It may be a good idea to cherry-pick this for 1.4.x branch.
Feed All Stories
May 9 2022
May 9 2022
dtoux added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
e.khudiyev added a comment to T4416: Convert 'traceroute' operation to the new syntax and expand available options using python.
Tested on the latest rolling release:
Unknown Object (User) added a comment to T4420: Feature Request: ocserv: show configured 2FA OTP key.
Unknown Object (User) created T4420: Feature Request: ocserv: show configured 2FA OTP key.
May 8 2022
May 8 2022
Viacheslav added a comment to T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size.
Duplicate T4359
Viacheslav changed the status of T4416: Convert 'traceroute' operation to the new syntax and expand available options using python from Open to Needs testing.
May 7 2022
May 7 2022
c-po moved T4361: `vyos.config.exists()` does not work for nodes with multiple values from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4354: Slave interfaces fall out from bonding during configuration change from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po edited projects for T4354: Slave interfaces fall out from bonding during configuration change, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
c-po moved T4354: Slave interfaces fall out from bonding during configuration change from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4419: vrf: support to disable IP forwarding within a given VRF from Open to In progress.
May 6 2022
May 6 2022
c-po added a comment to T4361: `vyos.config.exists()` does not work for nodes with multiple values.
PR for VyOS 1.3 https://github.com/vyos/vyos-1x/pull/1318
c-po added a comment to T4354: Slave interfaces fall out from bonding during configuration change.
1.3 fix via https://github.com/vyos/vyos-1x/pull/1318
skor added a comment to T4417: VRRP doesn't start with conntrack-sync.
c-po moved T4361: `vyos.config.exists()` does not work for nodes with multiple values from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4361: `vyos.config.exists()` does not work for nodes with multiple values from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
c-po edited projects for T4361: `vyos.config.exists()` does not work for nodes with multiple values, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
n.fort added a comment to T4362: Wan Load Balancing - Can't create routing tables.
I was able to reproduce issue on latest VyOS 1.4-rolling-202205060217
Steps to reproduce:
1 - Fresh/clean vyos router
2 - Add interface configuration (dhcp on WANs and static IP addresses on LAN side), commit and save
3 - Add next WLB configuration:
Viacheslav changed the status of T4410: Telegraf - Output to Splunk from Needs testing to In progress.
Viacheslav changed the status of T4418: Telegraf - output Plugin azure-data-explorer from Open to In progress.
Viacheslav added a comment to T4418: Telegraf - output Plugin azure-data-explorer.
Viacheslav added a comment to T4417: VRRP doesn't start with conntrack-sync.
Try to delete sync-group, as you use only one group
May 5 2022
May 5 2022
c-po added a comment to T4414: Add route-map "as-path prepend last-as x" option.
Implemented as set policy route-map FOO rule 10 set as-path prepend-last-as 2
Viacheslav edited projects for T4315: Telegraf - Output to prometheus, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus ( 1.3.1).
Viacheslav added a comment to T4315: Telegraf - Output to prometheus.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1315
zsdc changed the status of T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size from Open to In progress.
PR for 1.3: https://github.com/vyos/vyos-build/pull/231
PR for 1.4: https://github.com/vyos/vyos-build/pull/230
Viacheslav moved T4315: Telegraf - Output to prometheus from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T4414: Add route-map "as-path prepend last-as x" option.
In 1.4 it working
set policy route-map FOO rule 10 action 'permit' set policy route-map FOO rule 10 set as-path-prepend 'last-as 2'
dtoux added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
I've creatred a pull request for the above - https://github.com/vyos/vyos-1x/pull/1313
May 4 2022
May 4 2022
c-po updated the task description for T4412: commit archive: reboot not working with sftp.
c-po updated the task description for T4412: commit archive: reboot not working with sftp.
c-po updated the task description for T4412: commit archive: reboot not working with sftp.
dtoux updated the task description for T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
Viacheslav added a comment to T4410: Telegraf - Output to Splunk.
Viacheslav renamed T4411: Add migration for service monitoring telegraf influxdb from Add migration for service monitoring influxdb to Add migration for service monitoring telegraf influxdb.
Viacheslav changed the status of T4315: Telegraf - Output to prometheus from In progress to Needs testing.
Viacheslav added a comment to T4362: Wan Load Balancing - Can't create routing tables.
I can't reproduce it
With such configuration all works fine VyOS 1.4-rolling-202204300743:
set load-balancing wan interface-health eth4 failure-count '5' set load-balancing wan interface-health eth4 nexthop 'dhcp' set load-balancing wan interface-health eth4 success-count '1' set load-balancing wan interface-health eth4 test 10 target '192.0.2.40' set load-balancing wan interface-health eth5 failure-count '5' set load-balancing wan interface-health eth5 nexthop 'dhcp' set load-balancing wan interface-health eth5 success-count '1' set load-balancing wan interface-health eth5 test 10 target '192.0.2.50' set load-balancing wan interface-health eth6 failure-count '5' set load-balancing wan interface-health eth6 nexthop 'dhcp' set load-balancing wan interface-health eth6 success-count '1' set load-balancing wan interface-health eth6 test 10 target '192.0.2.60' set load-balancing wan rule 10 failover set load-balancing wan rule 10 inbound-interface 'eth7' set load-balancing wan rule 10 interface eth4 set load-balancing wan rule 10 interface eth5 set load-balancing wan rule 10 interface eth6 set load-balancing wan rule 10 protocol 'all' set load-balancing wan sticky-connections
Viacheslav added a comment to T4408: Add sshguard to protect against brut-forces.
Configuration
# cat /etc/sshguard/sshguard.conf #### REQUIRED CONFIGURATION #### # Full path to backend executable (required, no default) BACKEND="/usr/lib/x86_64-linux-gnu/sshg-fw-nft-sets"
May 3 2022
May 3 2022
blackhole added a comment to T4362: Wan Load Balancing - Can't create routing tables.
If it helps, I am also getting the exact same errors and problems, would love to see this working please
Viacheslav changed the status of T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI from In progress to Needs testing.
zsdc changed the status of T4407: Network-config v2 is broken in Cloud-init 22.1 and VyOS 1.3 from Open to Needs testing.
Resolved in https://github.com/vyos/vyos-cloud-init/pull/54
dtoux added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
Also, these routes getting an administrative distance of 1, which is impossible to override. I believe the default route from DHCP normally has 210 which is manageable. So, the quick workaround could be increasing distance of these routes.
dtoux added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
r24:/home/dtoubelis# cat /var/lib/dhcp/dhclient_eth4.leases
lease {
interface "eth4";
fixed-address 100.123.57.53;
option subnet-mask 255.192.0.0;
option relay-agent-information 1:4:0:0:4:cf:5:4:64:40:0:1:97:8:1:0:14:ed:0:0:14:ed:98:0;
option dhcp-lease-time 300;
option routers 100.64.0.1;
option dhcp-message-type 5;
option domain-name-servers 1.1.1.1,8.8.8.8;
option dhcp-server-identifier 100.64.0.1;
option interface-mtu 1500;
option rfc3442-classless-static-routes 32,192,168,100,1,0,0,0,0,32,34,120,255,244,0,0,0,0,0,100,64,0,1;
renew 2 2022/05/03 12:42:00;
rebind 2 2022/05/03 12:44:26;
expire 2 2022/05/03 12:45:04;
}
lease {
interface "eth4";
fixed-address 100.123.57.53;
option subnet-mask 255.192.0.0;
option relay-agent-information 1:4:0:0:4:cf:5:4:64:40:0:1:97:8:1:0:14:ed:0:0:14:ed:98:0;
option dhcp-lease-time 300;
option routers 100.64.0.1;
option dhcp-message-type 5;
option domain-name-servers 1.1.1.1,8.8.8.8;
option dhcp-server-identifier 100.64.0.1;
option interface-mtu 1500;
option rfc3442-classless-static-routes 32,192,168,100,1,0,0,0,0,32,34,120,255,244,0,0,0,0,0,100,64,0,1;
renew 2 2022/05/03 12:46:34;
rebind 2 2022/05/03 12:48:50;
expire 2 2022/05/03 12:49:28;
}
lease {
interface "eth4";
fixed-address 100.123.57.53;
option subnet-mask 255.192.0.0;
option relay-agent-information 1:4:0:0:4:cf:5:4:64:40:0:1:97:8:1:0:14:ed:0:0:14:ed:98:0;
option dhcp-lease-time 300;
option routers 100.64.0.1;
option dhcp-message-type 5;
option domain-name-servers 1.1.1.1,8.8.8.8;
option dhcp-server-identifier 100.64.0.1;
option interface-mtu 1500;
option rfc3442-classless-static-routes 32,192,168,100,1,0,0,0,0,32,34,120,255,244,0,0,0,0,0,100,64,0,1;
renew 2 2022/05/03 12:51:33;
rebind 2 2022/05/03 12:53:25;
expire 2 2022/05/03 12:54:03;
}
...
}Viacheslav added a comment to T4315: Telegraf - Output to prometheus.
Prometheus server pulls information correctly
Viacheslav added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
Could you also provide cat /var/lib/dhcp/dhclient_eth4.leases ?
no-default-route ignore just option routers and don't touch other options like classless-static-routes
https://github.com/vyos/vyos-1x/blob/2c29a3b3b46c7570f4a509f413b208348c0ce647/data/templates/dhcp-client/ipv4.tmpl#L18-L19
dtoux added a comment to T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
Below is a packet capture from DHCP exchange:
It seems that option 121 has more than one route. Could this be causing the abnormal behavior?
May 2 2022
May 2 2022
Viacheslav added a comment to T4315: Telegraf - Output to prometheus.
c-po added a comment to T4385: bgp: peer-group member cannot override remote-as of peer-group.
We also need to verify remote-as in v6only or interface definitions:
c-po reopened T4385: bgp: peer-group member cannot override remote-as of peer-group as "In progress".
wornet-mwo added a comment to T4403: Charon hangs at 100% CPU when many routes are present.
Done some further research about rt_netlink and charon relationship. As described in the docs of Strongswan the option charon.process_route = no helps and is a good workaround if the destination is always reachable over a known specific interface (i think it can be an issue if wan load-balancing etc. is used).
v.huti added a comment to T4394: Improve VYOS_DEBUG profiling support.
There was some effort to introduce profiling into the system before, but nothing was developed.
The ticket was opened to verify that the timing values displayed in /var/log/vyatta are correct.
The vyos-debug flag enables tracing for actions described in the templates.
This will be a step-by-step walkthrough of the system profiling, as I have found this to have a bunch of non-obvious technical nuances that might get you stuck.
May 1 2022
May 1 2022
c-po moved T4363: salt-minion: default mine_interval option is not set from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
dmbaturin renamed T4402: OpenVPN client-ip-pool option is broken from OpenVPN ifconfig-pool option is broken to OpenVPN client-ip-pool option is broken.
c-po closed T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node as Resolved.
c-po moved T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 30 2022
Apr 30 2022
Apr 29 2022
Apr 29 2022
c-po moved T4366: geneve: interface is removed on changes to e.g. description from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4388: dhcp-server: missing constraint on tftp-server-name option from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
n.fort reassigned T4377: generate tech-support archive includes previous archives from n.fort to m.korobeinikov.