@github.com> committed rVYOSONEX8da99e575caa: Merge pull request #2263 from Cheeze-It/current (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXe6118a08081f: Merge pull request #2333 from sever-sever/T5213-eq (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX07758d372bbc: Merge pull request #2347 from c-po/equuleus (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXfd4096a42419: Merge pull request #2345 from dmbaturin/T5639-group-deps (authored by c-po).
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2348
c-po moved T4269: node.def generator should automatically add default values from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4269: node.def generator should automatically add default values from Resolved to Unknown Status.
c-po moved T5630: pppoe: allow to specify MRU in addition to already configurable MTU from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.5) board.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2347
I think it depends on nftables , https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation#Matching_by_socket_UID_.2F_GID , it is first handled by nftables and mark , then use rule .
c-po moved T5630: pppoe: allow to specify MRU in addition to already configurable MTU from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2346
Oct 7 2023
Oct 7 2023
GitHub <noreply@github.com> committed rVYOSONEX7720ee247c03: Merge pull request #2346 from vyos/mergify/bp/sagitta/pr-2335 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX713647429b98: pppoe: T5630: verify MRU is less or equal then MTU (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXe4fabffe7408: pppoe: T5630: allow to specify MRU in addition to already configurable MTU (authored by c-po).