Page MenuHomePhabricator

gadams (Geoff Adams)
User

Projects

User Details

User Since
Aug 2 2016, 5:23 PM (142 w, 56 m)

Recent Activity

Feb 28 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Hmmm. I'll try to help you debug this issue offline (look for my message).

Feb 28 2019, 8:21 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

I've reproduced the hang you described on a test router. It looks like this:

Feb 28 2019, 5:12 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Hmmm. My next guess would be that you could be inadvertently blocking neighbor discovery (which happens on the link-local addresses). Can you try turning off the IPv6 firewall long enough to test whether it's the firewall at all? Another thing to try would be tcpdump on the LAN and WAN interfaces, as well as putting another machine (like a laptop) on the link between the two routers, to see where the packets are appearing and not appearing. You should see lots of link-local traffic between the LAN hosts and the VyOS router, as well as between the two routers.

Feb 28 2019, 4:25 AM · VyOS 1.3 Equuleus

Feb 27 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Ah, interesting. I'll see if I can reproduce the address dhcpv6 problem.

Feb 27 2019, 4:37 AM · VyOS 1.3 Equuleus

Feb 26 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Yeah, I still have a bit of debug output in there. Easy enough to remove.

Feb 26 2019, 6:43 PM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Great! The one I built last night is still available here: http://www.avernus.com/~gadams/vyos-crux.201902250834.dhcpv6pd-amd64.iso

Feb 26 2019, 8:20 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Indeed, this is on Comcast Business. At least they're consistent in their oddity, eh?

Feb 26 2019, 6:37 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Great! I'll look forward to hearing how it works for you.

Feb 26 2019, 4:34 AM · VyOS 1.3 Equuleus

Feb 25 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

I've learned a lot about building ISO images over the past couple weeks. I have a first version of my change ready; it's in two commits currently:

Feb 25 2019, 9:27 AM · VyOS 1.3 Equuleus
gadams added a comment to T1059: Support receiving IPv6 router advertisements.

I'm a little confused about the status of this task.

Feb 25 2019, 5:29 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-EPA3)

Feb 17 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Oy. Turns out that other routers (like those that found in ISP-provided cable modems) can have subtle quirks in their DHCPv6-PD implementations. I've worked around another one.

Feb 17 2019, 9:48 AM · VyOS 1.3 Equuleus

Feb 13 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

A quick progress update: I have fixed a bug (that may or may not have been present before) that prevented renew dhcpv6 interface eth3 (or whatever interface) from working outside of an active configuration session. I imagine most uses of dhcp lease renewal would occur in a normal router login session.

Feb 13 2019, 8:53 AM · VyOS 1.3 Equuleus

Feb 10 2019

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Well, I've been developing it against the 1.2.0 branch. It might work back-ported to 1.1.8, but that's not my focus.

Feb 10 2019, 8:04 PM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Hey! Sorry I was out for a bit. But I'm back now. Time to catch up.

Feb 10 2019, 6:20 AM · VyOS 1.3 Equuleus

Dec 3 2018

gadams added a comment to T1055: Duplicate Address Detection happens on interfaces other than eth0, too.

@aaliddell No worries! It was a really easy fix. :)

Dec 3 2018, 6:34 AM · VyOS 1.3 Equuleus

Nov 29 2018

gadams added a comment to T1055: Duplicate Address Detection happens on interfaces other than eth0, too.

Did there turn out to a be problem with this fix? I definitely need it in my environment, where I run dhclient on eth3 or br0, and eth0 never gets an IPv6 address (link local or otherwise).

Nov 29 2018, 11:41 PM · VyOS 1.3 Equuleus
gadams created T1059: Support receiving IPv6 router advertisements.
Nov 29 2018, 5:07 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-EPA3)
gadams added Q129: Is `sysctl -w net.ipv6.conf.eth0.accept_ra=2` still necessary? (Answer 215).
Nov 29 2018, 4:45 AM

Nov 28 2018

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

I have now implemented the syntax I described above. There are still some edge cases, mostly because of the fact that dhclient is started in a whole bunch of places, and making it all consistent is tricky. Perhaps refactoring /opt/vyatta/sbin/vyatta-dhcpv6-client.pl (probably rewriting it in Python) is in order. I may not do that right now, though.

Nov 28 2018, 7:56 AM · VyOS 1.3 Equuleus
gadams changed the status of T1055: Duplicate Address Detection happens on interfaces other than eth0, too from Open to In progress.
Nov 28 2018, 4:40 AM · VyOS 1.3 Equuleus
gadams created T1055: Duplicate Address Detection happens on interfaces other than eth0, too.
Nov 28 2018, 4:39 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

OK! I'm happy to say that I have prefix delegation working with ISC dhclient, now, using a dhclient exit hook to collect the delegated prefix and farm out chunks of it to local interfaces. Now I'm tnhinking about the configuration syntax.

Nov 28 2018, 12:45 AM · VyOS 1.3 Equuleus

Nov 27 2018

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Hey, laziness is a programmer virtue, remember!

Nov 27 2018, 5:06 AM · VyOS 1.3 Equuleus
gadams claimed T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.
Nov 27 2018, 5:03 AM · VyOS 1.3 Equuleus
gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

Aha! Looking into it a bit more, the hook scripts are given the environment variables new_ip6_prefix and old_ip6_prefix, so that's where we should get the delegated prefix (and remove an old one, as appropriate). So, all we need to do is add some configuration settings to request PD and to indicate a subnet number within the delegated prefix to assign out to any desired interfaces. Then, it's a simple matter of exit-hook scripting to set this all up.

Nov 27 2018, 1:31 AM · VyOS 1.3 Equuleus

Nov 26 2018

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

That's very interesting. Thanks for sharing.

Nov 26 2018, 10:46 PM · VyOS 1.3 Equuleus

Nov 8 2018

gadams added a comment to T978: PowerDNS config for upstream IPv6 nameservers is broken.

I have sent a pull request that adds support for outbound IPv6 queries, implementing what I described above: https://github.com/vyos/vyos-1x/pull/58.

Nov 8 2018, 7:40 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc7)
gadams added a comment to T974: PowerDNS config can't handle listening on IPv6 addresses.

Yes, that change works. I'll look forward to it appearing in an RC. :)

Nov 8 2018, 6:20 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams added a comment to T974: PowerDNS config can't handle listening on IPv6 addresses.

Aha! I have figured out what causes pdns-recursor not to answer requests on its IPv6 sockets, even though it binds to them. It's the allow-from setting. If I change it from:

allow-from=0.0.0.0/0

to:

allow-from=0.0.0.0/0, ::/0

then everything works.

Nov 8 2018, 3:18 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)

Nov 7 2018

gadams created T978: PowerDNS config for upstream IPv6 nameservers is broken.
Nov 7 2018, 7:18 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc7)
gadams added a comment to T974: PowerDNS config can't handle listening on IPv6 addresses.
Nov 7 2018, 6:19 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams added a comment to T974: PowerDNS config can't handle listening on IPv6 addresses.

The plot thickens, however. According to netstat -an | grep :53, it is listening on the IPv6 addresses specified.

Nov 7 2018, 6:14 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams added a comment to T974: PowerDNS config can't handle listening on IPv6 addresses.

Yes, I concur that keeping just listen-address for both address types would definitely be preferable, and we should just distinguish between them when building the config, if needed.

Nov 7 2018, 6:05 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams updated the task description for T974: PowerDNS config can't handle listening on IPv6 addresses.
Nov 7 2018, 5:58 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams updated the task description for T974: PowerDNS config can't handle listening on IPv6 addresses.
Nov 7 2018, 6:45 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)
gadams created T974: PowerDNS config can't handle listening on IPv6 addresses.
Nov 7 2018, 6:43 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc8)

Oct 17 2018

gadams added a comment to T421: VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support.

A long time ago (before Oct 2016) I built Roy Marples' dhcpcd and hacked
/opt/vyatta/etc/config/scripts/vyatta-postconfig-bootup.script to install, configure, and start it up. I've been running with this config for over two years, and it's pretty stable. I'd love for this to be built into VyOS, rather than a local config hack.

Oct 17 2018, 4:31 AM · VyOS 1.3 Equuleus

Oct 29 2016

gadams set Version to dev build 999.201609230235 on T179: dnsmasq startup dependencies seem off.
Oct 29 2016, 7:05 AM · Invalid
gadams created T179: dnsmasq startup dependencies seem off.
Oct 29 2016, 7:04 AM · Invalid
gadams added a comment to T155: NTP wasn't running, nor conigured in 1.2.0-beta1.

Hmm. Things are afoot.

Oct 29 2016, 6:47 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Oct 7 2016

gadams added a comment to T117: Cannot install from ISO via serial console on ttyS1.

Recent dev builds on the current (lithium) branch don't need to be told which port is the console; systemd is able to figure it out, and spawns the correct getty processes.

Oct 7 2016, 7:21 AM · VyOS 1.3 Equuleus
gadams created T169: Image install should put correct serial console device in created grub menuentry.
Oct 7 2016, 7:19 AM · VyOS 1.3 Equuleus

Oct 6 2016

gadams added a comment to T155: NTP wasn't running, nor conigured in 1.2.0-beta1.

I've written a handy script to start ntpd manually:

Oct 6 2016, 6:57 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams added a comment to T155: NTP wasn't running, nor conigured in 1.2.0-beta1.

I tried adding this to /config/scripts/vyatta-postconfig-bootup.script:

Oct 6 2016, 5:36 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams added a project to T155: NTP wasn't running, nor conigured in 1.2.0-beta1: VyOS 1.1.x (1.1.8).

This hack does work, but it only lasts until you reboot VyOS. When the OS comes back up, you'll need to do this again.

Oct 6 2016, 5:20 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Sep 21 2016

gadams added a comment to T146: 'show system image' odd behavior when console is ttyS1.

I have sent a pull request.

Sep 21 2016, 7:49 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams renamed T146: 'show system image' odd behavior when console is ttyS1 from 'add system image' odd behavior for lithium images to 'show system image' odd behavior when console is ttyS1.
Sep 21 2016, 12:54 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Sep 16 2016

gadams created T156: Fix 'show version' in current (lithium) dev builds.
Sep 16 2016, 6:24 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Sep 8 2016

gadams added a comment to T147: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key.

Most likely postinst, but I can't find that file in the git repos.

Sep 8 2016, 4:29 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams added a comment to T116: Properly mount /live/persistence when booting from sdb (current).

Aha!. I've tried 999.201609070235 (current). Things look quite a bit better; /opt/vyatta/etc/config/scripts/vyatta-postconfig-bootup.script is now persisted, and things seem to start up and run quite nicely.

Sep 8 2016, 6:01 AM · VyOS 1.1.x (1.1.8)
gadams added a comment to T117: Cannot install from ISO via serial console on ttyS1.

It should be safe to start a getty on ttyS1 (in addition to the one on ttyS0) for all devices, shouldn't it? Even on devices that don't have a ttyS1 (or even a ttyS0), that shouldn't cause any failures.

Sep 8 2016, 4:52 AM · VyOS 1.3 Equuleus
gadams added a comment to T146: 'show system image' odd behavior when console is ttyS1.

Aha! I think I have found the cause. In vyatta-boot-image.pl, there is this code:

Sep 8 2016, 4:41 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams added a comment to T147: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key.

Ooh. I see that the script that copies over the ssh keys is vyatta-cfg-system/scripts/install/install-image-existing, but it's run on the old system--the one you're upgrading from. So putting the fix in there would require upgrading the old OS first.

Sep 8 2016, 2:34 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams created T147: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key.
Sep 8 2016, 2:18 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
gadams created T146: 'show system image' odd behavior when console is ttyS1.
Sep 8 2016, 1:55 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Aug 10 2016

gadams added a comment to T116: Properly mount /live/persistence when booting from sdb (current).

Unfortunately, I'm traveling right now, so I'll have to try out a newer image and give you the output from 'sudo blkid' in three weeks. I'll look forward to some good progress when I return!

Aug 10 2016, 8:57 PM · VyOS 1.1.x (1.1.8)

Aug 6 2016

gadams created T117: Cannot install from ISO via serial console on ttyS1.
Aug 6 2016, 5:52 AM · VyOS 1.3 Equuleus
gadams created T116: Properly mount /live/persistence when booting from sdb (current).
Aug 6 2016, 5:45 AM · VyOS 1.1.x (1.1.8)