vyos-1x.git/data/templates/pmacct, branch current

pmacct: T5232: Fixed pmacct service control via systemctl

2023-10-12T17:16:38+00:00

pmacct daemons have one very important specific - they handle control signals in the same loop as packets. And packets waiting is blocking operation. Because of this, when systemctl sends SIGTERM to uacctd, this signal has no effect until uacct receives at least one packet via nflog. In some cases, this leads to a 90-second timeout, sending SIGKILL, and improperly finished tasks. As a result, a working folder is not cleaned properly. This commit contains several changes to fix service issues: - add a new nftables table for pmacct with a single rule to get the ability to send a packet to nflog and unlock uacctd - remove PID file options from the uacctd and a systemd service file. Systemd can detect proper PID, and PIDfile is created by uacctd too late, which leads to extra errors in systemd logs - KillMode changed to mixed. Without this, SIGTERM is sent to all plugins and the core process exits with status 1 because it loses connection to plugins too early. As a result, we have errors in logs, and the systemd service is in a failed state. - added logging to uacctd - systemctl service modified to send packets to specific address during a service stop which unlocks uacctd and allows systemctl to finish its work properly

T5257: Fix netflow VRF and bracketize v6 source addresses for netflow/sflow

2023-06-03T00:34:57+00:00

netflow: T4532: replace dot and colons to dash

2022-07-15T10:54:37+00:00

Fix for IPv6 netflow_plugin name When we use IPv6 uacctd.conf doesnt expect coluns in the plugin name. Replace dots and colons to dash.

flow-accounting: T4437: bugfix IPv6 flow collector address

2022-05-21T17:13:12+00:00

flow-accounting: T4353: fix Jinja2 linting errors

2022-05-01T17:01:30+00:00

netflow: T4333: migrate to new vyos_defined Jinja2 test

2022-04-13T20:52:17+00:00

flow-accounting: T4277: support sending flow-data via VRF interface

2022-03-01T18:10:15+00:00

It should be possible to send the gathered data via a VRF bound interface to the collector. This is somehow related to T3981 but it's the opposite side of the netflow process. set system flow-accounting vrf