@dsteinkopf I think almos every command is good when there is a discussion ongoing and we can agree on somehing. VyOS has so called migration scripts which are executed once we do CLI changes and thus migrate old configuration nodes to new ones. We already make use of this feature alot and it is transparent to the user.

I really like the idea and thank you for the contribution.

@SteveP do you have time booting a Debian Buster (testing) ISO on your device and see if your NICs do appear?

@dmbaturin maybe can, need to verify this behavior together with the EFI stuff when I'm back in germany. If =n works for all szenarios I'm happy with it.

Can you please double-check with latest rolling release: vyos-1.2.0-rolling+201811281529-amd64.iso?

System bootup time is something we should not care, as a router is not rebootet that often. Infact the startup time depends on the amount of configured services or firewall rules. We recently increased the timeout for starting of VyOS to also make it work on slower Intel Atom D525 platforms where a huge firewall config was loaded.

What do you propose as CLI syntax?

I never liked verbatim passed options, this will be a perfect candidate for a first controbution to VyOS as it will be rather easy! You want to give it a try?

There hve recently been changes in regards to EFI. Please check the Dockerfile for all required packages or switch to Completely!

Have you tried specifying /config/config.boot instead?

I always thought 64 cpus should be sufficient for VyOS :)

Another idea (if having no name-server entries is disliked) would be

Eoot hints could be speciefied, if none is specified, buildin one is used.

Could be done by Help text and documentation

Or, if no name-server is set, use the root servers, this is the most easy implementation.

Even better! Thanks for the hint!

BBR was enabled in the latest commit to vyos-kernel

@syncer seems this is the only available SSTP Linux implementation

man strace(1) indicates that it opens several system files until it gets a match for any known distro.

VyOS ships a serial port interface in the default configuration upon installation.

Merged from current into crux branch.

May it be you are running on a virtualized environment and have not added a serial port to your VM?

Your commit enables memory plugin when disable is configured?

@LiquidLight there is a Dockerfile, too to build VyOS

Issue file con be overwritten. lsb_release -d would be a better way, as it gives you Description: Debian GNU/Linux 8.11 (jessie)

Looks like this was always a bug. In the old Perl implementation the if clause was the same:
https://github.com/vyos/vyatta-cfg-system/blob/9b469f3c5734c086fc30b097405ea46ec2cee725/scripts/dynamic-dns/vyatta-dynamic-dns.pl#L223-L230

@dmbaturin This is what I did:

This looks like an ultimate hackaround. Maybe we should check if we can change the C implementation

Actually I only wanted to use it got configuration backup.

Please note: Kernel Intel driver version is kot always related to Intel out of tree modules. Denverton C3000 NICs work fine with 4.18 atleast so as we run 4.19 we‘re off the hook.

Can you search for the following file on your device and edit it to test your proposed changes:

T123 addressed exactly this issue but we not yet have agreed on a CLI yet. I do not know if it's safe to enable it in generall.

The links you refer are for PowerDNS Authoritative Server, we are using PowerDNS Recursor, see https://doc.powerdns.com/recursor/settings.html#local-address

IGMP proxy was imported from Ubiquity Edgerouter running MIPS big-endian CPU. Linux Kernel BAI is also big endian (network byteorder) and the scripts did not take this into account. It will be fixed during T959

@oliko unfortunately I did not getting it to work buw it seems that it's due to lacking support in FRR (https://github.com/FRRouting/frr/issues/2350) and it is on the feature request page - we should get it with newer FRR releases.

We should keep listen-address for all address types but we are able to distinguish between them when building up recursor.conf

@danhusan, @Line2 is right, If you want a generic broadcast forwarder please use service broadcast-relay - that's why I added this feature in VyOS 1.2.

Sorry, I just overlooked it.

In T902#23385, @cwadge wrote:

It seems that in RC3 no conntrack settings work at all, causing the configuration loading to fail. For instance,

system conntrack tcp loose enable

causes:

sysctl: cannot stat /proc/sys/net/ipv4 netfilter/ip_conntrack_tcp_loose: No such file or directory