I guess we will make use of nftables when the firewall codebase is rewritten. That rewrite is a major effort and on the roadmap - but it does not have momentum/priority yet due to limited resources.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 16 2019
Nov 16 2019
syncer changed the status of T1781: Inconsistent leveling output from json printout from Open to Needs testing.
syncer changed the status of T1785: Deleting partitions on disks (Raid1) with default value 'no' from Open to Needs testing.
syncer triaged T1786: disable-dhcp-nameservers is missed in current host_name.py implementation as Normal priority.
syncer moved T1786: disable-dhcp-nameservers is missed in current host_name.py implementation from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
syncer changed the status of T1786: disable-dhcp-nameservers is missed in current host_name.py implementation from In progress to Backport candidate.
syncer edited projects for T1786: disable-dhcp-nameservers is missed in current host_name.py implementation, added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux.
syncer edited projects for T1392: Large firewall rulesets cause the system to lose configuration and crash at startup, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1351: accel-pppoe adding CIDR based IP pool option from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1351: accel-pppoe adding CIDR based IP pool option, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1376: Incorrect DHCP lease counting from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1376: Incorrect DHCP lease counting, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer edited projects for T1246: VyOS 1.2.0 "openvpn-options" configuration does not allow quotes in values, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer raised the priority of T1470: improve output of "show dhcpv6 server leases" from Wishlist to Normal.
syncer edited projects for T1470: improve output of "show dhcpv6 server leases", added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1430: Add options for custom DHCP client-id and hostname from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1430: Add options for custom DHCP client-id and hostname, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer edited projects for T1452: accel-pppoe - add vendor option to shaper , added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
as I read your script it works in a different way. Also its location seems to be wrong. OpenVPN is handled here:
https://github.com/vyos/vyatta-cfg-system/commit/bb686343fc913413ff51edfeb63929759bee0fde
Nov 14 2019
Nov 14 2019
dmbaturin changed Is it a breaking change? from none to syntax on T1807: Improve WireGuard CLI "endpoint" on.
dmbaturin edited projects for T1807: Improve WireGuard CLI "endpoint" on, added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
I agree. Users should be able to change the port independently from the address.
jestabro closed T1710: [equuleus] buster: add patch to fix live-build missing key error as Resolved.
elbandi created T1806: Add missing documentation on how to use quote characters inside dhcp-server raw parameters.
Nov 14 2019, 2:48 PM · Restricted Project
The suggested debian package qrencode seems handy for terminal use. Actually, using QRcodes to transfer information would be interesting for other uses as well, such as exporting other kinds of keys such as OpenVPN. As a remote support measure, if a config is causing issues that prevent remote login, having a local login being able to emit the current config as a QRcode might be interesting...
Nov 13 2019
Nov 13 2019
In PR https://github.com/vyos/vyos-1x/pull/162, util.py is pulled in to the nosetests path; T1804 will need to be closed before merging.
olofl awarded T439: local PBR support a Like token.
Maltahl awarded T31: Add VRF support a Like token.
Nov 12 2019
Nov 12 2019
jestabro triaged T1801: Unescaped backslashes in config values cause configuration failure as Normal priority.
jestabro changed the status of T1801: Unescaped backslashes in config values cause configuration failure, a subtask of T1787: Failed config migration from V1.2.3 to 1.2-rolling-201911030217, from Open to In progress.
jestabro changed the status of T1801: Unescaped backslashes in config values cause configuration failure from Open to In progress.
c-po moved T1787: Failed config migration from V1.2.3 to 1.2-rolling-201911030217 from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T1673: vif bridge-group not migrated to bridge member interface from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T1627: Rewrite wireless interface in new style XML syntax from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T989: Add support for IPoE server from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1763: CloudFlare DDNS support from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T517: Rewrite the wireless interface configuration in the new style (python + XML) from Backlog to Finished on the VyOS 1.3 Equuleus board.
c-po moved T808: replace lighthttpd with nginx from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T56: Add pkcs11 support to OpenVPN interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T50: Better support for tcp-mss from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T239: Improve documentation for the firewall all-ping setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T592: lldpcli: unknown command from argument 1: `#` from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1062: Cannot connect to a newly created Amazon EC2 instance via SSH from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T823: Rewrite DHCP op mode in the new style from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1313: Add support for reusable build flavours from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1565: [wireguard] - use VYOS_TAGNODE_VALUE to determine changed tagNodes from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1570: Unable to build for ocaml/dune for armhf on docker and chroot from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1656: equuleus: buster: arm: iso creation failes because of intel drivers from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1741: Add system wide proxy setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1756: Modify output to be more useful - Wireguard from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1789: ddclient not working with generated RFC2136 / nsupdate config from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1791: Update Linux Kernel to 4.19.82 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1792: Update WireGuard to Debian release 0.0.20191012-1 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1800: Update Linux Kernel to v4.19.84 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
zsdc changed the status of T1786: disable-dhcp-nameservers is missed in current host_name.py implementation from Confirmed to In progress.
Fix for the problem:
https://github.com/vyos/vyos-1x/pull/160
https://github.com/vyos/vyos-replace/pull/4
rherold added a comment to T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP.
In this way we could also add vpp nat64 running complete in vpp independent from all other vyos services:
rherold awarded T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP a Like token.
Nov 11 2019
Nov 11 2019
Due to some internal logic in net-snmp this can not be done so easy.
c-po triaged T1799: Add support for GENEVE (Generic Network Virtualization Encapsulation) as Low priority.
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from In Progress to Finished on the VyOS 1.3 Equuleus board.
Nov 10 2019
Nov 10 2019
hagbard moved T1788: Intel QAT (QuickAssist Technology ) implementation from In Progress to Finished on the VyOS 1.3 Equuleus board.
https://downloads.vyos.io/rolling/current/amd64/vyos-1.2-rolling-201911102307-amd64.iso or later has it included.
packages are being built via CI:
http://dev.packages.vyos.net/repositories/current/vyos/pool/main/v/vyos-qat/
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po changed the status of T1793: Editing description on an interface causes BGP sessions to reset on commit from Confirmed to Needs testing.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
Tomorrows rolling release will come with a first version of the fix. It requires you to use speed/duplex auto setting. The next part will also cover fixed speed/duplex settings.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
The offender is the call to vyos.ifconfig.set_flow_control() which triggers /sbin/ethtool --pause eth0 autoneg on tx on rx on. we should only change this if it is really necessary and not on every commit.
syncer moved T1485: Enable 'AdvIntervalOpt' option in for radvd.conf from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1485: Enable 'AdvIntervalOpt' option in for radvd.conf, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
Nov 10 2019, 7:45 PM · Restricted Project