Page MenuHomeVyOS Platform
Feed Search

May 21 2020

c-po committed rVYOSONEX4a0c0b4e041d: macsec: T2023: use list when working with Config().
May 21 2020, 2:09 PM
c-po committed rVYOSONEX04d03f5bdd26: macsec: T2023: add optional encryption command.
May 21 2020, 2:09 PM
c-po committed rVYOSONEXe9c9af90a8ee: macsec: T2023: add 'show interfaces macsec' op-mode tree.
May 21 2020, 2:09 PM
c-po committed rVYOSONEX5038eb5856b8: macsec: T2023: generate secure channel keys in operation mode.
May 21 2020, 2:09 PM
c-po committed rVYOSONEX2e8bd0ced896: ifconfig: T2023: add initial MACsec abstraction.
May 21 2020, 2:09 PM
c-po committed rVYOSONEXfe9d399a4e78: macsec: T2023: add initial XML and Python interfaces.
May 21 2020, 2:09 PM
c-po committed rVYOSONEX0f98642dfbc6: interface: T2023: adopt _delete() to common style.
May 21 2020, 2:09 PM
c-po committed rVYOSONEX3f932b66a552: interface: T2023: remove superfluous at end of list.
May 21 2020, 2:09 PM
c-po committed rVYOSONEXd457ef195293: macvlan: T2023: prepare common source interface include file.
May 21 2020, 2:09 PM
c-po added a comment to T2486: DNS records set via 'system static-host-mapping' return NXDOMAIN from 'service dns forwarding' after a request to a forwarded zone.

Latest rolling runs PowerDNS recursor 4.3 T2470

May 21 2020, 12:28 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 21 2020, 11:47 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2023: Add support for 802.1ae MACsec.

This is a 1300 byte ping running through a MACsec connection with wpa_supplicant for key management.

May 21 2020, 10:08 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 21 2020, 10:07 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 21 2020, 9:33 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 21 2020, 8:28 AM · VyOS 1.3 Equuleus (1.3.0)

May 20 2020

c-po added a comment to T103: DHCP server prepends shared network name to hostnames.

@richardpowellus you could test it on an 1.2.5 system by running the following commands:

May 20 2020, 7:52 PM · VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T103: DHCP server prepends shared network name to hostnames, a subtask of T2464: DNS bugs (parent task), as Resolved.
May 20 2020, 7:50 PM · VyOS Rolling
c-po closed T103: DHCP server prepends shared network name to hostnames as Resolved.
May 20 2020, 7:50 PM · VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T103: DHCP server prepends shared network name to hostnames, a subtask of T2464: DNS bugs (parent task), from Open to Needs testing.
May 20 2020, 7:50 PM · VyOS Rolling
c-po changed the status of T103: DHCP server prepends shared network name to hostnames from Open to Needs testing.
May 20 2020, 7:50 PM · VyOS 1.2 Crux (VyOS 1.2.6)
c-po added a comment to T103: DHCP server prepends shared network name to hostnames.

@krassle backported to crux branch

May 20 2020, 7:49 PM · VyOS 1.2 Crux (VyOS 1.2.6)
c-po committed rVYOSONEXb5b6e657ca7f: [dhcp-server] T103: wrong hostnames in hosts file.
May 20 2020, 7:49 PM
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 20 2020, 7:45 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 20 2020, 5:12 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected as Resolved.
May 20 2020, 3:10 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected.

Fixed in https://github.com/vyos/vyos-1x/commit/bc06027 - task id missed in commit

May 20 2020, 3:10 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2023: Add support for 802.1ae MACsec.
May 20 2020, 2:38 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2023: Add support for 802.1ae MACsec from Open to In progress.
May 20 2020, 2:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2088: Increased boot time from 1.2.4 -> 1.3 rolling by 100%.

Please see attached the full log of the boot process. I try to supply a PNG later on but I guess it will be really huge.

May 20 2020, 10:16 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2088: Increased boot time from 1.2.4 -> 1.3 rolling by 100%.
May 20 2020, 6:13 AM · VyOS 1.3 Equuleus (1.3.0)

May 19 2020

c-po committed rVYOSONEX7c55de11ca14: bgp: T2387: rename new implementation else system will not boot.
May 19 2020, 9:06 PM
c-po committed rVYOSONEXf078e743c9c3: wireguard: T2481: support IPv6 based underlay.
May 19 2020, 8:28 PM
c-po closed T2481: WireGuard: support tunnel via IPv6 underlay as Resolved.
May 19 2020, 8:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2481: WireGuard: support tunnel via IPv6 underlay.
May 19 2020, 8:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXbc060277ab55: nat: do not report unassigned IP address for DNAT.
May 19 2020, 7:55 PM
c-po closed T421: Add Pv6 prefix delegation support as Resolved.
May 19 2020, 7:41 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.
21:39:35.057600 IP6 (flowlabel 0xba774, hlim 1, next-header UDP (17) payload length: 76) fe80::20d:b9ff:fe53:7ee.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=95b13f (client-ID hwaddr/time type 1 time 643212067 000db95307ec) (IA_NA IAID:1 T1:0 T2:0) (elapsed-time 1681) (option-request DNS-server DNS-search-list) (IA_PD IAID:2 T1:0 T2:0))
May 19 2020, 7:40 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po committed rVYOSONEX77eaf77f4fde: configdict: T2372: add new interface_default_data dict.
May 19 2020, 7:31 PM
c-po committed rVYOSONEX3e76f032c22f: configdict: T2372: use list over string.
May 19 2020, 7:31 PM
c-po committed rVYOSONEXba06bfed4fc8: dhcpv6-pd: T421: support ethernet based interfaces.
May 19 2020, 7:31 PM
c-po committed rVYOSONEXe62218c87a99: configdict: T2372: interfaces must reuse interface_default_data.
May 19 2020, 7:31 PM
c-po added a comment to T421: Add Pv6 prefix delegation support.

Based on a bond interface

May 19 2020, 7:31 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po claimed T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected.
May 19 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected.
May 19 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2474: Building instructions with Docker need a little more detail.

@fetzerms thanks for getting back to us - I also successfully tested it.

May 19 2020, 3:53 PM · Restricted Project
c-po committed rVYOSONEX5cbdffd3c1bd: dhcpv6-server: T815: support delegating IPv6 prefixes.
May 19 2020, 3:14 PM
c-po added a comment to T815: Add DHCPv6 server prefix-delegation support.
set service dhcpv6-server shared-network-name TEST subnet 2001:db8::/64 prefix-delegation start 2001:db8:1000:: prefix-length '56'
set service dhcpv6-server shared-network-name TEST subnet 2001:db8::/64 prefix-delegation start 2001:db8:1000:: stop '2001:db8:2000::'
May 19 2020, 3:14 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po closed T815: Add DHCPv6 server prefix-delegation support as Resolved.
May 19 2020, 3:10 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T2474: Building instructions with Docker need a little more detail.

Yes it is, we auto publish it if there is a change.

May 19 2020, 6:02 AM · Restricted Project

May 18 2020

c-po added a comment to T421: Add Pv6 prefix delegation support.

@jack9603301 looking for a „service dhcpv6-server“ configuration which hands out the prefixes via ethernet so I can implement the client side.

May 18 2020, 6:29 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.

I know that this does not cover all use cases but it is a PoC working for some users (not all of course). Next step would be adding this to ethernet based interfaces.

May 18 2020, 3:24 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.

Documentationnupdated here https://docs.vyos.io/en/latest/interfaces/pppoe.html#ipv6

May 18 2020, 6:07 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.
In T421#63882, @Azayaka wrote:

@tbr Looking at this post, I don't think EdgeRouter has the capability...

May 18 2020, 5:44 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

May 17 2020

c-po added a comment to T421: Add Pv6 prefix delegation support.

Enjoy testing

May 17 2020, 6:43 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po changed the status of T421: Add Pv6 prefix delegation support from Open to Needs testing.
May 17 2020, 6:43 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po committed rVYOSONEXdd6d46f7a60f: Merge branch 'ipv6-pd' of github.com:c-po/vyos-1x into current.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX8f1fd7ce8e92: pppoe: dhcpv6-pd: T421: change system type to forking.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX2d47eb1eba4f: pppoe: dhcpv6-pd: T421: stop service when config is removed.
May 17 2020, 6:42 PM
c-po committed rVYOSONEXfaa85accc99d: pppoe: dhcpv6-pd: T421: initial support.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX9bcdb58c13b7: pppoe: dhcpv6-pd: T421: start/stop delegation with interface status.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX46d92ac80bda: dhcpv6-pd: T421: migrate from ISC dhclient to wide-dhcpv6-client.
May 17 2020, 6:42 PM
c-po added a comment to T421: Add Pv6 prefix delegation support.

From the Git commit:

May 17 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured.
set service pppoe-server authentication local-users username test password 'test'
set service pppoe-server authentication mode 'local'
set service pppoe-server client-ip-pool start '192.168.0.1'
set service pppoe-server client-ip-pool stop '192.168.0.10'
set service pppoe-server client-ipv6-pool delegate '2001:db8:8003::/48' delegation-prefix '56'
set service pppoe-server client-ipv6-pool prefix '2001:db8:8002::/48' mask '64'
set service pppoe-server name-server '8.8.8.8'
set service pppoe-server name-server '2001:4860:4860::8888'
set service pppoe-server interface 'eth1'
set service pppoe-server local-ip '10.100.100.1'
May 17 2020, 4:51 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXca2f7e5e62ef: pppoe-server: T2471: add SLAAC support.
May 17 2020, 4:48 PM
c-po closed T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured as Resolved.
May 17 2020, 4:46 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured.
May 17 2020, 4:45 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX843c789a0e92: xml: split dhcp, dhcpv6 to individual files.
May 17 2020, 2:21 PM
c-po committed rVYOSONEX2411cf35b3cf: frr: combine all templates in frr directory.
May 17 2020, 2:00 PM
c-po committed rVYOSONEX7ba82de32e25: powerdns: T2470: adjust systemd RuntimeDirectory.
May 17 2020, 9:50 AM
c-po committed rVYOSONEX8117270c122c: powerdns: T2470: adjust config file permissions for recursor 4.3.
May 17 2020, 9:04 AM

May 16 2020

c-po committed rVYOSONEX7d01f7fec95f: nat: nptv6: T2198: add XML/Python skeleton.
May 16 2020, 8:53 PM
c-po closed T2470: Update to PowerDNS recursor 4.3 as Resolved.
May 16 2020, 4:50 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2469: Update Linux Kernel to v4.19.123 as Resolved.
May 16 2020, 4:48 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2470: Update to PowerDNS recursor 4.3.
May 16 2020, 4:47 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2469: Update Linux Kernel to v4.19.123.
May 16 2020, 4:44 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2198: Rewrite NAT in new XML/Python style as Resolved.
May 16 2020, 4:39 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX9e305400f281: Merge branch 'nat-nftables' of github.com:c-po/vyos-1x into current.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd8891acde69b: Debian: add required dependency on systemd.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2ba8c8499f86: nat: T2198: remove "tcp_udp" from "show nat dest stat"x.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2a0d1e77e650: nat: T2198: add common ip-protocol validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX6f349ee3b4d3: nat: T2198: use Jinja2 macro for common ruleset for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd7662ecfff55: nat: T2198: restructure DNAT template part for less duplicated code.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcf6dcb61e1f1: nat: T2198: add support for SNAT based on source addresses.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXe89f19c5bb0f: nat: T2198: set default protocol to all to be backwards compatible.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX8062afa8a5be: nat: T2198: sync generated SNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX9cec8471dae5: nat: T2198: sync generated DNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf75db67c495c: nat: T2198: do not run DNAT rule if rule is disabled.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXb2ead2d037b8: nat: T2198: verify translation address for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX682bfd2c869a: nat: T2198: restructure DNAT template.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX5abe2db17a6e: nat: T2198: extend verify() for destination ports.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd0b24799d900: nat: T2198: migrate "log enable" node to only "log".
May 16 2020, 4:37 PM
c-po committed rVYOSONEX756e36da2cf4: nat: T2198: add protocol completion helper and regex constraint.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf233a9e4073f: nat: T2198: migrate "show nat" commands to XML and Python.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1e7d01e5b5a1: nat: T2198: add some basic verify() rules.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXac4f99ac3b17: nat: T2198: split nat-address-port include into individual files.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1330898ed095: nat: T2198: add ipv4-{address,prefix,rage}-exclude validators.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX728e1c6073cb: nat: T2198: add new ipv4-range validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXfda762065c03: nat: T2198: implement deletion of NAT subsystem.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcc2ad34ce61e: nat: T2198: make use of jmespath when walking nftables JSON output.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1c6ae6f7e7cf: nat: T2198: automatically determine handler numbers.
May 16 2020, 4:37 PM