Page MenuHomeVyOS Platform

Dmitry (Dmitry)
UserAdministrator

Projects

User Details

User Since
Mar 4 2019, 8:50 PM (124 w, 3 d)
Roles
Administrator

Recent Activity

Tue, Jun 29

Dmitry closed T3593: PPPoE server called-sid format does not work as Resolved.
Tue, Jun 29, 6:42 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry added a comment to T3408: vyos 1.4 not delivering ipv6 to devices via PPPOE.

Hello @joeudes , it looks like without enabled ppp-option ipv6 it should not work

set service pppoe-server ppp-options ipv6 allow
Tue, Jun 29, 6:29 PM · VyOS 1.4 Sagitta
Dmitry added a comment to T2883: op-mode reset vpn command shows wrong completion.

@Viacheslav it is reproducible in 1.2.7

vyos@vyos:~$ touch file1
vyos@vyos:~$ touch file2
vyos@vyos:~$ touch file3
vyos@vyos:~$ ls
file1  file2  file3
vyos@vyos:~$ reset vpn remote-access user 
Possible completions:
  file1         Terminate specified user's current remote access VPN session(s)
  file2
  file3
Tue, Jun 29, 6:17 PM · VyOS 1.2 Crux
Dmitry added projects to T3405: PPPoE server unit-cache: VyOS 1.3 Equuleus, Restricted Project.
Tue, Jun 29, 6:13 PM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3405: PPPoE server unit-cache from Open to Needs testing.
Tue, Jun 29, 6:12 PM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Fri, Jun 25

Dmitry added a comment to T3649: Add bonding additional hash-policy.

PR https://github.com/vyos/vyos-1x/pull/898

Fri, Jun 25, 3:35 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3649: Add bonding additional hash-policy from Open to In progress.
Fri, Jun 25, 8:49 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3649: Add bonding additional hash-policy.
Fri, Jun 25, 8:48 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jun 16 2021

Dmitry changed the status of T3629: IPoE server shifting address in the range from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/172

Jun 16 2021, 10:11 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3629: IPoE server shifting address in the range.
Jun 16 2021, 9:46 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jun 3 2021

Dmitry changed the status of T3593: PPPoE server called-sid format does not work from In progress to Backport candidate.

Please, backport it to 1.3 rolling https://phabricator.vyos.net/rVYOSONEX4b646c1fb31a1a9f9c9d1658734d478fed5f19f1

Jun 3 2021, 12:36 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jun 2 2021

Dmitry added a comment to T3546: Add pppoe-server CLI custom script feature .

Extended scripts receive from PPPoE daemon the following variables:

$1 - Interface name
$4 - Tunnel GW IP address
$5 - Delegated IP address to the client
$6 - Calling Station ID (MAC)

For example, how to get received RADIUS attributes
note: In this case, Filter-Id attribute used as an indicator for block user adding to ipset

configure
set firewall group address-group blocked 
commit
Jun 2 2021, 8:44 AM · VyOS 1.4 Sagitta

Jun 1 2021

Dmitry added a comment to T3546: Add pppoe-server CLI custom script feature .

PR https://github.com/vyos/vyos-1x/pull/860
To provide the possibility to read RADIUS attribute by script, also need to define radattr=/run/radattr param

Jun 1 2021, 11:30 AM · VyOS 1.4 Sagitta
Dmitry changed the status of T3593: PPPoE server called-sid format does not work from Open to In progress.
Jun 1 2021, 10:55 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3593: PPPoE server called-sid format does not work.
Jun 1 2021, 10:55 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3546: Add pppoe-server CLI custom script feature from Open to In progress.
Jun 1 2021, 9:02 AM · VyOS 1.4 Sagitta

May 28 2021

Dmitry changed the status of T3250: PPPoE server: wrong local usernames from In progress to Backport pending.

Properly works on the latest 1.4 rolling. Is it possible to backport changes to 1.3?

May 28 2021, 9:28 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus

May 27 2021

Dmitry added a comment to T2123: Configure 3 NTP servers.

PR https://github.com/vyos/vyos-build/pull/166

server "time1.vyos.net"
server "time2.vyos.net"
server "time3.vyos.net"
May 27 2021, 9:54 AM · VyOS 1.3 Equuleus

May 26 2021

Dmitry added a comment to T3546: Add pppoe-server CLI custom script feature .

I propose something like

set service pppoe-server extended-scripts on-pre-up <path>
set service pppoe-server extended-scripts on-up <path>
set service pppoe-server extended-scripts on-down <path>
set service pppoe-server extended-scripts on-change <path>
May 26 2021, 7:11 PM · VyOS 1.4 Sagitta

May 18 2021

Dmitry added a comment to T3559: Add restart op-command for OpenConnect Server.

PR https://github.com/vyos/vyos-1x/pull/848

May 18 2021, 8:11 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3559: Add restart op-command for OpenConnect Server from Open to In progress.
May 18 2021, 7:53 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3559: Add restart op-command for OpenConnect Server.
May 18 2021, 7:53 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3461: OpenConnect Server redundancy check from In progress to Backport candidate.

Tested on 1.4-rolling-202105170417 works correct. Propose to backport this to 1.3

May 18 2021, 7:50 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3461: OpenConnect Server redundancy check from Open to In progress.
May 18 2021, 7:40 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

May 14 2021

Dmitry renamed T3546: Add pppoe-server CLI custom script feature from Add pppoe CLI custom script feature to Add pppoe-server CLI custom script feature .
May 14 2021, 6:40 PM · VyOS 1.4 Sagitta
Dmitry created T3546: Add pppoe-server CLI custom script feature .
May 14 2021, 6:40 PM · VyOS 1.4 Sagitta

May 13 2021

Dmitry assigned T3545: Does not possible to update VyOS from 1.1.8 to dmbaturin.
May 13 2021, 6:15 PM · VyOS 1.2 Crux
Dmitry created T3545: Does not possible to update VyOS from 1.1.8.
May 13 2021, 6:15 PM · VyOS 1.2 Crux

May 2 2021

Dmitry added a comment to T3480: Does not possible to change console baud-rate.

Hi @hard, I think behavior should be another for VM. Did you try to change speed when you connected via serial?

May 2 2021, 5:37 PM · VyOS 1.4 Sagitta

Apr 27 2021

Dmitry added a project to T3494: DHCPv6 leases traceback when PD using: VyOS 1.3 Equuleus.

Work as expected on 1.4-rolling-202104260417

vyos@R1:~$ show dhcpv6 server leases 
IPv6 address        State    Last communication    Lease expiration     Remaining    Type               Pool         IAID_DUID
------------------  -------  --------------------  -------------------  -----------  -----------------  -----------  -----------------------------------------------------
2001:db8:290::/64   active   2021/04/23 14:52:48                                     prefix delegation  VyOS-DHCPv6  00:00:00:00:00:01:00:01:28:15:9b:bd:50:00:00:06:00:00
2001:db8:3456::15b  active   2021/04/27 05:07:51   2021/04/27 17:07:51  10:28:27     non-temporary      VyOS-DHCPv6  00:00:00:00:00:01:00:01:28:15:9b:bd:50:00:00:06:00:00
Apr 27 2021, 6:46 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Apr 26 2021

Dmitry changed the status of T3494: DHCPv6 leases traceback when PD using from Open to Needs testing.

PR https://github.com/vyos/vyos-1x/pull/819

Apr 26 2021, 9:45 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Apr 23 2021

Dmitry created T3494: DHCPv6 leases traceback when PD using.
Apr 23 2021, 2:25 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3493: DHCPv6 does not have prefix range validation.
Apr 23 2021, 1:55 PM · VyOS 1.4 Sagitta

Apr 18 2021

Dmitry updated the task description for T3484: Kernel panic when QAT uses.
Apr 18 2021, 8:13 PM · VyOS 1.4 Sagitta
Dmitry created T3484: Kernel panic when QAT uses.
Apr 18 2021, 8:09 PM · VyOS 1.4 Sagitta

Apr 16 2021

Dmitry created T3480: Does not possible to change console baud-rate.
Apr 16 2021, 5:45 PM · VyOS 1.4 Sagitta

Apr 9 2021

Dmitry added a comment to T3465: PPPoE server: dual-stack IPv4/IPv6 provisioning with Prefix Delegation not working.

Add PR with improvements to documentation https://github.com/vyos/vyos-documentation/pull/503

Apr 9 2021, 10:43 AM · VyOS 1.3 Equuleus
Dmitry added a comment to T3465: PPPoE server: dual-stack IPv4/IPv6 provisioning with Prefix Delegation not working.

Thanks. I think the main issue is missing required modules in the generated pppoe server config file

 sudo cat /run/accel-pppd/pppoe.conf 
### generated by accel_pppoe.py ###
[modules]
log_syslog
pppoe
shaper
chap-secrets
ippool
auth_pap
auth_chap_md5
auth_mschap_v1
auth_mschap_v2

Required

ipv6pool
ipv6_nd
ipv6_dhcp

These option enables by the foloowing CLI command::

set service pppoe-server ppp-options ipv6 allow
Apr 9 2021, 10:23 AM · VyOS 1.3 Equuleus

Apr 8 2021

Dmitry added a comment to T3465: PPPoE server: dual-stack IPv4/IPv6 provisioning with Prefix Delegation not working.

It looks like the same nature of this issue https://phabricator.vyos.net/T3393
@c-po , could you try to test fast solution

configure
set system sysctl custom net.ipv6.conf.default.addr_gen_mode value 0
commit
Apr 8 2021, 10:02 PM · VyOS 1.3 Equuleus

Apr 7 2021

Dmitry created T3461: OpenConnect Server redundancy check.
Apr 7 2021, 7:56 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 17 2021

Dmitry added a comment to T3403: Error on interrupting list of pppoe sessions.

Works correct for q, but still show backtrace by Ctrl+C

:Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/ppp-server-ctrl.py", line 74, in <module>
    main()
  File "/usr/libexec/vyos/op_mode/ppp-server-ctrl.py", line 63, in main
    print(output)
KeyboardInterrupt

Lets change except BrokenPipeError: to except:

Mar 17 2021, 10:40 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 16 2021

Dmitry added a comment to T3353: PPPoE server wrong vlan-range generating config.

@Viacheslav . Ok this is not a problem, because we have a workaround with pseudo ethernet interfaces

set interfaces pseudo-ethernet peth1 source-interface 'eth1'
set service pppoe-server interface peth1 
set service pppoe-server interface eth1 vlan-id '50'
set service pppoe-server interface eth1 svlan 1000 vlan-range '1-4095'

Now all looks good and works properly, but need to add better help value

vyos@vyos# set service pppoe-server interface eth3 vlan-id 
Possible completions:
   <text>       VLAN monitor for the automatic creation of vlans (user per vlan)
Mar 16 2021, 8:37 PM · VyOS 1.4 Sagitta
Dmitry added a comment to T3242: PPPoE Server overhead on virtual interfaces creation.

To disable udev link_config redundancy call we need to delete /usr/lib/systemd/network/99-default.link

Mar 16 2021, 8:05 PM · VyOS 1.3 Equuleus

Mar 15 2021

Dmitry added a comment to T3329: "system conntrack ignore" rules can no longer be created due to an iptables syntax change.

@dmbaturin please cherry-pick this to equuleus. Successfully tested on VyOS-1.3-RC1

Mar 15 2021, 3:49 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 13 2021

Dmitry added a comment to T3405: PPPoE server unit-cache.

Yes, some time ago, it could produce kernel issues https://www.mail-archive.com/netdev@vger.kernel.org/msg218964.html
And I think it will be good to add the possibility to control unit-cache to have the opportunity to influence this.

Mar 13 2021, 6:57 AM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 12 2021

Dmitry updated the task description for T3405: PPPoE server unit-cache.
Mar 12 2021, 6:50 PM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry claimed T3405: PPPoE server unit-cache.
Mar 12 2021, 6:50 PM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3405: PPPoE server unit-cache.
Mar 12 2021, 6:49 PM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3403: Error on interrupting list of pppoe sessions.
Mar 12 2021, 4:07 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 11 2021

Dmitry changed Difficulty level from unknown to normal on T486: Static IPv6 default route via OSPFv3-learned loopback is not activated.
Mar 11 2021, 8:02 PM · VyOS 1.3 Equuleus
Dmitry changed the subtype of T486: Static IPv6 default route via OSPFv3-learned loopback is not activated from "Task" to "Bug".
Mar 11 2021, 8:01 PM · VyOS 1.3 Equuleus
Dmitry added a comment to T3242: PPPoE Server overhead on virtual interfaces creation.

Fresh SNMP Daemon has some option which might be helpful
https://manpages.debian.org/unstable/snmpd/snmpd.conf.5.en.html

ifmib_max_num_ifaces NUM
Mar 11 2021, 7:05 PM · VyOS 1.3 Equuleus
Dmitry added a comment to T3242: PPPoE Server overhead on virtual interfaces creation.

Configured SNMP also add impact

top - 12:51:59 up  3:25,  2 users,  load average: 1.35, 0.70, 0.28
Tasks: 214 total,   2 running, 210 sleeping,   2 stopped,   0 zombie
%Cpu0  :  0.0 us,  0.0 sy,  0.0 ni, 99.7 id,  0.0 wa,  0.0 hi,  0.3 si,  0.0 st
%Cpu1  : 22.6 us, 77.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
%Cpu2  :  0.0 us,  0.3 sy,  0.0 ni, 99.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
%Cpu3  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
MiB Mem :   9972.9 total,   6710.1 free,   2044.5 used,   1218.3 buff/cache
MiB Swap:      0.0 total,      0.0 free,      0.0 used.   7195.8 avail Mem
Mar 11 2021, 12:52 PM · VyOS 1.3 Equuleus

Mar 10 2021

Dmitry updated subscribers of T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot.

@jack9603301 it looks like this issue related to your patch https://github.com/vyos/vyatta-cfg-qos/commit/6391325271be489d29f0b7aa2982952068c6a53c
T3089

Mar 10 2021, 9:42 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, vyatta-cfg-qos

Mar 9 2021

Dmitry added a comment to T3242: PPPoE Server overhead on virtual interfaces creation.

Also, add some overhead netplug

top - 19:14:34 up 26 min,  1 user,  load average: 10.29, 13.17, 8.57
Tasks: 568 total,   5 running, 228 sleeping,   0 stopped, 335 zombie
%Cpu0  :  5.0 us, 10.6 sy,  0.0 ni, 84.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
%Cpu1  :  9.8 us, 15.2 sy,  0.0 ni, 75.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
%Cpu2  : 40.7 us,  3.0 sy,  0.0 ni, 56.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
%Cpu3  :  9.6 us, 86.4 sy,  0.0 ni,  4.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
MiB Mem :   3870.9 total,   1375.2 free,   1499.9 used,    995.8 buff/cache
MiB Swap:      0.0 total,      0.0 free,      0.0 used.   1716.8 avail Mem
Mar 9 2021, 7:18 PM · VyOS 1.3 Equuleus

Mar 8 2021

Dmitry added a comment to T3393: IPoE does not assign IPv6 PD or WAN address.

Related task https://phabricator.vyos.net/T2362
A maybe better solution in this case to create interfaces like bridge and interfaces with an option which block adding link-local address.

Mar 8 2021, 7:08 PM · VyOS 1.3 Equuleus
Dmitry created T3394: Error on removing dhcpv6 address from interface.
Mar 8 2021, 4:26 PM · VyOS 1.2 Crux (VyOS 1.2.9)
Dmitry added a comment to T3393: IPoE does not assign IPv6 PD or WAN address.

@marcomuskus as a temporary solution try to use CLI sysctl param

configure
set system sysctl custom net.ipv6.conf.default.addr_gen_mode value 0
commit
Mar 8 2021, 4:20 PM · VyOS 1.3 Equuleus

Mar 7 2021

Dmitry added a comment to T3353: PPPoE server wrong vlan-range generating config.

@Viacheslav , thanks for improving, now it works properly. I found one interesting moment, it looks like we cant configure via CLI listen to PPPoE clients on interfaces eth1 and eth1.50 or eth1.something at the same time.

vyos@vyos# run show configuration commands | match "pppoe-server interface"
set service pppoe-server interface eth1 vlan-id '50'
set service pppoe-server interface eth1.1000 vlan-range '1-4095'
[edit]
vyos@vyos# set service pppoe-server interface eth1
Mar 7 2021, 7:17 PM · VyOS 1.4 Sagitta
Dmitry assigned T3388: show interfaces doesn't display pppoeX to c-po.

Also does not display other interfaces under the end node

vyos@RTR1# run show interfaces 
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
eth0             xxx.xxx.36.246/24                 u/u  
lo               127.0.0.1/8                       u/u  
                 ::1/128                                
tun0             2001:470:xxxx:xxx::2/64           u/u  HE.NET IPv6 Tunnel
[edit]
vyos@RTR1# run show interfaces tunnel 
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
[edit]
vyos@RTR1# run show interfaces ethernet 
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
[edit]
vyos@RTR1#
Mar 7 2021, 8:31 AM · VyOS 1.4 Sagitta

Mar 6 2021

Dmitry added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

For VXLAN multicast this is a real bug.

Mar 6 2021, 6:37 PM · VyOS 1.3 Equuleus

Mar 5 2021

Dmitry added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

@c-po , yes now it works. Maybe we need to define ttl=16 as the default value?

Mar 5 2021, 6:40 AM · VyOS 1.3 Equuleus

Mar 4 2021

Dmitry added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

@c-po does not work on 1.4-rolling-202103040218

vyos@vyos# sudo ip -d link show dev vxlan241
7: vxlan241: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master br241 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fe:08:e3:3c:d4:ab brd ff:ff:ff:ff:ff:ff promiscuity 1 minmtu 68 maxmtu 65535 
    vxlan id 241 group 239.0.0.241 dev eth0 srcport 0 0 dstport 8472 tos inherit ttl auto ageing 300 udpcsum noudp6zerocsumtx noudp6zerocsumrx

On the middle router in traffic dump I see TTL=1

18:59:29.029090 IP (tos 0x0, ttl 1, id 24806, offset 0, flags [none], proto UDP (17), length 100)
    10.1.2.2.52948 > 239.0.0.241.8472: OTV, flags [I] (0x08), overlay 0, instance 241
Mar 4 2021, 7:00 PM · VyOS 1.3 Equuleus
Dmitry added a comment to T3386: PPPoE-server don't start with local authentication.

There is a bug exactly with client-ip-pool range, config generated with the mistake

[ip-pool]
gw-ip-address=10.1.1.1
10.1.1.100-10.1.1.111

but expected

10.1.1.100-111
Mar 4 2021, 5:51 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus

Mar 1 2021

Dmitry added a comment to T3353: PPPoE server wrong vlan-range generating config.

Yes, sure. It will work only if one vlan-id defined, e.g. if you configure a couple vlan-id you will get wrong syntax"

set service pppoe-server interface eth1 vlan-id '50'
set service pppoe-server interface eth1 vlan-id '60'

In generated config

vlan-mon=eth1,50,60
interface=eth1.50,60

Expected:

vlan-mon=eth1,50,60
interface=eth1.50
interface=eth1.60
Mar 1 2021, 8:44 AM · VyOS 1.4 Sagitta

Feb 28 2021

Dmitry added a comment to T3353: PPPoE server wrong vlan-range generating config.

Good job! I think there exists one remark. If we set set service pppoe-server interface eth1 vlan-id '50' that means you want to listen to pppoe client on eth1.50, but in config you have

vlan-mon=eth1,50
interface=re:eth1\.\d+

e.g. eth1\.\d+ mean all vlans in eth1, even eth1.50.50.50 will fit for this regular expression
I propose do not to use a regular expression for vlan-id, as an example:

  1. set service pppoe-server interface eth1 vlan-id '50'
vlan-mon=eth1,50
interface=eth1.50
Feb 28 2021, 8:16 PM · VyOS 1.4 Sagitta
Dmitry added a comment to T3360: Op command 'show interfaces' does not display VRRP VIP.

Yes, agree it works by show interfaces vrrp, but behavior in 1.2.x also displayed VIP by command show interfaces
I think this is a bug and need to fix it.

Feb 28 2021, 8:02 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 26 2021

Dmitry added a comment to T1297: Add GARP settings to VRRP/keepalived.

Tested in the lab the following simple topology on 1.2.6-S1 and 1.3-beta, behavior the same and GARP works by default.


VyOS1 config

set high-availability vrrp group eth1 hello-source-address '100.64.0.1'
set high-availability vrrp group eth1 interface 'eth1'
set high-availability vrrp group eth1 peer-address '100.64.0.2'
set high-availability vrrp group eth1 rfc3768-compatibility
set high-availability vrrp group eth1 virtual-address '100.64.0.50/24'
set high-availability vrrp group eth1 vrid '1'
set interfaces ethernet eth0 address 'dhcp'
set interfaces ethernet eth0 duplex 'auto'
set interfaces ethernet eth0 hw-id '50:00:00:01:00:00'
set interfaces ethernet eth0 speed 'auto'
set interfaces ethernet eth1 address '100.64.0.1/24'
set interfaces ethernet eth1 duplex 'auto'
set interfaces ethernet eth1 hw-id '50:00:00:01:00:01'
set interfaces ethernet eth1 speed 'auto'

VyOS2 config

set high-availability vrrp group eth1 hello-source-address '100.64.0.2'
set high-availability vrrp group eth1 interface 'eth1'
set high-availability vrrp group eth1 peer-address '100.64.0.1'
set high-availability vrrp group eth1 virtual-address '100.64.0.50/24'
set high-availability vrrp group eth1 vrid '1'
set interfaces ethernet eth0 address 'dhcp'
set interfaces ethernet eth0 duplex 'auto'
set interfaces ethernet eth0 hw-id '50:00:00:02:00:00'
set interfaces ethernet eth0 speed 'auto'
set interfaces ethernet eth1 address '100.64.0.2/24'
set interfaces ethernet eth1 duplex 'auto'
set interfaces ethernet eth1 hw-id '50:00:00:02:00:01'
set interfaces ethernet eth1 speed 'auto'

In traffic dump on VyOS3 we can see traffic when BACKUP node switched to MASTER state

14:02:34.152959 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28
14:02:34.153042 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28
14:02:34.153086 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28
14:02:34.153090 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28
14:02:34.153092 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28
14:02:34.153467 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20
14:02:35.153544 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20
14:02:36.154117 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20
14:02:37.154233 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20
14:02:38.154470 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20

The same behavior with rfc3768-compatibility option.
I think we don't need to change behavior because it should be suitable for all cases.

Feb 26 2021, 2:11 PM · VyOS 1.3 Equuleus
Dmitry created T3360: Op command 'show interfaces' does not display VRRP VIP.
Feb 26 2021, 11:02 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 25 2021

Dmitry changed the status of T3353: PPPoE server wrong vlan-range generating config from Open to Confirmed.
Feb 25 2021, 1:53 PM · VyOS 1.4 Sagitta
Dmitry created T3353: PPPoE server wrong vlan-range generating config.
Feb 25 2021, 1:53 PM · VyOS 1.4 Sagitta

Feb 24 2021

Dmitry added a comment to T3303: Change welcome message on boot.

@c-po , it works properly

Welcome to VyOS 1.4-rolling-202102240218 (sagitta)!
Feb 24 2021, 5:27 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 23 2021

Dmitry added a comment to T3303: Change welcome message on boot.

PR https://github.com/vyos/vyos-build/pull/147
Output on the local stand

Welcome to VyOS 1.4 (sagitta)!
Feb 23 2021, 7:00 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry added a comment to T2927: isc-dhcpd release and expiry events never execute.

PR https://github.com/vyos/vyos-1x/pull/740

Feb 23 2021, 5:40 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
Dmitry triaged T2927: isc-dhcpd release and expiry events never execute as Normal priority.
Feb 23 2021, 3:55 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
Dmitry changed the status of T2927: isc-dhcpd release and expiry events never execute from Open to In progress.
Feb 23 2021, 3:55 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.4 Sagitta, VyOS 1.3 Equuleus

Feb 21 2021

Dmitry closed T2521: Need to restart pdns-recursor to check new entries in /etc/hosts, a subtask of T2464: DNS bugs (parent task), as Resolved.
Feb 21 2021, 2:28 PM · VyOS 1.3 Equuleus
Dmitry closed T2521: Need to restart pdns-recursor to check new entries in /etc/hosts as Resolved.

On 1.3-beta-202102210443 and 1.4-rolling-202102202002 all work properly and don't require any changes, mark as resolved.

Feb 21 2021, 2:28 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
Dmitry added a comment to T2521: Need to restart pdns-recursor to check new entries in /etc/hosts.

I found a similar issue related to this topic in 1.2.6-S1, script on-dhcp-event.sh can't to determine pdns_recursor PID

vyos@vyos# ps ax | grep pdns
 6626 ?        Ssl    0:00 /usr/sbin/pdns_recursor --daemon=no --write-pid=no --disable-syslog --log-timestamp=no
[edit]
vyos@vyos# pgrep "pdns_recursor"
[edit]
vyos@vyos# pgrep pdns_recursor
[edit]
vyos@vyos#

We need to use pgrep pdns

vyos@vyos# pgrep pdns
6626
[edit]
Feb 21 2021, 11:42 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
Dmitry added a project to T2521: Need to restart pdns-recursor to check new entries in /etc/hosts: VyOS 1.2 Crux (VyOS 1.2.7).
Feb 21 2021, 11:39 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus

Feb 19 2021

Dmitry closed T3343: Wrong output conntrack-sync status as Invalid.
Feb 19 2021, 6:05 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Dmitry edited projects for T3343: Wrong output conntrack-sync status, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux.
Feb 19 2021, 6:00 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Dmitry changed the status of T3343: Wrong output conntrack-sync status from Open to In progress.
Feb 19 2021, 6:00 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Dmitry created T3343: Wrong output conntrack-sync status.
Feb 19 2021, 5:57 PM · VyOS 1.2 Crux (VyOS 1.2.7)

Feb 17 2021

Dmitry closed T3312: SolarFlare NICs support as Resolved.
Feb 17 2021, 6:23 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3312: SolarFlare NICs support from In progress to Needs testing.

SolarFlare modules present in the kernel for 1.3 and 1.4

vyos@vyos:~$ sudo modinfo sfc
filename:       /lib/modules/5.10.14-amd64-vyos/kernel/drivers/net/ethernet/sfc/sfc.ko
license:        GPL
description:    Solarflare network driver
author:         Solarflare Communications and Michael Brown <mbrown@fensystems.co.uk>
alias:          pci:v00001924d00001B03sv*sd*bc*sc*i*
alias:          pci:v00001924d00000B03sv*sd*bc*sc*i*
alias:          pci:v00001924d00001A03sv*sd*bc*sc*i*
alias:          pci:v00001924d00000A03sv*sd*bc*sc*i*
alias:          pci:v00001924d00001923sv*sd*bc*sc*i*
alias:          pci:v00001924d00000923sv*sd*bc*sc*i*
alias:          pci:v00001924d00001903sv*sd*bc*sc*i*
alias:          pci:v00001924d00000903sv*sd*bc*sc*i*
alias:          pci:v00001924d00000813sv*sd*bc*sc*i*
alias:          pci:v00001924d00000803sv*sd*bc*sc*i*
alias:          pci:v000010EEd00001100sv*sd*bc*sc*i*
alias:          pci:v000010EEd00000100sv*sd*bc*sc*i*
depends:        mdio
retpoline:      Y
intree:         Y
name:           sfc
vermagic:       5.10.14-amd64-vyos SMP mod_unload modversions 
parm:           vf_max_tx_channels:Limit the number of TX channels VFs can use (uint)
parm:           max_vfs:Reduce the number of VFs initialized by the driver (int)
parm:           mcdi_logging_default:Enable MCDI logging on newly-probed functions (bool)
parm:           rx_refill_threshold:RX descriptor ring refill threshold (%) (uint)
parm:           irq_adapt_low_thresh:Threshold score for reducing IRQ moderation (uint)
parm:           irq_adapt_high_thresh:Threshold score for increasing IRQ moderation (uint)
parm:           interrupt_mode:Interrupt mode (0=>MSIX 1=>MSI 2=>legacy) (uint)
parm:           rss_cpus:Number of CPUs to use for Receive-Side Scaling (uint)
parm:           efx_separate_tx_channels:Use separate channels for TX and RX (bool)
parm:           phy_flash_cfg:Set PHYs into reflash mode initially (bool)
parm:           debug:Bitmapped debugging message enable value (uint)
Feb 17 2021, 12:46 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 16 2021

Dmitry added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

As a solution proposed to use TTL by default equivalent 16, but also add the possibility to change it via VyOS CLI

Feb 16 2021, 11:43 PM · VyOS 1.3 Equuleus
Dmitry created T3319: VXLAN uses ttl 1 (auto) by default.
Feb 16 2021, 11:32 PM · VyOS 1.3 Equuleus

Feb 15 2021

Dmitry claimed T3312: SolarFlare NICs support.
Feb 15 2021, 6:33 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3312: SolarFlare NICs support from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/146

Feb 15 2021, 6:33 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry triaged T3312: SolarFlare NICs support as Low priority.
Feb 15 2021, 9:25 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3312: SolarFlare NICs support.
Feb 15 2021, 9:25 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 12 2021

Dmitry triaged T3307: address prefix destination NAT fails to render nftables rules / commit as Normal priority.
Feb 12 2021, 11:22 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed the status of T3307: address prefix destination NAT fails to render nftables rules / commit from Open to Needs testing.
Feb 12 2021, 11:22 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 11 2021

jack9603301 awarded T3303: Change welcome message on boot a Like token.
Feb 11 2021, 2:49 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry changed Difficulty level from unknown to easy on T3303: Change welcome message on boot.
Feb 11 2021, 2:42 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
Dmitry created T3303: Change welcome message on boot.
Feb 11 2021, 2:28 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Feb 9 2021

Dmitry reopened T2647: ipsec disableuniqreqids generate a wrong ipsec.conf as "Backport candidate".

We need to change this and for CRUX

vyos@RTR1# run show version | match Version
Version:          VyOS 1.2.6-S1
[edit]
# Log
Feb  9 15:12:16 RTR1 ipsec_starter[2036]: # unknown keyword 'disableuniqreqids'
Feb 9 2021, 12:19 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus

Feb 8 2021

Dmitry triaged T2775: QAT acceleration for OpenVPN as Low priority.
Feb 8 2021, 10:40 AM · VyOS 1.3 Equuleus
Dmitry added a comment to T2776: QAT acceleration not working for IPSec AES-128 (CBC) / SHA256 tunnel .

@ajgnet which exactly version used in this case?

Feb 8 2021, 10:39 AM · VyOS 1.3 Equuleus