Page MenuHomeVyOS Platform
Feed All Stories

Jul 15 2020

Maltahl updated the task description for T1802: Wireguard QR code in cli for mobile devices.
Jul 15 2020, 5:53 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro added a subtask for T2582: Script daemon to offload processing during commit: T2707: Allow alternative initialization data for Config.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro added a parent task for T2707: Allow alternative initialization data for Config: T2582: Script daemon to offload processing during commit.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T2707: Allow alternative initialization data for Config from Open to In progress.
Jul 15 2020, 5:30 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

https://github.com/vyos/vyos-1x/pull/496

Jul 15 2020, 2:44 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2706: Support NDP protocol monitoring.

https://github.com/vyos/vyos-1x/blob/current/debian/control

Jul 15 2020, 2:38 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

Please prompt me the correct path to the vyos-1x dependency list @runar

Jul 15 2020, 2:30 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.

I am about to make an amendment

Jul 15 2020, 2:28 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2706: Support NDP protocol monitoring.

Hi! This PR does the wrong approach for adding this command to the vyos system. As this is a utility that should be used from within the CLI it should be added to the cliwith the xml framework inside vyos-1x, and rhen should be a dependency of vyos-1x, and not to vyos-build

Jul 15 2020, 2:25 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2706: Support NDP protocol monitoring.
Jul 15 2020, 2:00 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 claimed T2706: Support NDP protocol monitoring.
Jul 15 2020, 1:58 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 closed T2705: Support NDP protocol monitoring as Invalid.
Jul 15 2020, 1:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T2706: Support NDP protocol monitoring.
Jul 15 2020, 1:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T2705: Support NDP protocol monitoring.
Jul 15 2020, 1:44 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 closed T2675: DNS service failed to start as Resolved.
Jul 15 2020, 4:57 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 triaged T2675: DNS service failed to start as Normal priority.
Jul 15 2020, 3:27 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 changed the status of T2675: DNS service failed to start from Open to Needs testing.
Jul 15 2020, 3:26 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 14 2020

c-po updated subscribers of T2704: connect/disconnect Missing newline in op-mode tab completion helper.

@dmbaturin was there anything changed on the handling of op-mode? As I remember that this used to work.

Jul 14 2020, 8:49 PM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2704: connect/disconnect Missing newline in op-mode tab completion helper.
Jul 14 2020, 8:01 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2704: connect/disconnect Missing newline in op-mode tab completion helper.
Jul 14 2020, 8:01 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T1316: Support for IS-IS .
Jul 14 2020, 6:42 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2598: Error when commiting firewall groups to SrividyaA.
Jul 14 2020, 6:22 PM · VyOS 1.2 Crux
zsdc assigned T2626: Changing pseudo-ethernet mode, throws CLI error to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2623: Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation” to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
zsdc assigned T2658: Interface description comment display error to SrividyaA.
Jul 14 2020, 6:21 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc assigned T2673: After the bridge is configured with Mac, bridge is automatically disabled to SrividyaA.
Jul 14 2020, 6:20 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro updated subscribers of T2689: Add helper functions to query changes between session and effective configs.

Current version linked below, as an example for further discussion. As these ideas have been circulating for a while, it is important to have examples to debunk/revise/reject. My guess is that one likely wants much less than this, and that @dmbaturin is quite right in his recent comment "we should not rely on diffs unless there's absolutely no other way to do it --- not just about computational expense, but also readability".

Jul 14 2020, 3:36 PM · VyOS 1.3 Equuleus (1.3.0)
kroy created T2703: VMWare OVA won't deploy an ed25519 key.
Jul 14 2020, 12:45 AM · VyOS 1.2 Crux

Jul 13 2020

kroy created T2702: Broken completion error displayed for passwords in 1.2.5.
Jul 13 2020, 7:41 PM · VyOS 1.2 Crux
zsdc changed the status of T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from Open to In progress.

https://github.com/vyos/vyatta-cfg-vpn/pull/34

Jul 13 2020, 4:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
thomas-mangin added a comment to T2666: Packet Processing with eBPF and XDP.

https://lwn.net/Articles/822744/

Jul 13 2020, 1:46 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 claimed T2675: DNS service failed to start.
Jul 13 2020, 1:32 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

After local testing, we decided to submit pr

Jul 13 2020, 1:31 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

I have prepared a repair pudding, I use the solution of a, I am hesitating whether to mention PR, otherwise, it should be noted in the document that the writing of B should be ignored in the vyos configuration

Jul 13 2020, 1:19 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

I need someone to give me a good choice. I prefer standard writing. That is a

Jul 13 2020, 1:09 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

@c-po @jjakob I've found the root cause of the problem. When my domain is written in fully qualified format, there will be one more point in the generated Lua script. There are currently the following solutions to this problem:

Jul 13 2020, 1:07 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2675: DNS service failed to start.

No one's dealing with it?

Jul 13 2020, 12:58 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2701: `vpn ipsec pfs enable` doesn't work with IKE groups.
Jul 13 2020, 12:51 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
zsdc closed T1100: Spoke site dynamic IP over NAT connect to Hub site as Invalid.

Closed in favor of https://phabricator.vyos.net/T1101

Jul 13 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Jul 12 2020

jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

@c-po Please forgive me that I didn't react until it told me that this is a patch. It has solved the problem. In this case, if it is confirmed that the patch is available, then it is not necessary to discuss the cause of the problem. What we need to do is to apply the patch and conduct relevant tests

Jul 12 2020, 7:21 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

https://github.com/vyos/vyatta-wanloadbalance/commit/ab841d3588c88e0e8ef86693471281badce92a9f

Jul 12 2020, 7:18 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2696: Some bugfixes of vyatta-wanloadbalance as Resolved.
Jul 12 2020, 7:17 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

@jack9603301 the approach from @banditos13 is perfectly fine. Despite the fact that a PR would be the non plus ultra - a problem was identified and a fix was provided - works for me.

Jul 12 2020, 7:13 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

If so, you should make it clear that the diff is your own patch. If you are sure that the patch is available in the latest rolling image, you can consider submitting a PR yourself (please refer to the contributor's Guide) to seek consolidation

Jul 12 2020, 7:10 PM · VyOS 1.3 Equuleus (1.3.0)
banditos13 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

This is worked patches for me. I suggest including my corrections in the main code

Jul 12 2020, 7:08 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I thought you were asking for help and trying to report a bug to the community for a fix, so you need more information to help identify the problem, rather than a diff who doesn't know where to find it

Jul 12 2020, 7:05 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

You mean you've fixed the bug? If so, you can consider submitting pr

Jul 12 2020, 7:04 PM · VyOS 1.3 Equuleus (1.3.0)
banditos13 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I don’t understand you, is it really impossible to see from the diff that stupid errors have been fixed here?

Jul 12 2020, 7:02 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) updated the task description for T2700: Redirecting traffic from PPPoE interface to IFB fails.
Jul 12 2020, 6:17 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I have just quickly browsed the relevant code of this code base. Generally speaking, the code structure is very clear, which is not difficult to understand. The overall operation of this daemon is divided into the following processes:

Jul 12 2020, 6:11 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I have to say that I saw the diff of this code base for the first time, but in fact, as for my understanding of C troubleshooting, analyzing the log and execution process will become a necessary work (none of them). I can see that the operation process required by this code base may be relatively complex, so that it can be executed as a background daemons rather than a single place According to the description of the questioner, there is hardly any relevant information that can be extracted from the error process. It is suggested to provide the following information:

Jul 12 2020, 5:43 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

Are you familiar with that codebase @jack9603301? As I see no real answer in your posting which does not help at all :(

Jul 12 2020, 5:15 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

If the process is simple, you can consider py script. If you need to run uninterrupted in the background or have other complex tasks, it is a good way to continue to use C/C++

Jul 12 2020, 4:35 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T2700: Redirecting traffic from PPPoE interface to IFB fails.
Jul 12 2020, 4:33 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
c-po claimed T2690: Add VRF support to the add system image command.
Jul 12 2020, 4:30 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2696: Some bugfixes of vyatta-wanloadbalance.

I feel more like abandoning that daemon and use a python based implementation.

Jul 12 2020, 4:29 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T1575: `show snmp mib ifmib` crashes with IndexError as Resolved.
Jul 12 2020, 2:52 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jack9603301 added a comment to T2687: SNMP: change logic on v3 password encryption.

Will this issue be fixed in the next release? Just in doubt, I've used Sha instead of MD5.

Jul 12 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

New ISO build triggered with fix - also an MD5 smoketest was added

Jul 12 2020, 12:55 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

Bug in the library is confirmed - id completely ignores MD5

Jul 12 2020, 12:03 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

Problem seems to be in the 3rd party hash library - when upgrading from 1.2.5 to 1.3 rolling settings persist and work:

Jul 12 2020, 11:46 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

MD5 should be supported as it works in VyOS 1.2 - let me have a look.

Jul 12 2020, 11:25 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2687: SNMP: change logic on v3 password encryption.

Thank you. I'm in a hurry to solve the problem. If I neglect, I can try to use Sha and reset it successfully. Do you not support MD5?

Jul 12 2020, 10:34 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

It is stated in the documentation - that is why I passed it to you

Jul 12 2020, 10:02 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2687: SNMP: change logic on v3 password encryption.

The configuration is as follows:

Jul 12 2020, 9:56 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2699: NAT Regression in 1.3 as Resolved.
Jul 12 2020, 9:54 AM
c-po added a comment to T2699: NAT Regression in 1.3.

The following rules are now installed after the fix:

Jul 12 2020, 9:53 AM
c-po added a comment to T2699: NAT Regression in 1.3.

Your above ruleset should be tralnsated into thie NFT syntax:

Jul 12 2020, 8:15 AM
c-po added a comment to T2687: SNMP: change logic on v3 password encryption.

There i no community in SNMPv3 - please read https://docs.vyos.io/en/latest/services/snmp.html#snmpv3

Jul 12 2020, 8:11 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2687: SNMP: change logic on v3 password encryption.

Now, I don't know how to pull the SNMP data again. The command is as follows:

Jul 12 2020, 6:37 AM · VyOS 1.3 Equuleus (1.3.0)
trae32566 awarded T2699: NAT Regression in 1.3 a Like token.
Jul 12 2020, 12:21 AM

Jul 11 2020

xrobau added a comment to T2699: NAT Regression in 1.3.

After upgrading, the entire NAT section is gone

Jul 11 2020, 11:47 PM
xrobau added a comment to T2699: NAT Regression in 1.3.

Error when upgrading to 1.3

Jul 11 2020, 11:45 PM
linuxgemini closed T2698: Current vyos-build for crux does not include wireguard.ko as Resolved.

Can confirm that the image now contains wireguard.ko.

Jul 11 2020, 11:05 PM · VyOS 1.2 Crux
xrobau created T2699: NAT Regression in 1.3.
Jul 11 2020, 10:38 PM
linuxgemini added a comment to T2698: Current vyos-build for crux does not include wireguard.ko.

Understood, will re-check and close the report once confirmed.

Jul 11 2020, 9:55 PM · VyOS 1.2 Crux
c-po added a comment to T2698: Current vyos-build for crux does not include wireguard.ko.

@linuxgemini we do not support DKMS.

Jul 11 2020, 9:03 PM · VyOS 1.2 Crux
c-po changed the status of T2698: Current vyos-build for crux does not include wireguard.ko from Open to In progress.
Jul 11 2020, 5:59 PM · VyOS 1.2 Crux
c-po closed T2687: SNMP: change logic on v3 password encryption as Resolved.
Jul 11 2020, 4:04 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Can't I dial on demand when I need to negotiate?

Jul 11 2020, 2:47 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

@c-po When I manually add the following commands to the following file:

Jul 11 2020, 2:35 PM · VyOS 1.3 Equuleus (1.3.0)
linuxgemini added a comment to T2698: Current vyos-build for crux does not include wireguard.ko.

Did a rebuild and found the silent error:

Jul 11 2020, 2:31 PM · VyOS 1.2 Crux
linuxgemini added a comment to T2698: Current vyos-build for crux does not include wireguard.ko.

While I was checking my old build, I have seen this on /live/filesystem.packages:

Jul 11 2020, 12:56 PM · VyOS 1.2 Crux
linuxgemini created T2698: Current vyos-build for crux does not include wireguard.ko.
Jul 11 2020, 11:15 AM · VyOS 1.2 Crux
bjtangseng added a comment to T1186: Setup DMVPN cannot work.

I need to modify the file(/etc/swanctl/swanctl.conf) manually, from emote_ts = dynamic[gre] to remote_ts = 0.0.0.0/0[gre].

Jul 11 2020, 6:52 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)
bjtangseng added a comment to T1186: Setup DMVPN cannot work.

I test that issue on 1.2.5. but not work

Jul 11 2020, 6:33 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)
jack9603301 closed T2693: Dhcp6c cannot be restarted after PPPoE link is reset as Resolved.
Jul 11 2020, 5:33 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 10 2020

syncer triaged T2697: MAC-Telnet Support as Normal priority.
Jul 10 2020, 10:16 PM · VyOS 1.5 Circinus
Unknown Object (User) created T2697: MAC-Telnet Support.
Jul 10 2020, 4:59 PM · VyOS 1.5 Circinus
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Have the opportunity to study whether it is because of pppd configuration file error?

Jul 10 2020, 4:36 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.
 pppoe pppoe0 {
     authentication {
         password pass
         user user
     }
+    connect-on-demand
     default-route force
     description ISP
     dhcpv6-options {
         prefix-delegation {
             interface br1 {
                 address 101
                 sla-id 2
                 sla-len 8
             }
             interface br2 {
                 address 101
                 sla-id 1
                 sla-len 8
             }
             length 56
         }
     }
     firewall {
         in {
             ipv6-name WAN-IN
             name wan
         }
         local {
             ipv6-name WAN-LOCAL
             name wan-local
         }
     }
     idle-timeout 30
     ipv6 {
         address {
             autoconf
         }
         enable
     }
     mtu 1492
     source-interface eth5
 }
Jul 10 2020, 4:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Well a bit more verbosity would be good. As usual:

  • provide config
  • logfiles
  • routing table
  • interface ip list
Jul 10 2020, 4:15 PM · VyOS 1.3 Equuleus (1.3.0)
syncer moved T2000: strongSwan does not install routes to table 220 in certain cases from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Jul 10 2020, 11:47 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
syncer added a project to T2000: strongSwan does not install routes to table 220 in certain cases: VyOS 1.2 Crux (VyOS 1.2.6).
Jul 10 2020, 11:47 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jack9603301 added a comment to T2585: Unable to access the Internet after opening PPPoE on-demand dialing.

Dial on demand still doesn't work

Jul 10 2020, 7:55 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T365: OVS as replacement of Linux bridge.

If you think about it carefully, maybe for vyos, if you don't consider supporting SDN, then Linux bridge is a good choice.

Jul 10 2020, 4:11 AM · VyOS 1.5 Circinus
jack9603301 added a comment to T365: OVS as replacement of Linux bridge.

I have been thinking about a problem. OVS can work in SDN controller mode. However, if OVS works in SDN controller mode, whether router related functions related to routing configuration will fail. If someone wants to implement it, then whether SDN switching control mode and non SDN related modules need exclusive processing to prevent conflicts should be considered.

Jul 10 2020, 3:31 AM · VyOS 1.5 Circinus

Jul 9 2020

runar added a comment to T2638: FRR: New framework for configuring FRR .

After some benchmarking of this code i have i've gotten hold of a quite large test configuration that takes a waste amount of time to load into vyos.

Jul 9 2020, 9:54 PM · VyOS 1.3 Equuleus (1.3.0)
banditos13 created T2696: Some bugfixes of vyatta-wanloadbalance.
Jul 9 2020, 8:30 PM · VyOS 1.3 Equuleus (1.3.0)
banditos13 added a watcher for vyatta-wanloadbalance: banditos13.
Jul 9 2020, 8:01 PM