Page MenuHomeVyOS Platform
Feed Search

May 29 2024

pavel-altair created T6417: Common storage location for accounts for different VPNs.
May 29 2024, 2:57 PM · VyOS Rolling
fernando added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

we've added this ability to configure the topology on isis :

May 29 2024, 11:16 AM · VyOS 1.4 Sagitta (1.4.1)
fernando changed the subtype of T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr from "Bug" to "Feature Request".
May 29 2024, 11:14 AM · VyOS 1.4 Sagitta (1.4.1)
fernando changed the status of T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr from Open to Needs testing.
May 29 2024, 11:14 AM · VyOS 1.4 Sagitta (1.4.1)
fernando added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

agree ,it's more a feature than a bug : PR https://github.com/vyos/vyos-1x/pull/3537

May 29 2024, 11:11 AM · VyOS 1.4 Sagitta (1.4.1)
HollyGurza claimed T5735: Add CLI and configuration scripts for stunnel.
May 29 2024, 8:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav closed T6411: CGNAT does not rely on seq number, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
May 29 2024, 8:23 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav closed T6411: CGNAT does not rely on seq number as Resolved.
May 29 2024, 8:23 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

More a feature request than a bug

May 29 2024, 8:14 AM · VyOS 1.4 Sagitta (1.4.1)
fernando added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

the problem here is that MT options is enable by default when the RIB has ipv4, if not not-MT is enable by default on IPv4 .So, you need to add additional topologies (ipv6-unicast , ipv6-multicast,etc)

May 29 2024, 12:56 AM · VyOS 1.4 Sagitta (1.4.1)

May 28 2024

dmbaturin created T6414: Rename the "iso" flavor to "generic".
May 28 2024, 4:43 PM · VyOS Rolling
fernando claimed T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.
May 28 2024, 3:55 PM · VyOS 1.4 Sagitta (1.4.1)
jestabro added a comment to T5786: Add set/show system image to /image endpoint.

Fix link:
https://github.com/vyos/vyos-1x/pull/3529

May 28 2024, 3:03 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T6411: CGNAT does not rely on seq number, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
May 28 2024, 1:15 PM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav changed the status of T6411: CGNAT does not rely on seq number from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/3534

May 28 2024, 1:15 PM · VyOS 1.5 Circinus
jestabro closed T6404: Include constraintGroup element in reference tree as Resolved.
May 28 2024, 12:39 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
jestabro moved T6404: Include constraintGroup element in reference tree from Open to Finished on the VyOS 1.5 Circinus board.
May 28 2024, 12:38 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
ssasso added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

@Viacheslav here you go:

May 28 2024, 10:49 AM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

Can you provide set of commands instead? Bug-report-guidelines

May 28 2024, 10:42 AM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6412: CGNAT allocation calculation may sometimes be incorrect.
May 28 2024, 10:40 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav added a parent task for T6412: CGNAT allocation calculation may sometimes be incorrect: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
May 28 2024, 10:40 AM · VyOS 1.5 Circinus
Viacheslav triaged T6412: CGNAT allocation calculation may sometimes be incorrect as Normal priority.
May 28 2024, 10:39 AM · VyOS 1.5 Circinus
Viacheslav created T6412: CGNAT allocation calculation may sometimes be incorrect.
May 28 2024, 10:39 AM · VyOS 1.5 Circinus
mersl added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.

@ssasso - thanks for this good catch! Coming from a Junos world, I was a bit surprised at the first place when I enabled ISIS and found no ipv6 isis routes and no multi-topology config option (and yes - we have multi-topology in place)

May 28 2024, 10:09 AM · VyOS 1.4 Sagitta (1.4.1)
Viacheslav renamed T6411: CGNAT does not rely on seq number from CGNAt does not rely on seq number to CGNAT does not rely on seq number.
May 28 2024, 9:32 AM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5169: Add CGNAT Carrier-Grade NAT based on nftables: T6411: CGNAT does not rely on seq number.
May 28 2024, 9:32 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav added a parent task for T6411: CGNAT does not rely on seq number: T5169: Add CGNAT Carrier-Grade NAT based on nftables.
May 28 2024, 9:32 AM · VyOS 1.5 Circinus
Viacheslav triaged T6411: CGNAT does not rely on seq number as Low priority.
May 28 2024, 9:30 AM · VyOS 1.5 Circinus
Viacheslav created T6411: CGNAT does not rely on seq number.
May 28 2024, 9:30 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T6408: Duplicate lines on 'show log vpn'.

The charon identifier also shows IKE name of the SA; this way, we can identify peers in the logs https://github.com/vyos/vyos-build/blob/b809886538eaad66b8756be8f5e758584f88e6a6/data/live-build-config/hooks/live/30-strongswan-configs.chroot#L41-L54
The current show log vpn does https://github.com/vyos/vyos-1x/blob/48e5266e2bca8d1d7a2ee4bacbe0e6628de3fa66/op-mode-definitions/show-log.xml.in#L710

May 28 2024, 8:56 AM
alainlamar updated the task description for T6320: WiFi: Enable support for 6GHz AccesPoints.
May 28 2024, 8:25 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

May 27 2024

fernando added a comment to T5307: QoS - traffic-class-map services .

tested new cli structure, it combine the new mach-group and old syntax :

May 27 2024, 8:44 PM · VyOS 1.5 Circinus
Giggum added a comment to T6371: Show nat source rules shows unexpected dictionary.

PR opened: https://github.com/vyos/vyos-1x/pull/3532

May 27 2024, 8:37 PM · VyOS Rolling, Bugs
zsdc moved T6395: Enable VFIO No-IOMMU support in kernel config from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0) board.
May 27 2024, 7:50 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
zsdc added a project to T6395: Enable VFIO No-IOMMU support in kernel config: VyOS 1.4 Sagitta (1.4.0).
May 27 2024, 7:50 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
zsdc closed T6395: Enable VFIO No-IOMMU support in kernel config as Resolved.
May 27 2024, 7:49 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
Viacheslav added a comment to T6398: Missing the package kpartx for the container vyos-build:current-arm64.

The dependency allowed for 386/amd64 only https://github.com/vyos/vyos-build/blob/b809886538eaad66b8756be8f5e758584f88e6a6/docker/Dockerfile#L281
Though the package is available for ARM

May 27 2024, 7:08 PM · VyOS Rolling, VyOS 1.5 Circinus
Embezzle added a comment to T6409: Remove unused parameter node from reverse-proxy backend.

PR: https://github.com/vyos/vyos-1x/pull/3531

May 27 2024, 6:45 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
syncer triaged T6409: Remove unused parameter node from reverse-proxy backend as Normal priority.
May 27 2024, 6:43 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Embezzle changed the status of T6409: Remove unused parameter node from reverse-proxy backend from Open to In progress.
May 27 2024, 4:53 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Embezzle created T6409: Remove unused parameter node from reverse-proxy backend.
May 27 2024, 4:52 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Viacheslav triaged T6408: Duplicate lines on 'show log vpn' as Normal priority.
May 27 2024, 4:00 PM
Viacheslav added a comment to T6407: ipsec profile generation error.

As several CA were allowed some time ago it is a bug with op-mode generator.
There is a list of CA's https://github.com/vyos/vyos-1x/blob/48e5266e2bca8d1d7a2ee4bacbe0e6628de3fa66/src/op_mode/ikev2_profile_generator.py#L147
The template https://github.com/vyos/vyos-1x/blob/current/data/templates/ipsec/windows_profile.j2

May 27 2024, 3:58 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
pavel-altair created T6408: Duplicate lines on 'show log vpn'.
May 27 2024, 3:57 PM
syncer assigned T6407: ipsec profile generation error to c-po.
May 27 2024, 2:53 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
HollyGurza added a comment to T5786: Add set/show system image to /image endpoint.
May 27 2024, 2:40 PM · VyOS 1.5 Circinus
dmbaturin added a comment to T6383: Incorrect completion for rollback-soft.

I made a PR that uses an implementation with a separate function: https://github.com/vyos/vyatta-cfg/pull/79

May 27 2024, 1:51 PM · VyOS 1.4 Sagitta (1.4.0-GA)
dmbaturin edited projects for T6402: Invalid variables referenced in reverse proxy validation, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0).
May 27 2024, 1:34 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
pavel-altair created T6407: ipsec profile generation error.
May 27 2024, 10:51 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
nvollmar updated the task description for T6406: Add config option for container cpu limit.
May 27 2024, 8:54 AM · VyOS 1.5 Circinus
nvollmar updated the task description for T6406: Add config option for container cpu limit.
May 27 2024, 8:10 AM · VyOS 1.5 Circinus
dmbaturin triaged T6374: Openvpn site-to-site mode with TLS not starting as High priority.
May 27 2024, 7:49 AM · VyOS 1.5 Circinus
dmbaturin triaged T6383: Incorrect completion for rollback-soft as Normal priority.
May 27 2024, 7:48 AM · VyOS 1.4 Sagitta (1.4.0-GA)
dmbaturin triaged T6401: Attempts to delete vlan-to-vni option causes an unhandled exception as High priority.
May 27 2024, 7:47 AM · VyOS 1.4 Sagitta (1.4.1)
dmbaturin triaged T6402: Invalid variables referenced in reverse proxy validation as High priority.
May 27 2024, 7:47 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
dmbaturin triaged T6403: nat64 input validation required as High priority.
May 27 2024, 7:47 AM · VyOS 1.5 Circinus
dmbaturin triaged T6406: Add config option for container cpu limit as Low priority.
May 27 2024, 7:46 AM · VyOS 1.5 Circinus
natali-rs1985 changed the status of T6389: Check architecture and flavor compatibility on upgrade attempts from Open to In progress.
May 27 2024, 7:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
nvollmar created T6406: Add config option for container cpu limit.
May 27 2024, 6:45 AM · VyOS 1.5 Circinus
drw_08 triaged T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules as Normal priority.
May 27 2024, 1:03 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
drw_08 updated the task description for T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules .
May 27 2024, 1:02 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
drw_08 claimed T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules .
May 27 2024, 12:59 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
drw_08 created T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules .
May 27 2024, 12:59 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
jestabro updated the task description for T6404: Include constraintGroup element in reference tree.
May 27 2024, 12:10 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
jestabro added a comment to T6404: Include constraintGroup element in reference tree.

PR:
https://github.com/vyos/vyos1x-config/pull/27

May 27 2024, 12:09 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus

May 26 2024

jestabro triaged T6404: Include constraintGroup element in reference tree as Normal priority.
May 26 2024, 11:52 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
alainlamar updated the task description for T6320: WiFi: Enable support for 6GHz AccesPoints.
May 26 2024, 10:15 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
alainlamar updated the task description for T6320: WiFi: Enable support for 6GHz AccesPoints.
May 26 2024, 9:38 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
alainlamar changed the status of T6320: WiFi: Enable support for 6GHz AccesPoints from Open to Needs testing.
May 26 2024, 9:26 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
fatred created T6403: nat64 input validation required.
May 26 2024, 8:48 PM · VyOS 1.5 Circinus
Embezzle added a comment to T6402: Invalid variables referenced in reverse proxy validation.

PR: https://github.com/vyos/vyos-1x/pull/3523

May 26 2024, 8:00 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Embezzle claimed T6402: Invalid variables referenced in reverse proxy validation.
May 26 2024, 7:37 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
Embezzle created T6402: Invalid variables referenced in reverse proxy validation.
May 26 2024, 7:33 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po closed T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki as Resolved.
May 26 2024, 12:50 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 26 2024, 12:50 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po closed T6400: pki: unable to generate fingerprint for ACME issued certificates as Resolved.
May 26 2024, 12:50 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 26 2024, 12:50 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
Embezzle closed T6370: Add option to set custom HTTP headers in reverse-proxy responses as Resolved.

Tested as working in: 1.5-rolling-202405240020

May 26 2024, 11:33 AM · VyOS 1.5 Circinus

May 25 2024

kevinrausch created T6401: Attempts to delete vlan-to-vni option causes an unhandled exception.
May 25 2024, 11:55 PM · VyOS 1.4 Sagitta (1.4.1)
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to Finished on the VyOS 1.5 Circinus board.
May 25 2024, 7:57 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to Finished on the VyOS 1.5 Circinus board.
May 25 2024, 7:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po added a comment to T6400: pki: unable to generate fingerprint for ACME issued certificates.

https://github.com/vyos/vyos-1x/pull/3518

May 25 2024, 7:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po changed the status of T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to In progress.
May 25 2024, 7:52 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po created T6400: pki: unable to generate fingerprint for ACME issued certificates.
May 25 2024, 7:52 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
c-po changed the status of T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to In progress.
May 25 2024, 7:29 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-GA)
talmakion added a comment to T2942: traffic-policy does not classify by VLAN.

Is this meant to be possible this way?

May 25 2024, 2:47 PM · Bugs, VyOS 1.5 Circinus
Viacheslav triaged T6398: Missing the package kpartx for the container vyos-build:current-arm64 as Normal priority.
May 25 2024, 1:39 PM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav created T6398: Missing the package kpartx for the container vyos-build:current-arm64.
May 25 2024, 1:39 PM · VyOS Rolling, VyOS 1.5 Circinus
talmakion attached a referenced file: F4328045: vyatta-cfg-separate-completer.diff.
May 25 2024, 10:21 AM · VyOS 1.4 Sagitta (1.4.0-GA)
talmakion attached a referenced file: F4328046: vyatta-cfg-combined-completer.diff.
May 25 2024, 10:21 AM · VyOS 1.4 Sagitta (1.4.0-GA)
talmakion attached a referenced file: Unknown Object (File).
May 25 2024, 10:21 AM · Bugs, VyOS 1.4 Sagitta (1.4.1)
talmakion added a comment to T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses.

As far as I can tell the test will always error if the remote matches and neither source-interface and source-address are configured differently, including the case where they're both blank (source-interface == None on both tunnels triggers this particular case).

May 25 2024, 9:52 AM · Bugs, VyOS 1.4 Sagitta (1.4.1)
c-po reassigned T6300: [1.3->1.4 Migration] An empty interface configuration drops all interfaces configuration from c-po to jestabro.
May 25 2024, 6:26 AM · Bugs, VyOS 1.4 Sagitta (1.4.1)
c-po closed T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards as Resolved.
May 25 2024, 6:26 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po moved T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 25 2024, 6:25 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po moved T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards from Open to 1.4.0-GA on the VyOS 1.4 Sagitta board.
May 25 2024, 6:25 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
c-po renamed T751: IDS and IPS (suricata) from IDS and IPS to IDS and IPS (suricata).
May 25 2024, 6:25 AM · VyOS 1.5 Circinus
c-po moved T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards from Open to Finished on the VyOS 1.5 Circinus board.
May 25 2024, 6:24 AM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
talmakion added a comment to T6383: Incorrect completion for rollback-soft.

Only recently moved from 1.3 to 1.5 and noticed rollback-soft immediately (great stuff), the completion message was annoying me too.

May 25 2024, 5:45 AM · VyOS 1.4 Sagitta (1.4.0-GA)

May 24 2024

zsdc moved T6395: Enable VFIO No-IOMMU support in kernel config from Open to In Progress on the VyOS 1.5 Circinus board.

PR for 1.5: https://github.com/vyos/vyos-build/pull/638

May 24 2024, 5:43 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus