Backports:
1.4 - https://github.com/vyos/vyos-1x/pull/2512
1.3 - https://github.com/vyos/vyos-1x/pull/2513
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 21 2023
Nov 21 2023
Nov 20 2023
Nov 20 2023
jestabro updated the task description for T5764: Fix race condition in vyos-grub-update service unit.
jestabro triaged T5763: Fix imprecise check for remote file name in vyos-load-config.py as Normal priority.
Did you try it?
set interfaces pppoe pppoe1 ipv6
c-po added a comment to T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server.
Draft PR for 1.5 https://github.com/vyos/vyos-1x/pull/2508
Tested in VyOS 1.4-rolling-202311100309:
Configurations:
This PR LGTM as it addresses my main need, although I think it'd be better to add support for the rest of options from RFC 2132 (eventually).
When talking about request as an option I'm talking about adding a way to add a request (or also request) statement to dhclient.conf. I need to requst subnet-mask, routers, rfc3442-classless-static-routes from my ISP, and the current implementation doesn't allow me to do that.
a.hajiyev changed the status of T2816: Rewrite IPsec scripts with the new XML/Python approach from In progress to Open.
Tested on VyOS 1.4-rolling-202311100309 and VyOS 1.5-rolling-202311160736 - L-Time shows 0. But supposed to show 3600 according to the configuration.
Nov 19 2023
Nov 19 2023
dhcp-server's raw parameters, which would pass options to dhclient as-is
c-po changed the status of T2405: commit archive to GIT, a subtask of T139: Commit archive backends, from Open to Needs testing.
@GurliGebis definately
Nov 18 2023
Nov 18 2023
Unknown Object (User) added a comment to T2405: commit archive to GIT.
Can this get backported to 1.4?
c-po moved T1354: Add support for VLAN-Aware bridges from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T1354: Add support for VLAN-Aware bridges from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 17 2023
Nov 17 2023
Unknown Object (User) added a comment to T5754: Update to StrongSwan 5.9.11.
Hey @fernando - yes, I tested it with two routers in a test environment, with the following setup: https://docs.vyos.io/en/latest/configuration/vpn/site2site_ipsec.html
Do you tested it ? using our current rolling-release
Viacheslav renamed T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS from Upgrade from 1.3.4 to 1.4 Rolling fails. to Upgrade from 1.3.4 to 1.4 Rolling fails QoS.
Viacheslav added a project to T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS: VyOS 1.5 Circinus.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces", a subtask of T5747: op-mode add MAC VRF and MTU for show interfaces summary, from Open to In progress.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces" from Open to In progress.
This is on a virtio interface:
Simple reproducer - doesn't need to be an upgrade, just apply this to 1.4
Nov 16 2023
Nov 16 2023
Unknown Object (User) created T5755: Running set pki ca NAME certificate with a name with spaces breaks the config.
Unknown Object (User) added a comment to T5754: Update to StrongSwan 5.9.11.
Unknown Object (User) created T5754: Update to StrongSwan 5.9.11.
c-po changed the status of T5753: Add VXLAN vnifilter support, a subtask of T3700: Support VLAN tunnel mapping of VLAN aware bridges, from Open to In progress.
Things to note that I'm not sure if they play a part:
jestabro added a project to T4516: Rewrite system image manipulation tools in Python: VyOS 1.5 Circinus.
vyos-1.4.log165 KBDownload
Viacheslav updated the task description for T5749: Show MAC address VRF and MTU by default for "show interfaces".
Viacheslav changed the status of T5747: op-mode add MAC VRF and MTU for show interfaces summary from Open to Needs testing.
c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5595: Multicast - PIM bfd feature enable , a subtask of T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features, as Resolved.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.5 Circinus board.
giuavo added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
I would like to contribute with a PR about this. At the same, time I would need some guidance on identifying the conditions requiring the onlink option to be added.
a.hajiyev changed the status of T2816: Rewrite IPsec scripts with the new XML/Python approach from Needs testing to In progress.
n.fort changed the status of T4072: Feature Request: Firewall on bridge interfaces from Needs testing to In progress.
As I undestand it is possible now to create multiple auth ID's
vyos@r4# set vpn ipsec authentication psk FOO id Possible completions: <text> ID used for authentication
Not sure about other options.
Viacheslav added a project to T5747: op-mode add MAC VRF and MTU for show interfaces summary: VyOS 1.4 Sagitta.
Tested in VyOS 1.4-rolling-202311100309 (AES)
Tested in VyOS 1.4-rolling-202311100309 (3DES)
Viacheslav closed T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix as Resolved.
Viacheslav changed the status of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Needs testing.
In VyOS 1.3.4
Configs:
I have a similar setup where I have two VyOS VMs used as VPN routers with some firewalling enabled. Since I use OSPF for dynamic routing I am not able to synchronize the sessions between both routers so in case one VPN router fails the other one can't take over flawlessly. Having conntrack-sync configuration separated from VRRP would be a great benefit.
I tested in VyOS 1.4-rolling-202311100309
Unknown Object (User) added a comment to T4940: Interface debugging.
https://github.com/vyos/vyos-1x/pull/2492
for equuleus
Tested in VyOS 1.4-rolling-202311100309
Tried with single quotes: ''
Nov 15 2023
Nov 15 2023
watson.ash added a comment to T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client.
looks great from my perspective (I've just updated our nodes. Tested on Community Edition client on windows and Connect V3 client on windows and Tunnelblick on Mac all working as expected. (I tested with; 1.5-rolling-202311150738).
nice work!