Or, if no name-server is set, use the root servers, this is the most easy implementation.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Nov 25 2018
Nov 25 2018
c-po added a comment to T1041: DNS forwarding always requires an upstream recursor - but not needed with PowerDNS Recursor.
Even better! Thanks for the hint!
Nov 24 2018
Nov 24 2018
c-po changed the status of T1019: Enable Google BBR support at kernel compile time from Open to In progress.
BBR was enabled in the latest commit to vyos-kernel
@syncer seems this is the only available SSTP Linux implementation
c-po added a comment to T1012: vyos-build configure script should check /etc/issue to avoid confusion.
man strace(1) indicates that it opens several system files until it gets a match for any known distro.
VyOS ships a serial port interface in the default configuration upon installation.
Merged from current into crux branch.
May it be you are running on a virtualized environment and have not added a serial port to your VM?
Nov 17 2018
Nov 17 2018
Nov 15 2018
Nov 15 2018
Your commit enables memory plugin when disable is configured?
c-po added a comment to T1012: vyos-build configure script should check /etc/issue to avoid confusion.
@LiquidLight there is a Dockerfile, too to build VyOS
c-po added a comment to T1012: vyos-build configure script should check /etc/issue to avoid confusion.
Issue file con be overwritten. lsb_release -d would be a better way, as it gives you Description: Debian GNU/Linux 8.11 (jessie)
Nov 12 2018
Nov 12 2018
Nov 11 2018
Nov 11 2018
c-po edited projects for T999: "strip-private" doesn't strip pre-shared-secret, added: VyOS 1.2 Crux (VyOS 1.2.0-rc7); removed VyOS 1.2 Crux.
Looks like this was always a bug. In the old Perl implementation the if clause was the same:
https://github.com/vyos/vyatta-cfg-system/blob/9b469f3c5734c086fc30b097405ea46ec2cee725/scripts/dynamic-dns/vyatta-dynamic-dns.pl#L223-L230
c-po updated the task description for T998: "service dns dynamic" does now honor the "use-web" statement.
c-po changed the status of T998: "service dns dynamic" does now honor the "use-web" statement from Open to In progress.
c-po added a comment to T977: Permission denied error when performing config rollback on a machine upgraded from VyOS 1.1.x.
@dmbaturin This is what I did:
c-po changed the status of T993: Unclutter PPTP RADIUS configuration nodes from Open to In progress.
Nov 10 2018
Nov 10 2018
c-po added a comment to T786: new style xml and conf-mode scripts: posibillity to add tagNode value as parameter to conf-script.
This looks like an ultimate hackaround. Maybe we should check if we can change the C implementation
Nov 9 2018
Nov 9 2018
Actually I only wanted to use it got configuration backup.
Please note: Kernel Intel driver version is kot always related to Intel out of tree modules. Denverton C3000 NICs work fine with 4.18 atleast so as we run 4.19 we‘re off the hook.
Nov 8 2018
Nov 8 2018
c-po changed the status of T978: PowerDNS config for upstream IPv6 nameservers is broken from Open to In progress.
Can you search for the following file on your device and edit it to test your proposed changes:
Nov 7 2018
Nov 7 2018
T123 addressed exactly this issue but we not yet have agreed on a CLI yet. I do not know if it's safe to enable it in generall.
c-po closed T975: `Show ip multicast mfc/interface` prints adresses the wrong way around as Resolved.
c-po closed T975: `Show ip multicast mfc/interface` prints adresses the wrong way around, a subtask of T959: Rewrite "protocol igmp-proxy" in XML/Python, as Resolved.
c-po edited projects for T977: Permission denied error when performing config rollback on a machine upgraded from VyOS 1.1.x, added: VyOS 1.2 Crux (VyOS 1.2.0-rc6), VyOS-1.2.0-GA; removed VyOS 1.2 Crux.
The links you refer are for PowerDNS Authoritative Server, we are using PowerDNS Recursor, see https://doc.powerdns.com/recursor/settings.html#local-address
c-po added a comment to T975: `Show ip multicast mfc/interface` prints adresses the wrong way around.
IGMP proxy was imported from Ubiquity Edgerouter running MIPS big-endian CPU. Linux Kernel BAI is also big endian (network byteorder) and the scripts did not take this into account. It will be fixed during T959
@oliko unfortunately I did not getting it to work buw it seems that it's due to lacking support in FRR (https://github.com/FRRouting/frr/issues/2350) and it is on the feature request page - we should get it with newer FRR releases.
We should keep listen-address for all address types but we are able to distinguish between them when building up recursor.conf
Nov 3 2018
Nov 3 2018
c-po changed the status of T959: Rewrite "protocol igmp-proxy" in XML/Python from Open to In progress.
Nov 2 2018
Nov 2 2018
Oct 26 2018
Oct 26 2018
Oct 25 2018
Oct 25 2018
c-po closed T938: IPv4 dhcp relay can't start on default port when explicitly configured as Resolved.
Oct 24 2018
Oct 24 2018
c-po added a comment to T932: DHCP relay config version file is missing, which causes backwards migration to obviously un-loadable old syntax.
Sorry, I just overlooked it.
Oct 23 2018
Oct 23 2018
c-po added a comment to T902: VyOS 1.2.0-rc2 fails to load configuration when conntrack modules are disabled in config.
In T902#23385, @cwadge wrote:It seems that in RC3 no conntrack settings work at all, causing the configuration loading to fail. For instance,
system conntrack tcp loose enablecauses:
sysctl: cannot stat /proc/sys/net/ipv4 netfilter/ip_conntrack_tcp_loose: No such file or directory
Oct 22 2018
Oct 22 2018
c-po edited projects for T634: Remove "service ssh allow-root", added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux (VyOS 1.2.0-rc4).
c-po closed T634: Remove "service ssh allow-root", a subtask of T631: Rewrite SSH configuration as XML interface definition, as Resolved.
Oct 21 2018
Oct 21 2018
If we can ensure that the key is stored somewhere halfway secure (Jenkins Keystore) it would be okay.
Problem is partly fixed in the latest rolling release. Only this manual step is required in addition at this time:
Oct 20 2018
Oct 20 2018
Ah, yeah! Used that in my current project.
What's required for Kernel Debug?
Okay - I just see that the allow-root feature wasn't working anyway since the SSH XML rewrite.
c-po added a comment to T857: vyatta-conntrack: cleanup node.def files and compile kernel modules statically.
Invalid: Modules like SIP conntrack can't be adjusted during runtime (at least I have not found a way). Only module load parameters are supported. :(
c-po added a comment to T850: Change Request: Handle non existing listen-address assignments in e.g. TFTP or SNMP.
Both SNMP and TFTP now print a warning. In a subsequent step we could change this to be an error on commit and introduce a migration script deleting invalid addresses to not kill currently deployed configs!
I will implement at least a warning message for the user. Enforcing proper IP addresses could break old comfigurations - or they should be deleted by a migration script and then we can print proper error messages.
oth deletion and alias is ok for me. @syncer?
Remove or not remove?
Installing a debug image requires a reboot. apt-get installation works online.
Why? Someone can always install any 3rd party debian package via apt after setting up the repositories. This is in no way different to a parallel build and super easy.
Thats already possible using the custom package option introduced by @dmbaturin
Oct 19 2018
Oct 19 2018