Works fine:
set load-balancing reverse-proxy backend bk01 server srv01 address '192.168.122.16' set load-balancing reverse-proxy backend bk01 server srv01 port '22' set load-balancing reverse-proxy service ssh backend 'bk01' set load-balancing reverse-proxy service ssh mode 'tcp' set load-balancing reverse-proxy service ssh port '22' set service ssh disable-host-validation set service ssh port '2222'
After deep testing, we saw that if we reset the peer on the initiator side, strongswan does not reinitiate the connection by itself.
Need to add a connection initiation in the reset function on the initiator side.
@zsdc @fernando @a.apostoliuk we need retest this
Thanks to [email protected], who has finished my PR, the Nhrp Cisco auth was merged today.
https://github.com/FRRouting/frr/pull/16172
Looking at it, T5816 already attempted to fix this and is probably better for users - doesn't give the full flexibility of regex and doesn't handle '_' at all, but does have a strict format expectation.
Looking at the code in FRR, it just expands '_' to the full match '(^|[,{}()]|$)' and sends that whole match off to regexec().
All working nicely in current rolling.
@Thunderstorm looks like this one made it to the current rolling, if you're able to try it out?
all work!
Thank you
@pavel-altair can you please re-test with VyOS 1.5-rolling-202406170021
@zsdc if that completed, please close this task
@c-po, can you see if it's still actual, and if not, close it
Thanks!
Forum thread with a nice workaround by giuppo77: https://forum.vyos.io/t/wan-failover-with-dhcp/
Not a generic solution but maybe an inspiration for implementation.
Forum thread with a nice workaround by giuppo77: https://forum.vyos.io/t/wan-failover-with-dhcp/
Not a generic solution but maybe an inspiration for implementation.
I've created a PR with a very simple fix: https://github.com/vyos/vyos-1x/pull/3654
I sure hope this custom waagent build will be removed once the upstream (debian packages) have been updated with this fix.
I can now reproduce the issue. The reason I was unable to reproduce this was I missed out that you use an ACME certificate