Page MenuHomeVyOS Platform
Feed All Stories

Aug 12 2024

n.fort changed the status of T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid from Open to Confirmed.

Config to reproduce the issue:

Aug 12 2024, 11:00 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav moved T6555: OpenVPN - mode server-bridge interfaces TAP from Need Triage to Finished on the VyOS 1.5 Circinus board.
Aug 12 2024, 8:50 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T6215: Replace confusing error messages with clear ones when delete rule form firewall policy as Resolved.
Aug 12 2024, 8:39 AM · VyOS 1.3 Equuleus (1.3.8)
dmbaturin triaged T6645: Handle merge commits in mirror PR workflow as High priority.
Aug 12 2024, 7:29 AM · GitHub Infrastructure
dmbaturin triaged T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid as High priority.
Aug 12 2024, 7:29 AM · Restricted Project, VyOS 1.5 Circinus
vyosbot placed T75: NetFlow have impact on performance up for grabs.
Aug 12 2024, 6:01 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.8)
vyosbot placed T134: If default boot image differs from currently running image, check configurations for differences and alert user up for grabs.
Aug 12 2024, 6:01 AM · Restricted Project, VyOS 1.3 Equuleus (1.3.8)
vyosbot placed T6215: Replace confusing error messages with clear ones when delete rule form firewall policy up for grabs.
Aug 12 2024, 6:01 AM · VyOS 1.3 Equuleus (1.3.8)
vyosbot placed T6297: Implement behavior like in VyOS 1.3 for qos random detect policy up for grabs.
Aug 12 2024, 6:01 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
lucasec changed the status of T6648: dhcpv6-server: common-options does not support all DHCP options from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/3970

Aug 12 2024, 2:35 AM · VyOS 1.5 Circinus

Aug 11 2024

lucasec created T6648: dhcpv6-server: common-options does not support all DHCP options.
Aug 11 2024, 10:18 PM · VyOS 1.5 Circinus
Apachez added a comment to T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.

From IRC, could this be related?

Aug 11 2024, 6:49 PM · Restricted Project, VyOS 1.5 Circinus
dmbaturin renamed T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers" from OpenVPN: Rename the CLI node option "ncp-ciphers" with "data-ciphers" to OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".
Aug 11 2024, 2:18 PM · VyOS 1.5 Circinus
alainlamar updated the task description for T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.
Aug 11 2024, 9:38 AM · Restricted Project, VyOS 1.5 Circinus
alainlamar updated the task description for T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.
Aug 11 2024, 9:37 AM · Restricted Project, VyOS 1.5 Circinus
alainlamar updated the task description for T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.
Aug 11 2024, 9:30 AM · Restricted Project, VyOS 1.5 Circinus
alainlamar created T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.
Aug 11 2024, 9:26 AM · Restricted Project, VyOS 1.5 Circinus

Aug 10 2024

Apachez added a comment to T6526: hardware flowtables not working on supposedly supported hardware.

Are the in-tree or out-of-tree drivers for your Intel NICs being used?

Aug 10 2024, 10:06 PM · Restricted Project, VyOS 1.4 Sagitta
danhusan added a subtask for T5938: Migration fail root task for 1.4-rc: T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule.
Aug 10 2024, 6:35 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
danhusan added a parent task for T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule: T5938: Migration fail root task for 1.4-rc.
Aug 10 2024, 6:35 PM · VyOS 1.4 Sagitta (1.4.0)
danhusan created T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule.
Aug 10 2024, 6:35 PM · VyOS 1.4 Sagitta (1.4.0)
Aljutor added a comment to T6526: hardware flowtables not working on supposedly supported hardware.

After some research, I am not even sure that flowtables offload works on intel cards

Aug 10 2024, 5:53 PM · Restricted Project, VyOS 1.4 Sagitta
Vijayakumar changed the status of T6645: Handle merge commits in mirror PR workflow from Open to In progress.
Aug 10 2024, 8:49 AM · GitHub Infrastructure
Vijayakumar changed the status of T6645: Handle merge commits in mirror PR workflow, a subtask of T6309: Check code quality with CodeQL, from Open to In progress.
Aug 10 2024, 8:49 AM · GitHub Infrastructure
Vijayakumar created T6645: Handle merge commits in mirror PR workflow.
Aug 10 2024, 8:48 AM · GitHub Infrastructure
Vijayakumar closed T6512: replicate workflows to all repositories as Resolved.
Aug 10 2024, 8:47 AM · GitHub Infrastructure
Vijayakumar closed T6512: replicate workflows to all repositories, a subtask of T6309: Check code quality with CodeQL, as Resolved.
Aug 10 2024, 8:47 AM · GitHub Infrastructure
Vijayakumar changed the status of T6461: Create a workflow, that checks existence of codeowners file in repo, if not create one., a subtask of T6309: Check code quality with CodeQL, from Open to On hold.
Aug 10 2024, 8:47 AM · GitHub Infrastructure
Vijayakumar changed the status of T6461: Create a workflow, that checks existence of codeowners file in repo, if not create one. from Open to On hold.
Aug 10 2024, 8:47 AM · Restricted Project, GitHub Infrastructure
Vijayakumar closed T6572: Add create pr workflow, a subtask of T6309: Check code quality with CodeQL, as Resolved.
Aug 10 2024, 8:46 AM · GitHub Infrastructure
Vijayakumar closed T6572: Add create pr workflow as Resolved.
Aug 10 2024, 8:46 AM · GitHub Infrastructure
Vijayakumar closed T6637: check un-used imports with path finder action check as Resolved.
Aug 10 2024, 8:45 AM · GitHub Infrastructure
Vijayakumar closed T6637: check un-used imports with path finder action check, a subtask of T6309: Check code quality with CodeQL, as Resolved.
Aug 10 2024, 8:45 AM · GitHub Infrastructure
lucasec changed the status of T6630: ntp: support hardware timestamp offload and other mechanisms to improve accuracy from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/3966

Aug 10 2024, 8:05 AM · VyOS 1.5 Circinus

Aug 9 2024

fernando added a comment to T6555: OpenVPN - mode server-bridge interfaces TAP .

Documentation :
https://github.com/vyos/vyos-documentation/pull/1521

Aug 9 2024, 9:36 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro closed T6638: QoS CAKE config with PPPoE interface does not load after reboot, a subtask of T6639: Resolve undesired interactions configverify <-> configfs <-> configd, as Resolved.
Aug 9 2024, 7:15 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro closed T6638: QoS CAKE config with PPPoE interface does not load after reboot as Resolved.
Aug 9 2024, 7:15 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Viacheslav triaged T6644: Allow containers to be on multiple networks as Wishlist priority.
Aug 9 2024, 6:39 PM · VyOS 1.5 Circinus
jestabro moved T6638: QoS CAKE config with PPPoE interface does not load after reboot from Backport Candidates to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Aug 9 2024, 6:30 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro moved T6638: QoS CAKE config with PPPoE interface does not load after reboot from Backport Candidates to Finished on the VyOS 1.5 Circinus board.
Aug 9 2024, 6:30 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
n.fort changed the status of T6643: IP Address range in firewall rules throws error from Confirmed to In progress.

https://github.com/vyos/vyos-1x/pull/3964

Aug 9 2024, 3:48 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
yzguy updated the task description for T6644: Allow containers to be on multiple networks.
Aug 9 2024, 3:38 PM · VyOS 1.5 Circinus
yzguy created T6644: Allow containers to be on multiple networks.
Aug 9 2024, 3:31 PM · VyOS 1.5 Circinus
jestabro added a comment to T6639: Resolve undesired interactions configverify <-> configfs <-> configd.

(1) and (2) are resolved in T6642, T6640, respectively; (3) will be moved to a separate task.

Aug 9 2024, 3:23 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro added a comment to T6640: Return False for boolean check in_session when running under configd.

PR merged to current; backport candidate
https://github.com/vyos/vyos-1x/pull/3955

Aug 9 2024, 3:17 PM · VyOS 1.5 Circinus, Restricted Project
jestabro added a comment to T6638: QoS CAKE config with PPPoE interface does not load after reboot.

Second issue, above, is T6642.

Aug 9 2024, 3:10 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro moved T6638: QoS CAKE config with PPPoE interface does not load after reboot from Need Triage to Backport Candidates on the VyOS 1.4 Sagitta (1.4.1) board.
Aug 9 2024, 3:09 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro moved T6638: QoS CAKE config with PPPoE interface does not load after reboot from Need Triage to Backport Candidates on the VyOS 1.5 Circinus board.
Aug 9 2024, 3:09 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Harliff added a comment to T6251: Extend table number limits for policy route-map set table.

Great! Thanks for improvement!

Aug 9 2024, 1:18 PM · Restricted Project, VyOS 1.5 Circinus
n.fort claimed T6643: IP Address range in firewall rules throws error.
Aug 9 2024, 11:18 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
Viacheslav changed the status of T6555: OpenVPN - mode server-bridge interfaces TAP from In progress to Needs testing.
Aug 9 2024, 9:20 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T6643: IP Address range in firewall rules throws error from Open to Confirmed.
table ip vyos_filter {
Aug 9 2024, 9:18 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
Viacheslav triaged T6643: IP Address range in firewall rules throws error as Normal priority.
Aug 9 2024, 9:14 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
jestabro added a comment to T6642: verify_interface_exists should not instantiate its own Config object.

PR:
https://github.com/vyos/vyos-1x/pull/3961
In draft until merge of
https://github.com/vyos/vyos-1x/pull/3960

Aug 9 2024, 4:57 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project

Aug 8 2024

hsahmed updated the task description for T6643: IP Address range in firewall rules throws error.
Aug 8 2024, 9:16 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
hsahmed updated the task description for T6643: IP Address range in firewall rules throws error.
Aug 8 2024, 9:16 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
hsahmed created T6643: IP Address range in firewall rules throws error.
Aug 8 2024, 9:15 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
fernando added a comment to T6555: OpenVPN - mode server-bridge interfaces TAP .

new structure was added :

Aug 8 2024, 9:07 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object, a subtask of T6639: Resolve undesired interactions configverify <-> configfs <-> configd, from Open to In progress.
Aug 8 2024, 7:50 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object from Open to In progress.
Aug 8 2024, 7:50 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object, a subtask of T6638: QoS CAKE config with PPPoE interface does not load after reboot, from Open to In progress.
Aug 8 2024, 7:50 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro added parent tasks for T6642: verify_interface_exists should not instantiate its own Config object: T6638: QoS CAKE config with PPPoE interface does not load after reboot, T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Aug 8 2024, 5:46 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
jestabro added a subtask for T6638: QoS CAKE config with PPPoE interface does not load after reboot: T6642: verify_interface_exists should not instantiate its own Config object.
Aug 8 2024, 5:46 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro added a subtask for T6639: Resolve undesired interactions configverify <-> configfs <-> configd: T6642: verify_interface_exists should not instantiate its own Config object.
Aug 8 2024, 5:46 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro created T6642: verify_interface_exists should not instantiate its own Config object.
Aug 8 2024, 5:46 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, Restricted Project
jestabro changed the status of T6638: QoS CAKE config with PPPoE interface does not load after reboot from Open to In progress.
Aug 8 2024, 5:17 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro changed the status of T6638: QoS CAKE config with PPPoE interface does not load after reboot, a subtask of T6639: Resolve undesired interactions configverify <-> configfs <-> configd, from Open to In progress.
Aug 8 2024, 5:17 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro added a project to T6638: QoS CAKE config with PPPoE interface does not load after reboot: Restricted Project.

PR for the first issue:
https://github.com/vyos/vyos-1x/pull/3960

Aug 8 2024, 5:17 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro moved T6640: Return False for boolean check in_session when running under configd from Need Triage to Backport Candidates on the VyOS 1.5 Circinus board.
Aug 8 2024, 3:25 PM · VyOS 1.5 Circinus, Restricted Project
jestabro changed Is it a breaking change? from none to compatible on T6638: QoS CAKE config with PPPoE interface does not load after reboot.
Aug 8 2024, 3:16 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
jestabro claimed T6638: QoS CAKE config with PPPoE interface does not load after reboot.

There are competing needs between this bug and T6131 regarding verify_interface_exists: in T6131, one just needs to know if the interface is defined in the config in order to configure OSPF; here one needs to know that it exists in state for the cmd 'tc ...' to operate upon it, but verify_interface_exists returns True for syntactic existence, before the interface is up. A quick workaround may be to add a keyword arg to require only state verification (default False), with or without warning_only, in order to skip return True on syntactic existence only.

Aug 8 2024, 3:11 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
natali-rs1985 moved T5743: HTTPS API ability to import PKI certificates from Need Triage to In Progress on the VyOS 1.5 Circinus board.
Aug 8 2024, 10:22 AM · VyOS 1.5 Circinus
natali-rs1985 moved T6624: service suricata address-groups cannot be used in each other from Need Triage to In Progress on the VyOS 1.5 Circinus board.
Aug 8 2024, 10:17 AM · Restricted Project, VyOS 1.5 Circinus
natali-rs1985 changed the status of T6624: service suricata address-groups cannot be used in each other from Open to In progress.
Aug 8 2024, 10:17 AM · Restricted Project, VyOS 1.5 Circinus
natali-rs1985 moved T5810: Add support for RPKI source ip from Need Triage to In Progress on the VyOS 1.5 Circinus board.
Aug 8 2024, 8:50 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav assigned T6623: Command `protocols static multicast` does not affect to frr config to HollyGurza.
Aug 8 2024, 7:45 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T6623: Command `protocols static multicast` does not affect to frr config from In Progress to Finished on the VyOS 1.5 Circinus board.
Aug 8 2024, 7:43 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta
vyosbot placed T6326: Specific error is not returned via the HTTP API during a configuration failure. up for grabs.
Aug 8 2024, 6:01 AM · Restricted Project, VyOS 1.5 Circinus

Aug 7 2024

syncer moved T6623: Command `protocols static multicast` does not affect to frr config from Need Triage to Backlog on the VyOS 1.4 Sagitta board.
Aug 7 2024, 11:12 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta
syncer moved T6623: Command `protocols static multicast` does not affect to frr config from Need Triage to In Progress on the VyOS 1.5 Circinus board.
Aug 7 2024, 11:11 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta
syncer changed the status of T6623: Command `protocols static multicast` does not affect to frr config from Open to In progress.
Aug 7 2024, 11:11 PM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Aug 7 2024, 5:55 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro added a comment to T6608: configd should report exceptions uncaught by conf_mode scripts as commit error.

The PR above:
https://github.com/vyos/vyos-1x/pull/3876

Aug 7 2024, 5:28 PM · Restricted Project, VyOS 1.5 Circinus, Restricted Project
Viacheslav lowered the priority of T6641: Show command for interface messages from Normal to Wishlist.
Aug 7 2024, 5:20 PM · Restricted Project, VyOS 1.5 Circinus
Viacheslav triaged T6641: Show command for interface messages as Normal priority.
Aug 7 2024, 5:20 PM · Restricted Project, VyOS 1.5 Circinus
n.fort closed T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) as Resolved.
Aug 7 2024, 5:01 PM · VyOS 1.4 Sagitta
n.fort closed T5680: Allow selecting mac-groups in bridge firewall as Resolved.
Aug 7 2024, 5:00 PM · Restricted Project, VyOS 1.5 Circinus
yzguy changed Difficulty level from unknown to easy on T6641: Show command for interface messages.
Aug 7 2024, 4:32 PM · Restricted Project, VyOS 1.5 Circinus
yzguy created T6641: Show command for interface messages.
Aug 7 2024, 4:32 PM · Restricted Project, VyOS 1.5 Circinus
n.fort closed T6631: Error on firewall while using jump-target and no custom ruleset are present as Resolved.

PR https://github.com/vyos/vyos-1x/pull/3901

Aug 7 2024, 4:10 PM · Restricted Project, VyOS 1.5 Circinus
n.fort closed T6570: Firewall bridge allways passes traffic to IP layer as Resolved.
Aug 7 2024, 4:10 PM · Restricted Project, VyOS 1.5 Circinus
natali-rs1985 claimed T6624: service suricata address-groups cannot be used in each other.
Aug 7 2024, 3:40 PM · Restricted Project, VyOS 1.5 Circinus
jestabro removed a project from T6608: configd should report exceptions uncaught by conf_mode scripts as commit error: VyOS 1.4 Sagitta (1.4.1).

As this will be a change in behavior, we may want to wait before backport to 1.4.x; remove tag for now, until inclusion in current and Circinus.

Aug 7 2024, 1:53 PM · Restricted Project, VyOS 1.5 Circinus, Restricted Project
jestabro added a comment to T6633: inject missing env vars in configd to support configfs util.

The PR
https://github.com/vyos/vyos-1x/pull/3937
will be moved out of draft following:
T6640 https://github.com/vyos/vyos-1x/pull/3955

Aug 7 2024, 1:46 PM · VyOS 1.5 Circinus, Restricted Project
jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Aug 7 2024, 1:16 AM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro added a parent task for T6640: Return False for boolean check in_session when running under configd: T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Aug 7 2024, 1:16 AM · VyOS 1.5 Circinus, Restricted Project
jestabro added a subtask for T6639: Resolve undesired interactions configverify <-> configfs <-> configd: T6640: Return False for boolean check in_session when running under configd.
Aug 7 2024, 1:16 AM · Restricted Project, Restricted Project, VyOS 1.5 Circinus
jestabro created T6640: Return False for boolean check in_session when running under configd.
Aug 7 2024, 1:15 AM · VyOS 1.5 Circinus, Restricted Project
jestabro added a project to T6639: Resolve undesired interactions configverify <-> configfs <-> configd: Restricted Project.
Aug 7 2024, 1:07 AM · Restricted Project, Restricted Project, VyOS 1.5 Circinus

Aug 6 2024

jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Aug 6 2024, 11:52 PM · Restricted Project, Restricted Project, VyOS 1.5 Circinus