NAS-Identifier typically uses hostname in all network OS and devices that I have used. Since “VyOS - Open source router and firewall platform”, which refers to network OS or virtual routers, I think setting NAS-Identifier = hostname by default would be more native. As alternative making it possible to change the NAS-Identifier value via cli, something like that: set system login radius nas-identifier host-name
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 18 2025
Feb 18 2025
Viacheslav added a comment to T7131: VPP after enabling by default route-no-paths we get crash daemon and faulting address.
Small note, to reproduce it, you have to have at least one route not related to vpp interface, like the default route via eth0, but vpp interface eth1
delete vpp commit
GitHub <[email protected]> committed rVYOSONEXd6a82c134bed: Merge pull request #4108 from sarthurdev/wlb_python (authored by Viacheslav).
Viacheslav triaged T7176: vyos-domain-resolver not picking up non-default configuration values as Normal priority.
Feb 17 2025
Feb 17 2025
Embezzle changed the status of T7176: vyos-domain-resolver not picking up non-default configuration values from Open to In progress.
dmbaturin triaged T7137: Add support for operator-level users and operational mode command permission system as Normal priority.
dmbaturin changed Issue type from feature to internal on T7142: HAPROXY- update current version to 3.0 .
dmbaturin triaged T7149: Add an explicit option to allow traffic before the system is successfully configured as Normal priority.
Viacheslav added a comment to T7174: Bump host-sflow version to v2.1.11-5 to build with VPP feature.
@neilmckee it can wait as long as necessary, thanks!
GitHub <[email protected]> committed rVYOSONEXfa2df64a25e5: Merge pull request #4349 from natali-rs1985/T6906-smoketest (authored by dmbaturin).
natali-rs1985 updated the task description for T7169: If cannot connect to VPP while committing interface disappears.
natali-rs1985 updated the task description for T7169: If cannot connect to VPP while committing interface disappears.
Hsflowd v2.1.11-5 has a working mod_vpp, but the master branch has a fix to the iftype and ifdirection fields that are exported in the sflow counters for vpp interfaces. We expect to tag a v2.1.12-1 release soon that will include this fix. Let me know if there is a deadline and you need it right away.
The prefixes are announced by radvd.service daemon, and keepalived knows nothing about this service.
You have to use scripts with your own logic to skip/stop prefixes or radvd service.
If you need it as a feature request, create a new task/feature.
Viacheslav updated subscribers of T7174: Bump host-sflow version to v2.1.11-5 to build with VPP feature.
Viacheslav added a comment to T7174: Bump host-sflow version to v2.1.11-5 to build with VPP feature.
a.apostoliuk moved T7057: 'set service webproxy domain-noncache <domain>' command does not work from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
a.apostoliuk moved T7057: 'set service webproxy domain-noncache <domain>' command does not work from Open to Finished on the VyOS 1.5 Circinus board.
Bump keepalived version to 2.3.2 https://github.com/vyos/vyos-build/pull/911
a.apostoliuk changed the status of T7057: 'set service webproxy domain-noncache <domain>' command does not work from Open to Needs testing.
Viacheslav triaged T7169: If cannot connect to VPP while committing interface disappears as Normal priority.
evgmol added a comment to T7012: vyos_ospf_interfaces, vyos_ospfv2 and vyos_ospfv3 fail integration tests.
https://github.com/vyos/vyos.vyos/pull/395 for OSPFv2 fixes - both unit and integration
Feb 16 2025
Feb 16 2025
Feb 15 2025
Feb 15 2025
Feb 14 2025
Feb 14 2025
hsflowd expects the agent-address to be chosen from addresses it can see in it's own namespace.
Viacheslav added a comment to T7169: If cannot connect to VPP while committing interface disappears.
At least example is incorrect but the bug with interface still exists if if will fail for some another reason
natali-rs1985 changed the status of T7169: If cannot connect to VPP while committing interface disappears from Open to In progress.
Viacheslav changed the status of T7168: VPP add IPsec netlink XFRM settings from Open to In progress.
Viacheslav changed the subtype of T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none) from "Task" to "Feature Request".
Probably should use common `interface.py` https://github.com/vyos/vyos-1x/blob/c2238596f7994e51974e9a517fb7ab7e948e955f/src/op_mode/interfaces.py#L468C1-L474C38
Viacheslav triaged T7166: VXLAN interfaces disappear if the parent wireguard interface was changed as Normal priority.
natali-rs1985 closed T7072: VPP CPU skip-cores should be verified, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T7072: VPP CPU skip-cores should be verified from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 closed T7071: VPP CPU inverted range of corelist-workers has to be verified and not applied, a subtask of T7070: VPP related bugs the root task, as Resolved.
Apachez added a comment to T7165: Add an option to configure LLDP operation mode (receive, transmit, both, or none).
I would prefer if both disabled, all, rx-only and tx-only setting could be applied.
same issue on 1.5-rolling-202502130006
vyos@vyos# run show interfaces wireguard wg0
wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
link/none
inet 10.10.0.1/24 brd 10.10.0.255 scope global wg0
valid_lft forever preferred_lft forever
inet6 fe80::f4d1:45ff:feb8:435/64 scope link
valid_lft forever preferred_lft forever
Description: hk wg over wssI've also confirmed this problem exists on these versions:
I'm also facing the same issue: interfaces named pod-XXX vanish from the zone-based firewall after a system reboot. Here's my configuration:
vyos@vyos# sudo ip netns list netns-3ea94443-cb81-9ea7-05a1-d1e08b1cafe8 (id: 0)
Harliff awarded T4733: Feature Request: dhcp server: add VRF support a Like token.
In T4733#177910, @rgwan wrote:DHCP server with VRF support works correctly in v1.4
Feb 13 2025
Feb 13 2025
c-po added a comment to T6847: Kernel: update intel OOT (Out Of Tree) drivers for i40e, ixgbe and ice.
Viacheslav added a comment to T7131: VPP after enabling by default route-no-paths we get crash daemon and faulting address.
Test with gdb