Not only affects, smoketest.. nat66 got broken
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 9 2023
Aug 9 2023
jestabro closed T5443: Add merge_defaults as Config method, a subtask of T5228: Simplify get_config_dict and add argument with_defaults, as Resolved.
jestabro closed T5435: Expose utility function for default values at path, a subtask of T5434: Replace remaining calls of vyos.xml library, as Resolved.
n.fort renamed T5453: Fix nat66 - broken after load-balance was introduced in nat from Fix nat66 smoketest to Fix nat66 - broken after load-balance was introduced in nat.
Aug 8 2023
Aug 8 2023
PR https://github.com/vyos/vyos-1x/pull/2140
set service monitoring zabbix-agent directory '/config/zabbix/' set service monitoring zabbix-agent limits buffer-send '8' set service monitoring zabbix-agent limits buffer-size '120' set service monitoring zabbix-agent log debug-level 'warning' set service monitoring zabbix-agent log size '1' set service monitoring zabbix-agent server '192.0.2.5' set service monitoring zabbix-agent server-active 192.0.2.5 port '10051' set service monitoring zabbix-agent server-active 2001:db8::123
n.fort changed the status of T5450: Firewall interface group - Allow inverted matcher from Open to Confirmed.
Viacheslav changed the status of T5448: Add service zabbix-agent, a subtask of T118: Native Zabbix Support, from Open to In progress.
Viacheslav changed the subtype of T5447: Allow static MACsec keys with peers from "Task" to "Feature Request".
Viacheslav changed the status of T5446: bgp: validity check for bestpath med option from In progress to Needs testing.
Aug 7 2023
Aug 7 2023
Nope, now i had to do
@aalmenar could you test this patch?
information that can be useful for this feature request :
aserkin added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
If that was pppoe i'd have thought of arp, but here with fixed number of l2tp tunnels (22 tunnels from LACs) i don't think arp cache oversizes the table.
Some more information which i can't think of as a failure reason yet, but it looks strange, - just before the issue we see that LAC drops l2tp tunnel for some reason and starts to send SCCRQ with tid=0 as if it just started working. After a while accel-ppp daemon drops the old tunnels and starts the new ones for few LACs. This definitely cause massive (thousands) route updates between zebra and kernel i guess. Sometimes the system can stand this, sometimes it cant.
Apachez added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
I tried digging through google if somebody else have encountered the same but I couldnt find any obvious hints (except for the zebra nexthop-group keep 1 already mentioned).
n.fort changed the status of T5446: bgp: validity check for bestpath med option from Open to In progress.
aserkin added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
I checked the FRR version in the recent rolling release - it is release candidate still. Does it worth upgrading from 8.5.2? As for the possibility - yes, sure we can build latest image.
Apachez added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
I added a comment to https://github.com/FRRouting/frr/issues/12239 so hopefully there might be some other commands or stuff to do other than the debug-commands to hunt this thing down.
aserkin added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
logs.zip858 KBDownload
Adding what was available this time. Will try to turn on debugs next time if we have another chance. Yes, the behavior was identical to previous.
Apachez added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
And the logs looks the same as in your original post?
aserkin added a comment to T5424: Routes vanishes when using FRR with ECMP and one of the ECMP paths is no longer available.
After 19 hours of production run since yesterday the failure occurred again despite the workaround applied. Routes are cleared from kernel for some reason. During the run we observed few l2tp tunnels drops followed by 600 to 6000 sessions drop. The reason is not clear for now but i'm not sure this should kill zebra functionality this way.
Viacheslav closed T5071: QOS-Rewrite: DSCP match missing, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Fixed
set qos interface eth1 egress 'VyOS-HTB' set qos policy shaper VyOS-HTB bandwidth '100mbit' set qos policy shaper VyOS-HTB class 10 bandwidth '40%' set qos policy shaper VyOS-HTB class 10 description 'dscp_EF_ipprec_5_GETS' set qos policy shaper VyOS-HTB class 10 match AF11 ip dscp 'AF11' set qos policy shaper VyOS-HTB class 10 priority '1' set qos policy shaper VyOS-HTB class 10 queue-type 'fair-queue' set qos policy shaper VyOS-HTB class 20 bandwidth '30%' set qos policy shaper VyOS-HTB class 20 description 'dscp_AF4x_ipprec_4' set qos policy shaper VyOS-HTB class 20 match ef ip dscp 'EF' set qos policy shaper VyOS-HTB class 20 priority '2' set qos policy shaper VyOS-HTB class 20 queue-type 'fair-queue' set qos policy shaper VyOS-HTB default bandwidth '20%' set qos policy shaper VyOS-HTB default queue-type 'fq-codel'
Viacheslav closed T5302: QoS class with multiple matches generates one filter rule but expects several rules, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Viacheslav closed T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority', a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Viacheslav moved T5406: "update webproxy blacklists" fails when vrf is being configured from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added projects to T5444: R8169 driver crash: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.4).
@c-po Tried with latest rolling 1.4-rolling-202308060317, rpki doesn't start automatically, one must do:
Latest rolling uses FRR 9.0. - could you re-test it please?
Aug 6 2023
Aug 6 2023
c-po moved T5420: nftables - upgrade to latest 1.0.8 from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T5437: logrotate.service fails to start from Open to In Progress on the VyOS 1.4 Sagitta board.
Running into this as well on: 1.4-rolling-202307260317
jestabro added a parent task for T5443: Add merge_defaults as Config method: T5319: Remove remaining workarounds for incorrect defaults.
Lets keep this one open for some more time and see if the issue is resolved or not.
Viacheslav changed the status of T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority', a subtask of T5048: QoS doesn't work correctly root task, from Open to Needs testing.
Viacheslav changed the status of T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority' from Open to Needs testing.
c-po changed the status of T5445: dyndns: add possibility to specify update interval (timeout) from Open to In progress.
jestabro added a parent task for T5443: Add merge_defaults as Config method: T5228: Simplify get_config_dict and add argument with_defaults.
Aug 5 2023
Aug 5 2023
Apachez added a comment to T5417: nft -o (optimizing ruleset) fails with error: "internal:0:0-0: Error: Could not process rule: File exists" .
There is a bugzilla opened for this issue: https://bugzilla.netfilter.org/show_bug.cgi?id=1697
I can confirm that updating blacklist now is vrf aware and functional:
PR created: https://github.com/vyos/vyos-1x/pull/2135
PR created: https://github.com/vyos/vyos-1x/pull/2135
Added task https://vyos.dev/T5440 to fix the issue of preconfig-script doesnt show up in /config/scripts after system upgrade (add system image).
The reason *I* use chrony with my linux qemu guests, is that it supports using the kvm_ptp to get the kvm hypervisor's time as sync source, and I then don't need the VM to chat with NTP servers.
c-po moved T5428: dhcp: client renewal fails when running inside VRF from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
c-po edited projects for T5428: dhcp: client renewal fails when running inside VRF, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
c-po moved T3424: PPPoE IA-PD doesn't work in VRF from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
c-po edited projects for T3424: PPPoE IA-PD doesn't work in VRF, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3).
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2134
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2134
c-po moved T3424: PPPoE IA-PD doesn't work in VRF from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
c-po changed the status of T3424: PPPoE IA-PD doesn't work in VRF from In progress to Needs testing.
Fixed in the latest rolling release
I need some help with this one.
It seems happy for now:
[email protected]:~$ systemctl list-timers NEXT LEFT LAST PASSED UNIT ACTIVATES Sat 2023-08-05 21:00:00 CEST 38min left Sat 2023-08-05 20:00:01 CEST 21min ago logrotate.timer logrotate.service