yes, that would be a very good solution/implementation
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 24 2024
May 24 2024
zsdc changed the status of T6395: Enable VFIO No-IOMMU support in kernel config from Open to In progress.
Viacheslav moved T6391: load-balancing reverse-proxy: typo in timeout help from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
n.fort changed the status of T6394: Migrate conntrack timeout sysctl parameter to firewall from Open to In progress.
Probably the best way will be moving the config to the vrf section (not implemented)
For example:
set vrf name foo service dhcp-server shared-network-name eth1 option default-router '192.168.1.1' set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 lease '300' set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 range default start '192.168.1.10' set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 range default stop '192.168.1.100' set vrf name foo service dhcp-server shared-network-name eth1 subnet 192.168.1.0/24 subnet-id '1'
And start several instances, each with its configuration.
you have to adapt a few more things, if absolutely necessary it also works with several VRFs - but it is very ugly...
I assume that workaround would only work for a single VRF or can one do something like this?
The following can be configured as a quick and dirty workaround:
May 23 2024
May 23 2024
I am already working on the PR :)
c-po moved T6293: add Mediatek MT7921 to defconfig from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
c-po moved T6293: add Mediatek MT7921 to defconfig from In Progress to Finished on the VyOS 1.5 Circinus board.
Embezzle changed the status of T6370: Add option to set custom HTTP headers in reverse-proxy responses from In progress to Needs testing.
syncer edited projects for T6390: Compensate for packer packaging update, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus.
Viacheslav moved T6381: Typos in select ConfigError messages in dhcpv6-server from Open to Finished on the VyOS 1.5 Circinus board.
Resolved, merged PR: https://github.com/vyos/vyos-1x/pull/3508
Difficulty changed to normal to consider one subtlety of xml cache, and add POC for use in (a later version of) the strip-private filter. POC below; some subset of commits may be added to 1.5:
https://github.com/vyos/vyos-1x/compare/current...jestabro:example-property-secret
jestabro edited a custom field on T6363: Expose element 'secret' in xml cache and add boolean check.
The idea is feasible for parameters with constraints (like number ranges) defined in the XML, but there are many other cases where human input is necessary. We could give the tool a set of parameters to randomly generate, or a half-complete config with slots to fill in with random values. Worst case, we'd discover new constraints for more rigid templates; best case, we'd have a proper tool for generating corner cases for smoke tests and fuzzing.
HollyGurza moved T4576: vpn l2tp logging level configuration from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza changed the status of T4576: vpn l2tp logging level configuration from Open to In progress.
Viacheslav edited projects for T6387: Bump conntrack to version 1:1.4.7-1, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Follow up, I was able to make nat.py throw the error below.
@Viacheslav, same behaviour exists for epa3, I numbered mine 999 so as not to interfere with existing rules.
May 22 2024
May 22 2024
@Viacheslav
Happy to dig into this if can assign it to me.
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
Same issue applies to NAT66, too
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
c-po changed the status of T6365: Negating interface names in NAT configuration causes invalid warnings from Open to In progress.
Viacheslav triaged T6382: Add dkms in order to make firmware updates of NIC's possible as Wishlist priority.
Viacheslav moved T6384: rollback-soft should tell the user to compare and commit from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
In T3493#189273, @Viacheslav wrote:Does 1.5 has the same bug?
Viacheslav edited projects for T6373: QoS Policy Limiter - classes for marked traffic do not work, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
Viacheslav moved T3493: DHCPv6 does not have prefix range validation from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Does 1.5 has the same bug?
natali-rs1985 changed the status of T6227: Rewrite show conntrack-sync cache internal to use tabulate output from Open to In progress.
Viacheslav closed T6366: CGNAT add the ability to show allocation per external or internal address, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
PR merged: https://github.com/vyos/vyos-1x/pull/3499/
HollyGurza moved T6373: QoS Policy Limiter - classes for marked traffic do not work from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza moved T6373: QoS Policy Limiter - classes for marked traffic do not work from Open to In Progress on the VyOS 1.4 Sagitta board.
May 21 2024
May 21 2024
natali-rs1985 updated the task description for T6374: Openvpn site-to-site mode with TLS not starting.
natali-rs1985 updated the task description for T6374: Openvpn site-to-site mode with TLS not starting.
natali-rs1985 updated the task description for T6374: Openvpn site-to-site mode with TLS not starting.
natali-rs1985 updated the task description for T6374: Openvpn site-to-site mode with TLS not starting.
HollyGurza moved T5307: QoS - traffic-class-map services from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza moved T5307: QoS - traffic-class-map services from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Viacheslav changed the status of T6366: CGNAT add the ability to show allocation per external or internal address, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6366: CGNAT add the ability to show allocation per external or internal address from Open to In progress.
May 20 2024
May 20 2024
c-po moved T6367: op-mode: commit-archive: TypeError: attribute name must be string, not 'NoneType' from Open to Finished on the VyOS 1.5 Circinus board.
jestabro changed the status of T6076: [1.3.3->1.4.0-epa1 Migration] Most of config missing from Needs testing to Needs reporter action.
HollyGurza changed Version from - to 1.5-rolling-202405080016 on T6373: QoS Policy Limiter - classes for marked traffic do not work.
HollyGurza changed the subtype of T6373: QoS Policy Limiter - classes for marked traffic do not work from "Task" to "Bug".
Viacheslav closed T6364: CGNAT drop hard limit that allowed only one translation rule, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.