It was actually leaking routes.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jul 17 2023
Jul 17 2023
Jul 16 2023
Jul 16 2023
syncer reassigned T446: Flow accounting enhancements: pre/post NAT, ingress/egress from Unknown Object (User) to Viacheslav.
syncer reassigned T1810: Commit to add new l2tp local user shouldn't disconnect all current l2tp sessions from Unknown Object (User) to Viacheslav.
syncer reassigned T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict from Unknown Object (User) to Viacheslav.
syncer reassigned T4676: IPoE server with mac authentication generates a wrong dictionary from Unknown Object (User) to Viacheslav.
Unknown Object (User) added a comment to T5155: restart bgp daemon throws route-map error.
Looking at the FRR configuration vtysh -c "show run" I see the route-map - maybe it's just a display error? Or you actually leak routes?
Once we update to FRR 9.0 we can make use of this faeture
[ 4065.850013] ovpn_dco_v2: loading out-of-tree module taints kernel. [ 4065.852874] OpenVPN data channel offload (ovpn-dco) 0.2.20230426 -- (C) 2020-2023 OpenVPN, Inc
Jul 15 2023
Jul 15 2023
Jul 14 2023
Jul 14 2023
n.fort changed the status of T5059: add 'disable' option to DHCP relay config from In progress to Needs testing.
darinkuo closed T5358: 99-ipsec-dhclient-hook prevents DHCP stateless routes from being installed in VRF table as Resolved.
Merged into vyos:current.
n.fort closed T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface as Resolved.
Marking this bug as resolved, since in last comment it shows that DNAT is working using multiple "WANs" connections
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .
Also, correct behavior when 1 interface is pppoe, and other dhcp-client:
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .
Test #1:
- Simple configuration with one interface pppoe and other static, WLB working as expected:
I see no errors on 1.4:
Jul 13 2023
Jul 13 2023
Jackwmtr updated the task description for T5356: DMVPN NHRP spoke stops sending resolution requests upon restart.
Jackwmtr updated the task description for T5356: DMVPN NHRP spoke stops sending resolution requests upon restart.
Very nice. I noticed show system updates and set system update-check in the CLI now. Will there be a URL available to start testing this, perhaps even via the most recent nightly rolling release?
n.fort changed the status of T5059: add 'disable' option to DHCP relay config from Open to In progress.
Viacheslav changed the status of T5355: IPSec: OP cmd : "show vpn ike sa" does not show output from Open to In progress.
It possible with
set protocols bgp 65001 parameters default no-ipv4-unicast
Viacheslav moved T2315: Ability to have right address-family for BGP peers. from Open to Finished on the VyOS 1.4 Sagitta board.
Jul 12 2023
Jul 12 2023
I can't test this at this time. I stopped using the platform
syncer moved T4652: Upgrade PowerDNS recursor to 4.7 series from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T1024: Policy Based Routing by DSCP from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T1928: Is the 'Welcome to VyOS' message when using SSH an information leak? from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T3827: interfaces migration script fails on AWS hosts from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4262: install image doesn't respect chosen root partition size from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4153: Monitor bandwidth-test initiate not working from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4884: Missing a community6 in snmpd config from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T5098: PPPoE client holdoff configuration from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4902: snmpd: exclude container storage from monitoring from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer moved T4671: linux-firmware package is missing symlinks defined in WHENCE file from Backlog to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
syncer edited projects for T4190: Add commit comment to the configuration API., added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4222: Support for TWAMP as round-trip metric, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4393: sstp: add support for configuring host-name (SNI), added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4412: commit archive: reboot not working with sftp, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4624: Move some op mode commands to "execute" and "produce" command families, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 10:29 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
syncer edited projects for T4601: dhcp : relay agent IP address issue., added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4621: OpenConnect group selection, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T4646: USB serial output console does not work, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static , added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T681: Shaper QoS policy does not recognize 'lowdelay' DSCP value, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T970: Support matching domain name in firewall rules, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1161: Does Vyos take advantage of linux's improved security features?, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1244: Add support for StartupResync in conntrack-sync, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1276: dhcp relay + VLAN fails, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1297: Add GARP settings to VRRP/keepalived, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 10:21 PM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
syncer edited projects for T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1647: event-handler configurable syslog.pipe level , added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1683: Difficulty monitoring VyOS through SNMP, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1810: Commit to add new l2tp local user shouldn't disconnect all current l2tp sessions, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1941: Config mismatch with FRR on misconfiguration of V6 peer, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1963: Can't copy or rename a node, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T1999: support for ip groups in nat, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2044: RPKI doesn't boot properly, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2051: Throughput anomalies, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2113: OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
Jul 12 2023, 10:11 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), openvpn
syncer edited projects for T2195: Support for encrypted DNS: dnscrypt, DoH, DoT, anonymized DNS, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2196: Dynamic ipv4 interface list hairpin, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2199: Rewrite firewall in new XML/Python style, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2229: PPPOE Default Queue type selection, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2251: VRF communication breaks when utilizing zone-based firewalling, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2281: DHCP and Static IPs on Same Interface, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2315: Ability to have right address-family for BGP peers., added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2366: change the default for Interface creation to False, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2477: Make VyOS interactively ask whether user trust remote host SSH fingerprint, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
syncer edited projects for T2498: Expected error when deleting vif that has dhcp-server configured, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).