Page MenuHomeVyOS Platform

Viacheslav (Viacheslav Hletenko)
Viacheslav

Projects

User Details

User Since
Oct 2 2019, 6:00 PM (242 w, 4 d)

Recent Activity

Today

Viacheslav triaged T6408: Duplicate lines on 'show log vpn' as Normal priority.
Mon, May 27, 4:00 PM · VyOS 1.5 Circinus
Viacheslav added a comment to T6407: Generate ipsec profile error.

As several CA were allowed some time ago it is a bug with op-mode generator.
There is a list of CA's https://github.com/vyos/vyos-1x/blob/48e5266e2bca8d1d7a2ee4bacbe0e6628de3fa66/src/op_mode/ikev2_profile_generator.py#L147

Mon, May 27, 3:58 PM · VyOS 1.5 Circinus

Sat, May 25

Viacheslav triaged T6396: MINOR Typo: set system conntrack timeout custom ipv4 rule X as Normal priority.
Sat, May 25, 2:57 PM · VyOS 1.4 Sagitta
Viacheslav triaged T6398: Missing the package kpartx for the container vyos-build:current-arm64 as Normal priority.
Sat, May 25, 1:39 PM · VyOS 1.5 Circinus
Viacheslav created T6398: Missing the package kpartx for the container vyos-build:current-arm64.
Sat, May 25, 1:39 PM · VyOS 1.5 Circinus

Fri, May 24

Viacheslav moved T6391: load-balancing reverse-proxy: typo in timeout help from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Fri, May 24, 1:57 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav closed T6391: load-balancing reverse-proxy: typo in timeout help as Resolved.
Fri, May 24, 1:57 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav added a comment to T6211: kea DHCP server not vrf aware.

Probably the best way will be moving the config to the vrf section (not implemented)
For example:

set vrf name foo service dhcp-server shared-network-name eth1 option default-router '192.168.1.1'
set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 lease '300'
set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 range default start '192.168.1.10'
set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 range default stop '192.168.1.100'
set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 subnet-id '1'

And start several instances, each with its configuration.

Fri, May 24, 12:04 PM · VyOS 1.5 Circinus
Viacheslav triaged T6393: Port mirroring to tunnel interface fails during boot as Normal priority.
Fri, May 24, 7:50 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T6393: Port mirroring to tunnel interface fails during boot.

The similar task for redirect T260

Fri, May 24, 7:05 AM · VyOS 1.4 Sagitta

Thu, May 23

Viacheslav moved T6381: Typos in select ConfigError messages in dhcpv6-server from Need Triage to Finished on the VyOS 1.5 Circinus board.
Thu, May 23, 3:53 PM · VyOS 1.5 Circinus
Viacheslav edited projects for T6387: Bump conntrack to version 1:1.4.7-1, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Thu, May 23, 6:07 AM · VyOS 1.5 Circinus
Viacheslav created T6387: Bump conntrack to version 1:1.4.7-1.
Thu, May 23, 6:07 AM · VyOS 1.5 Circinus
Viacheslav closed T6357: Create test repository to validate setup, a subtask of T6309: Git integration CodeQL root task, as Resolved.
Thu, May 23, 5:14 AM · GitHub Infrastructure
Viacheslav closed T6357: Create test repository to validate setup as Resolved.
Thu, May 23, 5:14 AM · GitHub Infrastructure
Viacheslav assigned T6371: Show nat source rules shows unexpected dictionary to Giggum.
Thu, May 23, 5:05 AM · VyOS 1.5 Circinus

Wed, May 22

Viacheslav closed T3493: DHCPv6 does not have prefix range validation as Resolved.
Wed, May 22, 5:39 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav triaged T6382: Add dkms in order to make firmware updates of NIC's possible as Wishlist priority.
Wed, May 22, 5:37 PM · VyOS 1.5 Circinus
Viacheslav moved T6384: rollback-soft should tell the user to compare and commit from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Wed, May 22, 5:34 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav closed T6384: rollback-soft should tell the user to compare and commit as Resolved.
Wed, May 22, 5:34 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav edited projects for T6373: QoS Policy Limiter - classes for marked traffic do not work, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
Wed, May 22, 12:38 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav moved T3493: DHCPv6 does not have prefix range validation from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Wed, May 22, 12:35 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav added a comment to T3493: DHCPv6 does not have prefix range validation.

Does 1.5 has the same bug?

Wed, May 22, 12:35 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav triaged T6379: "generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients as Normal priority.
Wed, May 22, 12:33 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav closed T6366: CGNAT add the ability to show allocation per external or internal address, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Wed, May 22, 12:22 PM · VyOS 1.5 Circinus
Viacheslav closed T6366: CGNAT add the ability to show allocation per external or internal address as Resolved.
Wed, May 22, 12:22 PM · VyOS 1.5 Circinus

Tue, May 21

Viacheslav added a comment to T6247: Add CGN "full cone" EIF support per RFC6888 REQ-7.

https://github.com/debiansid/nftables-fullcone

Tue, May 21, 9:33 AM
Viacheslav changed the status of T6366: CGNAT add the ability to show allocation per external or internal address, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Tue, May 21, 8:18 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T6366: CGNAT add the ability to show allocation per external or internal address from Open to In progress.
Tue, May 21, 8:18 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T6366: CGNAT add the ability to show allocation per external or internal address.

PR https://github.com/vyos/vyos-1x/pull/3490

Tue, May 21, 8:18 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T5584: System cannot boot with commit-arachive location sftp in some cases.

@jestabro It was a report from the user; unfortunately, I do not have more details.

Tue, May 21, 6:26 AM · VyOS 1.3 Equuleus (1.3.8)

Mon, May 20

Viacheslav closed T6364: CGNAT drop hard limit that allowed only one translation rule, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Mon, May 20, 7:25 AM · VyOS 1.5 Circinus
Viacheslav closed T6364: CGNAT drop hard limit that allowed only one translation rule as Resolved.
Mon, May 20, 7:24 AM · VyOS 1.5 Circinus
Viacheslav updated the task description for T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Mon, May 20, 7:08 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T6368: acme should also be able to listen on IPv6 addresses.

Can you manually edit the node and re-check if it will work for acme

sudo nano -c /opt/vyatta/share/vyatta-cfg/templates/pki/certificate/node.tag/acme/listen-address/node.def

replace:

type: txt
help: Local IPv4 addresses to listen on
val_help: ipv4; IPv4 address to listen for incoming connections
allowed: sh -c "${vyos_completion_dir}/list_local_ips.sh --ipv4"
syntax:expression: exec "${vyos_libexec_dir}/validate-value  --exec \"${vyos_validators_dir}/ipv4-address \"  --value \'$VAR(@)\'"; "Invalid value"

to

type: txt
help: Local IPv4 addresses to listen on
val_help: ipv4; IPv4 address to listen for incoming connections
Mon, May 20, 6:45 AM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav triaged T6371: Show nat source rules shows unexpected dictionary as Normal priority.
Mon, May 20, 5:49 AM · VyOS 1.5 Circinus
Viacheslav created T6371: Show nat source rules shows unexpected dictionary.
Mon, May 20, 5:49 AM · VyOS 1.5 Circinus

Sat, May 18

Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6366: CGNAT add the ability to show allocation per external or internal address.
Sat, May 18, 3:40 PM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6366: CGNAT add the ability to show allocation per external or internal address: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Sat, May 18, 3:40 PM · VyOS 1.5 Circinus
Viacheslav triaged T6366: CGNAT add the ability to show allocation per external or internal address as Wishlist priority.
Sat, May 18, 3:39 PM · VyOS 1.5 Circinus
Viacheslav created T6366: CGNAT add the ability to show allocation per external or internal address.
Sat, May 18, 3:39 PM · VyOS 1.5 Circinus
Viacheslav added a comment to T6364: CGNAT drop hard limit that allowed only one translation rule.

PR https://github.com/vyos/vyos-1x/pull/3483

set nat cgnat pool external ext-01 external-port-range '40000-60000'
set nat cgnat pool external ext-01 per-user-limit port '5000'
set nat cgnat pool external ext-01 range 192.0.2.1-192.0.2.2
set nat cgnat pool external ext-01 range 192.0.2.11/32
Sat, May 18, 3:26 PM · VyOS 1.5 Circinus
Viacheslav triaged T6364: CGNAT drop hard limit that allowed only one translation rule as Low priority.
Sat, May 18, 1:44 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6364: CGNAT drop hard limit that allowed only one translation rule, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Sat, May 18, 1:44 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6364: CGNAT drop hard limit that allowed only one translation rule from Open to In progress.
Sat, May 18, 1:44 PM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6364: CGNAT drop hard limit that allowed only one translation rule.
Sat, May 18, 1:44 PM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6364: CGNAT drop hard limit that allowed only one translation rule: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Sat, May 18, 1:44 PM · VyOS 1.5 Circinus
Viacheslav created T6364: CGNAT drop hard limit that allowed only one translation rule.
Sat, May 18, 1:43 PM · VyOS 1.5 Circinus

Fri, May 17

Viacheslav added a comment to T6344: multiple ntp listen-address commands not working.

Maybe we should create another xml file identical to listen-address.xml.i but without multi option define in line 16.

Fri, May 17, 2:55 PM · VyOS 1.4 Sagitta
Viacheslav triaged T6362: Create a conntrack/translations logger daemon as Wishlist priority.
Fri, May 17, 10:40 AM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6362: Create a conntrack/translations logger daemon.
Fri, May 17, 10:40 AM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6362: Create a conntrack/translations logger daemon: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Fri, May 17, 10:40 AM · VyOS 1.5 Circinus
Viacheslav created T6362: Create a conntrack/translations logger daemon.
Fri, May 17, 10:39 AM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6361: Integrate Port Control Protocol (PCP) RFC 6887.
Fri, May 17, 10:17 AM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6361: Integrate Port Control Protocol (PCP) RFC 6887: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Fri, May 17, 10:17 AM · VyOS 1.5 Circinus
Viacheslav triaged T6361: Integrate Port Control Protocol (PCP) RFC 6887 as Low priority.
Fri, May 17, 10:17 AM · VyOS 1.5 Circinus
Viacheslav created T6361: Integrate Port Control Protocol (PCP) RFC 6887.
Fri, May 17, 10:16 AM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6360: CGNAT add the ability to exclude (bypass) the translations for specific destinations.
Fri, May 17, 9:57 AM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6360: CGNAT add the ability to exclude (bypass) the translations for specific destinations: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Fri, May 17, 9:57 AM · VyOS 1.5 Circinus
Viacheslav triaged T6360: CGNAT add the ability to exclude (bypass) the translations for specific destinations as Wishlist priority.
Fri, May 17, 9:57 AM · VyOS 1.5 Circinus
Viacheslav created T6360: CGNAT add the ability to exclude (bypass) the translations for specific destinations.
Fri, May 17, 9:56 AM · VyOS 1.5 Circinus
Viacheslav closed T6347: CGNAT external pools containing dashes cause Traceback error, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Fri, May 17, 9:15 AM · VyOS 1.5 Circinus
Viacheslav closed T6347: CGNAT external pools containing dashes cause Traceback error as Resolved.
Fri, May 17, 9:15 AM · VyOS 1.5 Circinus
Viacheslav closed T6351: CGNAT add check if external and internal pools exists, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Fri, May 17, 9:14 AM · VyOS 1.5 Circinus
Viacheslav closed T6351: CGNAT add check if external and internal pools exists as Resolved.
Fri, May 17, 9:14 AM · VyOS 1.5 Circinus
Viacheslav closed T6350: CGNAT add op-mode to get current port allocation mapping, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Fri, May 17, 9:14 AM · VyOS 1.5 Circinus
Viacheslav closed T6350: CGNAT add op-mode to get current port allocation mapping as Resolved.
Fri, May 17, 9:14 AM · VyOS 1.5 Circinus
Viacheslav triaged T6346: Boot to multi-user.target instead of graphical.target as Normal priority.
Fri, May 17, 9:12 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
Viacheslav triaged T6343: Firewall source validation loose end up in complete traffic block on VRF interface as Normal priority.
Fri, May 17, 9:12 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6357: Create test repository to validate setup as Normal priority.
Fri, May 17, 9:12 AM · GitHub Infrastructure
Viacheslav triaged T6358: Container config option to enable host pid as Wishlist priority.
Fri, May 17, 8:29 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
Viacheslav added a comment to T5835: UPnP port mapping / rule installation fails.

I'd prefer to integrate the Port Control Protocol (PCP) instead.

pcp.png (410×767 px, 50 KB)

Fri, May 17, 7:34 AM
Viacheslav added a comment to T5835: UPnP port mapping / rule installation fails.

You can still have it in a container easily; as I mentioned, it has never worked since 2021
You do not lose anything.

Fri, May 17, 6:45 AM
Viacheslav changed the status of T6350: CGNAT add op-mode to get current port allocation mapping, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Fri, May 17, 6:41 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T6350: CGNAT add op-mode to get current port allocation mapping from Open to In progress.
Fri, May 17, 6:41 AM · VyOS 1.5 Circinus

Thu, May 16

Viacheslav added a comment to T6350: CGNAT add op-mode to get current port allocation mapping.

PR https://github.com/vyos/vyos-1x/pull/3466

vyos@r4:~$ show nat cgnat allocation 
Internal IP    External IP      Port range
-------------  ---------------  ------------
100.64.0.0     192.168.122.222  1024-3023
100.64.0.1     192.168.122.222  3024-5023
100.64.0.2     192.168.122.222  5024-7023
100.64.0.3     192.168.122.222  7024-9023
100.64.0.4     192.168.122.222  9024-11023
100.64.0.5     192.168.122.222  11024-13023
100.64.0.6     192.168.122.222  13024-15023
100.64.0.7     192.168.122.222  15024-17023
100.64.0.8     192.168.122.222  17024-19023
100.64.0.9     192.168.122.222  19024-21023
100.64.0.10    192.168.122.222  21024-23023
100.64.0.11    192.168.122.222  23024-25023
100.64.0.12    192.168.122.222  25024-27023
100.64.0.13    192.168.122.222  27024-29023
100.64.0.14    192.168.122.222  29024-31023
100.64.0.15    192.168.122.222  31024-33023
vyos@r4:~$
Thu, May 16, 6:42 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6351: CGNAT add check if external and internal pools exists, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Thu, May 16, 4:34 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6351: CGNAT add check if external and internal pools exists from Open to In progress.
Thu, May 16, 4:34 PM · VyOS 1.5 Circinus
Viacheslav triaged T6351: CGNAT add check if external and internal pools exists as Low priority.
Thu, May 16, 4:34 PM · VyOS 1.5 Circinus
Viacheslav claimed T6351: CGNAT add check if external and internal pools exists.

PR https://github.com/vyos/vyos-1x/pull/3464

set nat cgnat pool external ext1 external-port-range '1024-65535'
set nat cgnat pool external ext1 per-user-limit port '2000'
set nat cgnat pool external ext1 range 192.168.122.222/32
set nat cgnat pool internal int1 range '100.64.0.0/28'
set nat cgnat rule 10 source pool 'fake-pool'
set nat cgnat rule 10 translation pool 'ext1'
Thu, May 16, 4:33 PM · VyOS 1.5 Circinus
Viacheslav updated the task description for T6351: CGNAT add check if external and internal pools exists.
Thu, May 16, 4:31 PM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6351: CGNAT add check if external and internal pools exists.
Thu, May 16, 12:27 PM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6351: CGNAT add check if external and internal pools exists: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Thu, May 16, 12:27 PM · VyOS 1.5 Circinus
Viacheslav created T6351: CGNAT add check if external and internal pools exists.
Thu, May 16, 12:26 PM · VyOS 1.5 Circinus
Viacheslav added a comment to T6347: CGNAT external pools containing dashes cause Traceback error.

PR https://github.com/vyos/vyos-1x/pull/3463

Thu, May 16, 12:16 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6347: CGNAT external pools containing dashes cause Traceback error, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Thu, May 16, 11:52 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T6347: CGNAT external pools containing dashes cause Traceback error from Open to In progress.
Thu, May 16, 11:52 AM · VyOS 1.5 Circinus
Viacheslav triaged T6350: CGNAT add op-mode to get current port allocation mapping as Wishlist priority.
Thu, May 16, 10:38 AM · VyOS 1.5 Circinus
Viacheslav created T6350: CGNAT add op-mode to get current port allocation mapping.
Thu, May 16, 10:38 AM · VyOS 1.5 Circinus
Viacheslav triaged T6349: keep all workflows as reusable workflows in global .github and make vyox-1x to use from there as Normal priority.
Thu, May 16, 10:27 AM · GitHub Infrastructure
Viacheslav updated the task description for T6348: SNAT op-mode fails with flowtable offload entries.
Thu, May 16, 10:20 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav triaged T6348: SNAT op-mode fails with flowtable offload entries as Normal priority.
Thu, May 16, 10:17 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav updated the task description for T6348: SNAT op-mode fails with flowtable offload entries.
Thu, May 16, 10:17 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav created T6348: SNAT op-mode fails with flowtable offload entries.
Thu, May 16, 10:16 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6347: CGNAT external pools containing dashes cause Traceback error.
Thu, May 16, 9:38 AM · VyOS 1.5 Circinus
Viacheslav added a parent task for T6347: CGNAT external pools containing dashes cause Traceback error: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
Thu, May 16, 9:38 AM · VyOS 1.5 Circinus
Viacheslav triaged T6347: CGNAT external pools containing dashes cause Traceback error as Normal priority.
Thu, May 16, 9:37 AM · VyOS 1.5 Circinus
Viacheslav created T6347: CGNAT external pools containing dashes cause Traceback error.
Thu, May 16, 9:37 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T6058: Commit-Archive Save doesn't use https_proxy from Needs reporter action to Open.
Thu, May 16, 7:55 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav added a comment to T6344: multiple ntp listen-address commands not working.

@molocho see the tasks T5301 T5154 and https://chrony-project.org/doc/4.3/chrony.conf.html#bindaddress

Thu, May 16, 7:15 AM · VyOS 1.4 Sagitta