Page MenuHomeVyOS Platform
Feed All Stories

Mon, Aug 1

c-po added a comment to T4579: bridge: can not delete member interface CLI option when VLAN is enabled.

VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450

Mon, Aug 1, 5:23 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450

Mon, Aug 1, 5:23 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
NikolayP added a comment to T4581: 'show system cpu' not working.

PR:
https://github.com/vyos/vyos-1x/pull/1449

Mon, Aug 1, 2:54 AM · VyOS 1.4 Sagitta
NikolayP claimed T4581: 'show system cpu' not working.
Mon, Aug 1, 2:30 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4581: 'show system cpu' not working.
Mon, Aug 1, 2:12 AM · VyOS 1.4 Sagitta
Viacheslav added a parent task for T4581: 'show system cpu' not working: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Mon, Aug 1, 2:12 AM · VyOS 1.4 Sagitta
NikolayP changed the status of T4581: 'show system cpu' not working from Open to Confirmed.

Confirmed
VyOS 1.4-rolling-202207240217

Mon, Aug 1, 1:45 AM · VyOS 1.4 Sagitta

Sun, Jul 31

initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Sun, Jul 31, 10:28 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Sun, Jul 31, 10:16 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
initramfs created T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Sun, Jul 31, 10:12 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
roedie created T4581: 'show system cpu' not working.
Sun, Jul 31, 7:42 PM · VyOS 1.4 Sagitta
jestabro closed T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation, a subtask of T4554: Implement GraphQL resolvers for standardized op-mode scripts, as Resolved.
Sun, Jul 31, 7:36 PM · VyOS 1.4 Sagitta
jestabro closed T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation as Resolved.
Sun, Jul 31, 7:36 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T4554: Implement GraphQL resolvers for standardized op-mode scripts: T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation.
Sun, Jul 31, 2:21 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation: T4554: Implement GraphQL resolvers for standardized op-mode scripts.
Sun, Jul 31, 2:21 PM · VyOS 1.4 Sagitta
jestabro triaged T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation as Normal priority.
Sun, Jul 31, 2:21 PM · VyOS 1.4 Sagitta
jestabro changed the subtype of T4554: Implement GraphQL resolvers for standardized op-mode scripts from "Task" to "Enhancement".
Sun, Jul 31, 2:17 PM · VyOS 1.4 Sagitta
jestabro changed the subtype of T4544: Generate schema definitions from standardized op-mode scripts from "Task" to "Enhancement".
Sun, Jul 31, 2:17 PM · VyOS 1.4 Sagitta
c-po moved T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Sun, Jul 31, 6:41 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Sun, Jul 31, 6:41 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
Sun, Jul 31, 6:41 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
Sun, Jul 31, 6:41 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Sun, Jul 31, 6:40 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Sun, Jul 31, 6:40 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
samip537 added a comment to T160: Support NAT64.

Just adding here that Jool.mx is no longer maintained.

Sun, Jul 31, 3:58 AM · VyOS 1.4 Sagitta

Sat, Jul 30

c-po moved T4515: Reduce telegraf binary size from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Sat, Jul 30, 6:36 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4515: Reduce telegraf binary size.

PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/251

Sat, Jul 30, 6:36 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po edited projects for T4511: IPv6 DNS lookup, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.0).
Sat, Jul 30, 6:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4511: IPv6 DNS lookup from Need Triage to Backlog on the VyOS 1.3 Equuleus (1.3.0) board.
Sat, Jul 30, 6:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po moved T4511: IPv6 DNS lookup from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
Sat, Jul 30, 6:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po claimed T4579: bridge: can not delete member interface CLI option when VLAN is enabled.
Sat, Jul 30, 5:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po created T4579: bridge: can not delete member interface CLI option when VLAN is enabled.
Sat, Jul 30, 5:25 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T4423: `reset dns forwarding all` can't clear all dns cache.

@dongjunbo What do you mean?
Could you send a real example? I don't see any issues.

Sat, Jul 30, 1:53 PM · VyOS 1.3 Equuleus ( 1.3.1)
Viacheslav changed the subtype of T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination from "Bug" to "Feature Request".
Sat, Jul 30, 1:48 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Sat, Jul 30, 1:45 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format from Open to In progress.
Sat, Jul 30, 1:45 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4578: Rewrite show dns forwarding statistics to new format.

PR https://github.com/vyos/vyos-1x/pull/1446

[email protected]:~$ show dns forwarding statistics 
Cache entries    Max cache entries    Cache size
---------------  -------------------  ------------
71               10000                20.22 kbytes
[email protected]:~$

Raw:

[email protected]:~$ /usr/libexec/vyos/op_mode/dns.py show_forwarding_statistics --raw
{
    "aggressive-nsec-cache-entries": "0",
    "aggressive-nsec-cache-nsec-hits": "0",
    "aggressive-nsec-cache-nsec-wc-hits": "0",
    "aggressive-nsec-cache-nsec3-hits": "0",
    "aggressive-nsec-cache-nsec3-wc-hits": "0",
    "all-outqueries": "48",
    "answers-slow": "0",
    "answers0-1": "0",
    "answers1-10": "0",
    "answers10-100": "0",
    "answers100-1000": "0",
    "auth-zone-queries": "0",
    "auth4-answers-slow": "0",
    "auth4-answers0-1": "0",
    "auth4-answers1-10": "0",
    "auth4-answers10-100": "20",
    "auth4-answers100-1000": "9",
    "auth6-answers-slow": "0",
    "auth6-answers0-1": "19",
    "auth6-answers1-10": "0",
    "auth6-answers10-100": "0",
    "auth6-answers100-1000": "0",
    "cache-entries": "71",
    "cache-hits": "0",
    "cache-misses": "0",
    "case-mismatches": "0",
    "chain-resends": "0",
    "client-parse-errors": "0",
    "concurrent-queries": "0",
    "cpu-iowait": "10857",
    "cpu-msec-thread-0": "1242",
    "cpu-steal": "672",
    "dlg-only-drops": "0",
    "dnssec-authentic-data-queries": "0",
    "dnssec-check-disabled-queries": "0",
    "dnssec-queries": "0",
    "dnssec-result-bogus": "0",
    "dnssec-result-bogus-invalid-denial": "0",
    "dnssec-result-bogus-invalid-dnskey-protocol": "0",
    "dnssec-result-bogus-missing-negative-indication": "0",
    "dnssec-result-bogus-no-rrsig": "0",
    "dnssec-result-bogus-no-valid-dnskey": "0",
    "dnssec-result-bogus-no-valid-rrsig": "0",
    "dnssec-result-bogus-no-zone-key-bit-set": "0",
    "dnssec-result-bogus-revoked-dnskey": "0",
    "dnssec-result-bogus-self-signed-ds": "0",
    "dnssec-result-bogus-signature-expired": "0",
    "dnssec-result-bogus-signature-not-yet-valid": "0",
    "dnssec-result-bogus-unable-to-get-dnskeys": "0",
    "dnssec-result-bogus-unable-to-get-dss": "0",
    "dnssec-result-bogus-unsupported-dnskey-algo": "0",
    "dnssec-result-bogus-unsupported-ds-digest-type": "0",
    "dnssec-result-indeterminate": "0",
    "dnssec-result-insecure": "0",
    "dnssec-result-nta": "0",
    "dnssec-result-secure": "5",
    "dnssec-validations": "5",
    "dont-outqueries": "0",
    "ecs-queries": "0",
    "ecs-responses": "0",
    "edns-ping-matches": "0",
    "edns-ping-mismatches": "0",
    "empty-queries": "0",
    "failed-host-entries": "0",
    "fd-usage": "18",
    "ignored-packets": "0",
    "ipv6-outqueries": "19",
    "ipv6-questions": "0",
    "malloc-bytes": "0",
    "max-cache-entries": "10000",
    "max-mthread-stack": "0",
    "max-packetcache-entries": "500000",
    "negcache-entries": "4",
    "no-packet-error": "0",
    "nod-lookups-dropped-oversize": "0",
    "noedns-outqueries": "0",
    "noerror-answers": "0",
    "noping-outqueries": "0",
    "nsset-invalidations": "0",
    "nsspeeds-entries": "0",
    "nxdomain-answers": "0",
    "outgoing-timeouts": "0",
    "outgoing4-timeouts": "0",
    "outgoing6-timeouts": "0",
    "over-capacity-drops": "0",
    "packetcache-entries": "0",
    "packetcache-hits": "0",
    "packetcache-misses": "0",
    "policy-drops": "0",
    "policy-result-custom": "0",
    "policy-result-drop": "0",
    "policy-result-noaction": "0",
    "policy-result-nodata": "0",
    "policy-result-nxdomain": "0",
    "policy-result-truncate": "0",
    "proxy-protocol-invalid": "0",
    "qa-latency": "0",
    "qname-min-fallback-success": "0",
    "query-pipe-full-drops": "0",
    "questions": "0",
    "real-memory-usage": "21766144",
    "rebalanced-queries": "0",
    "record-cache-acquired": "1086473",
    "record-cache-contended": "0",
    "resource-limits": "19",
    "security-status": "1",
    "server-parse-errors": "0",
    "servfail-answers": "0",
    "spoof-prevents": "0",
    "sys-msec": "1853",
    "taskqueue-expired": "0",
    "taskqueue-pushed": "0",
    "taskqueue-size": "0",
    "tcp-client-overflow": "0",
    "tcp-clients": "0",
    "tcp-outqueries": "0",
    "tcp-questions": "0",
    "throttle-entries": "0",
    "throttled-out": "0",
    "throttled-outqueries": "0",
    "too-old-drops": "0",
    "truncated-drops": "0",
    "udp-in-errors": "0",
    "udp-noport-errors": "0",
    "udp-recvbuf-errors": "0",
    "udp-sndbuf-errors": "0",
    "unauthorized-tcp": "0",
    "unauthorized-udp": "0",
    "unexpected-packets": "0",
    "unreachables": "0",
    "uptime": "8820",
    "user-msec": "621",
    "variable-responses": "0",
    "x-our-latency": "0",
    "x-ourtime-slow": "0",
    "x-ourtime0-1": "0",
    "x-ourtime1-2": "0",
    "x-ourtime16-32": "0",
    "x-ourtime2-4": "0",
    "x-ourtime4-8": "0",
    "x-ourtime8-16": "0",
    "cache-size": "20.22"
}
Sat, Jul 30, 1:42 PM · VyOS 1.4 Sagitta
Viacheslav claimed T4578: Rewrite show dns forwarding statistics to new format.
Sat, Jul 30, 11:17 AM · VyOS 1.4 Sagitta
Viacheslav created T4578: Rewrite show dns forwarding statistics to new format.
Sat, Jul 30, 11:17 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3496: show conntrack-sync statistics shows a warning.

I can't reproduce it (VyOS 1.4-rolling-202207280217):

Sat, Jul 30, 11:08 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4446: Unified CLI for displaying neithbors (ARP, IP, and NDP).
Sat, Jul 30, 10:37 AM · VyOS 1.4 Sagitta
Viacheslav added a parent task for T4446: Unified CLI for displaying neithbors (ARP, IP, and NDP): T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Sat, Jul 30, 10:37 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any', a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Sat, Jul 30, 10:25 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any' from In progress to Needs testing.
Sat, Jul 30, 10:25 AM · VyOS 1.4 Sagitta
Viacheslav closed T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output as Resolved.
Sat, Jul 30, 9:38 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4570: Exception when trying to set up VXLAN over Wireguard from In progress to Needs testing.
Sat, Jul 30, 9:37 AM · VyOS 1.4 Sagitta
Viacheslav closed T4545: Rewrite show nat source rules, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Sat, Jul 30, 9:35 AM · VyOS 1.4 Sagitta
Viacheslav closed T4545: Rewrite show nat source rules as Resolved.
Sat, Jul 30, 9:35 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4569: Rewrite show bridge to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Sat, Jul 30, 9:33 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4569: Rewrite show bridge to new format from In progress to Needs testing.
Sat, Jul 30, 9:33 AM · VyOS 1.4 Sagitta
Viacheslav closed T4562: Rewrite show vrf to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Sat, Jul 30, 9:31 AM · VyOS 1.4 Sagitta
Viacheslav closed T4562: Rewrite show vrf to new format as Resolved.
Sat, Jul 30, 9:31 AM · VyOS 1.4 Sagitta
Viacheslav closed T4543: Show source nat statistics shows incorrect interface, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Sat, Jul 30, 9:29 AM · VyOS 1.4 Sagitta
Viacheslav closed T4543: Show source nat statistics shows incorrect interface as Resolved.
Sat, Jul 30, 9:29 AM · VyOS 1.4 Sagitta
Viacheslav closed T4532: Flow-accounting IPv6 server/receiver bug as Resolved.
Sat, Jul 30, 9:28 AM · VyOS 1.3 Equuleus (1.3.2)
Viacheslav closed T4503: Prevent op mode scripts from restarting services if there's a commit in progress as Resolved.
Sat, Jul 30, 9:23 AM · VyOS 1.4 Sagitta
Viacheslav closed T4411: Add migration for service monitoring telegraf influxdb as Resolved.
Sat, Jul 30, 9:20 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4089: Show nat destination rules shows ip address instead of interface 'any'.

PR https://github.com/vyos/vyos-1x/pull/1445

[email protected]:~$ show nat destination rules 
Rule    Source     Destination    Proto    In-Int    Translation
------  ---------  -------------  -------  --------  -------------
100     0.0.0.0/0  0.0.0.0/0      TCP      eth0      192.0.2.40
        sport any  dport 3389                        port 80
380     0.0.0.0/0  203.0.113.5    TCP      any       192.0.2.5
        sport any  dport 443                         port 8443
[email protected]:~$
Sat, Jul 30, 9:11 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any', a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Sat, Jul 30, 8:52 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any' from Open to In progress.
Sat, Jul 30, 8:52 AM · VyOS 1.4 Sagitta
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

Working as expected in VyOS 1.3.1-S1

Sat, Jul 30, 8:12 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID.

Change DUID to IAID_DUAID was in T1470
Not sure which format we should to use

Sat, Jul 30, 8:08 AM · VyOS 1.3 Equuleus (1.3.3)
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

It's applied but masked by another part, looking into it. A brief workaround is to just change the description on br0 and commit - then the bridge vlan is re-created.

Sat, Jul 30, 7:32 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

@c-po Bug exists after reboot (tested in 1.4)

Sat, Jul 30, 7:05 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

@Viacheslav can you save your config and reboot?

Sat, Jul 30, 6:50 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4549: Email notification functionality.

We have ssmtp, I think we can use it for notifications
There is an example of configuration
Need to test it and come up with a CLI
I don't know if should it be a part of set service event-handler xxx or some new CLI service like set service monitoring notification mail xxx

Sat, Jul 30, 6:46 AM · VyOS 1.4 Sagitta
Viacheslav renamed T4549: Email notification functionality from Email functionality to Email notification functionality.
Sat, Jul 30, 6:37 AM · VyOS 1.4 Sagitta
NikolayP added a comment to T4074: Add NETCONF server with YANG data modeling .

+1
OpenConfig should be used as a basic YANG model.
If something is missing, add proprietary ones
https://www.openconfig.net/

Sat, Jul 30, 5:53 AM · VyOS 1.4 Sagitta
NikolayP changed the status of T4542: route-map: "match prefix-len" incorrect behavior from Confirmed to Needs testing.

If "notice" in CLI and documentation is enough, the task can be closed.

Sat, Jul 30, 4:59 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4577: WWAN commit failed which simple config from Open to Needs testing.
Sat, Jul 30, 3:55 AM · VyOS 1.4 Sagitta

Fri, Jul 29

jestabro closed T4554: Implement GraphQL resolvers for standardized op-mode scripts, a subtask of T4544: Generate schema definitions from standardized op-mode scripts, as Resolved.
Fri, Jul 29, 6:47 PM · VyOS 1.4 Sagitta
jestabro closed T4554: Implement GraphQL resolvers for standardized op-mode scripts as Resolved.
Fri, Jul 29, 6:47 PM · VyOS 1.4 Sagitta
jestabro closed T4544: Generate schema definitions from standardized op-mode scripts, a subtask of T2719: Standardized op mode script structure, as Resolved.
Fri, Jul 29, 6:47 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro closed T4544: Generate schema definitions from standardized op-mode scripts, a subtask of T3993: Extend HTTP API GraphQL support, as Resolved.
Fri, Jul 29, 6:47 PM · VyOS 1.3 Equuleus (1.3.2)
jestabro closed T4544: Generate schema definitions from standardized op-mode scripts as Resolved.
Fri, Jul 29, 6:47 PM · VyOS 1.4 Sagitta
Viacheslav closed T4518: Add XML for CLI conf mode load-balancing wan , a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
Fri, Jul 29, 6:26 PM · VyOS 1.4 Sagitta
Viacheslav closed T4518: Add XML for CLI conf mode load-balancing wan as Resolved.
Fri, Jul 29, 6:26 PM · VyOS 1.4 Sagitta
Viacheslav renamed T4089: Show nat destination rules shows ip address instead of interface 'any' from Show nat rules shows ip address instead of interface 'any' to Show nat destination rules shows ip address instead of interface 'any'.
Fri, Jul 29, 3:00 PM · VyOS 1.4 Sagitta
tjjh89017 added a comment to T4577: WWAN commit failed which simple config.

PR: https://github.com/vyos/vyos-1x/pull/1444

Fri, Jul 29, 2:46 PM · VyOS 1.4 Sagitta
tjjh89017 created T4577: WWAN commit failed which simple config.
Fri, Jul 29, 2:42 PM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T4564: Root task for rewriting [op-mode] to vyos.opmode format: T4089: Show nat destination rules shows ip address instead of interface 'any'.
Fri, Jul 29, 2:40 PM · VyOS 1.4 Sagitta
Viacheslav added a parent task for T4089: Show nat destination rules shows ip address instead of interface 'any': T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Fri, Jul 29, 2:40 PM · VyOS 1.4 Sagitta
n.fort added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..

Moving in from forwardto prerouting doesn't seem to be a good idea. Filtering in prerouting will also filter local traffic.
Also, as remarked in previous entry, I would try to avoid using marks in mangle, since it may lead to mayor problems/incompatibilities when PBR also present in configuration.

Fri, Jul 29, 2:27 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T4562: Rewrite show vrf to new format.
Fri, Jul 29, 2:07 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4562: Rewrite show vrf to new format.

PR https://github.com/vyos/vyos-1x/pull/1443

[email protected]:~$ show vrf foo
Name    State    MAC address        Flags                     Interfaces
------  -------  -----------------  ------------------------  ------------
foo     up       aa:de:40:58:2e:dd  noarp,master,up,lower_up  eth1.2
[email protected]:~$ 
[email protected]:~$ 
[email protected]:~$ 
[email protected]:~$ /usr/libexec/vyos/op_mode/vrf.py show --name bar --raw
[
    {
        "ifname": "bar",
        "operstate": "UP",
        "address": "ce:c1:4f:e8:dc:9a",
        "flags": [
            "NOARP",
            "MASTER",
            "UP",
            "LOWER_UP"
        ]
    }
]
[email protected]:~$
Fri, Jul 29, 2:06 PM · VyOS 1.4 Sagitta
aserkin created T4576: vpn l2tp logging level configuration.
Fri, Jul 29, 10:13 AM · VyOS 1.4 Sagitta

Thu, Jul 28

Viacheslav changed the status of T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output from Open to In progress.
Thu, Jul 28, 11:54 PM · VyOS 1.4 Sagitta
Viacheslav renamed T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output from vyos.utill add new wrapper "rc_cmd" to get te return code and output to vyos.utill add new wrapper "rc_cmd" to get the return code and output.
Thu, Jul 28, 11:21 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output.

PR https://github.com/vyos/vyos-1x/pull/1442

>>> from vyos.util import rc_cmd
>>>
>>> rc_cmd('uname')
(0, 'Linux')
>>> 
>>> rc_cmd('ip link show dev fake')
(1, 'Device "fake" does not exist.')
>>>

Ex2

>>> rc, command = rc_cmd('ip link show dev eth999')
>>> 
>>> 
>>> print(rc)
1
>>> print(command)
Device "eth999" does not exist.
>>>
Thu, Jul 28, 11:13 PM · VyOS 1.4 Sagitta
Viacheslav changed the subtype of T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output from "Bug" to "Feature Request".
Thu, Jul 28, 10:57 PM · VyOS 1.4 Sagitta
Viacheslav created T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output.
Thu, Jul 28, 10:50 PM · VyOS 1.4 Sagitta
zsdc added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..

True, marking packets can help. I would only be very careful because we use marks a lot for PBR, LB, etc. Not sure if they can conflict with each other. Also, the performance is the question - better to check how marking each packet on an interface affects it.

Thu, Jul 28, 9:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
aderouineau added a comment to T4570: Exception when trying to set up VXLAN over Wireguard.

The reason I set an MTU is because I get the following error when unset:

WARNING: RFC7348 recommends VXLAN tunnels preserve a 1500 byte MTU
Thu, Jul 28, 5:58 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4551: IPsec rekeying collisions bug.

VyOS 1.3-stable-202207280515 is not affected and works as expected

[email protected]:~$ show vpn ipsec sa
Connection                 State    Uptime    Bytes In/Out    Packets In/Out    Remote address    Remote ID    Proposal
-------------------------  -------  --------  --------------  ----------------  ----------------  -----------  --------------
peer-192.0.2.2-tunnel-0    up       9s        0B/0B           0/0               192.0.2.2         N/A          AES_GCM_16_256
peer-2001:db8::2-tunnel-0  up       9s        0B/0B           0/0               2001:db8::2       N/A          AES_GCM_16_256
[email protected]:~$
Thu, Jul 28, 5:45 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .

I have it working between VyOS 1.4-rolling-202207280217 (kernel 5.10.133) and VyOS 1.3-stable-202207280515 (kernel 5.4.205)

Thu, Jul 28, 5:36 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.

Will it works if you replace this https://github.com/vyos/vyos-1x/blob/4168e03721b2a9595de4090fddf1280d39ccce4c/python/vyos/ifconfig/interface.py#L1378-L1379
with:

# MTU - Maximum Transfer Unit
#if 'mtu' in config:
#    self.set_mtu(config.get('mtu'))
if 'mtu' in config and 'dhcp' not in new_addr:
    self.set_mtu(config.get('mtu'))
Thu, Jul 28, 4:46 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav changed the status of T4562: Rewrite show vrf to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to Needs testing.
Thu, Jul 28, 3:59 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4562: Rewrite show vrf to new format from Open to Needs testing.
Thu, Jul 28, 3:59 PM · VyOS 1.4 Sagitta
jestabro updated the task description for T4554: Implement GraphQL resolvers for standardized op-mode scripts.
Thu, Jul 28, 2:10 PM · VyOS 1.4 Sagitta
Viacheslav renamed T4551: IPsec rekeying collisions bug from IPsec rekeying collisions with IPv6 peers to IPsec rekeying collisions bug.
Thu, Jul 28, 1:55 PM · VyOS 1.4 Sagitta