Maintainance release
Details
Details
Description
Sep 12 2019
Sep 12 2019
mario added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
No, we don't use vyos in production any more, so I can't tell.
Sep 11 2019
Sep 11 2019
hagbard added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
Thanks for your response, did you test a newer image already? There was a lot of work done meanwhile.
mario added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
tried with the first version 1.2, problem was still present. After that, decided to get us a physical router/fw because ipsec would stopped without any obvious reason.
It was a long time ago, almost year and a half...
Sep 10 2019
Sep 10 2019
@mario Did you manage to upgrade to 1.2 and if so, do you still have that issue?
May 25 2019
May 25 2019
dongjunbo added a comment to T186: DHCP with VRRP.
Seem like this issue still in vyos 1.2. Would please check it and fix it ?
Jan 12 2019
Jan 12 2019
syncer edited projects for T1172: vyatta_update_sysctl.pl does not support options that have multiple values, added: VyOS 1.2 Crux (VyOS 1.2.0-EPA3); removed VyOS 1.2 Crux ( VyOS 1.2.0-EPA).
Jan 10 2019
Jan 10 2019
dt-iland edited projects for T1172: vyatta_update_sysctl.pl does not support options that have multiple values, added: vyatta-cfg-system, VyOS 1.2 Crux ( VyOS 1.2.0-EPA), Community; removed VyOS 1.2 Crux.
Nov 1 2018
Nov 1 2018
Unfortunately, we not provide any support or bug fixes for 1.1.x series
I will suggest trying 1.2 instead
Oct 19 2018
Oct 19 2018
mario added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
Hi,
we returned ike-lifetime to AWS specs. Logs above are when we tshoot it.
Oct 17 2018
Oct 17 2018
xrpixer added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
@mario is your ike-lifetime correct? That looks really short for an aws tunnel.
Otherwise yeah, I'd try with 1.2.
syncer added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
@mario we not going to fix this in 1.1.x
It will be required to retest with 1.2 same config
mario added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
Don't know, but we are still experiencing this in 1.1.8. The only solution is to restart IPSEC service. The logs are as above.
Oct 15 2018
Oct 15 2018
syncer moved T358: add option to set phabricator api token from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.0-rc1) board.
syncer moved T410: dnsmasq in 1.1.x is outdated and vulnerable to many CVEs from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.0-rc1) board.
syncer edited projects for T523: Forwarder listening on port 53/tcp, added: VyOS 1.1.x (1.1.8); removed VyOS 1.2 Crux.
syncer moved T277: CVE-2017-6074 - linux kernel local (?) privilege escalation from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.0-rc1) board.
syncer moved T220: Logrotate conf for auth.log is missing from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.0-rc1) board.
syncer moved T389: Virtio SCSI is missing in kernel from In Progress to Finished on the VyOS 1.2 Crux board.
Oct 13 2018
Oct 13 2018
syncer changed the status of T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic from Open to On hold.
Can this be reproduced in 1.2?
Oct 3 2018
Oct 3 2018
dmbaturin edited projects for T345: Can't delete vti interface due to incorrect directory name in /proc, added: VyOS 1.2 Crux (VyOS 1.2.0-rc1); removed VyOS 1.2 Crux.
Aug 29 2018
Aug 29 2018
begetan added a comment to T528: Alibaba Cloud image.
I am interesting to install and test image in Alibaba cloud.
Aug 15 2018
Aug 15 2018
mpoublon updated the task description for T777: Misleading Help Text for IPSEC Connection Type.
mpoublon updated the task description for T777: Misleading Help Text for IPSEC Connection Type.
Jul 18 2018
Jul 18 2018
mplanquart renamed T748: OSPFv3 - IPv6 OSPF not working properly after the neighbor pushing ::/0 is disconnected from OSPFv3 - IPv6 OSPF not properly after the neighbor pushing ::/0 is disconnected (even though one neighbor is still alive) to OSPFv3 - IPv6 OSPF not working properly after the neighbor pushing ::/0 is disconnected .
mplanquart renamed T748: OSPFv3 - IPv6 OSPF not working properly after the neighbor pushing ::/0 is disconnected from OSPFv3 - IPv6 Routing table entries of a disconnected neighbor are not cleared/replaced by the entries of the other neighbor to OSPFv3 - IPv6 OSPF not properly after the neighbor pushing ::/0 is disconnected (even though one neighbor is still alive).
Jul 17 2018
Jul 17 2018
Jun 23 2018
Jun 23 2018
deafen edited projects for T708: Please add current bnx2x firmware to image, added: VyOS 1.2 Crux; removed VyOS 1.2 Crux (VyOS 1.2.0-rc1).
deafen added a project to T708: Please add current bnx2x firmware to image: VyOS 1.2 Crux (VyOS 1.2.0-rc1).
deafen added a comment to T708: Please add current bnx2x firmware to image.
Jun 22 2018
Jun 22 2018
begetan added a comment to T534: VPN/IPSEC/BGP/DPD - unknown bug, tunnel and interfaces up, but no traffic.
We are runing VyOS 1.1.8 with AWS tunnels based on AWS provided config.
It's running for months !
Jun 21 2018
Jun 21 2018
c-po moved T702: set system flow-accounting netflow source-ip failed from Need Triage to Finished on the VyOS 1.2 Crux board.
c-po added a comment to T702: set system flow-accounting netflow source-ip failed.
Fix applied to current and helium branch (if there will be a 1.1.9 release)
c-po added a comment to T702: set system flow-accounting netflow source-ip failed.
cpo@LR1# set system flow-accounting netflow source-ip 192.168.253.13
[edit]
cpo@LR1# show system flow-accounting
+netflow {
+ source-ip 192.168.253.13
+}c-po added a comment to T702: set system flow-accounting netflow source-ip failed.
This problem exists at least with VyOS 1.2.0-rolling+201806040337 as I've stumbled accross this one, too.
Thanks for reporting @begetan !
@c-po want to look in relevant scripts, I think he is correct and that ipv6 validation likely present in 1.2 too
@dmbaturin see yourself too.
May 27 2018
May 27 2018
syncer closed Q56: nDPI integration, what is required? as resolved.
syncer closed Q52: Integrate Vyos with standalone web filtering device? as obsolete.
May 24 2018
May 24 2018
dmbaturin edited projects for T275: Add BGP as-override, added: VyOS 1.1.x (1.1.8); removed VyOS 1.2 Crux.
May 12 2018
May 12 2018
DaRK added a comment to T334: Not setting ESP DH Group properly on "esp=" line in ipsec.conf.
The patch only resolves the issue when an explicit dh-group is defined. The 'pfs enable' option, using ike-group's dh-group still exhibits the issue.
May 4 2018
May 4 2018
foxpro added a comment to T220: Logrotate conf for auth.log is missing.
Which release will include this fix. We are running into the same issue on release 1.1.8.
Mar 7 2018
Mar 7 2018
rps added a comment to T575: SNAT with static port not working.
It was likely the first scenario that I mentioned where there was traffic already established before the NAT rule was created. Also note that a reset conntrack is essentially a flush of the conntrack table and can be disruptive for established connections. Alternatively you could have cleared conntrack entries for the specific host address only as a more safe way of doing it in the future.