Created a related feature request but for VRRP here
https://vyos.dev/T5745
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 15 2023
Nov 15 2023
Viacheslav moved T5732: generate firewall rule-resequence drops geoip country-code from output from Open to Finished on the VyOS 1.4 Sagitta board.
to keep track of this request on git
https://github.com/vyos/vyos-1x/pull/1960
Viacheslav added a project to T3983: show pki certificate Doesnt show x509 certificates: VyOS 1.5 Circinus.
I had entered the command as you have suggested and I think it's working somehow.
This is still an issue in 1.5. I tried importing a cert signed by my own CA and got the same error.
Viacheslav changed the status of T5726: HTTPS API image cannot be updated from Open to Needs testing.
Viacheslav moved T5726: HTTPS API image cannot be updated from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5
https://github.com/vyos/vyos-1x/pull/2483
Viacheslav moved T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav moved T5695: Build FRR with LUA scripts --enable-scripting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T5695: Build FRR with LUA scripts --enable-scripting option: VyOS 1.4 Sagitta.
Viacheslav moved T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to Finished on the VyOS 1.4 Sagitta board.
Tested VyOS 1.4-rolling-202311100309
syncer moved T5739: Password recovery does not work if public keys are configured from Open to Backport Candidates on the VyOS 1.5 Circinus board.
syncer changed the status of T5739: Password recovery does not work if public keys are configured from Needs testing to In progress.
Nov 14 2023
Nov 14 2023
Viacheslav edited projects for T5739: Password recovery does not work if public keys are configured, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from In progress to Needs testing.
zsdc changed the status of T5739: Password recovery does not work if public keys are configured from In progress to Needs testing.
New patch for migration scripts in 1.5: https://github.com/vyos/vyos-1x/pull/2480
Changing this https://github.com/vyos/vyos-1x/blob/2e587c8329a1d32fc1ec601c7753211d0fedbf2c/python/vyos/remote.py#L356
to
download(local_path, urlstring, False, True, source_host, source_port)
Fixes the issue for API
Viacheslav moved T5563: container: Container environment variable cannot be set from Open to Finished on the VyOS 1.5 Circinus board.
Contact me via Slack for testing
The fear of having the HTTP-API part of nginx compromised by another virtualhost config (as in they are sharing the same process) should be overcome by having a dedicated config file and start a 2nd nginx process.
Nov 13 2023
Nov 13 2023
v.huti triaged T5737: Eigrp #11301 - Configuration failed error type: validation as Normal priority.
I have created a draft pull request for FRR, but I can still see a bunch of odd bugs.
I'm going to activate it after additional testing by the team.
Most issues involve Wireshark's inability to parse packets correctly and display an exception, although the demons seem to run fine.
https://github.com/FRRouting/frr/pull/14788
I`m back after a long break and will follow up on this feature.
Here is a summary of things that have happened since the last update:
1. In my absence, the feature testing got broken as a result of migrating from the `mininet` to the `munet` framework From debugging, I have identified a root cause to be - bpf fs was not inherited by the `munet` router. The solution is to hop into the router mount namespace for the test run.
Because there is a long-running development for operation data retrieval, we can postpone this ticket until an effort is finished.
Then, I can open a feature request or visit the yang meeting and start a discussion about the data pagination functionality.
Currently, my idea is to simulate pagination at the fs level by having a split of requested JSON.
This solution involves:
- Fetching an operation data from the demon
vtysh -c "show yang operational-data /frr-vrf:lib/vrf[name='default']/frr-zebra:zebra/ribs zebra" > big.json
- Fetching flat data stream and formating it 1 item (prefix) per line with jq -c option
jq -c '."frr-vrf:lib" .vrf[0] ."frr-zebra:zebra" .ribs .rib[0] .route[]' big.json | split -l 100 -d
- Splitting result by the number of lines (objects), saving into files on the filesystem
Now, UI can display 1 of the resulting files at a time. These files may be regenerated on page refresh.
Such a solution will utilize extra disk space, although it can be avoided by using pipes and other
streaming utilities like awk/sed
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/2478
Will be tracked via PR https://github.com/vyos/vyos-1x/pull/2476 as it's realted to the ongoing PIM/PIM6 CLI extension
Viacheslav moved T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to Finished on the VyOS 1.4 Sagitta board.
n.fort changed the status of T5729: Firewall, nat and policy route - Switch to valueless from In progress to Needs testing.
In T5167#164447, @JeffWDH wrote:What about using nginx which seems to be already leveraged by the web API?
I would vote for that (using nginx as backend since it already exists).
Nov 12 2023
Nov 12 2023
What about using nginx which seems to be already leveraged by the web API?
c-po renamed T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features from pim: rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features to pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features.
c-po added a comment to T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features.
PR for VyOS 1.5 https://github.com/vyos/vyos-1x/pull/2476
Viacheslav added a project to T5735: Add CLI and configuration scripts for stunnel: VyOS 1.5 Circinus.
Instead of "file-server" I think "http-server" would be a better name or even "web-server" in this context.
c-po renamed T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features from pim: rewrite FRR PIM daemon configuration to get_config_dict() to pim: rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features.
c-po added a comment to T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features.
This also implements https://github.com/vyos/vyos-1x/pull/2411
c-po changed the status of T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features from Open to In progress.
Nov 11 2023
Nov 11 2023
That is my first PR; please, let me know if you need something else.
Nov 10 2023
Nov 10 2023
jestabro updated the task description for T5731: Add ability to call config dependencies by canonical function instead of whole script.
Viacheslav added a comment to T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release.
@indrajitr could you recheck smoketests?
DEBUG - ---------------------------------------------------------------------- DEBUG - Ran 3 tests in 7.616s DEBUG - DEBUG - OK DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py DEBUG - test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard) ... ok DEBUG - test_02_dyndns_service_ipv6 (__main__.TestServiceDDNS.test_02_dyndns_service_ipv6) ... ok DEBUG - test_03_dyndns_service_dual_stack (__main__.TestServiceDDNS.test_03_dyndns_service_dual_stack) ... ok DEBUG - test_04_dyndns_rfc2136 (__main__.TestServiceDDNS.test_04_dyndns_rfc2136) ... ok DEBUG - test_05_dyndns_hostname (__main__.TestServiceDDNS.test_05_dyndns_hostname) ... ok DEBUG - test_06_dyndns_web_options (__main__.TestServiceDDNS.test_06_dyndns_web_options) ... ok DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... ERROR DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... FAIL DEBUG - DEBUG - ====================================================================== DEBUG - ERROR: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 304, in test_07_dyndns_vrf DEBUG - self.cli_set(['vrf', 'name', vrf_name, 'table', vrf_table]) DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/base_vyostest_shim.py", line 68, in cli_set DEBUG - self._session.set(config) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 150, in set DEBUG - self.__run_command([SET] + path + value) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 139, in __run_command DEBUG - raise ConfigSessionError(output) DEBUG - vyos.configsession.ConfigSessionError: Number is not in any of allowed ranges DEBUG - DEBUG - DEBUG - DEBUG - VRF routing table must be in range from 100 to 65535 DEBUG - Value validation failed DEBUG - Set failed DEBUG - DEBUG - DEBUG - ====================================================================== DEBUG - FAIL: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 50, in tearDown DEBUG - self.assertTrue(process_running(DDCLIENT_PID)) DEBUG - AssertionError: False is not true DEBUG - DEBUG - ----------------------------------------------------------------------
n.fort changed the status of T5729: Firewall, nat and policy route - Switch to valueless from Open to In progress.
Viacheslav updated the task description for T4712: Collaborative Protection Profile cPP for Network Devices root task.
Yes I mean sudo ip vrf exec FOO /usr/sbin/conntrackd -C /run/conntrackd/conntrackd.conf
Restricted Repository Identity closed T5727: validator: Use native URL validator instead of regex-based validator as Resolved by committing rVYOSONEX1fcb8637f864: Merge pull request #2467 from indrajitr/validation-fix.
It has been a while since I had setup the HA VRF. I attached the interfaces on both routers to use this VRF but then conntrack-sync wasn't woking anymore. Do you mean if I had also tried to manually start the service and configure it to use this VRF?
PR https://github.com/vyos/vyos-1x/pull/2469
set service file-server listen-address 0.0.0.0 set service file-server port 8000 set service file-server directory '/tmp'
Nov 9 2023
Nov 9 2023
OK, I will.
Did you try to start this service in VRF?
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.5 Circinus board.
Create please a PR if it works for you.
Nov 8 2023
Nov 8 2023
qdrddr added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
++
qdrddr added a comment to T5388: Something is fishy with commit and boot times when more than a few hundred static routes are being used.
++
++
fernando changed the status of T5563: container: Container environment variable cannot be set from Open to Needs testing.
I've tested this flag in both version 1.4 / 1.5 , it seems to work as expected :
fernando added a project to T5563: container: Container environment variable cannot be set: VyOS 1.5 Circinus.
Make sure conntrack-sync works with active-active HA configuration with BGP environment & IPv6
Command show zone-policy is no longer available in 1.4, and neither in 1.5
I'm closing this task.