If we will use only mark_in=%unique, this allow us work with or without NAT rules. PR https://github.com/vyos/vyos-1x/pull/120
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 31 2019
Aug 31 2019
Unknown Object (User) added a comment to T1605: L2tp over IPsec not working in Crux.
syncer assigned T1385: Allow bonding interfaces to have pseudo-ethernet interfaces to Unknown Object (User).
syncer reassigned T1395: Improve boot time for instances with a big count of DHCP servers from zsdc to hagbard.
syncer assigned T1401: Copying files with the FTP protocol fails if the password contains special characters to Unknown Object (User).
syncer edited projects for T1417: IPv6 zone based firewall rules can't be modified, added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
dmbaturin changed the status of T1529: BGP unnumbered is not working with a vif interface from Unknown Status to Resolved.
Cherry-picked into crux.
dmbaturin changed the status of T1472: Impossible to recreate group in rfc3768-compatibility mode from Unknown Status to Resolved.
Imported 2.0.17 into crux.
syncer triaged T1478: libvyosconfig parser does not support escaped quotes inside single-quoted strings as Low priority.
syncer changed the status of T1486: Unknown LLDP version reported to peers from Open to Needs testing.
Aug 30 2019
Aug 30 2019
syncer added a project to T1529: BGP unnumbered is not working with a vif interface: VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1531: Several bugs in cluster configuration from Need Triage to Finished on the VyOS 1.3 Equuleus board.
syncer reassigned T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from jjakob to c-po.
Please backport this
syncer removed a project from T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id: VyOS 1.2 Crux.
syncer moved T1472: Impossible to recreate group in rfc3768-compatibility mode from Finished to Backlog on the VyOS 1.3 Equuleus board.
syncer moved T1472: Impossible to recreate group in rfc3768-compatibility mode from Need Triage to Finished on the VyOS 1.3 Equuleus board.
syncer edited projects for T1472: Impossible to recreate group in rfc3768-compatibility mode, added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
syncer edited projects for T1576: show arp interface <interface> does not work, added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
Actually, there are already run monitor traffic interface $intf commands and they work fine in 1.2.3.
syncer edited projects for T1587: New implementation of "monitor interface", added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
syncer edited projects for T1598: New implementation of the resolv.conf and hosts update mechanism, added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
syncer assigned T1616: 'renew dhcpv6 interface <interfaceName>' command fails, but work within config session to Unknown Object (User).
syncer assigned T1620: Leases in "show dhcp server leases" lose Pool and Hostname after some time to Unknown Object (User).
alkersan changed the status of T1621: Rewrite the rest of trivial vyatta-op commands to new syntax from Open to In progress.
Aug 29 2019
Aug 29 2019
Aug 28 2019
Aug 28 2019
Adding "tls-crypt" and in the upcoming 2.5 release "tls-crypt-v2" options would also be desirable.
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
@hagbard during some tests with the bridge interface (https://github.com/vyos/vyos-1x/commit/71f7a947539963112c61fef2a5f278d524d71198) I noticed the following:
c-po closed T1615: After migration to pyroute2 the address DHCP statement is no longer covered, a subtask of T1556: Rewrite Bridge in new style XML syntax, as Resolved.
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
Pyroute2 states:
One of the major issues with IPDB is its memory footprint. It proved not to be suitable for environments with thousands of routes or neighbours. Being a design issue, it could not be fixed, so a new module was started, NDB, that aims to replace IPDB. IPDB is still more feature rich, but NDB is already more fast and stable.
Aug 27 2019
Aug 27 2019
c-po moved T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG) from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG) from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
c-po edited projects for T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG), added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
c-po added a project to T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG): VyOS 1.3 Equuleus.
c-po closed T1617: OpenVPN push route failure, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, as Resolved.
The reason for layer2, layer2+3 and layer3+4 are that those values are directly passed to the kernel, as the pernel expects:
improvement suggestion:
- remove the use of + in hash-policy names. layer2+3 and layer3+4. this could be replaced with the more used - character, so layer2-3 and layer3-4
- also add support for encap2-3 and encap3-4hash-policy
It is true that you need a hash-policy, but specifying a hash-policy is optional, if you don't specify it reverts to the kernel default that is layer2..
also defaults should not be listed in the configuration. (because then the configuration will be crowded with all kind of strange things that is a default)
@runar If I could offer an alternative, why not require set interfaces bonding bond0 hash-policy to always be specified? The hash policy is not something optional like a tunnel key for GRE, so I feel that this option should be required.
Improvement suggestion:
set interfaces bonding bond0 hash-policy # defaults to layer2, listing layer2 as an configureable alternative is then redundant. to revert to level2 the user should delete the config entry instead. also update description about using layer2 as a default
c-po edited a custom field on T1615: After migration to pyroute2 the address DHCP statement is no longer covered.
c-po triaged T1615: After migration to pyroute2 the address DHCP statement is no longer covered as High priority.
Line2 added a comment to T1333: pdns_recursor does not perform recursive lookups on domain specific forwarders.
with vyos-1.2-rolling-201908270337-amd64.iso also fixed for me. Thanks
c-po changed the status of T1614: Rewrite bonding interface in new style XML syntax from Open to In progress.
c-po changed the status of T1614: Rewrite bonding interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.