also it would be good if WLB function will control main routing table, that would help to avoid a lot of confusion with protocols static configuration& WLB function. Current documentation does not telling anything about how exactly protocols static 0.0.0.0/0 route must be set with WLB.
From what I had tested:
1)WLB creates additional routing tables and setting PBR rules
2)without protocols static route 0.0.0.0 with next-hops to every wlb GW local vyos traffic would not work(as would not work traffic to vyos)
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 4 2022
Aug 4 2022
c-po changed the status of T4592: macsec: can not create two interfaces using the same source-interface from Open to In progress.
Aug 3 2022
Aug 3 2022
It sounds like people prefer jool, and in my personal opinion, if there is a package that is still active up to now, like jool, then jool is probably better. But whatever it is, it's foreign to me
Viacheslav added a comment to T4586: Add to NAT66: SNAT destination address and DNAT source address..
PR https://github.com/vyos/vyos-1x/pull/1457
set nat66 destination rule 10 destination address '2001:db8:1111::/64' set nat66 destination rule 10 inbound-interface 'eth1' set nat66 destination rule 10 source address '!2001:db8::6/127' set nat66 destination rule 10 translation address '2001:db8::444' set nat66 source rule 10 destination prefix '2001:db8::2/128' set nat66 source rule 10 outbound-interface 'eth1' set nat66 source rule 10 source prefix '2001:db8:1111::/64' set nat66 source rule 10 translation address 'masquerade' set nat66 source rule 20 destination prefix '!2001:db8::6/127' set nat66 source rule 20 outbound-interface 'eth1' set nat66 source rule 20 source prefix '2001:db8:1111::/64' set nat66 source rule 20 translation address 'masquerade'
Also I had tried to assign IP addresses directly to wan interfaces to test if it's somehow related to usage of vrrp combined with WLB- it does not work.
Viacheslav added a parent task for T4443: Wan Load Balancing Multiple Regressions: T4470: Rewrite load-balancing wan to XML/Python.
Viacheslav added a parent task for T4587: wan load balance issues with 3 or more WANs: T4470: Rewrite load-balancing wan to XML/Python.
Aug 2 2022
Aug 2 2022
RyVolodya updated the task description for T4586: Add to NAT66: SNAT destination address and DNAT source address..
RyVolodya updated the task description for T4586: Add to NAT66: SNAT destination address and DNAT source address..
Viacheslav closed T4585: Rewrite op-mode containers to vyos.opmode , a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
PR https://github.com/vyos/vyos-1x/pull/1456
vyos@r14:~$ /usr/libexec/vyos/op_mode/container.py restart --name alp01 Container name "alp01" restarted! vyos@r14:~$ vyos@r14:~$ /usr/libexec/vyos/op_mode/container.py restart --name alp02 Error: no container with name or ID alp02 found: no such container vyos@r14:~$
RyVolodya updated the task description for T4586: Add to NAT66: SNAT destination address and DNAT source address..
RyVolodya updated the task description for T4586: Add to NAT66: SNAT destination address and DNAT source address..
Hi friends, I'm experiencing what appears to be the same bug. In my case, it's on a redirect on a vif subinterface on a bonding interface. So perhaps bug is not so much about PPPoE interfaces, so much as any interfaces that don't exist before the commit is done.
Viacheslav changed the status of T4585: Rewrite op-mode containers to vyos.opmode , a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4585: Rewrite op-mode containers to vyos.opmode from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1455
curl -k --raw 'https://localhost/graphql' \
-H 'Content-Type: application/json' \
-d '{"query":" {\n ShowVrf (data: {key: \"foo\"}) {\n success\n errors\n data {\n result\n }\n}\n}\n"}'Getting data:
{"data":{"ShowVrf":{"success":true,"errors":null,"data":{"result":[{"ifname":"foo","operstate":"UP","address":"26:f6:35:05:7e:0a","flags":["NOARP","MASTER","UP","LOWER_UP"]}]}}}}Works as expected in a recent rolling (e.g. 1.4-rolling-202208021045)
c-po changed the status of T4537: MACsec not working with cipher gcm-aes-256 from Open to Needs testing.
c-po changed the status of T4538: Macsec does not work correctly when the interface status changes. from Open to In progress.
c-po moved T4537: MACsec not working with cipher gcm-aes-256 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4584: hostap: create custom package build from Open to Finished on the VyOS 1.4 Sagitta board.
Aug 1 2022
Aug 1 2022
The root issue is wpa_supplicant shipped in Debian does not contain commit https://w1.fi/cgit/hostap/commit/?id=46c635910a724ed14ee9ace549fed9790ed5980b which adds a new configuration file option named:
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1453
@ajgnet If you have a way to limit the dynamic prefix to a known prefix, then using 1:1 NAT66 prefix translation should work (only the host segment is dynamic)
@c-po You haven't replied for a long time, please let me know if you have any other questions
Viacheslav edited projects for T4572: Add an option to force interface MTU to the value received from DHCP, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.
To solve the issue with MTU over DHCP we can use some new options like mtu for example:
set interfaces ethernet eth0 dhcp-options mtu
Viacheslav closed T4581: 'show system cpu' not working, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
If vrf not configured:
vyos@r14:~$ /usr/libexec/vyos/op_mode/vrf.py show
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/vrf.py", line 89, in <module>
res = vyos.opmode.run(sys.modules[__name__])
File "/usr/lib/python3/dist-packages/vyos/opmode.py", line 118, in run
res = func(**args)
File "/usr/libexec/vyos/op_mode/vrf.py", line 84, in show
return _get_formatted_output(vrf_data)
File "/usr/libexec/vyos/op_mode/vrf.py", line 68, in _get_formatted_output
state = vrf.get('operstate').lower()
AttributeError: 'NoneType' object has no attribute 'lower'
vyos@r14:~$Viacheslav changed the status of T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs from Open to Needs testing.
Viacheslav closed T4578: Rewrite show dns forwarding statistics to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
c-po added a comment to T4579: bridge: can not delete member interface CLI option when VLAN is enabled.
VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450
VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450
Unknown Object (User) added a comment to T4581: 'show system cpu' not working.
Unknown Object (User) claimed T4581: 'show system cpu' not working.
Viacheslav added a parent task for T4581: 'show system cpu' not working: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Unknown Object (User) changed the status of T4581: 'show system cpu' not working from Open to Confirmed.
Confirmed
VyOS 1.4-rolling-202207240217
Jul 31 2022
Jul 31 2022
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
jestabro triaged T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation as Normal priority.
jestabro changed the subtype of T4554: Implement GraphQL resolvers for standardized op-mode scripts from "Task" to "Enhancement".
jestabro changed the subtype of T4544: Generate schema definitions from standardized op-mode scripts from "Task" to "Enhancement".
c-po moved T4565: vlan aware bridge not working from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4565: vlan aware bridge not working from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4565: vlan aware bridge not working from Open to Finished on the VyOS 1.4 Sagitta board.
Unknown Object (User) added a comment to T160: Support NAT64.
Just adding here that Jool.mx is no longer maintained.
Jul 30 2022
Jul 30 2022
c-po moved T4515: Reduce telegraf binary size from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/251
c-po edited projects for T4511: IPv6 DNS lookup, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.0).
c-po moved T4511: IPv6 DNS lookup from Need Triage to Backlog on the VyOS 1.3 Equuleus (1.3.0) board.
Viacheslav changed the subtype of T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination from "Bug" to "Feature Request".
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1446
vyos@r14:~$ show dns forwarding statistics Cache entries Max cache entries Cache size --------------- ------------------- ------------ 71 10000 20.22 kbytes vyos@r14:~$
Raw:
vyos@r14:~$ /usr/libexec/vyos/op_mode/dns.py show_forwarding_statistics --raw
{
"aggressive-nsec-cache-entries": "0",
"aggressive-nsec-cache-nsec-hits": "0",
"aggressive-nsec-cache-nsec-wc-hits": "0",
"aggressive-nsec-cache-nsec3-hits": "0",
"aggressive-nsec-cache-nsec3-wc-hits": "0",
"all-outqueries": "48",
"answers-slow": "0",
"answers0-1": "0",
"answers1-10": "0",
"answers10-100": "0",
"answers100-1000": "0",
"auth-zone-queries": "0",
"auth4-answers-slow": "0",
"auth4-answers0-1": "0",
"auth4-answers1-10": "0",
"auth4-answers10-100": "20",
"auth4-answers100-1000": "9",
"auth6-answers-slow": "0",
"auth6-answers0-1": "19",
"auth6-answers1-10": "0",
"auth6-answers10-100": "0",
"auth6-answers100-1000": "0",
"cache-entries": "71",
"cache-hits": "0",
"cache-misses": "0",
"case-mismatches": "0",
"chain-resends": "0",
"client-parse-errors": "0",
"concurrent-queries": "0",
"cpu-iowait": "10857",
"cpu-msec-thread-0": "1242",
"cpu-steal": "672",
"dlg-only-drops": "0",
"dnssec-authentic-data-queries": "0",
"dnssec-check-disabled-queries": "0",
"dnssec-queries": "0",
"dnssec-result-bogus": "0",
"dnssec-result-bogus-invalid-denial": "0",
"dnssec-result-bogus-invalid-dnskey-protocol": "0",
"dnssec-result-bogus-missing-negative-indication": "0",
"dnssec-result-bogus-no-rrsig": "0",
"dnssec-result-bogus-no-valid-dnskey": "0",
"dnssec-result-bogus-no-valid-rrsig": "0",
"dnssec-result-bogus-no-zone-key-bit-set": "0",
"dnssec-result-bogus-revoked-dnskey": "0",
"dnssec-result-bogus-self-signed-ds": "0",
"dnssec-result-bogus-signature-expired": "0",
"dnssec-result-bogus-signature-not-yet-valid": "0",
"dnssec-result-bogus-unable-to-get-dnskeys": "0",
"dnssec-result-bogus-unable-to-get-dss": "0",
"dnssec-result-bogus-unsupported-dnskey-algo": "0",
"dnssec-result-bogus-unsupported-ds-digest-type": "0",
"dnssec-result-indeterminate": "0",
"dnssec-result-insecure": "0",
"dnssec-result-nta": "0",
"dnssec-result-secure": "5",
"dnssec-validations": "5",
"dont-outqueries": "0",
"ecs-queries": "0",
"ecs-responses": "0",
"edns-ping-matches": "0",
"edns-ping-mismatches": "0",
"empty-queries": "0",
"failed-host-entries": "0",
"fd-usage": "18",
"ignored-packets": "0",
"ipv6-outqueries": "19",
"ipv6-questions": "0",
"malloc-bytes": "0",
"max-cache-entries": "10000",
"max-mthread-stack": "0",
"max-packetcache-entries": "500000",
"negcache-entries": "4",
"no-packet-error": "0",
"nod-lookups-dropped-oversize": "0",
"noedns-outqueries": "0",
"noerror-answers": "0",
"noping-outqueries": "0",
"nsset-invalidations": "0",
"nsspeeds-entries": "0",
"nxdomain-answers": "0",
"outgoing-timeouts": "0",
"outgoing4-timeouts": "0",
"outgoing6-timeouts": "0",
"over-capacity-drops": "0",
"packetcache-entries": "0",
"packetcache-hits": "0",
"packetcache-misses": "0",
"policy-drops": "0",
"policy-result-custom": "0",
"policy-result-drop": "0",
"policy-result-noaction": "0",
"policy-result-nodata": "0",
"policy-result-nxdomain": "0",
"policy-result-truncate": "0",
"proxy-protocol-invalid": "0",
"qa-latency": "0",
"qname-min-fallback-success": "0",
"query-pipe-full-drops": "0",
"questions": "0",
"real-memory-usage": "21766144",
"rebalanced-queries": "0",
"record-cache-acquired": "1086473",
"record-cache-contended": "0",
"resource-limits": "19",
"security-status": "1",
"server-parse-errors": "0",
"servfail-answers": "0",
"spoof-prevents": "0",
"sys-msec": "1853",
"taskqueue-expired": "0",
"taskqueue-pushed": "0",
"taskqueue-size": "0",
"tcp-client-overflow": "0",
"tcp-clients": "0",
"tcp-outqueries": "0",
"tcp-questions": "0",
"throttle-entries": "0",
"throttled-out": "0",
"throttled-outqueries": "0",
"too-old-drops": "0",
"truncated-drops": "0",
"udp-in-errors": "0",
"udp-noport-errors": "0",
"udp-recvbuf-errors": "0",
"udp-sndbuf-errors": "0",
"unauthorized-tcp": "0",
"unauthorized-udp": "0",
"unexpected-packets": "0",
"unreachables": "0",
"uptime": "8820",
"user-msec": "621",
"variable-responses": "0",
"x-our-latency": "0",
"x-ourtime-slow": "0",
"x-ourtime0-1": "0",
"x-ourtime1-2": "0",
"x-ourtime16-32": "0",
"x-ourtime2-4": "0",
"x-ourtime4-8": "0",
"x-ourtime8-16": "0",
"cache-size": "20.22"
}I can't reproduce it (VyOS 1.4-rolling-202207280217):
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any', a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any' from In progress to Needs testing.