I guess we will make use of nftables when the firewall codebase is rewritten. That rewrite is a major effort and on the roadmap - but it does not have momentum/priority yet due to limited resources.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 16 2019
Nov 16 2019
syncer raised the priority of T1470: improve output of "show dhcpv6 server leases" from Wishlist to Normal.
syncer edited projects for T1470: improve output of "show dhcpv6 server leases", added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1430: Add options for custom DHCP client-id and hostname from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1430: Add options for custom DHCP client-id and hostname, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer edited projects for T1452: accel-pppoe - add vendor option to shaper , added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
Nov 14 2019
Nov 14 2019
dmbaturin changed Is it a breaking change? from none to syntax on T1807: Improve WireGuard CLI "endpoint" on.
dmbaturin edited projects for T1807: Improve WireGuard CLI "endpoint" on, added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
jestabro closed T1710: [equuleus] buster: add patch to fix live-build missing key error as Resolved.
The suggested debian package qrencode seems handy for terminal use. Actually, using QRcodes to transfer information would be interesting for other uses as well, such as exporting other kinds of keys such as OpenVPN. As a remote support measure, if a config is causing issues that prevent remote login, having a local login being able to emit the current config as a QRcode might be interesting...
Nov 13 2019
Nov 13 2019
In PR https://github.com/vyos/vyos-1x/pull/162, util.py is pulled in to the nosetests path; T1804 will need to be closed before merging.
Nov 12 2019
Nov 12 2019
jestabro triaged T1801: Unescaped backslashes in config values cause configuration failure as Normal priority.
jestabro changed the status of T1801: Unescaped backslashes in config values cause configuration failure, a subtask of T1787: Failed config migration from V1.2.3 to 1.2-rolling-201911030217, from Open to In progress.
jestabro changed the status of T1801: Unescaped backslashes in config values cause configuration failure from Open to In progress.
c-po moved T1787: Failed config migration from V1.2.3 to 1.2-rolling-201911030217 from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T1673: vif bridge-group not migrated to bridge member interface from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T1627: Rewrite wireless interface in new style XML syntax from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T989: Add support for IPoE server from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1763: CloudFlare DDNS support from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T517: Rewrite the wireless interface configuration in the new style (python + XML) from Backlog to Finished on the VyOS 1.3 Equuleus board.
c-po moved T808: replace lighthttpd with nginx from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T56: Add pkcs11 support to OpenVPN interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T50: Better support for tcp-mss from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T239: Improve documentation for the firewall all-ping setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T592: lldpcli: unknown command from argument 1: `#` from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1062: Cannot connect to a newly created Amazon EC2 instance via SSH from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T823: Rewrite DHCP op mode in the new style from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1313: Add support for reusable build flavours from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1565: [wireguard] - use VYOS_TAGNODE_VALUE to determine changed tagNodes from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1570: Unable to build for ocaml/dune for armhf on docker and chroot from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1656: equuleus: buster: arm: iso creation failes because of intel drivers from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1741: Add system wide proxy setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1756: Modify output to be more useful - Wireguard from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1789: ddclient not working with generated RFC2136 / nsupdate config from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1791: Update Linux Kernel to 4.19.82 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1792: Update WireGuard to Debian release 0.0.20191012-1 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1800: Update Linux Kernel to v4.19.84 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
rherold added a comment to T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP.
In this way we could also add vpp nat64 running complete in vpp independent from all other vyos services:
Nov 11 2019
Nov 11 2019
c-po triaged T1799: Add support for GENEVE (Generic Network Virtualization Encapsulation) as Low priority.
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from In Progress to Finished on the VyOS 1.3 Equuleus board.
Nov 10 2019
Nov 10 2019
hagbard moved T1788: Intel QAT (QuickAssist Technology ) implementation from In Progress to Finished on the VyOS 1.3 Equuleus board.
https://downloads.vyos.io/rolling/current/amd64/vyos-1.2-rolling-201911102307-amd64.iso or later has it included.
packages are being built via CI:
http://dev.packages.vyos.net/repositories/current/vyos/pool/main/v/vyos-qat/
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po changed the status of T1793: Editing description on an interface causes BGP sessions to reset on commit from Confirmed to Needs testing.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
Tomorrows rolling release will come with a first version of the fix. It requires you to use speed/duplex auto setting. The next part will also cover fixed speed/duplex settings.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
The offender is the call to vyos.ifconfig.set_flow_control() which triggers /sbin/ethtool --pause eth0 autoneg on tx on rx on. we should only change this if it is really necessary and not on every commit.
syncer moved T1485: Enable 'AdvIntervalOpt' option in for radvd.conf from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1485: Enable 'AdvIntervalOpt' option in for radvd.conf, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux (VyOS 1.2.3).
syncer moved T1788: Intel QAT (QuickAssist Technology ) implementation from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer edited projects for T1788: Intel QAT (QuickAssist Technology ) implementation, added: VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux.
syncer edited projects for T1720: support for more 'show ip route' commands , added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
syncer moved T1705: High CPU usage by bgpd when snmp is active from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.4) board.
syncer moved T1705: High CPU usage by bgpd when snmp is active from Need Triage to Finished on the VyOS 1.3 Equuleus board.
syncer edited projects for T1705: High CPU usage by bgpd when snmp is active, added: VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.4); removed VyOS 1.2 Crux.
Hello all! Was anything made with this issue?
c-po closed T1792: Update WireGuard to Debian release 0.0.20191012-1, a subtask of T1791: Update Linux Kernel to 4.19.82, as Resolved.
Colons in interface description should be allowed. There are tools like libreNMS which use defined prefixes for internal mapping and they have a colon inside.
c-po edited a custom field on T1793: Editing description on an interface causes BGP sessions to reset on commit.
c-po changed the status of T1793: Editing description on an interface causes BGP sessions to reset on commit from Open to Confirmed.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
There should be no reason the session is reset. This is an implementation "missdesign" by me when rewriting the ethernet interface. All interfaces are placed in admin down state on commit and will be placed in admin up state once the commit has run. and interface is not disabled.
Nov 9 2019
Nov 9 2019
Unknown Object (User) added a comment to T1788: Intel QAT (QuickAssist Technology ) implementation.
PR for CLI https://github.com/vyos/vyos-1x/pull/159
pending review: https://github.com/vyos/vyos-build-kernel/pull/1
hagbard moved T1788: Intel QAT (QuickAssist Technology ) implementation from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po changed the status of T1792: Update WireGuard to Debian release 0.0.20191012-1, a subtask of T1791: Update Linux Kernel to 4.19.82, from Open to In progress.
c-po changed the status of T1792: Update WireGuard to Debian release 0.0.20191012-1 from Open to In progress.
c-po changed the status of T1030: Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4) from Unknown Status to Resolved.
c-po changed the status of T1030: Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4), a subtask of T1763: CloudFlare DDNS support, from Unknown Status to Resolved.