In T5144#147124, @indrajitr wrote:

PR for the fix: https://github.com/vyos/vyos-1x/pull/1962

Tested on latest "current" source tree build. Works fine and solves the "old syntax" cache file issue. Thank you for the quick and responsive fix.

That would be great!

In T1237#147125, @Harliff wrote:

Sorry, missed some messages.

In T1237#146586, @Viacheslav wrote:

We have targets-checks 203.0.113.1, 192.0.2.1, and if any of these targets are unreachable, we delete this route.
Is it correct?

It is not correct. I think it would be better to remove the route if ALL of corresponding targets are unreachable.

A target may become unreachable due to a problem of its own rather than an uplink failure. This is the reason why I asked to add multiple targets per uplink.

In T1237#146839, @Viacheslav wrote:

@Harliff Could you re-check?

Sorry, missed some messages.

In T5144#147087, @Viacheslav wrote:

An issue https://forum.vyos.io/t/ddns-setup-issue/

PR for the fix: https://github.com/vyos/vyos-1x/pull/1962

Draft PR: https://github.com/vyos/vyos-1x/pull/1960

The issue does not exit in the recent release 1.4-rolling-202304130846

An issue https://forum.vyos.io/t/ddns-setup-issue/

submitted this PR: https://github.com/vyos/vyos-1x/pull/1958

In T5156#147003, @Viacheslav wrote:

Provide your configuration
It is difficult to say without it

Provide your configuration
It is difficult to say without it

If I need to guess, it is just an issue that the BGP session gets configured before the route-maps

As I said, this happens with any config that includes route maps

Self-configuration of the http-api calls a service restart from the config mode script: some re-configuration should be possible without restart; the remaining should provide an explanatory 'success' response. Move to high-priority to address.

Could you share configuration ? where attached RM and BGP settings:

We can add guidelines about running vyos on LXC/LXD in the documentation

Must run in physical NIC pass-through mode
It is recommended to execute the container in privileged mode
This is currently only an initial implementation!

This should be implemented under the rewrite of system-image-tools:
https://vyos.dev/T4516

Discussed, and ready to be implemented shortly.

Related to T3651.

This will be integrated with the PKI subsystem, using the ideas there.

This was addressed within T4364, and backported in T4874.

@Viacheslav confirmed working.

@Viacheslav Confirmed fixed, thank you.

The firewall for ocserv is handled by https://gitlab.com/openconnect/ocserv/-/blob/master/src/ocserv-fw and uses iptables by default

Supporting (draft) PR and minor fixes linked in PR:
https://github.com/vyos/vyos-1x/pull/1768

PR 1.3 https://github.com/vyos/vyos-1x/pull/1951

@Harliff Could you re-check?

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1954

In T5153#146789, @Viacheslav wrote:

Could you send sudo nft list ruleset ?

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1952
PR for 1.4 fix https://github.com/vyos/vyos-1x/pull/1953

For 1.4 rate-limit in the wrong place

set vpn pptp remote-access authentication rate-limit

Expected in the radius section:

set vpn pptp remote-access authentication radius rate-limit

Yes, I forgot to add this task. I'll make the PR

@n.fort Could you add PR for 1.3?

@fernando Could you add PR for 1.3?

PR https://github.com/vyos/vyos-1x/pull/1950

Could you send sudo nft list ruleset ?

In T4891#139693, @RyVolodya wrote:

I reproduced this configuration. Version VyOS 1.4-rolling-202212270317 - BFD works fine.

Configuration:

set interfaces ethernet eth0 address '10.221.3.18/30'
set interfaces ethernet eth0 mtu '9000'
set interfaces ethernet eth0 offload gro
set interfaces ethernet eth0 offload gso
set interfaces ethernet eth0 offload sg
set interfaces ethernet eth0 offload tso

BFD peer status:

BFD Peers:
        peer 10.221.3.17 vrf default
                ID: 2428685750
                Remote ID: 2382320760
                Active mode
                Status: up
                Uptime: 30 minute(s), 19 second(s)
                Diagnostics: ok
                Remote diagnostics: ok
                Peer Type: configured
                RTT min/avg/max: 0/0/0 usec
                Local timers:
                        Detect-multiplier: 5
                        Receive interval: 100ms
                        Transmission interval: 100ms
                        Echo receive interval: 50ms
                        Echo transmission interval: disabled
                Remote timers:
                        Detect-multiplier: 5
                        Receive interval: 100ms
                        Transmission interval: 100ms
                        Echo receive interval: 50ms

[edit]

Try upgrading the VyOS to the latest version.

Fixed in T5047

PR https://github.com/vyos/vyos-1x/pull/1949

I found the issue. This was caused by bumping the debian packaging scripts from debian/2%2.10-10 to debian/2%2.10-12, which includes https://salsa.debian.org/debian/wpa/-/commit/d204ceb5a2dc33db888eb55b5fee542a1005e69c. This is not compatible with vyos because vyos uses a config path in /run.

Thanks, I ran the ethernet smoke tests, but not the wireless ones. I'll investigate right away.

So we can close it. Thank you for contributing.