Of course, restarting ping works, but all flows in transit will stop, this is not what you wan't on an edge device running 10GBit/s of traffic
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 6 2020
Dec 6 2020
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
Running VyOS 1.3-rolling-202012060217 immediately when I enable port mirroring all sessions are dropped on this link.
c-po added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.
Please only allow native-vlan and allowed-vlan for ethernet and bond type of interfaces for the time beeing
c-po added a comment to T3114: When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails.
I wonder if this configuration should be possible at all. In my opinion native-vlan and allowed-vlan should be supported only on bond and ethernet interface types
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay, a subtask of T3100: Migrate DHCP/DHCPv6 server to get_config_dict(), from Open to In progress.
c-po changed the status of T2562: VyOS can't be used as a DHCP server for a DHCP relay from Open to In progress.
Taking the following configuration as a pool serving relays:
c-po changed the status of T3113: dhcp-server: Multiple domain-search values are escaped incorrectly from Open to In progress.
Dec 5 2020
Dec 5 2020
c-po added a comment to T2996: Checking digital signature failed on downgrade from rolling to stable..
Disable downgrades in general is a bad idea. We still can leave the user with a broken config on downgrade but prevent it is bad. Imagine a very simple config, that would be downgradable.
Dec 4 2020
Dec 4 2020
c-po closed T3112: PPPoE IPv6: remove "enable" node, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, as Resolved.
yes, specifying "ipv6" has the same effect as "ipv6 enable"
Dec 3 2020
Dec 3 2020
c-po changed the status of T3105: static-host-mapping writing in one line from Open to Needs testing.
Dec 2 2020
Dec 2 2020
Calculating setting is always the smartest idea. I also have a WIFI6 NIC with me, the problem is it is not supported by Linux 4.19. which we currently are forced to use.
Dec 1 2020
Dec 1 2020
table ip nat {
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
iifname "eth1" tcp dport { 22 } counter packets 0 bytes 0 dnat to 192.168.1.4 comment "DST-NAT-100"
}
}Thank you @Dmitry, it will be in tomorrows rolling release.
c-po changed the status of T3102: Destination NAT fails to commit from In progress to Needs testing.
c-po changed the status of T3100: Migrate DHCP/DHCPv6 server to get_config_dict() from Open to In progress.
Nov 30 2020
Nov 30 2020
Ah, thanks for the clarification.
Nov 29 2020
Nov 29 2020
c-po renamed T3095: Migrate dhcp-relay and dhcpv6-relay to get_config_dict() from Migrate dhcp-relay to get_config_dict() to Migrate dhcp-relay and dhcpv6-relay to get_config_dict().
See documentation https://docs.vyos.io/en/latest/system/ntp.html, support will be in next rolling release
c-po renamed T2297: NTP add support for pool configuration from ntp configuration to NTP add support for pool configuration.
c-po changed the status of T3095: Migrate dhcp-relay and dhcpv6-relay to get_config_dict() from Open to In progress.
c-po added a project to T3094: Can not specify multiple deny ports in FW rule: VyOS 1.2 Crux (VyOS 1.2.7).
Even on Kernel 5.4 this is not supported.
Nov 28 2020
Nov 28 2020
The command works on the experimental Kernel 5.9.9 VyOS ISO, but not using a 4.19 series Kernel. looks like it's not yet supported in nftables.
We actually need this:
http://git.nftables.org/nftables/commit/?id=35a6b10c1bc488ca195e9c641563c29251f725f3
c-po added a parent task for T2947: Nat translation many-many with prefix does not map 1-1.: T3092: nat: migrate to get_config_dict().
Nov 27 2020
Nov 27 2020
c-po changed the status of T2947: Nat translation many-many with prefix does not map 1-1. from Open to Confirmed.
The root cause here is that there is yet no nftables map support in our template.
c-po added a comment to T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring.
+1