Page MenuHomeVyOS Platform
Feed Search

May 6 2022

n.fort added a comment to T4362: Wan Load Balancing - Can't create routing tables.

I was able to reproduce issue on latest VyOS 1.4-rolling-202205060217
Steps to reproduce:
1 - Fresh/clean vyos router
2 - Add interface configuration (dhcp on WANs and static IP addresses on LAN side), commit and save
3 - Add next WLB configuration:

May 6 2022, 5:54 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4410: Telegraf - Output to Splunk from Needs testing to In progress.
May 6 2022, 4:50 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4418: Telegraf - output Plugin azure-data-explorer from Open to In progress.
May 6 2022, 4:47 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4418: Telegraf - output Plugin azure-data-explorer.

PR https://github.com/vyos/vyos-1x/pull/1317

May 6 2022, 4:46 PM · VyOS 1.4 Sagitta
c-po closed T4385: bgp: peer-group member cannot override remote-as of peer-group as Resolved.
May 6 2022, 4:32 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4410: Telegraf - Output to Splunk from Open to Needs testing.
May 6 2022, 11:57 AM · VyOS 1.4 Sagitta
Viacheslav created T4418: Telegraf - output Plugin azure-data-explorer.
May 6 2022, 11:52 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4417: VRRP doesn't start with conntrack-sync.

Try to delete sync-group, as you use only one group

May 6 2022, 4:16 AM · VyOS 1.4 Sagitta

May 5 2022

skor created T4417: VRRP doesn't start with conntrack-sync.
May 5 2022, 7:05 PM · VyOS 1.4 Sagitta
c-po closed T4414: Add route-map "as-path prepend last-as x" option as Resolved.
May 5 2022, 4:50 PM · VyOS 1.4 Sagitta
c-po added a comment to T4414: Add route-map "as-path prepend last-as x" option.

Implemented as set policy route-map FOO rule 10 set as-path prepend-last-as 2

May 5 2022, 4:44 PM · VyOS 1.4 Sagitta
Viacheslav edited projects for T4315: Telegraf - Output to prometheus, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus ( 1.3.1).
May 5 2022, 4:21 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T4315: Telegraf - Output to prometheus.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1315

May 5 2022, 4:21 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
zsdc changed the status of T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size from Open to In progress.

PR for 1.3: https://github.com/vyos/vyos-build/pull/231
PR for 1.4: https://github.com/vyos/vyos-build/pull/230

May 5 2022, 1:33 PM · VyOS 1.3 Equuleus (1.3.2)
Viacheslav assigned T4414: Add route-map "as-path prepend last-as x" option to c-po.
May 5 2022, 12:41 PM · VyOS 1.4 Sagitta
Viacheslav moved T4315: Telegraf - Output to prometheus from Open to Finished on the VyOS 1.4 Sagitta board.
May 5 2022, 12:30 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
e.khudiyev created T4416: Convert 'traceroute' operation to the new syntax and expand available options using python.
May 5 2022, 12:21 PM · VyOS 1.4 Sagitta
zsdc created T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size.
May 5 2022, 9:35 AM · VyOS 1.3 Equuleus (1.3.2)
Viacheslav added a comment to T4414: Add route-map "as-path prepend last-as x" option.

In 1.4 it working

set policy route-map FOO rule 10 action 'permit'
set policy route-map FOO rule 10 set as-path-prepend 'last-as 2'
May 5 2022, 8:53 AM · VyOS 1.4 Sagitta
Viacheslav created T4414: Add route-map "as-path prepend last-as x" option.
May 5 2022, 8:50 AM · VyOS 1.4 Sagitta
dmbaturin created T4413: Add an API endpoint with basic system stats.
May 5 2022, 7:33 AM · VyOS 1.4 Sagitta

May 4 2022

c-po updated the task description for T4412: commit archive: reboot not working with sftp.
May 4 2022, 8:10 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
c-po updated the task description for T4412: commit archive: reboot not working with sftp.
May 4 2022, 8:09 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
c-po assigned T4412: commit archive: reboot not working with sftp to erkin.
May 4 2022, 8:02 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a comment to T4410: Telegraf - Output to Splunk.

PR https://github.com/vyos/vyos-1x/pull/1312

May 4 2022, 6:15 PM · VyOS 1.4 Sagitta
Viacheslav renamed T4411: Add migration for service monitoring telegraf influxdb from Add migration for service monitoring influxdb to Add migration for service monitoring telegraf influxdb.
May 4 2022, 4:53 PM · VyOS 1.4 Sagitta
Viacheslav created T4411: Add migration for service monitoring telegraf influxdb.
May 4 2022, 4:52 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4315: Telegraf - Output to prometheus from In progress to Needs testing.
May 4 2022, 4:15 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav created T4410: Telegraf - Output to Splunk.
May 4 2022, 4:09 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4362: Wan Load Balancing - Can't create routing tables.

I can't reproduce it
With such configuration all works fine VyOS 1.4-rolling-202204300743:

set load-balancing wan interface-health eth4 failure-count '5'
set load-balancing wan interface-health eth4 nexthop 'dhcp'
set load-balancing wan interface-health eth4 success-count '1'
set load-balancing wan interface-health eth4 test 10 target '192.0.2.40'
set load-balancing wan interface-health eth5 failure-count '5'
set load-balancing wan interface-health eth5 nexthop 'dhcp'
set load-balancing wan interface-health eth5 success-count '1'
set load-balancing wan interface-health eth5 test 10 target '192.0.2.50'
set load-balancing wan interface-health eth6 failure-count '5'
set load-balancing wan interface-health eth6 nexthop 'dhcp'
set load-balancing wan interface-health eth6 success-count '1'
set load-balancing wan interface-health eth6 test 10 target '192.0.2.60'
set load-balancing wan rule 10 failover
set load-balancing wan rule 10 inbound-interface 'eth7'
set load-balancing wan rule 10 interface eth4
set load-balancing wan rule 10 interface eth5
set load-balancing wan rule 10 interface eth6
set load-balancing wan rule 10 protocol 'all'
set load-balancing wan sticky-connections
May 4 2022, 10:35 AM · VyOS 1.4 Sagitta
aserkin created T4409: route received via Framed-Route radius attribute is installed into default table when terminating connection to VRF.
May 4 2022, 7:56 AM
Viacheslav added a comment to T4408: Add sshguard to protect against brut-forces.

Configuration

# cat /etc/sshguard/sshguard.conf 
#### REQUIRED CONFIGURATION ####
# Full path to backend executable (required, no default)
BACKEND="/usr/lib/x86_64-linux-gnu/sshg-fw-nft-sets"
May 4 2022, 3:19 AM · VyOS 1.4 Sagitta
Viacheslav created T4408: Add sshguard to protect against brut-forces.
May 4 2022, 3:06 AM · VyOS 1.4 Sagitta

May 3 2022

blackhole added a comment to T4362: Wan Load Balancing - Can't create routing tables.

If it helps, I am also getting the exact same errors and problems, would love to see this working please

May 3 2022, 11:57 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI from In progress to Needs testing.
May 3 2022, 7:36 PM · VyOS 1.4 Sagitta
dmbaturin created T4406: Make an API endpoint for for anonymous host info retrieval (e.g. by a login page).
May 3 2022, 2:39 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, Restricted Project
Viacheslav added a comment to T4315: Telegraf - Output to prometheus.

Prometheus server pulls information correctly

prometheus.png (1×2 px, 1 MB)

May 3 2022, 9:58 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav closed T4395: Extend show vpn debug as Resolved.
May 3 2022, 7:20 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav changed the status of T4404: Container is not deleted from Open to Needs testing.
May 3 2022, 1:10 AM · VyOS 1.4 Sagitta
Viacheslav created T4404: Container is not deleted.
May 3 2022, 12:14 AM · VyOS 1.4 Sagitta

May 2 2022

Viacheslav added a comment to T4315: Telegraf - Output to prometheus.

PR
https://github.com/vyos/vyos-1x/pull/1310

May 2 2022, 7:40 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4385: bgp: peer-group member cannot override remote-as of peer-group.

We also need to verify remote-as in v6only or interface definitions:

May 2 2022, 6:20 PM · VyOS 1.4 Sagitta
c-po reopened T4385: bgp: peer-group member cannot override remote-as of peer-group as "In progress".
May 2 2022, 6:19 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4315: Telegraf - Output to prometheus from Open to In progress.
May 2 2022, 12:51 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

May 1 2022

c-po closed T4353: Add Jinja2 linter to vyos-1x build process as Resolved.
May 1 2022, 7:12 PM · VyOS 1.4 Sagitta
c-po closed T4363: salt-minion: default mine_interval option is not set as Resolved.
May 1 2022, 7:11 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po moved T4363: salt-minion: default mine_interval option is not set from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
May 1 2022, 7:11 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
dmbaturin renamed T4402: OpenVPN client-ip-pool option is broken from OpenVPN ifconfig-pool option is broken to OpenVPN client-ip-pool option is broken.
May 1 2022, 12:13 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
dmbaturin created T4402: OpenVPN client-ip-pool option is broken.
May 1 2022, 11:56 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
c-po closed T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node as Resolved.
May 1 2022, 6:20 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node from Open to Finished on the VyOS 1.4 Sagitta board.
May 1 2022, 6:20 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
May 1 2022, 6:20 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 30 2022

zsdc created T4401: Networking needs to be reset during config boot (in some environments).
Apr 30 2022, 7:04 PM · VyOS Rolling, Bugs

Apr 29 2022

c-po added a project to T4369: OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node: VyOS 1.3 Equuleus (1.3.2).
Apr 29 2022, 6:07 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po closed T4366: geneve: interface is removed on changes to e.g. description as Resolved.
Apr 29 2022, 6:02 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po moved T4366: geneve: interface is removed on changes to e.g. description from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 29 2022, 6:01 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po closed T4388: dhcp-server: missing constraint on tftp-server-name option as Resolved.
Apr 29 2022, 6:01 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4388: dhcp-server: missing constraint on tftp-server-name option from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 29 2022, 6:01 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 28 2022

fernando added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

I've tried with a new spoke and I can't seem to register using `reload-or-restart', although it resolved the lost connectivity issues the opennhrp process needs a full restart. however, if you restart opennhrp daemon it causes different issues and usually the spoke loses connection.

## hub
Apr 28 2022, 8:57 PM · VyOS 1.4 Sagitta (1.4.3)
fernando changed the status of T4399: nhrp - add or delete nhrp tunnel restart opennhrp process from Open to Needs testing.
Apr 28 2022, 11:51 AM · VyOS 1.4 Sagitta (1.4.3)
Viacheslav moved T4400: Container OP mode has delete where show and update should be from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 28 2022, 9:21 AM · VyOS 1.4 Sagitta
Viacheslav closed T4400: Container OP mode has delete where show and update should be as Resolved.
Apr 28 2022, 9:21 AM · VyOS 1.4 Sagitta
billsimon added a comment to T4357: Allow free-form setting of DHCPv6 server options.

Thank you, team, for such a quick response to my request. I have not even had the chance to test it yet but trust that this will work perfectly. Again, many thanks!

Apr 28 2022, 2:26 AM · VyOS 1.4 Sagitta

Apr 27 2022

fernando added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

PR: https://github.com/vyos/vyos-1x/pull/1306

Apr 27 2022, 9:11 PM · VyOS 1.4 Sagitta (1.4.3)
fernando claimed T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.
Apr 27 2022, 8:30 PM · VyOS 1.4 Sagitta (1.4.3)
fernando added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

I did this change as you mentioned and it worked, , example:

Apr 27 2022, 8:29 PM · VyOS 1.4 Sagitta (1.4.3)
c-po closed T4357: Allow free-form setting of DHCPv6 server options as Resolved.
Apr 27 2022, 7:52 PM · VyOS 1.4 Sagitta
c-po closed T4398: IPSec site-to-site generates unexpected passthrough option as Resolved.
Apr 27 2022, 7:52 PM · VyOS 1.4 Sagitta
c-po closed T4397: arp: migrate static ARP entry configuration to get_config_dict() and make it VRF aware as Resolved.
Apr 27 2022, 7:52 PM · VyOS 1.4 Sagitta
c-po moved T4397: arp: migrate static ARP entry configuration to get_config_dict() and make it VRF aware from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 27 2022, 7:52 PM · VyOS 1.4 Sagitta
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.188 / 5.10.111 to Update Linux Kernel to v5.4.191 / 5.10.113.
Apr 27 2022, 7:51 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T4113: Incorrect GRUB configuration parsing.

@RyVolodya could you recheck it?

Apr 27 2022, 5:46 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

Try to replace option restart to reload-or-restart and re-configure from scratch, it may help.
https://github.com/vyos/vyos-1x/blob/363ecfa46cdb8402ea71637717863f01b09f428b/src/conf_mode/protocols_nhrp.py#L107

Apr 27 2022, 12:48 PM · VyOS 1.4 Sagitta (1.4.3)
fernando added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

Hub basic setting :

Apr 27 2022, 12:41 PM · VyOS 1.4 Sagitta (1.4.3)
fernando added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

Yes ,you need to reload the services and it works , here's an basic example with the current configuration :

Apr 27 2022, 12:38 PM · VyOS 1.4 Sagitta (1.4.3)
Viacheslav added a comment to T2498: Expected error when deleting vif that has dhcp-server configured.

It is not only for dhcp, any service can be affected to this
There are no many check when we remove interface

Apr 27 2022, 11:54 AM · VyOS Rolling
SrividyaA claimed T4381: OpenVPN: Add "Tunnel IP" column in "show openvpn server" operational command.
Apr 27 2022, 10:50 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

@fernando Does it work if you "reload" configuration?

Apr 27 2022, 10:17 AM · VyOS 1.4 Sagitta (1.4.3)

Apr 26 2022

fernando created T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.
Apr 26 2022, 9:31 PM · VyOS 1.4 Sagitta (1.4.3)
Viacheslav added a comment to T4398: IPSec site-to-site generates unexpected passthrough option.

Works as expected

Apr 26 2022, 1:44 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4395: Extend show vpn debug .

PR for 1.3
https://github.com/vyos/vyatta-op-vpn/pull/33
https://github.com/vyos/vyos-1x/pull/1303

Apr 26 2022, 1:03 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
jestabro changed the status of T4235: Add config tree diff algorithm from Unknown Status to Resolved.
Apr 26 2022, 11:23 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav moved T4395: Extend show vpn debug from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 26 2022, 10:00 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a project to T4395: Extend show vpn debug : VyOS 1.3 Equuleus (1.3.2).
Apr 26 2022, 10:00 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav closed T4210: NAT source/destination negated ports throws an error as Resolved.

Fixed VyOS 1.4-rolling-202204260601

set nat source rule 10 destination port '!22,telnet,http,123,1001-1005'

nft:

oifname "eth4" tcp dport != { 22-23, 80, 123, 1001-1005 } counter packets 0 bytes 0 masquerade comment "SRC-NAT-10"
Apr 26 2022, 9:53 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4210: NAT source/destination negated ports throws an error.

VyOS 1.3.1-S1 is not affected:

table ip nat {
	chain PREROUTING {
		type nat hook prerouting priority dstnat; policy accept;
		counter packets 1 bytes 112 jump VYATTA_PRE_DNAT_HOOK
	}
Apr 26 2022, 7:13 AM · VyOS 1.4 Sagitta
Viacheslav removed a project from T4210: NAT source/destination negated ports throws an error: VyOS 1.3 Equuleus.
Apr 26 2022, 7:11 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4210: NAT source/destination negated ports throws an error from In progress to Needs testing.
Apr 26 2022, 6:22 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4156: Adding DHCP Option 13 (bootfile-size) from Open to Needs testing.
Apr 26 2022, 1:17 AM · VyOS 1.4 Sagitta
Viacheslav added a project to T4381: OpenVPN: Add "Tunnel IP" column in "show openvpn server" operational command: VyOS 1.4 Sagitta.
Apr 26 2022, 1:07 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Apr 25 2022

Viacheslav added a comment to T4398: IPSec site-to-site generates unexpected passthrough option.

PR https://github.com/vyos/vyos-1x/pull/1302

Apr 25 2022, 9:18 PM · VyOS 1.4 Sagitta
c-po claimed T4398: IPSec site-to-site generates unexpected passthrough option.
Apr 25 2022, 7:17 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T4398: IPSec site-to-site generates unexpected passthrough option.
Apr 25 2022, 7:12 PM · VyOS 1.4 Sagitta
Viacheslav created T4398: IPSec site-to-site generates unexpected passthrough option.
Apr 25 2022, 7:11 PM · VyOS 1.4 Sagitta
c-po closed T4390: op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs as Resolved.
Apr 25 2022, 6:39 PM · VyOS 1.4 Sagitta
c-po closed T4391: PPPoE: IPv6 not working after system boot as Resolved.
Apr 25 2022, 6:39 PM · VyOS 1.4 Sagitta
c-po updated the task description for T4397: arp: migrate static ARP entry configuration to get_config_dict() and make it VRF aware.
Apr 25 2022, 5:25 PM · VyOS 1.4 Sagitta
c-po changed the status of T4397: arp: migrate static ARP entry configuration to get_config_dict() and make it VRF aware from Open to In progress.
Apr 25 2022, 5:17 PM · VyOS 1.4 Sagitta
c-po created T4397: arp: migrate static ARP entry configuration to get_config_dict() and make it VRF aware.
Apr 25 2022, 5:17 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4236: Generate ovpn openvpn client configuration files.

PR https://github.com/vyos/vyos-1x/pull/1301

Apr 25 2022, 1:30 PM · VyOS 1.4 Sagitta