@Dmitry is this a limitation of Accel-PPP or can we increase the limits on the CLI?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Oct 12 2020
Oct 11 2020
I can feel that pain! When looking at the source from VyOS 1.2 (crux) it looks like it always behaved in this way.
Oct 10 2020
@christophedc0 Have you enabled NAT rule logging?
Oct 9 2020
vyos@vyos# lsmod | grep qat qat_200xx 20480 0 intel_qat 299008 2 usdm_drv,qat_200xx dh_generic 16384 1 intel_qat uio 20480 1 intel_qat authenc 16384 1 intel_qat
Oct 6 2020
Oct 5 2020
Okay 2017 is like yesterday in NIS history so we then should keep it!
Any rolling newer then vyos-1.3-rolling-202010050117-amd64.iso will have this included.
I did a minor improvement and reused the fqdn validator in our system. In addition I refactored the domain-search into an includable snippet - so changing grammar, validators can be done in one single file.
@christophedc0 please check out any rolling release which is newer then vyos-1.3-rolling-202010050117-amd64.iso as I have found two bugs in the implementation (one for source nat logging) and the other for the warning you have posted.
Oct 4 2020
This was infact only a warning - but for whatever reason nftables is not logging to kernel log :/
@marekm I've reproduced your issue and fixed it for 1.2.7 - Thanks for reporting.
This also relates to https://phabricator.vyos.net/T2829#76815
Oct 3 2020
Oct 2 2020
Oct 1 2020
Still wondering why ndp-proxy can not be part of the nat66 tree.
When a NAT66 translation is added we know the prefix (src and dst), the in/out-bound interface - so another CLI option (ndp-proxy) could probably be added to not open up an additional service node.