Page MenuHomeVyOS Platform
Feed All Stories

Wed, Oct 14

c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.

Please share your OpenVPN config

Wed, Oct 14, 4:58 AM · VyOS 1.3 Equuleus
c-po changed the status of T2972: PPPoE server rate limiter allows max 65535 kbps to be set from In progress to Needs testing.
Wed, Oct 14, 4:56 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
tjh created T2977: Permissions Denied doing "show conntrack-sync status" on backup router.
Wed, Oct 14, 12:41 AM

Tue, Oct 13

c-po changed Why the issue appeared? from none to implementation-mistake on T2976: Client IP pool does not work for PPPoE local users.
Tue, Oct 13, 4:49 PM · VyOS 1.3 Equuleus
c-po closed T2976: Client IP pool does not work for PPPoE local users as Resolved.
Tue, Oct 13, 4:49 PM · VyOS 1.3 Equuleus
runar added a comment to T766: Implement support for the Tinc VPN daemon.

I think we could generate private/public keys using openssl instead of using the tinc utility to generqte it... But i have not tested it

Tue, Oct 13, 4:10 PM · VyOS 1.3 Equuleus
jack9603301 added a comment to T766: Implement support for the Tinc VPN daemon.

I am implementing tinc, but there is a problem I haven't figured out. Normally, in order for tinc to run, it must have a public key and a private key, and it happens that there will be a prompt for this generation command (ask where to save, etc), and it happens that the public key of the local node in the hosts directory is usually used together with some host configuration options. Is there a better way to implement it?

Tue, Oct 13, 4:07 PM · VyOS 1.3 Equuleus
SrividyaA added a comment to T2924: Using 'set src' in a route-map invalidates it as part of a subsequent boot-up.

PR: https://github.com/vyos/vyos-1x/pull/569

Tue, Oct 13, 1:06 PM · VyOS 1.3 Equuleus
Magnum added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.

This bug seems to be worse than I thought.
Here's an example:
On reboot an openvpn client inteface will come up outside the vrf. Any routes that get pushed by the server will not get added to the client because it's wants to add the routes inside the vrf of the vtun interface - but the vtun isn't a member.
Heres a log snippet:

Tue, Oct 13, 11:35 AM · VyOS 1.3 Equuleus
Dmitry added a comment to T2972: PPPoE server rate limiter allows max 65535 kbps to be set.

PR for CRUX https://github.com/vyos/vyos-1x/pull/568

Tue, Oct 13, 11:20 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
Dmitry changed the status of T2972: PPPoE server rate limiter allows max 65535 kbps to be set from Open to In progress.
Tue, Oct 13, 10:54 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
s.lorente updated the task description for T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Tue, Oct 13, 10:51 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente updated the task description for T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Tue, Oct 13, 10:48 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente updated the task description for T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Tue, Oct 13, 10:45 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
Magnum added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.

You're right, if-up.d scripts only get run for the interfaces defined in /etc/network/interfaces.

Tue, Oct 13, 10:29 AM · VyOS 1.3 Equuleus
Dmitry changed the status of T2976: Client IP pool does not work for PPPoE local users from Open to In progress.
Tue, Oct 13, 9:53 AM · VyOS 1.3 Equuleus
Dmitry added a comment to T2972: PPPoE server rate limiter allows max 65535 kbps to be set.

PR with increasing validator values https://github.com/vyos/vyos-1x/pull/566

Tue, Oct 13, 9:53 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
Dmitry created T2976: Client IP pool does not work for PPPoE local users.
Tue, Oct 13, 9:44 AM · VyOS 1.3 Equuleus
jack9603301 added a comment to T766: Implement support for the Tinc VPN daemon.

I wrote a preliminary CLI configuration file rule. This is the first step in tinc implementation. For details, please read: https://github.com/jack9603301/vyos-1x/blob/T766/interface-definitions/interfaces-tinc .xml.in

Tue, Oct 13, 3:45 AM · VyOS 1.3 Equuleus
trae32566 updated the task description for T2975: BFD Default Timers.
Tue, Oct 13, 3:07 AM · VyOS 1.3 Equuleus
trae32566 updated the task description for T2975: BFD Default Timers.
Tue, Oct 13, 2:57 AM · VyOS 1.3 Equuleus

Mon, Oct 12

trae32566 created T2975: BFD Default Timers.
Mon, Oct 12, 9:52 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

The last thing I think we can add is the dual stack capability options. We only got 2.

Mon, Oct 12, 8:00 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

Ok, so here's the import LDP FEC one that I think we could take advantage of as well.

Mon, Oct 12, 7:38 PM · VyOS 1.3 Equuleus
D0peX added a comment to T2938: Adding remote Syslog RFC5424 compatibility.

I'd suggest:
set system syslog host 10.0.3.2 format 5424 - description stating this uses RFC5424 style format
set system syslog host 10.0.3.2 format ocetet-counted - description stating messages are octet counted

Mon, Oct 12, 7:35 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

Ok, so here's the export LDP FEC one that I think we could take advantage of.

Mon, Oct 12, 7:33 PM · VyOS 1.3 Equuleus
christophedc0 closed T2951: monitor nat not working as Resolved.

It seems to be working now, for some reason it didn't work when I first tried, but now it seems OK.

Mon, Oct 12, 6:23 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

The one after that I feel would be fairly easy to also implement is customized label allocation. Again, it is under the family of IPv4 or IPv6.

Mon, Oct 12, 5:05 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

The next one that I think would be fairly easy to add would be the following:

Mon, Oct 12, 4:51 PM · VyOS 1.3 Equuleus
Cheeze_It added a comment to T915: MPLS Support.

Hello sir. I am unsure if you're able to add more under LDP but I have found others if you possibly could add. They should be simple additions and are already supported under FRR 7.3.1.

Mon, Oct 12, 3:46 PM · VyOS 1.3 Equuleus
Viacheslav added a comment to T2967: Duplicate IPv6 BFD Peers Created.

I can't reproduce it in the latest rolling

Mon, Oct 12, 8:04 AM · VyOS 1.3 Equuleus
runar added a comment to T766: Implement support for the Tinc VPN daemon.

placing the tinc deb in vyos-build/packages is appropriate while writing support for tinc, but for building on a production iso that is distribute it is not appropriate.. but it's quite easy to add the package to our own repository if we need that...

Mon, Oct 12, 7:34 AM · VyOS 1.3 Equuleus
jack9603301 added a comment to T766: Implement support for the Tinc VPN daemon.

Another option is to compile and package by yourself, but the location of the repository is the problem

Mon, Oct 12, 7:17 AM · VyOS 1.3 Equuleus
Viacheslav closed T2782: Changing timezone, does not restart rsyslog as Resolved.
Mon, Oct 12, 6:27 AM · VyOS 1.3 Equuleus
runar added a comment to T766: Implement support for the Tinc VPN daemon.

The version of tinc vpn supplied with buster is 1.0.35, and 1.1-pre17 is only availabe in the experimental repository as for now. The first release of 1.1pre is from 2011 and i would say that it is quite mature at this point.

Mon, Oct 12, 5:53 AM · VyOS 1.3 Equuleus
jack9603301 added a comment to T766: Implement support for the Tinc VPN daemon.

I don't think it's necessary to compile DEB packages because they can be obtained directly from apt

Mon, Oct 12, 2:57 AM · VyOS 1.3 Equuleus
EwaldvanGeffen added a comment to T563: Migrate 'service webproxy' to python/xml.

ATS looks nice, Varnish / Apache is really a good choice.

Mon, Oct 12, 1:37 AM · VyOS 1.3 Equuleus

Sun, Oct 11

c-po closed T2974: Migrate tftp-server to get_config_dict(), a subtask of T692: TFTP server functionality, as Resolved.
Sun, Oct 11, 7:08 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
c-po closed T2974: Migrate tftp-server to get_config_dict() as Resolved.
Sun, Oct 11, 7:08 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
c-po created T2974: Migrate tftp-server to get_config_dict().
Sun, Oct 11, 7:08 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
c-po moved T2891: Support to change ring-buffers from CLI from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
Sun, Oct 11, 5:36 PM · Restricted Project, VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
c-po moved T2878: LACP / bonding: new op-mode command: show interfaces bonding bond0 detail from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
Sun, Oct 11, 5:36 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
c-po moved T2959: PPPoE server has migrations scripts but the config version is not incrememnted from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
Sun, Oct 11, 5:36 PM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po moved T2973: tftp-server can not listen on IPv6 address from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
Sun, Oct 11, 5:36 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.7)
c-po closed T2973: tftp-server can not listen on IPv6 address as Resolved.
Sun, Oct 11, 5:36 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.7)
c-po created T2973: tftp-server can not listen on IPv6 address.
Sun, Oct 11, 5:33 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.7)
Dmitry added a comment to T2972: PPPoE server rate limiter allows max 65535 kbps to be set.

@c-po , it looks like the wrong CLI definition, we can increase the limit in XML.

Sun, Oct 11, 5:09 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
c-po added a comment to T2972: PPPoE server rate limiter allows max 65535 kbps to be set.

@Dmitry is this a limitation of Accel-PPP or can we increase the limits on the CLI?

Sun, Oct 11, 4:30 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
c-po renamed T2972: PPPoE server rate limiter allows max 65535 kbps to be set from Rate limiter of PPPoE session allows max 65535 kbps to be set to PPPoE server rate limiter allows max 65535 kbps to be set.
Sun, Oct 11, 4:29 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.

I can feel that pain! When looking at the source from VyOS 1.2 (crux) it looks like it always behaved in this way.

Sun, Oct 11, 4:27 PM · VyOS 1.3 Equuleus
WhoIsHE created T2972: PPPoE server rate limiter allows max 65535 kbps to be set.
Sun, Oct 11, 2:28 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
syncer closed T2935: PPPoE/IPOE with different vlan to allocate ip addrss under different ip pool as Invalid.

Please post at forum.vyos.io for support

Sun, Oct 11, 11:49 AM · Rejected

Sat, Oct 10

c-po added a comment to T2951: monitor nat not working.

@christophedc0 Have you enabled NAT rule logging?

Sat, Oct 10, 6:30 PM · VyOS 1.3 Equuleus

Fri, Oct 9

c-po added a comment to T2968: Add support for Intel Atom C2000 series QAT.
cpo@LR4.wue3# lsmod | grep qat
qat_200xx              20480  0
intel_qat             299008  2 usdm_drv,qat_200xx
dh_generic             16384  1 intel_qat
uio                    20480  1 intel_qat
authenc                16384  1 intel_qat
Fri, Oct 9, 5:10 PM · VyOS 1.3 Equuleus
c-po renamed T2968: Add support for Intel Atom C2000 series QAT from Ssupport qat_200xx to Add support for Intel Atom C2000 series QAT.
Fri, Oct 9, 5:08 PM · VyOS 1.3 Equuleus
Viacheslav closed T2970: 'show nat source translations ' with traceback on VyOS 1.3-rolling-202010080117 as Invalid.

Duplicate T2859

Fri, Oct 9, 7:22 AM · VyOS 1.3 Equuleus
fegauthier awarded T2971: Provide a CLI solution for Ingress Shaping when there is SNAT a Like token.
Fri, Oct 9, 1:27 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux

Thu, Oct 8

s.lorente added a comment to T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.

https://forum.openwrt.org/t/ingress-traffic-shaping-with-snat/40226

Thu, Oct 8, 10:21 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente added a project to T2971: Provide a CLI solution for Ingress Shaping when there is SNAT: VyOS 1.3 Equuleus.
Thu, Oct 8, 10:07 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente updated the task description for T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Thu, Oct 8, 10:06 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente renamed T2971: Provide a CLI solution for Ingress Shaping when there is SNAT from Provide a CLI solution for Ingress Shaping when there is SNAT. to Provide a CLI solution for Ingress Shaping when there is SNAT.
Thu, Oct 8, 9:53 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
s.lorente created T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Thu, Oct 8, 9:25 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
jestabro claimed T2941: Using a unicode character in the description field causes UnicodeDecodeError in configsource.py.
Thu, Oct 8, 7:54 PM · VyOS 1.3 Equuleus
srgjp created T2970: 'show nat source translations ' with traceback on VyOS 1.3-rolling-202010080117.
Thu, Oct 8, 7:22 PM · VyOS 1.3 Equuleus
jestabro renamed T2931: Unicode decode error causes vyos.configd service to restart from Adding NAT rule causes vyos.configd service to restart to Unicode decode error causes vyos.configd service to restart.
Thu, Oct 8, 4:49 PM · VyOS 1.3 Equuleus
Dmitry closed T2891: Support to change ring-buffers from CLI as Resolved.
Thu, Oct 8, 2:42 PM · Restricted Project, VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
Viacheslav assigned T2924: Using 'set src' in a route-map invalidates it as part of a subsequent boot-up to SrividyaA.
Thu, Oct 8, 7:20 AM · VyOS 1.3 Equuleus

Wed, Oct 7

Magnum created T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.
Wed, Oct 7, 4:56 PM · VyOS 1.3 Equuleus
Dmitry created T2968: Add support for Intel Atom C2000 series QAT.
Wed, Oct 7, 4:47 PM · VyOS 1.3 Equuleus
trae32566 updated the task description for T2967: Duplicate IPv6 BFD Peers Created.
Wed, Oct 7, 3:02 AM · VyOS 1.3 Equuleus
trae32566 created T2967: Duplicate IPv6 BFD Peers Created.
Wed, Oct 7, 2:59 AM · VyOS 1.3 Equuleus

Tue, Oct 6

Viacheslav changed the status of T2782: Changing timezone, does not restart rsyslog from Open to Needs testing.
Tue, Oct 6, 7:24 PM · VyOS 1.3 Equuleus
Magnum closed T2957: show openvpn not returning anything as Resolved.
Tue, Oct 6, 3:20 PM · openvpn, VyOS 1.3 Equuleus
jestabro added a comment to T2931: Unicode decode error causes vyos.configd service to restart.

Ongoing discussion in the forum on this matter:
https://forum.vyos.io/t/commit-causing-vyos-configd-service-to-exit-and-restart/5945
Summary to follow when there is a reproducer.

Tue, Oct 6, 1:57 PM · VyOS 1.3 Equuleus
Viacheslav added a comment to T2966: Add tunnel type ip6tnl.
sudo ip link add name tun6 type ip6tnl local 2001:192:168:122:520d:ff:fe03:2 remote 2001:192:168:122:520d:ff:fe01:2 mode any
sudo ip link set dev tun6 up
sudo ip add add 100.64.0.1/30 dev tun6
sudo ip add add 2001:db8:aa::1/64 dev tun6
Tue, Oct 6, 12:19 PM · VyOS 1.3 Equuleus
Viacheslav created T2966: Add tunnel type ip6tnl.
Tue, Oct 6, 11:34 AM · VyOS 1.3 Equuleus
trae32566 updated the task description for T2965: Brief BFD Peer Info.
Tue, Oct 6, 7:47 AM · VyOS 1.3 Equuleus
trae32566 changed Is it a breaking change? from none to compatible on T2965: Brief BFD Peer Info.
Tue, Oct 6, 7:38 AM · VyOS 1.3 Equuleus
trae32566 edited projects for T2965: Brief BFD Peer Info, added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
Tue, Oct 6, 7:38 AM · VyOS 1.3 Equuleus
trae32566 created T2965: Brief BFD Peer Info.
Tue, Oct 6, 7:37 AM · VyOS 1.3 Equuleus
Viacheslav claimed T2782: Changing timezone, does not restart rsyslog.
Tue, Oct 6, 7:09 AM · VyOS 1.3 Equuleus
Viacheslav added a comment to T2782: Changing timezone, does not restart rsyslog.

PR https://github.com/vyos/vyos-1x/pull/565

Tue, Oct 6, 7:09 AM · VyOS 1.3 Equuleus
lucasec added a comment to T2964: pdns_recursor should support explicitly configuring query source address.

Pull request https://github.com/vyos/vyos-1x/pull/563

Tue, Oct 6, 2:14 AM
lucasec created T2964: pdns_recursor should support explicitly configuring query source address.
Tue, Oct 6, 1:54 AM

Mon, Oct 5

christophedc0 added a comment to T2951: monitor nat not working.

The error message is gone now,so that's ok.
When accessing the nat rule, nothing shows up in the monitor.

Mon, Oct 5, 8:55 PM · VyOS 1.3 Equuleus
c-po closed T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is as Resolved.
Mon, Oct 5, 6:24 PM · VyOS 1.3 Equuleus
c-po updated the task description for T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is.
Mon, Oct 5, 6:20 PM · VyOS 1.3 Equuleus
c-po updated the task description for T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is.
Mon, Oct 5, 6:17 PM · VyOS 1.3 Equuleus
c-po changed the status of T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is from Open to Confirmed.
Mon, Oct 5, 6:14 PM · VyOS 1.3 Equuleus
c-po created T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is.
Mon, Oct 5, 6:13 PM · VyOS 1.3 Equuleus
c-po closed T2962: Drop DHCPv6 NIS/NIS+ support as Invalid.
Mon, Oct 5, 5:22 PM · VyOS 1.3 Equuleus
c-po added a comment to T2962: Drop DHCPv6 NIS/NIS+ support.

Okay 2017 is like yesterday in NIS history so we then should keep it!

Mon, Oct 5, 5:22 PM · VyOS 1.3 Equuleus
c-po added a comment to T2961: Support "stateless" DHCP-v6 (information-request) clients.

Any rolling newer then vyos-1.3-rolling-202010050117-amd64.iso will have this included.

Mon, Oct 5, 5:21 PM
c-po added a comment to T2961: Support "stateless" DHCP-v6 (information-request) clients.

I did a minor improvement and reused the fqdn validator in our system. In addition I refactored the domain-search into an includable snippet - so changing grammar, validators can be done in one single file.

Mon, Oct 5, 5:19 PM
kroy added a comment to T2962: Drop DHCPv6 NIS/NIS+ support.

Honestly it's not anything I've ever used. But from asking around some people still use it (not specifically in VyOS, just in general)

Mon, Oct 5, 5:17 PM · VyOS 1.3 Equuleus
c-po created T2962: Drop DHCPv6 NIS/NIS+ support.
Mon, Oct 5, 5:14 PM · VyOS 1.3 Equuleus
c-po added a comment to T2951: monitor nat not working.

@christophedc0 please check out any rolling release which is newer then vyos-1.3-rolling-202010050117-amd64.iso as I have found two bugs in the implementation (one for source nat logging) and the other for the warning you have posted.

Mon, Oct 5, 4:45 PM · VyOS 1.3 Equuleus
c-po changed the status of T2951: monitor nat not working from Open to Needs testing.
Mon, Oct 5, 4:43 PM · VyOS 1.3 Equuleus
Viacheslav added a comment to T2924: Using 'set src' in a route-map invalidates it as part of a subsequent boot-up.

There are 2 issues:

Mon, Oct 5, 12:54 PM · VyOS 1.3 Equuleus
Viacheslav added a comment to T2951: monitor nat not working.

Works with Ethernet ports fine

Mon, Oct 5, 10:50 AM · VyOS 1.3 Equuleus