<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/src/conf_mode/flow_accounting_conf.py, branch rolling</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2023-12-31T22:49:48+00:00</updated>
<entry>
<title>T5474: establish common file name pattern for XML conf mode commands</title>
<updated>2023-12-31T22:49:48+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-12-30T22:25:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4ef110fd2c501b718344c72d495ad7e16d2bd465'/>
<id>urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465</id>
<content type='text'>
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.

Example:
set interfaces ethernet -&gt; interfaces_ethernet.xml.in
set interfaces bond -&gt; interfaces_bond.xml.in
set service dhcp-server -&gt; service_dhcp-server-xml.in
</content>
</entry>
<entry>
<title>pmacct: T5232: Fixed pmacct service control via systemctl</title>
<updated>2023-10-12T17:16:38+00:00</updated>
<author>
<name>zsdc</name>
<email>taras@vyos.io</email>
</author>
<published>2023-10-03T22:57:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=e364e9813b6833f6b108e7177ef7ea2d9e7bac33'/>
<id>urn:sha1:e364e9813b6833f6b108e7177ef7ea2d9e7bac33</id>
<content type='text'>
pmacct daemons have one very important specific - they handle control signals in
the same loop as packets. And packets waiting is blocking operation.

Because of this, when systemctl sends SIGTERM to uacctd, this signal has no
effect until uacct receives at least one packet via nflog. In some cases, this
leads to a 90-second timeout, sending SIGKILL, and improperly finished tasks.
As a result, a working folder is not cleaned properly.

This commit contains several changes to fix service issues:

- add a new nftables table for pmacct with a single rule to get the ability to
send a packet to nflog and unlock uacctd
- remove PID file options from the uacctd and a systemd service file. Systemd
can detect proper PID, and PIDfile is created by uacctd too late, which leads
to extra errors in systemd logs
- KillMode changed to mixed. Without this, SIGTERM is sent to all plugins and
the core process exits with status 1 because it loses connection to plugins too
early. As a result, we have errors in logs, and the systemd service is in a
failed state.
- added logging to uacctd
- systemctl service modified to send packets to specific address during a service
stop which unlocks uacctd and allows systemctl to finish its work properly
</content>
</entry>
<entry>
<title>conntrack: T5571: Refactor conntrack to be independent conf script from firewall, nat, nat66</title>
<updated>2023-09-16T11:20:10+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2023-09-14T01:01:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=734d84f696944419a2d6f11bc16dda03900add34'/>
<id>urn:sha1:734d84f696944419a2d6f11bc16dda03900add34</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5319: remove workarounds for defaults in flow_accounting_conf.py</title>
<updated>2023-08-07T05:48:31+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2023-08-06T03:11:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=c41b1e6ce5a3e3816f4c999334af3ab178289771'/>
<id>urn:sha1:c41b1e6ce5a3e3816f4c999334af3ab178289771</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5195: move helpers from vyos.validate to vyos.utils package</title>
<updated>2023-08-06T18:25:01+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-08-06T17:29:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d1c4294534dd04f075f89f1bb60736d56fc6c22a'/>
<id>urn:sha1:d1c4294534dd04f075f89f1bb60736d56fc6c22a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5195: vyos.util -&gt; vyos.utils package refactoring (#2093)</title>
<updated>2023-07-14T20:18:36+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-07-14T20:18:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d1ca536da448749dff557f13ecae97b124026e96'/>
<id>urn:sha1:d1ca536da448749dff557f13ecae97b124026e96</id>
<content type='text'>
* T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process

* T5195: use read_file and write_file implementation from vyos.utils.file

Changed code automatically using:

find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} +
find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} +

* T5195: move chmod* helpers to vyos.utils.permission

* T5195: use colon_separated_to_dict from vyos.utils.dict

* T5195: move is_systemd_service_* to vyos.utils.process

* T5195: fix boot issues with missing imports

* T5195: move dict_search_* helpers to vyos.utils.dict

* T5195: move network helpers to vyos.utils.network

* T5195: move commit_* helpers to vyos.utils.commit

* T5195: move user I/O helpers to vyos.utils.io</content>
</entry>
<entry>
<title>T5257: add verify_vrf() check for flow-accounting</title>
<updated>2023-06-03T11:08:31+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-06-03T11:08:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=12b7da289665c75c3839b32c77a491d8909f3e73'/>
<id>urn:sha1:12b7da289665c75c3839b32c77a491d8909f3e73</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5257: import cleanup for flow-accounting</title>
<updated>2023-06-03T11:08:15+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-06-03T11:08:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=b88a88f3e8af26cb24ceab86d37b44f10d3ce341'/>
<id>urn:sha1:b88a88f3e8af26cb24ceab86d37b44f10d3ce341</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5257: Fix netflow VRF and bracketize v6 source addresses for netflow/sflow</title>
<updated>2023-06-03T00:34:57+00:00</updated>
<author>
<name>Wered</name>
<email>kylem@serverforge.org</email>
</author>
<published>2023-06-03T00:34:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=6e46958c3fdd6ed7d0052c6f49933f5e7b7481ea'/>
<id>urn:sha1:6e46958c3fdd6ed7d0052c6f49933f5e7b7481ea</id>
<content type='text'>
</content>
</entry>
<entry>
<title>systemd: T2185: always place generated override files in /run</title>
<updated>2023-01-14T20:19:45+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-01-14T20:19:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=da015473559f88e604b27ba66a2f4a9f95425bb2'/>
<id>urn:sha1:da015473559f88e604b27ba66a2f4a9f95425bb2</id>
<content type='text'>
This prevents any stale override files when the system is beeing rebooted,
but the actual configuration was not saved. /run is a tmpfs and thus
always fresh after boot.
</content>
</entry>
</feed>
