Resolved in T4664: merged in Sagitta; backport candidate for Equuleus 1.3.3.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Sep 5 2022
Sep 5 2022
n.fort changed the status of T4651: Firewall - Add options to match packet size from In progress to Needs testing.
jestabro closed T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces as Resolved.
jestabro changed the status of T4664: Add validation to reject whitespace in tag node value names, a subtask of T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces, from In progress to Backport candidate.
jestabro changed the status of T4664: Add validation to reject whitespace in tag node value names from In progress to Backport candidate.
vyos@vyos:~$ sudo bridge -c vlan show
port vlan-id
eth0 10
20
eth1 10
20
br0 1 PVID Egress Untaggeddmbaturin renamed T4653: Interface offload options are not applied correctly from Interface offload options not being applied correctly to Interface offload options are not applied correctly.
dmbaturin renamed T4632: VLAN-aware bridge not working from Vlan aware bridge not working to VLAN-aware bridge not working.
dmbaturin set Is it a breaking change? to compatible on T1375: Add clear dhcp server lease function.
dmbaturin changed Is it a breaking change? from none to compatible on T3714: Some sysctl custom parameters disappear after reboot.
dmbaturin changed Issue type from internal to bug on T4324: wwan: check alive script should only be run via cron if a wwan interface is configured at all.
dmbaturin changed Is it a breaking change? from none to compatible on T4350: DMVPN opennhrp spokes dont work behind NAT.
dmbaturin changed Is it a breaking change? from none to compatible on T4405: DHCP client sometimes ignores `no-default-route` option of an interface.
dmbaturin changed Is it a breaking change? from none to compatible on T4510: set system static-host-mapping doesn't allow IPv4 and IPv6 for same name..
initramfs added a comment to T4668: Adding/removing members from bond doesn't work/results in incorrect interface state.
The smoketest seems suspect, the error line has nothing to do with this issue and running the smoketest several times results in tests passing/failing arbitrarily on that line (across multiple tests).
Viacheslav added a comment to T4668: Adding/removing members from bond doesn't work/results in incorrect interface state.
It seems can't pass smoketest
05:47:04 DEBUG - ====================================================================== 05:47:04 DEBUG - FAIL: test_add_multiple_ip_addresses (__main__.BondingInterfaceTest) 05:47:04 DEBUG - ---------------------------------------------------------------------- 05:47:04 DEBUG - Traceback (most recent call last): 05:47:04 DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/base_interfaces_test.py", line 109, in tearDown 05:47:04 DEBUG - self.assertFalse(process_named_running(daemon)) 05:47:04 DEBUG - AssertionError: 8769 is not false 05:47:04 DEBUG - 05:47:04 DEBUG - ------------------
Viacheslav closed T4655: Firewall in 1.4 sets the default action 'accept' instead of 'drop' as Resolved.
Sep 4 2022
Sep 4 2022
c-po moved T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
c-po added a comment to T4630: Prevent attempts to use the same interface as a source interface for pseudo-ethernet and MACsec at the same time.
PR for VyOS 1.3 https://github.com/vyos/vyos-1x/pull/1519
Sep 3 2022
Sep 3 2022
PR for 1.3 https://github.com/vyos/vyos-build/pull/260
c-po added a project to T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584: VyOS 1.3 Equuleus (1.3.3).
c-po changed the status of T4630: Prevent attempts to use the same interface as a source interface for pseudo-ethernet and MACsec at the same time from Open to Needs testing.
Initial draft; suggested changes and testing to follow:
jestabro changed the status of T4669: Extend numeric.ml for inversion of values and range values from Open to In progress.
Unknown Object (User) added a comment to T3900: Add support for raw tables to firewall.
In T3900#133375, @Viacheslav wrote:Regarding interface groups it will be possible later, after firewall re-design
Viacheslav changed the status of T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584 from Open to Needs testing.
Sep 2 2022
Sep 2 2022
chenxiaolong added a comment to T4127: Upgrading from pre-certstore image to certstore image does not handle CA files with multiple certs.
In case anyone comes across this bug report, I submitted a couple PRs to fix this earlier this year: https://phabricator.vyos.net/T4245
chenxiaolong added a project to T4666: EAP-TLS no longer allows TLSv1.0 after T4537, T4584: VyOS 1.4 Sagitta.
I've submitted a PR to reintroduce the patch: https://github.com/vyos/vyos-build/pull/259
Viacheslav changed the status of T4665: Keepalived cannot use same VRID for VRRPv2 and VRRPv3 from In progress to Needs testing.
@daryll-swer For your use case, you can use your tables/chains (not standard names like RAW/MANGLE INPUT/OUTPUT etc.), that won't be cleared by the VyOS firewall CLI
nft add table MYRAW
nft -- add chain ip MYRAW my_chain '{ type filter hook prerouting priority raw; policy accept; }'
nft add rule ip MYRAW my_chain ip saddr 192.0.2.5 counter droproedie added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
In case of filtering on a VRF, would it be an idea to use the MAC address instead of the interface name in the rule?
Unknown Object (User) updated subscribers of T3900: Add support for raw tables to firewall.
Has there been any updates on this? @Viacheslav, it would be great to have this functionality on VyOS.
Viacheslav edited projects for T4668: Adding/removing members from bond doesn't work/results in incorrect interface state, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
An example of dict that we can use
{
"images": {
"rolling": {
"latest": {
"arch": "amd64",
"flavors": ["azure"],
"image": "vyos-rolling-latest.iso",
"latest": True,
"lts": False,
"release_date": "2022-09-02",
"release_train": "sagitta",
"version": "1.4-rolling-202209020217"
},
"1.4-rolling-202209020217": {
"arch": "amd64",
"flavors": ["generic"],
"image": "vyos-1.4-rolling-202209020217-amd64.iso",
"latest": True,
"lts": False,
"release_date": "2022-09-02",
"release_train": "sagitta",
"version": "1.4-rolling-202209020217"
},
"1.4-rolling-202208291850": {
"arch": "amd64",
"flavors": ["openstack"],
"image": "vyos-1.4-rolling-202208291850-amd64.iso",
"latest": False,
"lts": False,
"release_date": "2022-08-29",
"release_train": "sagitta",
"version": "1.4-rolling-20220829850"
}
},
"lts": {
"latest": {
"arch": "amd64",
"flavors": ["generic"],
"image": "vyos-1.3-x.iso",
"latest": True,
"lts": True,
"release_date": "2022-xx-xx",
"release_train": "equuleus",
"version": "1.3-stable-202208230511"
}
}
}
}initramfs updated the task description for T4668: Adding/removing members from bond doesn't work/results in incorrect interface state.
Viacheslav changed the subtype of T4668: Adding/removing members from bond doesn't work/results in incorrect interface state from "Task" to "Bug".
I will modify the docs.
Could be a part of T4118
Sep 1 2022
Sep 1 2022
1.3 is not affected by this bug
Viacheslav changed the status of T4665: Keepalived cannot use same VRID for VRRPv2 and VRRPv3 from Open to In progress.
jestabro added a comment to T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces.
This will be resolved by the PR in T4664.
Viacheslav changed the status of T4663: Interface pseudo-ethernet does not change mode from Open to In progress.
I do see I need to update the docs. Will do if this change is going to be merged.
Need an advice guys, how we can reproduce the problem. I tried to peer with bird and announced 100k prefixes to the vyos box, but this simple config did not cause memory leak with bgpd. Still trying
I also notice looking at the backup after another reboot:
I hate to drag up an old ticket, but I've just encountered this issue.
A freshly built VyOS 1.3-rolling-202209010158
Aug 31 2022
Aug 31 2022
jestabro changed the status of T4664: Add validation to reject whitespace in tag node value names from Open to In progress.
A similar task T3541 I'll leave a link here
Maybe I'm wrong, I see it as some small API (on some hosts) without links to the images but with information about images (in JSON).
We compare our local VyOS version and the version that we get from API, if diff => true send a message to the "wall"
Viacheslav added a comment to T4655: Firewall in 1.4 sets the default action 'accept' instead of 'drop'.
Smoketest can't pass policy route
Fix https://github.com/vyos/vyos-1x/pull/1512
jack9603301 changed Is it a breaking change? from none to compatible on T4659: Use vtysh to display bridge and some interface parameter information.
Viacheslav closed T4547: Show vpn ipsec sa show unexpected prefix 'B' in packets, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav closed T4569: Rewrite show bridge to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav closed T4650: Rewire show nat translation to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav changed the status of T4367: NAT - Config tmp file not available from In progress to Needs testing.
jack9603301 moved T4659: Use vtysh to display bridge and some interface parameter information from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
Unknown Object (User) created T4662: -.
Unknown Object (User) created T4661: -.
Demon_H changed the status of T4656: Support the listen-host config field of openconnect server from Open to In progress.
Viacheslav updated the task description for T4564: Root task for rewriting [op-mode] to vyos.opmode format.
jack9603301 changed the status of T4659: Use vtysh to display bridge and some interface parameter information from Open to In progress.
zsdc changed the status of T4646: USB serial output console does not work from Open to Needs testing.