Page MenuHomeVyOS Platform
Feed Search

Nov 26 2023

jestabro added a parent task for T5782: Use a single config mode script for https and http-api: T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script.
Nov 26 2023, 1:57 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro triaged T5782: Use a single config mode script for https and http-api as Normal priority.
Nov 26 2023, 1:55 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Nov 25 2023

erkin closed T4454: `install-image` should check free storage, a subtask of T4946: Rewrite "add system image" in the new op-mode, as Resolved.
Nov 25 2023, 12:58 PM · VyOS 1.4 Sagitta
erkin closed T4454: `install-image` should check free storage as Resolved.
Nov 25 2023, 12:58 PM · VyOS 1.4 Sagitta
erkin closed T4946: Rewrite "add system image" in the new op-mode, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Nov 25 2023, 12:58 PM · VyOS Rolling
erkin closed T4946: Rewrite "add system image" in the new op-mode as Resolved.
Nov 25 2023, 12:58 PM · VyOS 1.4 Sagitta
erkin added a subtask for T5773: Unable to load config via HTTP: T5774: commit-archive to FTP server broken after update (VyOS 1.5-rolling).
Nov 25 2023, 12:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
erkin closed T5655: commit-archive: Ctrl+C should not eror out with stack trace, signal should be cought as Resolved.

KeyboardInterrupt is caught with an appropriate error message now.

Nov 25 2023, 12:55 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
Viacheslav moved T5754: Update to StrongSwan 5.9.11 from Open to Backport Candidates on the VyOS 1.5 Circinus board.
Nov 25 2023, 8:29 AM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus
Viacheslav added a project to T5754: Update to StrongSwan 5.9.11: VyOS 1.5 Circinus.
Nov 25 2023, 8:29 AM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus
Viacheslav added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.

What is the difference between local router and failover router? It is not clear. My local router in failover mode ;) but state master.

Nov 25 2023, 2:25 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Nov 24 2023

Unknown Object (User) added a comment to T5754: Update to StrongSwan 5.9.11.

Backport to 1.4?

Nov 24 2023, 9:29 PM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus
n.fort changed the status of T5778: The show dhcp server leases operation mode command does not work as expected from Open to Confirmed.
Nov 24 2023, 5:54 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.

And going further, we may create an extra column, in order to print if the lease was granted by Local-Router or by fail-over router..
Example:

Nov 24 2023, 5:34 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.

Changing this line: https://github.com/vyos/vyos-1x/blob/current/src/op_mode/dhcp.py#L117C9-L117C107

Nov 24 2023, 3:43 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5776: Enable VFIO support as Resolved.
Nov 24 2023, 3:05 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.

Do you want to see leases state == backup?
What is the expected?

Nov 24 2023, 3:02 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.hajiyev updated the task description for T5778: The show dhcp server leases operation mode command does not work as expected.
Nov 24 2023, 1:42 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.hajiyev updated the task description for T5778: The show dhcp server leases operation mode command does not work as expected.
Nov 24 2023, 1:41 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.hajiyev updated the task description for T5778: The show dhcp server leases operation mode command does not work as expected.
Nov 24 2023, 1:40 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.hajiyev created T5778: The show dhcp server leases operation mode command does not work as expected.
Nov 24 2023, 1:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5776: Enable VFIO support from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 24 2023, 11:37 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po updated the task description for T3318: Update Linux Kernel to v5.4.208 / 5.10.142.
Nov 24 2023, 10:58 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
a.apostoliuk closed T5402: VRRP router with rfc3768-compatibility sends multiple ARP replies as Resolved.
Nov 24 2023, 10:42 AM · VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
a.apostoliuk moved T5402: VRRP router with rfc3768-compatibility sends multiple ARP replies from Open to Finished on the VyOS 1.5 Circinus board.
Nov 24 2023, 9:04 AM · VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
a.apostoliuk moved T5402: VRRP router with rfc3768-compatibility sends multiple ARP replies from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 24 2023, 9:04 AM · VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
indrajitr added a comment to T5612: Miscellaneous improvements and fixes for dynamic DNS configuration.

Pretty sure some preceding backports are pending. Please give me a couple of days. I plan to sync up 1.4 with 1.5 and update the docs.

Nov 24 2023, 8:39 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
anowak closed T3895: VYOS firewall rules do not adhere to time schedule unless placed in UTC mode. as Resolved.

Looks like this has been resolved using the latest 1.4 nftables. I am now able to specify local time without the use of UTC.

Nov 24 2023, 2:57 AM · VyOS 1.4 Sagitta
marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 24 2023, 2:20 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Nov 23 2023

Viacheslav added a project to T5776: Enable VFIO support: VyOS 1.4 Sagitta.
Nov 23 2023, 7:42 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.

We'll discuss this internally, but for sure a fix should be applied.
Thanks for such a detailed bug-report.

Nov 23 2023, 12:49 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin added a comment to T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.

Agree with @Viacheslav and @GurliGebis comments above.

Nov 23 2023, 12:39 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.

I agree, without it, you end up repeating yourself alot, with the established, related and invalid rules.
As long as they are applied before the zone specific rules (which is how I guess it used to work), it makes sense.

Nov 23 2023, 11:15 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors.

There are different commands

vyos@r1:~$ show bgp neighbors 192.168.122.14 advertised-routes 
% No such neighbor or address family
vyos@r1:~$ 
vyos@r1:~$ show ip  bgp neighbors 192.168.122.14 advertised-routes 
vyos@r1:~$
Nov 23 2023, 11:10 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.

Should we return global state policy?
It was useful.

Nov 23 2023, 11:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort changed the status of T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config from Open to Confirmed.
Nov 23 2023, 10:48 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort claimed T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 23 2023, 10:30 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
a.hajiyev closed T4891: BFD flapping loop as Resolved.
Nov 23 2023, 9:42 AM · VyOS 1.4 Sagitta
a.hajiyev added a comment to T4891: BFD flapping loop.

Tested in VyOS 1.4-rolling-202311100309:

Nov 23 2023, 9:42 AM · VyOS 1.4 Sagitta
a.hajiyev closed T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Nov 23 2023, 8:01 AM · VyOS Rolling
a.hajiyev closed T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors as Resolved.
Nov 23 2023, 8:01 AM · VyOS 1.4 Sagitta
a.hajiyev added a comment to T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors.

Tested in VyOS 1.4-rolling-202311100309
Configs:
Node-1

Nov 23 2023, 8:01 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5612: Miscellaneous improvements and fixes for dynamic DNS configuration.

Backport to 1.4 has conflicts https://github.com/vyos/vyos-1x/pull/2533

Nov 23 2023, 7:26 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Nov 22 2023

marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 10:09 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 9:46 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 9:45 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 9:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin updated the task description for T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 9:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marvin created T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config.
Nov 22 2023, 9:43 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro added a comment to T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script.

PR:
https://github.com/vyos/vyos-1x/pull/2532

Nov 22 2023, 7:37 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
gsggage added a comment to T5612: Miscellaneous improvements and fixes for dynamic DNS configuration.

@Viacheslav
I missed running git pull on my ansible execution node. Works as it should. Thank you!

Nov 22 2023, 7:35 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort closed T5590: Firewall "log enable" logs every packet as Resolved.
Nov 22 2023, 7:18 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort closed T5681: Interface match - Simplified and unified cli as Resolved.
Nov 22 2023, 7:14 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort closed T5729: Firewall, nat and policy route - Switch to valueless as Resolved.
Nov 22 2023, 7:11 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort changed the status of T5637: Firewall default-action log from Confirmed to Needs testing.
Nov 22 2023, 7:07 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a project to T5773: Unable to load config via HTTP: VyOS 1.5 Circinus.
Nov 22 2023, 4:52 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav updated the task description for T5773: Unable to load config via HTTP.
Nov 22 2023, 4:51 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
erkin claimed T5773: Unable to load config via HTTP.
Nov 22 2023, 4:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav triaged T5773: Unable to load config via HTTP as Urgent! priority.
Nov 22 2023, 4:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5773: Unable to load config via HTTP.
Nov 22 2023, 4:38 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a comment to T5630: pppoe: allow to specify MRU in addition to already configurable MTU.

A fix that changes the behavior back to it was https://github.com/vyos/vyos-1x/pull/2527

Nov 22 2023, 12:22 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort added a comment to T5637: Firewall default-action log.

PR for bridge: https://github.com/vyos/vyos-1x/pull/2528

Nov 22 2023, 12:08 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
a.apostoliuk changed the status of T5413: Deny the opportunity to use one public/private key pair on both wireguard peers. from Needs testing to In progress.
Nov 22 2023, 11:36 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
a.apostoliuk added a project to T5413: Deny the opportunity to use one public/private key pair on both wireguard peers.: VyOS 1.3 Equuleus (1.3.5).
Nov 22 2023, 11:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5413: Deny the opportunity to use one public/private key pair on both wireguard peers. from In progress to Needs testing.
Nov 22 2023, 11:14 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
a.apostoliuk closed T4877: Need verification in using import vrf and import vpn, export vpn commands as Resolved.
Nov 22 2023, 11:11 AM · VyOS 1.4 Sagitta
a.apostoliuk closed T5426: Add exceptions in vici functions calls as Resolved.
Nov 22 2023, 10:50 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T5338: Add 'mpls bgp forwarding' feature from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 22 2023, 10:48 AM · VyOS 1.4 Sagitta
a.apostoliuk closed T5338: Add 'mpls bgp forwarding' feature, a subtask of T5337: MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf, as Resolved.
Nov 22 2023, 10:48 AM · VyOS 1.4 Sagitta
a.apostoliuk closed T5338: Add 'mpls bgp forwarding' feature as Resolved.
Nov 22 2023, 10:48 AM · VyOS 1.4 Sagitta
a.apostoliuk placed T5201: Add Split Tunneling for L2TP/PPTP/SSTP VPN Clients up for grabs.
Nov 22 2023, 10:43 AM · VyOS 1.5 Circinus
Viacheslav closed T5767: Add reboot and poweroff the system via API as Resolved.

Works fine

$ curl -k --location --request POST 'https://192.168.122.11/reboot'   --form data='{"op": "reboot", "path": ["now"]}'   --form key='foo'
{"success": true, "data": "Warning: there are unsaved configuration changes!\nRun 'save' command if you do not want to lose those changes after reboot/shutdown.\n\n", "error": null}
Nov 22 2023, 9:31 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
a.hajiyev closed T4021: Long commit time on bridge interface with 1-4094 allowed VLAN tags as Resolved.
Nov 22 2023, 7:42 AM · VyOS 1.4 Sagitta
a.hajiyev added a comment to T4021: Long commit time on bridge interface with 1-4094 allowed VLAN tags.

Tested on VyOS 1.4-rolling-202311100309:

Nov 22 2023, 7:41 AM · VyOS 1.4 Sagitta
a.hajiyev closed T3818: BGP export route-map only works after bgpd restart as Resolved.
Nov 22 2023, 7:20 AM · VyOS 1.4 Sagitta
a.hajiyev added a comment to T3818: BGP export route-map only works after bgpd restart.

Tested in VyOS 1.4-rolling-202311100309:
The configuration:

Nov 22 2023, 7:19 AM · VyOS 1.4 Sagitta
a.hajiyev added a comment to T2845: BGP conf_mode unable to delete configuration with peer-group.

Tested in VyOS 1.4-rolling-202311100309
The configuration:
VyOS:

Nov 22 2023, 4:47 AM · VyOS 1.4 Sagitta
dmbaturin created T5772: Require HTTPS API server configurations to include at least one key if key-based auth is used.
Nov 22 2023, 12:26 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a comment to T5767: Add reboot and poweroff the system via API.

@a.apostoliuk will be available in the next rolling release.

Nov 22 2023, 12:14 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5767: Add reboot and poweroff the system via API from In progress to Needs testing.
Nov 22 2023, 12:14 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Nov 21 2023

dotAndy added a comment to T5761: Allow PPPoE interface to be assigned IPv6 address via DHCPv6.

I had the below set on the pppoe interface to allow for DHCPv6-PD. That part was working fine it was just the pppoe interface that wasn't picking up an address:

Nov 21 2023, 10:44 PM · VyOS Rolling
c-po added a project to T5769: VTI tunnels lose their v6 Link Local addresses when set down/up: VyOS 1.4 Sagitta.
Nov 21 2023, 9:17 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a project to T5767: Add reboot and poweroff the system via API: VyOS 1.4 Sagitta.
Nov 21 2023, 8:23 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po updated the task description for T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server.
Nov 21 2023, 7:48 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort changed the status of T4072: Feature Request: Firewall on bridge interfaces from In progress to Needs testing.
Nov 21 2023, 5:46 PM · VyOS 1.4 Sagitta
jestabro changed Is it a breaking change? from compatible to validation on T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script.
Nov 21 2023, 4:47 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro added a subtask for T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script: T5766: http: rewrite conf-mode script to get_config_dict() .
Nov 21 2023, 4:45 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro added a parent task for T5766: http: rewrite conf-mode script to get_config_dict() : T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script.
Nov 21 2023, 4:45 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro added a subtask for T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server: T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script.
Nov 21 2023, 4:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jestabro added a parent task for T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script: T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server.
Nov 21 2023, 4:44 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro triaged T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script as Normal priority.
Nov 21 2023, 4:44 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav placed T5167: Add a simple file server up for grabs.
Nov 21 2023, 2:35 PM
c-po updated the task description for T5766: http: rewrite conf-mode script to get_config_dict() .
Nov 21 2023, 8:04 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po claimed T5766: http: rewrite conf-mode script to get_config_dict() .
Nov 21 2023, 7:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po created T5766: http: rewrite conf-mode script to get_config_dict() .
Nov 21 2023, 7:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5760: DHCP client custom dhcp-options from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 21 2023, 7:27 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po moved T5760: DHCP client custom dhcp-options from Open to Finished on the VyOS 1.5 Circinus board.
Nov 21 2023, 7:27 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po added a comment to T5760: DHCP client custom dhcp-options.

I need to requst subnet-mask, routers, rfc3442-classless-static-routes

Nov 21 2023, 7:26 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po closed T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server as Resolved.
Nov 21 2023, 7:25 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server from Open to Finished on the VyOS 1.5 Circinus board.
Nov 21 2023, 7:25 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta