Hi, but one more thing related NAT and VRF in 1.4 rolling. As you know it uses NF MAP, to isolate conntrack tables, so we need to create some design to fix this moment. Matbe with adding some mark
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 12 2022
Jul 12 2022
Unknown Object (User) added a comment to T3655: NAT doesn't work correctly with VRF.
c-po changed the status of T3507: Bond with mode LACP show u/u in show interfaces even if peer is not configured from Open to Needs testing.
c-po added a comment to T3507: Bond with mode LACP show u/u in show interfaces even if peer is not configured.
set interfaces bonding bond0 member interface 'eth1' set interfaces bonding bond0 member interface 'eth2' set interfaces bonding bond0 vif 10
Jul 11 2022
Jul 11 2022
I've re-tested this issues with the initial configuration, nat source / mesquered/ destination , it seems to work as @Dmitry said. The conntrack doesn't show the connection as [UNREPLIED] , it's established :
Prototype PR using Tayga: https://github.com/vyos/vyos-1x/pull/1408
Unknown Object (User) renamed T4527: Prevent to create VRF name default from Preevent to create VRF name default to Prevent to create VRF name default.
Unknown Object (User) created T4527: Prevent to create VRF name default.
Viacheslav added a comment to T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled.
Jul 11 2022, 3:11 PM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Viacheslav added a project to T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled: VyOS 1.4 Sagitta.
Jul 11 2022, 2:58 PM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Viacheslav changed Version from VyOS 1.4-rolling-202207111030 to VyOS 1.4-rolling-202207111030, VyOS 1.3-stable-202207110427 on T4525: Delete interface from VRF and add it to bonding error.
Similar task T3810 points 5, 8
Viacheslav added a comment to T4523: OP-mode Extend conntrack output to get marks, zones and directions.
PR https://github.com/vyos/vyos-1x/pull/1407
vyos@r14# run show conntrack table ipv4 Id Original src Original dst Reply src Reply dst Protocol State Timeout Mark Zone ---------- ------------------- ----------------- ----------------- ------------------- ---------- ----------- --------- ------ ------ 3529842617 192.168.122.1:53508 192.168.122.14:22 192.168.122.14:22 192.168.122.1:53508 tcp ESTABLISHED 431999 0 4102830655 192.0.2.10 1.0.0.1 1.0.0.1 192.168.122.14 icmp 18 0 59651 179791316 192.0.2.10 1.1.1.1 1.1.1.1 192.168.122.14 icmp 12 0 59651 [edit] vyos@r14#
Viacheslav renamed T4523: OP-mode Extend conntrack output to get marks, zones and directions from OP-mode Extend conntrack output to get marks and zones to OP-mode Extend conntrack output to get marks, zones and directions.
Viacheslav removed a project from T3655: NAT doesn't work correctly with VRF: VyOS 1.3 Equuleus (1.3.0).
Unknown Object (User) added a comment to T3655: NAT doesn't work correctly with VRF.
Today I tested VRF route leaking and NAT. It works on 1.3.1-S1. Simple configuration:
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.197 / 5.10.123 to Update Linux Kernel to v5.4.204 / 5.10.129.
c-po moved T4522: bond: add ability to specify mii monitor interval via CLI from Open to Finished on the VyOS 1.4 Sagitta board.
Jul 10 2022
Jul 10 2022
arthurlt awarded T160: Support NAT64 a Like token.
c-po updated the task description for T4522: bond: add ability to specify mii monitor interval via CLI.
c-po updated the task description for T4522: bond: add ability to specify mii monitor interval via CLI.
c-po changed the status of T4522: bond: add ability to specify mii monitor interval via CLI from Open to In progress.
c-po moved T4515: Reduce telegraf binary size from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4521: bond: ARP monitor interval is not configured despite set via CLI from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4521: bond: ARP monitor interval is not configured despite set via CLI from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4521: bond: ARP monitor interval is not configured despite set via CLI from Open to In progress.
The same task T4511
Viacheslav changed the status of T3409: Add back TCP-MSS Clamp to PMTU from Confirmed to Needs testing.
@raphielscape Could you re-test it?
vyos@r14# set interfaces ethernet eth0 ip adjust-mss Possible completions: clamp-mss-to-pmtu Automatically sets the MSS to the proper value <500-65535> TCP Maximum segment size in bytes
Viacheslav closed T3836: Setting a default IPv6 route while getting IPv4 gateway via DHCP removes the IPv4 gateway as Resolved.
Fixed
S>* 0.0.0.0/0 [210/0] via 192.0.2.1, eth1, weight 1, 00:02:31 C>* 192.0.2.0/24 is directly connected, eth1, 00:02:31 C>* 192.168.122.0/24 is directly connected, eth0, 00:04:09
Jul 9 2022
Jul 9 2022
Viacheslav removed a project from T4499: NAT source translation not showing a single output: VyOS 1.3 Equuleus (1.3.2).
Viacheslav moved T4499: NAT source translation not showing a single output from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T4499: NAT source translation not showing a single output: VyOS 1.3 Equuleus (1.3.2).
GitHub <[email protected]> committed rVYOSONEX9e2fa8239011: Merge pull request #1405 from sever-sever/T4499 (authored by dmbaturin).
Unknown Object (User) added a comment to T3353: PPPoE server wrong vlan-range generating config.
@Viacheslav, thanks.
Already fixed in roling
vyos@vyos# set service pppoe-server interface eth0 vlan-range Possible completions: start-end VLAN monitor range for the automatic creation of vlans (e.g. 1-4094)
Viacheslav changed the status of T4508: Problem with values of the same environment in different event handlers from In progress to Needs testing.
Viacheslav changed the status of T4499: NAT source translation not showing a single output from Open to In progress.
GitHub <[email protected]> committed rVYOSONEX464af891335e: Merge pull request #1364 from sever-sever/T4468-eq (authored by c-po).
Any chance you can test this on 1.4 rolling image?
c-po moved T4517: ip: Add options to enable directed broadcast forwarding from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <[email protected]> committed rVYOSONEX07a4920b17c3: ip: T4517: add option to enable directed broadcast forwarding (authored by vfreex).
GitHub <[email protected]> committed rVYOSONEXddfb571f83ce: Merge pull request #1392 from sever-sever/T4507-eq (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXb9660824c013: Merge pull request #1404 from sever-sever/T4145 (authored by c-po).
(07:27) vyos_bld 8214ca94b6bc:/vyos/telegraf # ls -alh telegraf -rwxr-xr-x 1 vyos_bld vyos_bld 157M Jul 9 07:08 telegraf
Jul 8 2022
Jul 8 2022
dsummers updated the task description for T4520: Incorrect addresses returned with interaction of static /etc/hosts with DNS64.
Viacheslav added a comment to T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID.
You can get duid data from python
https://github.com/vyos/vyos-1x/blob/44b1bdd3273dce4e74a5474c401ac7107950635b/src/op_mode/show_dhcpv6.py#L95-L97
Replace format_hex_string(lease.host_identifier_string) to `lease.duid
and lease_display_fields['iaid_duid'] = 'IAID_DUID'
https://github.com/vyos/vyos-1x/blob/44b1bdd3273dce4e74a5474c401ac7107950635b/src/op_mode/show_dhcpv6.py#L44
dsummers updated the task description for T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID.
dsummers updated the task description for T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID.
I've been running TAYGA inside VyOS with absolutely no problems for the last several years.
zsdc changed the status of T4516: Rewrite system image manipulation tools in Python from Open to In progress.
I would suggest going with tayga if this feature is planned to be implemented.