Should be possible when new refactor is merged: T5160
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 16 2023
Jun 16 2023
Jun 15 2023
Jun 15 2023
sarthurdev added a comment to T5293: Support for Floating Rules (Global Firewall-Rules that are automatically applied before all other Zone Rules).
sarthurdev added a comment to T5294: Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups).
This would have to be handled with DNS and not in the firewall. Hostnames work on firewall because they are resolved prior to use in rules.
Don't see errors with this configuration:
set interfaces ethernet eth1 vif 11 address '192.0.2.2/24' set interfaces input ifb0 description 'WAN Ingress'
Viacheslav changed the status of T5290: Failing commits for SR-IOV interfaces using ixgbevf driver due to change speed/duplex settings from Open to Needs testing.
vhost modules are not included to kernet
fernando added a comment to T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority'.
I've found the reason why this command fails, it' happens because the logic to match the dscp parameter is missing. So, it tries to apply the basic policy with the tc filter parameters by default :
Jun 14 2023
Jun 14 2023
Wow! Glad to see its moving on!
Thanks!
That did fix the issue. So how do I get that change in the main code?
PR https://github.com/vyos/vyos-1x/pull/2042
set service config-sync mode 'load' set service config-sync secondary address '192.168.122.11' set service config-sync secondary key 'foo' set service config-sync section 'nat'
You can try edit with sudo nano /opt/vyatta/sbin/vyatta-cfg-cmd-wrapper
Nope it hasn't, you skim read the bug report.
Your current version is too old, this function has been changed or removed, try upgrading to the new rolling version.
Coopercentral added a comment to T2251: VRF communication breaks when utilizing zone-based firewalling.
From my testing, all traffic that originates from an interface attached to a VRF, will show the source interface as the VRF master interface, regardless of the zone attached to that interface. This will make it difficult to segment traffic between interfaces attached to the same VRF. For example:
syncer changed the subtype of T3871: Resolve unexpected interface name reordering from "Task" to "Bug".
Jun 13 2023
Jun 13 2023
daniil added a comment to T5287: Unable to advertise EVPN type 3 (multicast) routes when using a route-map.
I opened an issue on github:
Viacheslav closed T5171: Use XML for conf-mode "load-balancing wan" instead of legacy templates, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
Thanks, @jestabro
It works in my tests!!
Viacheslav changed the status of T5283: IPoE server assigns network address from Confirmed to Needs testing.
Jun 12 2023
Jun 12 2023
jestabro changed the status of T5248: Ability to load config via API in JSON format, a subtask of T3441: More intelligent config loading scripts, from Open to Needs testing.
jestabro changed the status of T5248: Ability to load config via API in JSON format, a subtask of T5263: Generalization of REST configure endpoint, from Open to Needs testing.
jestabro changed the status of T5248: Ability to load config via API in JSON format from Open to Needs testing.
Network vendors always talk about control-plane and data-plane ... forward-plane is not used often
c-po changed the status of T5286: Remove XDP support, a subtask of T893: Add support for VPP , from Open to In progress.
c-po added a parent task for T5285: Add CLI for configuration mode for VPP: T893: Add support for VPP .
After T5239, (vyatta-cfg, commit 4bbb3829), frr.service start and stop is managed by vyos-router, consequently, one should remove the following, so as not to confuse systemd:
https://github.com/vyos/vyos-1x/blob/current/src/etc/systemd/system/frr.service.d/override.conf#L1-L3
Viacheslav closed T5264: Add Mellanox Technologies firmware flash module mlxfw to kernel as Resolved.
Viacheslav changed the status of T5264: Add Mellanox Technologies firmware flash module mlxfw to kernel from Open to Needs testing.
Viacheslav added a comment to T2251: VRF communication breaks when utilizing zone-based firewalling.
In T2251#150145, @ganawaj wrote:This bug is still present in the latest 1.4 rolling release
Jun 11 2023
Jun 11 2023
This bug is still present in the latest 1.4 rolling release
Tested on VyOS 1.3.3
jestabro added a parent task for T5248: Ability to load config via API in JSON format: T3441: More intelligent config loading scripts.
Jun 10 2023
Jun 10 2023
Viacheslav closed T5231: Add op-mode for load-balancing reverse-proxy, a subtask of T5222: Add load-balancing reverse-proxy based on haproxy , as Resolved.
Viacheslav moved T5253: MPLS config removed at boot when wireguard interfaces present from Open to Finished on the VyOS 1.4 Sagitta board.
The similar task https://vyos.dev/T4797
You can add manually nft rules that used for firewall group, but they will overwritten per next firewall change/commit. The whole firewall config will overwritten.
There are 2 ways. Somehow use it in CLI or use native (nft) tables, chains, group-sets and rules which are not overlapping with generated “system” firewall ruleset
Jun 9 2023
Jun 9 2023
On another router I've changed the base mounts to sync ie: mount /dev/md127 /boot -o remount,rw,noatime,sync before upgrading, but after a reboot it came back corrupted.
Jun 8 2023
Jun 8 2023
c-po changed the status of T5272: Upgrade OpenVPN to 2.6 in Equuleus, a subtask of T5271: Add support for peer-fingerprint to OpenVPN, from Open to In progress.
I have been able to get NAT to work with VRFs with 1.4-rolling-202306080317. However:
<?xml version="1.0"?>
<interfaceDefinition>
<node name="show">
<children>
<node name="interfaces">
<properties>
<help>Show network interface information</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_summary</command>
<children>
<leafNode name="counters">
<properties>
<help>Show network interface counters</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_counters</command>
</leafNode>
<leafNode name="detail">
<properties>
<help>Show detailed information of all interfaces</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show</command>
</leafNode>
</children>
</node>
</children>
</node>
</interfaceDefinition>It's actually an old issue.
jestabro added a subtask for T5136: Possible config corruption on upgrade: T5267: Another corruption on upgrade.
jestabro added a parent task for T5267: Another corruption on upgrade: T5136: Possible config corruption on upgrade.
Viacheslav renamed T2196: Dynamic ipv4 interface list hairpin from Dynamic ipv4 interface list to Dynamic ipv4 interface list hairpin.