1.3 Equuleus

2021-03-14

• T3395 (bug): WAN load-balancing fails with nexthop dhcp

• T3289 (bug): No description for node “service” conf-mode

• T2271 (feature): OSPF: add per VRF instance support

• T175 (feature): Add source route option to vti interface

2021-03-13

• T3406 (bug): tunnel: interface no longer supports specifying encaplimit none - or migrator is missing

• T3407 (bug): console-server: do not allow to spawn a console-server session on serial port used by “system console”

2021-03-11

• T3399 (bug): RPKI: dashes in hostnames are replaced with underscores when rendering the FRR config

• T3305 (bug): Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot

• T2927 (bug): isc-dhcpd release and expiry events never execute

• T899 (bug): Tunnels cannot be moved from one bridge to another

• T786 (feature): new style xml and conf-mode scripts: posibillity to add tagNode value as parameter to conf-script

2021-03-09

• T3389 (default): gretap tunnel type missing from vyos documentation after renamed from gre-bridge

• T3382 (bug): Error creating Console Server

2021-03-08

• T3387 (bug): Command “Monitor vpn ipsec” is not working

2021-03-07

• T3319 (bug): VXLAN uses ttl 1 (auto) by default

• T3391 (feature): Add CLI support for specifying maximum-paths per address family ipv4 unicast and ipv6 unicast

• T3211 (feature): ability to redistribute ISIS into other routing protocols

2021-03-05

• T2659 (feature): Add fastnetmon (DDoS detection) support

2021-03-04

• T2861 (bug): route-map “set community additive” not working correctly

2021-03-03

• T2966 (feature): tunnel: add new encapsulation types ip6tnl and ip6gretap

2021-03-01

• T3342 (bug): On xen-netback interfaces must set “scattergather” offload before MTU>1500

2021-02-28

• T3370 (bug): dhcp: Invalid domain name “private”

• T3369 (feature): VXLAN: add IPv6 underlay support

2021-02-27

• T2291 (bug): Bad hostnames in /etc/hosts with static-mapping in dhcp server config

• T3364 (feature): tunnel: cleanup/rename CLI nodes

• T3368 (feature): macsec: add support for gcm-aes-256 cipher

• T3366 (bug): tunnel: can not change local / remote ip address for gre-bridge tunnel

2021-02-26

• T3347 (default): vyos 1.3 beta fails to configure Xen HVM guest ethernet interfaces due to ethtool -g error

• T3357 (default): HTTP-API redirect from http correct https port

2021-02-24

• T1774 (default): Add a show config operation to the HTTP API

• T3303 (feature): Change welcome message on boot

2021-02-21

• T3163 (feature): ethernet ring-buffer can be set with an invalid value

• T2521 (bug): Need to restart pdns-recursor to check new entries in /etc/hosts

2021-02-20

• T2647 (default): ipsec disableuniqreqids generate a wrong ipsec.conf

2021-02-19

• T3326 (bug): OSPFv3: Cannot add L2TPv3 interface

• T2061 (bug): protocol logs not sent to remote syslog

2021-02-18

• T3259 (default): many dnat rules makes the vyos http api crash, even showConfig op timeouts

2021-02-17

• T3047 (bug): OSPF : virtual-link and passive-interface default parameters does not work together

• T3312 (feature): SolarFlare NICs support

2021-02-16

• T3318 (feature): Update Linux Kernel to v5.4.105 / 5.10.23

2021-02-14

• T2152 (bug): ddclient has bug which prevents use_web from being used

• T3308 (feature): BGP: add gracefull shutdown support

2021-02-13

• T3028 (feature): Create a default user when metadata is not available (for Cloud-init builds)

• T2867 (feature): Cleanup DataSourceOVF.py in the Cloud-init

• T2726 (feature): Allow to use all supported SSH key types in Cloud-init

• T2403 (feature): Full support for networking config in Cloud-init

• T2387 (feature): Create XML scheme for [conf_mode] BGP

• T2174 (feature): Rewrite protocol BGP to new XML/Python style

• T1987 (bug): A default route can be deleted by dhclient-script in some cases

• T2310 (bug): vyos-cloud-init use global config to configure pass and ssh login

• T723 (feature): Add support for first boot or installation time saved config modification

• T1775 (bug): Cloud-init not running userdata runcmd

• T1389 (feature): Add support for NoCloud cloud-init datasource

• T1315 (feature): Allow BGP to use address-family l2vpn evpn

2021-02-12

• T3301 (bug): Wrong format and valueHelp for policy as-path-list regex

2021-02-11

• T2638 (default): FRR: New framework for configuring FRR

• T3035 (enhancment): Allow IPv4 over IPv6 IPsec and vice versa

• T1957 (feature): PPPoE server: maintenance mode

• T1773 (default): Make it possible to export config to JSON

2021-02-08

• T3295 (feature): Update Linux Kernel to v5.4.96 / 5.10.14

• T3292 (bug): RIPng: access-lists/prefix-list reference IPv4 and not IPv6 lists during verification

2021-02-07

• T3293 (bug): RPKI migration script errors out after CLI rewrite

2021-02-06

• T3285 (feature): Schedule reboots through systemd-shutdownd instead of atd

• T661 (feature): Show a warning if router going to reboot soon (due to “commit-confirm” command)

2021-02-05

• T2450 (feature): Rewrite “protocols vrf” tree in XML and Python

• T208 (feature): Ability to ignore default-route from dhcpcd per interface

2021-02-04

• T2834 (bug): Config rollback function is broken due lack access to the config.boot

2021-02-03

• T3239 (default): XML: override ‘defaultValue’ for mtu of certain interfaces; remove workarounds

• T2910 (feature): XML: generator should support override of variables

• T2873 (bug): “show nat destination translation address” doesn’t filter at all

• T627 (bug): IPSec configuration directive deletion fails, causes bad IPSec state on reboot.

2021-02-02

• T3018 (bug): Unclear behaviour when configuring vif and vif-s interfaces

• T3255 (default): Rewrite protocol RPKI to new XML/Python style

2021-02-01

• T3268 (feature): Add VRF support to VIF-S interfaces

• T3274 (default): ask_yes_no() doesn’t handle EOFError

2021-01-31

• T3276 (feature): Update Linux Kernel to v5.4.94 / 5.10.12

2021-01-30

• T3269 (bug): VIF-C interfaces don’t verify configuration

• T3240 (feature): Support per-interface DHCPv6 DUIDs

• T3037 (bug): Bgp afi ipv6-unicast capability dynamic bug

• T3273 (default): PPPoE static default-routes deleted on interface down when not added by interface up

2021-01-29

• T3262 (bug): DHCPv6 client runs when dhcpv6-options is configured without requesting an address or PD

• T3261 (bug): Does not possible to disable pppoe client interface.

• T3246 (bug): OSPFv3 router ID not configured in FRR

• T3126 (bug): unsuppress-map doesn’t work for BGP IPv4

2021-01-27

• T3257 (feature): tcpdump supporting complete protocol

• T3194 (bug): OSPF redistribution metric issue

• T3110 (bug): Broken pipe in show interfaces

• T3085 (feature): IPv6 BGP Neighbor Weight

• T651 (enhancment): Split CI’ed, VyOS-specific packages and other packages into separate repos

• T597 (enhancment): Code testing on sonarcloud.com

• T516 (default): Make Python / XML code development more testable

• T625 (default): IKEv1 lifetime negotiation in VyOS 1.2.0

• T613 (bug): Missing linux-kbuild

• T505 (bug): Hostapd cannot log

2021-01-26

• T3251 (bug): PPPoE client trying to authorize with the wrong username

• T2859 (bug): show nat source translation - Errors out

2021-01-25

• T3252 (bug): rpki: AttributeError: ‘Config’ object has no attribute ‘return__value’

• T3249 (feature): Support operation mode forwarding table output

2021-01-24

• T3230 (bug): RPKI can’t be deleted

• T3243 (feature): Update Linux Kernel to v5.4.92 / 5.10.10

2021-01-21

• T3237 (bug): DHCP Server Static-Mapping Validation Error

2021-01-18

• T2761 (feature): Extend “show vrrp” op-mode command with router priority

• T2679 (feature): VRRP with BFD Failure Detection

• T3212 (bug): SSH: configuration directory is not always created on boot

• T3231 (bug): “system option ctrl-alt-delete” has no effect

2021-01-17

• T3222 (bug): BGP dampening description

• T2944 (bug): NTP by default listen on any address/interface

• T3226 (bug): Repair bridge smoke test damage

• T2442 (enhancment): Move application of STP settings for bridge members from interfaces-bridge.py to Interface.add_to_bridge()

• T2381 (bug): OpenVPN: openvpn-option parsed/rendered improperly

2021-01-16

• T3215 (bug): show ipv6 route Broken on 1.4 Rolling

• T3172 (bug): Builds sometime after 2020-12-17 have broken routing after reboot

• T3157 (bug): salt-minion fails to start due to permission error accessing /root/.salt/minion.log

• T3167 (default): Recurring bugs in Intel NIC drivers

• T3151 (default): Decide on the final list of packages for 1.3

• T3137 (feature): Let VLAN aware bridge approach the behavior of professional equipment

• T3223 (feature): Update Linux Kernel to v5.4.89 / 5.10.7

2021-01-15

• T3210 (feature): ISIS three-way-handshake

• T3184 (feature): Add correct desctiptions for BGP neighbors

• T2850 (feature): Add BGP template for FRR

2021-01-14

• T3218 (feature): Replace Intel out-of-tree drivers with Linux Kernel stock drivers.

2021-01-13

• T3186 (bug): NAT: bug with “!” invert character

2021-01-12

• T3205 (bug): Does not possible to configure tunnel mode gre-bridge

2021-01-11

• T3208 (bug): Does not possible to change user password

• T3198 (bug): OSPF database filtering issue

• T3206 (bug): Unable to delete destination NAT rule

• T3193 (bug): DHCPv6 PD verification issues

• T3201 (bug): show log all Not Working for RADIUS Users

2021-01-10

• T3178 (feature): Migrate vyatta-op-quagga to vyos-1x

2021-01-09

• T2467 (bug): Restarting Flow Accounting Fails

• T3199 (feature): Update Linux Kernel to v5.4.88 / 5.10.6

2021-01-07

• T3192 (feature): login: radius: add support for IPv6 RADIUS servers

2021-01-05

• T3169 (enhancment): Reimplement smoke test of span (mirror)

• T3161 (default): Consider removing ConfigLoad.pm

• T1398 (default): Remove vyatta-config-migrate package

• T805 (enhancment): Drop config compatibility with Vyatta Core older than 6.5

2021-01-04

• T3185 (bug): [conf-mode] Wrong CompletionHelp for Tunnel local-ip

• T3152 (bug): wan-load-balance does not show connections

• T2601 (bug): pppoe-server: does not possible to disable ccp

2021-01-03

• T3180 (bug): DHCP server raises NameError

2021-01-02

• T3175 (bug): Dynamic DNS validations don’t reflect supported protocols in ddclient

• T2321 (feature): VRF support for SSH, NTP, SNMP service

• T3177 (bug): Rolling Release no longer reports VMware UUID

2021-01-01

• T3171 (feature): Add CLI option to enable RPS (Receive Packet Steering)

2020-12-31

• T3162 (bug): PPPoE server pado-delay issue

• T3160 (bug): PPPoE server called-sid option does not work

• T3168 (feature): Update Linux Kernel to v5.4.86

2020-12-29

• T3082 (bug): multi_to_list must distinguish between values and defaults

• T1466 (feature): Add EAPOL login support

2020-12-28

• T1732 (feature): Removing vyatta-webproxy module

• T2666 (feature): Packet Processing with eBPF and XDP

• T2581 (default): webproxy: implement proxy chaining

• T563 (feature): webproxy: migrate ‘service webproxy’ to get_config_dict()

2020-12-27

• T3150 (bug): When configuring QoS, the setting procedure of port mirroring is wrong

2020-12-23

• T3143 (bug): OpenVPN server: Push route does not work

• T3146 (feature): Upgrade FRR from 7.4 -> 7.5 version incl. new libyang

• T3145 (feature): Update Linux Kernel to v5.4.85

• T3147 (feature): Upgrade to SaltStack version 3002.2

2020-12-22

• T3142 (bug): OpenVPN op-command completion issue

• T2940 (feature): Update FRR to 7.4

• T2573 (bug): BFD opmode Commands are broken

• T2495 (feature): Add xml for ISIS [conf_mode]

• T1316 (feature): Support for IS-IS

2020-12-20

• T3131 (bug): Typo in ipsec preshared-secret help

• T3134 (bug): DHCPv6 DUID configuration node missing

• T3140 (feature): Relax “ethernet offload-options” CLI definition

2020-12-17

• T2810 (default): Docs for vpn anyconnect-server

• T2036 (default): Open Connect VPN Server () support

2020-12-14

• T3128 (bug): pppoe smoke test failed

• T3129 (feature): Update Linux Kernel to v5.4.83

• T3089 (feature): Migrate port mirroring to vyos-1x and support two-way traffic mirroring

• T3130 (feature): Replace vyos-netplug with upstream debian version

2020-12-13

• T3114 (bug): When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails

2020-12-11

• T3123 (bug): Configuration of vti interface impossible

2020-12-10

• T3117 (bug): OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217

2020-12-09

• T3122 (feature): Update Linux Kernel to v4.19.162

• T3121 (bug): get_config_dict() and key_mangling=(‘-‘, ‘_’) Broke PowerDNS dns_forwarding config file

2020-12-08

• T2562 (bug): VyOS can’t be used as a DHCP server for a DHCP relay

2020-12-07

• T3120 (bug): 1.3-rolling-202012070217 python error when deleting nat rule

• T3119 (feature): migrate “system ip” to get_config_dict() and provide smoketest

2020-12-05

• T2744 (bug): igmp-proxy issue: Address already in use

2020-12-04

• T3108 (bug): Section Config overlapped match with FRRConfig

• T3112 (feature): PPPoE IPv6: remove “enable” node

• T3100 (feature): Migrate DHCP/DHCPv6 server to get_config_dict()

2020-12-03

• T3105 (bug): static-host-mapping writing in one line

• T3107 (feature): Update Linux Kernel to v4.19.161

• T3104 (bug): LLDP Traceback error

2020-12-01

• T3094 (bug): Can not specify multiple deny ports in FW rule

• T3102 (bug): Destination NAT fails to commit

• T2713 (bug): VyOS must not change permissions on files in /config/auth

2020-11-30

• T3091 (feature): Add “tag” for static route

• T1207 (feature): DMVPN behind NAT

2020-11-29

• T2297 (feature): NTP add support for pool configuration

• T3095 (feature): Migrate dhcp-relay and dhcpv6-relay to get_config_dict()

2020-11-28

• T2890 (bug): NAT error adding translation address range

• T2868 (bug): Tcp-mss option in policy calls kernel-panic

• T3092 (feature): nat: migrate to get_config_dict()

2020-11-27

• T2715 (feature): Duplicate address detection option supporting ARP

• T2714 (feature): A collection of utilities supporting IPv6 or ipv4

• T3088 (feature): Migrate IGMP-Proxy over to get_config_dict() and add smoketests

2020-11-24

• T3087 (feature): Update Linux Kernel to v4.19.160

2020-11-23

• T2177 (default): Commit fails on adding disabled interface to bridge

• T3066 (bug): reboot in - Invalid time

• T2802 (bug): Tunnel interface does not apply EUI-64 IPv6 Address

• T2359 (bug): Adding IPIP6 tun interface to bridge [conf_mode] errors

• T2357 (bug): GRE-bridge conf_mode errors

• T2259 (feature): Support for bind vif-c interfaces into VRFs

• T2205 (bug): “set interface ethernet” fails on Hyper-V

• T2182 (bug): Failure to commit an IPv6 address on a tunnel interface

• T2155 (bug): Cannot set anything on Intel 82599ES 10-Gigabit SFI/SFP+

• T2153 (bug): traceroute circular reference

• T3081 (bug): get_config_dict() does not honor whitespaces in the CLI values field

• T3080 (bug): OpenVPN failing silently for a number of reasons in rolling post Nov/02

• T3074 (bug): openvpn site-to-site dosn’t work

• T2542 (bug): OpenVPN client tap interfaces not coming up

• T3084 (bug): wifi: TypeError on “show interfaces wireless info”

2020-11-21

• T3079 (bug): Fix the problem that VLAN 1 will be deleted in VLAN-aware bridge

• T3060 (bug): OpenVPN not working in vyos-1.3-rolling-20201101 and after

2020-11-20

• T3078 (feature): CLI cleanup: rename “system options” -> “system option”

• T2997 (feature): DHCP: disallow/do-not-request certain options when requesting IP address from server

• T3077 (feature): WireGuard: automatically create link-local IPv6 adresses

• T2550 (default): OpenVPN: IPv4 not working in client mode

• T3072 (feature): Migrate tunnel interfaces to new get_config_dict() approach

• T3065 (feature): Add “interfaces wirelessmodem” IPv6 support

• T3048 (feature): Drop static smp-affinity for a more dynamic way using tuned

2020-11-19

• T3067 (bug): Wireless interface can no longer be added to the bridge after bridge VLAN support

• T3075 (feature): Update Linux Kernel to v4.19.158

2020-11-16

• T3003 (enhancment): Extend smoketest framework to allow loading an arbitrary config file

2020-11-15

• T3069 (bug): openvpn - routed networks not available

• T3038 (feature): Supporting AZERTY keyboards

• T2993 (bug): op-mode: lldp: show lldp neighbors - AttributeError: ‘str’ object has no attribute ‘items’

• T2564 (enhancment): Extend VyOS to support appliance LCDs

2020-11-14

• T3041 (bug): Intel QAT: vyos-1.3-rolling-202011020217-amd64 kernel panic during configure

2020-11-13

• T3063 (feature): Add support for Huawei LTE Module ME909s-120

• T3059 (bug): L2TPv3 interface: Enforced to shutdown but no command to enable interface permanently

2020-11-12

• T3064 (feature): Update Linux Kernel to v4.19.157

2020-11-10

• T2103 (bug): Abnormal interface names if VIF present

2020-11-08

• T3050 (bug): Broken address/subnet validation on NAT configuration

2020-11-07

• T2914 (bug): OpenVPN: Fix for IPv4 remote-host hostname in client mode:

• T2653 (feature): “set interfaces” Python handler code improvements - next iteration

• T311 (feature): DHCP: set client-hostname via CLI

2020-11-06

• T3051 (bug): OpenVPN: multiple client routes do not work in server mode

• T3046 (bug): openvpn directory is not auto-created

• T3052 (feature): Update Linux firmware files to 20201022 version

• T2731 (bug): “show interfaces” returns invalid state when link is down

2020-11-05

• T3049 (feature): Update Linux Kernel to v4.19.155

• T2994 (feature): Migrate OpenVPN interfaces to get_config_dict() syntax

2020-11-03

• T3043 (feature): Wireless: Refactor CLI

• T3034 (feature): Add WiFi WPA 3 support

• T2967 (bug): Duplicate IPv6 BFD Peers Created

• T2483 (bug): DHCP most likely not restarting pdns_recursor

2020-11-02

• T3024 (bug): DHCPv6 PD configuration doesn’t really render an expected behavior

2020-11-01

• T3036 (feature): OpenVPN remote-address does not accept IPv6 address

• T3032 (feature): Ability to “set table” in the policy route-map

• T2193 (feature): Display disabled VRRP instances in a show vrrp output

2020-10-30

• T2790 (feature): Add ability to set ipv6 protocol route-map for OSPFv3

• T3033 (feature): Update Linux Kernel to v4.19.154

• T2969 (bug): OpenVPN: command_set on interface is not applied, if interface doesn’t come up in commit

2020-10-28

• T2631 (default): l2tp, sstp, pptp add option to disable radius accounting

• T2630 (feature): Allow Interface MTU over 9000

• T3027 (bug): Unable to update system Signature check FAILED

• T2995 (bug): Enhancements/bugfixes for vyos_dict_search()

• T2968 (feature): Add support for Intel Atom C2000 series QAT

2020-10-27

• T3026 (default): qemu: update script for deprecated ssh_host_port_min/max

• T2938 (feature): Adding remote Syslog RFC5424 compatibility

• T2924 (bug): Using ‘set src’ in a route-map invalidates it as part of a subsequent boot-up

• T2587 (bug): Cannot enable the interface when the MTU is set to less than 1280

• T2885 (default): configd: print commit errors to config session terminal

• T2808 (default): Add smoketest to ensure script consistency with config daemon

• T2582 (default): Script daemon to offload processing during commit

• T1721 (bug): Recursive Next Hop not updated for static routes

2020-10-26

• T3016 (feature): dhcp-server: use better constraint error message on invalid subnet

2020-10-24

• T3007 (default): HTTP-API should use config load script, not backend config load

• T2984 (bug): (igb, ixgbe) HW queues applied only for the first 2 interfaces

• T3009 (bug): vpn l2tp remoteaccess require option broken

• T3010 (bug): ttl option of gre-bridge

• T3005 (bug): Intel: update out-of-tree drivers, i40e driver warning

• T3004 (feature): ConfigSession should (optionally) use config load script

• T2723 (feature): Support tcptraceroute

2020-10-22

• T2978 (bug): IPoE service does not work on shared mode.

• T2906 (bug): OpenVPN: tls-auth missing key direction

2020-10-21

• T2828 (bug): BGP conf_mode error enforce-first-as

• T2749 (bug): Setting ethx configuration issue.

• T2138 (default): Can’t load archived configs as they are gzipped

2020-10-20

• T2987 (bug): VxLAN not working properly after upgrading to latest October build (also with newinstallation)

• T2989 (default): MPLS documentation expansion

2020-10-19

• T1588 (bug): VRRP failed to start if any of its interaces not exist

• T1385 (feature): Allow bonding interfaces to have pseudo-ethernet interfaces

• T3000 (bug): Mismatch between “prefix-length” and “preference” in dhcp6-server syntax

• T2992 (feature): Automatically verify sha256 checksum on ISO download

• T752 (feature): Disable IPv4 forwarding on specific interface only

2020-10-18

• T2965 (feature): Brief BFD Peer Info

• T2907 (feature): OpenVPN: Option to disable encryption

• T2985 (feature): Add glue code to create bridge interface on demand

2020-10-17

• T2980 (bug): FRR bfdd crash due to invalid length

• T2991 (feature): Update WireGuard to 1.0.20200908

• T2990 (feature): Update Linux Kernel to v4.19.152

• T2981 (feature): MPLS LDP neighbor session clear capability

• T2792 (default): Failed to run sudo make qemu with vyos-build container due to the change of packer

2020-10-14

• T2972 (bug): PPPoE server rate limiter allows max 65535 kbps to be set

2020-10-13

• T2976 (bug): Client IP pool does not work for PPPoE local users

2020-10-12

• T2951 (bug): monitor nat not working

• T2782 (bug): Changing timezone, does not restart rsyslog

2020-10-11

• T2973 (bug): tftp-server cannot listen on IPv6 address

2020-10-08

• T2891 (feature): Support to change ring-buffers from CLI

2020-10-06

• T2957 (bug): show openvpn not returning anything

2020-10-05

• T2963 (bug): Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is

2020-10-04

• T2953 (feature): Accel-PPP services CLI config cleanup (SSTP, L2TP, PPPoE, IPoE)

• T2829 (bug): PPPoE server: mppe setting is implemented as node instead of leafNode

• T2960 (feature): sstp: migrate to get_config_dict()

2020-10-03

• T2956 (feature): Add support for list of defaultValues

• T2955 (feature): Update Linux Kernel to v4.19.149

2020-10-02

• T2952 (bug): configd: timeout breaks synchronization of messages, causing freeze

2020-10-01

• T2945 (bug): Interface removed from BRIDGE on setting changed

• T2948 (bug): NAT: OSError when configuring translation address range

• T2936 (feature): Migrate PPPoE server to get_config_dict() do reduce boilerplate code

2020-09-30

• T2939 (bug): Wireguard Remove Peer Fails

• T2932 (bug): The second QAT device does not start

2020-09-29

• T2919 (feature): PPPoE server: Called-Station-Id attribute

• T2918 (feature): Accounting interim jitter for pppoe, l2tp, pptp, ipoe

• T2917 (feature): PPPoE server: Preallocate NAS-Port-Id

• T2937 (feature): Update Linux Kernel to v4.19.148

2020-09-27

• T2930 (feature): Support configuration of MAC address for VXLAN and GENEVE tunnel

2020-09-26

• T2902 (bug): “add system image” fails when appending XX to image name

• T2856 (bug): equuleus: show version all throws broken pipe exception on abort

• T2482 (enhancment): Update PowerDNS recursor to 4.3.1 for CVE-2020-10995

• T2929 (bug): Upgrading from 1.2 (crux) to 1.3 rolling causes vyos.configtree.ConfigTreeError for RADIUS settings

• T2928 (bug): MTU less then 1280 bytes and IPv6 will raise FileNotFoundError

• T2926 (bug): snmp.py missing an import

• T2912 (feature): When setting MTU check for hardware maximum supported MTU size

2020-09-25

• T2915 (bug): Lost “proxy-arp-pvlan” option for vlan

• T2925 (feature): Update Linux Kernel to v4.19.147

• T2921 (feature): Migrate “service dns forwarding” to get_config_dict() for ease of source maintenance

2020-09-24

• T2896 (bug): set ip route 0.0.0.0/0 dhcp-interface eth0

• T2923 (bug): Configuring DHCPv6-PD without a interface to delegate to raises TypeError

2020-09-23

• T2846 (bug): ip route doesn’t show longer-prefixes

2020-09-20

• T2904 (feature): 802.1ad / Q-in-Q ethertype default not utilized

• T2905 (feature): Sync CLI nodes between PPPoE and WWAN interface

• T2903 (feature): Q-in-Q (802.1.ad) ethertype should be defined explicitly and not via its raw value

2020-09-19

• T2894 (bug): bond: lacp: member interfaces get removed once bond interface has vlans configured

• T2901 (feature): Update Linux Kernel to v4.19.146

• T2900 (bug): DNS forwarding: invalid warning is shown for “system name-server” or “system name-servers-dhcp” even if present

2020-09-18

• T945 (bug): Unable to change configuration after changing it from script (vbash + script-template)

2020-09-16

• T2886 (bug): RADIUS authentication broken only returns operator level

• T2887 (bug): WiFi ht40+ channel width is not set in hostaptd.conf

2020-09-15

• T2515 (bug): Ethernet interface is automatically disabled when removing it from bond

2020-09-14

• T2872 (bug): “Show log” for nat and openvpn got inter-mixed

• T2301 (bug): Delete PBR vyatta_policy_ref

• T2880 (feature): Update Linux Kernel to v4.19.145

• T2879 (feature): Cleanup 4.19.144 kernel configuration

2020-09-13

• T2878 (feature): LACP / bonding: new op-mode command: show interfaces bonding bond0 detail

• T2858 (feature): Rewrite dynamic dns client to get_config_dict()

• T2857 (feature): Cleanup Intel QAT configuration script

• T2841 (bug): “monitor bandwidth-test initiate” does not accept IPv6 address as option

• T2877 (feature): LACP / bonding: support configuration of minimum number of links

2020-09-12

• T2863 (default): Wireguard IPv6 Link-Local Addresses Are Not Unique

• T2876 (feature): Update Linux Kernel to v4.19.144

2020-09-10

• T2870 (feature): Update Linux Kernel to v5.8.8

2020-09-09

• T2728 (bug): Protocol option ignored for IPSec peers in transport mode

• T1934 (default): Change default hostname when deploy from OVA without params.

• T1953 (bug): DDNS service name validation rejects valid service names

2020-09-07

• T1729 (default): PIM (Protocol Independent Multicast) implementation

2020-09-06

• T2860 (bug): Update Accel-PPP to fix l2tp CVE

2020-09-02

• T2833 (bug): vyos 1.3-rolling-202008200357 RIP outgoing update filter list no longer operational

• T2849 (bug): vyos.xml.defaults should return a list on multi nodes, by default

2020-08-31

• T2636 (bug): get_config_dict() shall always return a list on <multi/> nodes

2020-08-30

• T2843 (feature): Upgrade Linux Kernel to 5.8 series

• T2814 (default): kernel 5.1+ : NAT : module nft_chain_nat_ipv4 renamed

• T2839 (feature): Upgrade WireGuard user-space tools and Kernel module

• T2842 (feature): Replace custom “wireguard, wireguard-tools” package with debian-backports version

• T1205 (bug): module pcspkr missing

2020-08-29

• T2836 (default): show system integrity broken in 1.3

2020-08-28

• T2126 (bug): show vpn ipsec sa IPSec - Process NOT Running

• T2813 (bug): NAT: possible to commit illegal source nat without translation

• T1463 (bug): Missing command show ip bgp scan appears in command completion

2020-08-27

• T2832 (feature): Migrate vyos-smoketest content into vyos-1x

2020-08-26

• T2830 (default): Migrate “service https” to use get_config_dict()

• T2831 (feature): Update Linux Kernel to v4.19.142

2020-08-25

• T2826 (bug): frr: frr python lib error in replace_section

2020-08-24

• T2423 (bug): Loadkey scp ssh key errors

2020-08-23

• T2811 (bug): Does not possible to delete vpn anyconnect

• T2823 (bug): VXLAN has state A/D after configuration

• T2812 (default): Add basic smoketest for anyconnect

2020-08-22

• T2822 (feature): Update Linux Kernel to v4.19.141

• T2821 (feature): Support DHCPv6-PD without “address dhcpv6”

• T2677 (feature): Proposal for clearer DHCPv6-PD configuration options

2020-08-20

• T2209 (bug): Documentation has reference to the old ‘user x level admin’ option

• T1665 (default): prefix-list and prefix-list6 rules incorrectly accept a host address where prefix is required

• T2815 (default): Move certbot config directory under /config/auth

2020-08-19

• T2794 (bug): op-mode: lldp: “show lldp neighbors” IndexError: list index out of range

• T2791 (feature): “monitor traceroute” has no explicit IPv4/IPv6 support

• T1515 (bug): FRR ospf6d crashes when performing: “show ipv6 ospfv3 database”

2020-08-16

• T2277 (bug): dhclient-script-vyos does not support VRFs

• T2090 (default): Deleting ‘service salt-minion’ causes python TypeError

2020-08-15

• T2797 (feature): Update Linux Kernel to v4.19.139

• T2796 (bug): PPPoE-Server: listen interface is mandatory but validation check is missing

2020-08-14

• T2795 (bug): console server fails to commit

2020-08-12

• T2786 (bug): OSPF Interface Cost

• T2325 (bug): NHRP op-mode errors

• T2227 (feature): MPLS documentation

• T2767 (bug): The interface cannot be disabled for network enabled configuration

• T2316 (bug): DHCP-server op-mode errors

2020-08-11

• T2779 (bug): LLDP: “show lldp neighbors interface” does not yield any result

• T2379 (bug): But when I get DHCPv6 address for interface deletion, script execution error occurs

• T2784 (default): Remove unused arg from host_name.py functions verify and get_config

2020-08-10

• T2780 (feature): Update Linux Kernel to v4.19.138

2020-08-08

• T2716 (bug): Shaper-HFSC shapes but does not control latency correctly

• T2497 (default): Cache config string during commit

• T2501 (bug): Cannot recover from failed boot config load

• T1974 (feature): Allow route-map to set administrative distance

• T1949 (bug): Multihop IPv6 BFD is unconfigurable

2020-08-04

• T2758 (bug): router-advert: ‘infinity’ is not a valid integer number

• T2637 (bug): Vlan is not removed from the system

• T1194 (bug): cronjob is being setup even if not saved

• T1287 (bug): No DHCPv6 leases reported for “show dhcpv6 client leases”

2020-08-03

• T2241 (default): Changing settings on an interface causes it to fall out of bridge

• T2757 (bug): “show system image version” contains additional new-line character breaking output

• T1826 (bug): Misleading message on “reboot at” command

• T1511 (default): Rewrite ethernet setup scripts to python

• T1600 (default): Convert ‘ping’ operation from vyatta-op to new syntax

• T1486 (bug): Unknown LLDP version reported to peers

• T1414 (enhancment): equuleus: buster: 10-unmountfs.chroot fail under apply

• T1076 (bug): SSH: make configuration (sshd_config) volatile and store it to /run

• T770 (bug): Bonded interfaces get updated with incorrect hw-id in config.

• T2724 (feature): Support for IPv6 Toolset

• T2323 (bug): LLDP: “show lldp neighbors detail” returns warnings when service is not configured

• T1754 (bug): DHCPv6 client is impossible to restart

2020-08-02

• T2756 (feature): Accel-PPP: make RADIUS accounting port configurable

2020-08-01

• T2752 (bug): Exception when configuring unavailable ethernet interface

• T2751 (feature): Update Linux Kernel to v4.19.136

• T2753 (feature): Rewrite “add system image” op mode commands in XML

• T2690 (feature): Add VRF support to the add system image command

2020-07-30

• T2746 (feature): IPv6 link-local addresses not configured

• T2678 (bug): High RAM usage on SSH logins with lots of IPv6 routes in the routing table.

• T2701 (bug): vpn ipsec pfs enable doesn’t work with IKE groups

• T2745 (feature): router-advert: migrate to get_config_dict()

2020-07-29

• T2743 (feature): WireGuard: move key migration from config script to migration script

• T1241 (bug): Remove of policy route throws CLI error

• T2742 (feature): mDNS repeater: migrate to get_config_dict()

2020-07-28

• T1117 (feature): ‘show ipv6 bgp route-map’ missing

• T928 (feature): pimd support

2020-07-27

• T2729 (feature): Pseudo-ethernet replace fail message.

• T1249 (feature): multiply PBR rules can set to a single interface

• T1956 (feature): PPPoE server: support PADO-delay

• T1295 (feature): FRR: update documentation

• T1222 (bug): OSPF routing problem - route looping

• T1158 (bug): Route-Map configuration dropped updating rc11 to epa2

• T1130 (bug): Deleting BGP communities from prefix does not work

• T1086 (bug): Configs not saving

• T2067 (feature): pppoe-server: Add possibility set multiple service-name

2020-07-26

• T2734 (feature): WireGuard: fwmark CLI definition is inconsistent

• T2733 (feature): Support MTU configuration on pseudo ethernet devices

• T2644 (default): Disabling Bonded Interfaces Broken

• T2476 (bug): Bond member description change leads to network outage

• T2443 (feature): NHRP: Add debugging information to syslog

• T2021 (bug): OSPFv3 doesn’t support decimal area syntax

• T1901 (bug): Semicolon in values is interpreted as a part of the shell command by validators

• T2000 (bug): strongSwan does not install routes to table 220 in certain cases

• T2091 (bug): swanctl.conf file is not generated properly is more than one IPsec profile is used

• T1983 (feature): Expose route-map when BGP routes are programmed in to FIB

• T1973 (feature): Allow route-map to match on BGP local preference value

• T1853 (bug): wireguard - disable peer doesn’t work

• T832 (bug): show monitoring protocols bgp doesn’t work with frr

• T1985 (feature): pppoe: Enable ipv6 modules without configured ipv6 pools

2020-07-25

• T2730 (feature): Update Linux Kernel to v4.19.134

• T2106 (bug): Wrong interface states after reboot

• T1507 (default): cli: logical redundancy with boolean type

2020-07-24

• T2097 (bug): Problems when using <path> as completion helper in op-mode

• T2092 (bug): dhcp-server rfc3442 static route sould add default route

• T1817 (bug): BGP next-hop-self not working.

• T1462 (bug): Upgrade path errors 1.1.8 to 1.2.1-S2

• T1372 (bug): Diff functionality behaves incorrectly in some cases

• T2073 (feature): ipoe-server: reset op-mode command for sessions

• T1715 (bug): System DNS Server Order Incorrect

2020-07-23

• T2673 (bug): After the bridge is configured with Mac, bridge is automatically disabled

• T2626 (bug): Changing pseudo-ethernet mode, throws CLI error

• T2608 (bug): delete pseudo-ethernet failed (another error type)

• T2527 (bug): bonding: the last slave interface is not deleted

• T2358 (bug): ip6ip6 bridge conf_mode errors

• T2346 (bug): Setting Hostname Returns Error

• T2330 (bug): Vpn op-mode syntax

• T2188 (default): NTP op-mode commands don’t work

2020-07-22

• T2718 (bug): ntp.conf updated incorrectly.

• T2658 (bug): Interface description comment display error

• T2643 (bug): Show Interface Command Issues

• T2725 (bug): Recent 1.3 rolling (since May) fail to load config if user has no password - KeyError: ‘password_encrypted’

• T2707 (default): Allow alternative initialization data for Config

2020-07-20

• T2709 (bug): Destination NAT translation port without address fails to commit

• T2519 (bug): Broadcast address does not add automatically

2020-07-19

• T2708 (bug): “show flow-accounting” should not display script’s “usage” help

• T2592 (default): dhcp-relay discarding packets on valid interfaces

• T2712 (feature): udp-broadcast-relay: serivce no longer starts

• T2706 (feature): Support NDP protocol monitoring

2020-07-18

• T2704 (bug): connect/disconnect Missing newline in op-mode tab completion helper

• T2689 (feature): Add helper functions to query changes between session and effective configs

• T2585 (bug): Unable to access the Internet after opening PPPoE on-demand dialing

2020-07-15

• T2675 (bug): DNS service failed to start

• T2596 (feature): Allow specifying source IP for ‘add system image’

2020-07-12

• T1575 (default): show snmp mib ifmib crashes with IndexError

• T2696 (bug): Some bugfixes of vyatta-wanloadbalance

2020-07-11

• T2687 (feature): SNMP: change logic on v3 password encryption

• T2693 (bug): Dhcp6c cannot be restarted after PPPoE link is reset

2020-07-08

• T2692 (bug): Evaluate Setting Default Hash Policy to L3+L4

• T2646 (bug): Sysctl for IPv4 ECMP Hash Policy Not Set

2020-07-07

• T2691 (bug): Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch

• T2389 (bug): BGP community-list unknown command

• T2686 (bug): FRR: BGP: large-community configuration is not applied properly after upgrading FRR to 7.3.x series

2020-07-06

• T2680 (bug): Dhcp6c service can not recover when it fails.

2020-07-05

• T2684 (feature): Update Linux Kernel to v4.19.131

• T2685 (feature): Update Accel-PPP to fix SSTP client issues

• T2681 (bug): PPPoE stops negotiating IPv6

2020-07-04

• T2682 (bug): VRF aware services - connection no longer possible after system reboot

2020-07-03

• T2670 (default): Remove dependency on show_config from get_config_dict

• T2676 (feature): NTP: migrate to get_config_dict() implementation

2020-07-02

• T2668 (default): get_config_dict: add get_first_key arg to utility function get_sub_dict

2020-07-01

• T2662 (default): get_config_dict includes node name as key only for tag and leaf nodes

• T2667 (feature): get_config_dict: Use utility function for non-empty path argument

2020-06-28

• T2660 (bug): XML: Python default dictionary does not obey underscore (_) when flat is False

2020-06-27

• T2656 (bug): XML: Python default dictionary returns wrong dictionary level(s)

2020-06-26

• T2642 (bug): sshd Broken on Latest Rolling Release

• T2588 (default): Add support for default values to the interface-definition format

• T2622 (bug): An issue with config migration (interface pseudo ethernet)

• T2057 (feature): Generalised Interface configuration

• T2625 (feature): Provide generic Library for package builds

2020-06-25

• T2487 (bug): VRRP does not display info when group disabled

• T2329 (bug): Show remote config openvpn

• T2165 (bug): When trying to add route to ripng it complains that ip address should be IPv4 format.

• T2159 (default): webproxy log read from wrong file

• T2101 (feature): Fix VXLAN config option parsing

• T2062 (bug): Wrong dhcp-server static route subnet bytes

• T1986 (bug): Python configuration manipulation library leaks open files

• T1762 (bug): VLAN interface configuration fails after internal representation of edit level was switched from a string to a list

• T1538 (bug): Update conntrack-sync packages to fix VRRP issues

• T1808 (feature): add package nftables

2020-06-24

• T2634 (feature): remove autogeneration of interface “ip section” from vyatta-cfg-system

• T2633 (bug): Error with arp_accept on tun interface

• T2595 (feature): Update Linux Kernel to v4.19.128

• T1938 (bug): syslog doesn’t start automatically

2020-06-23

• T2632 (bug): WireGuard: Can not use only one preshared-key for one peer

• T1829 (bug): Install Image script does not respect size of partition greater than 2G but less than disk size

• T2635 (feature): SSH: migrate to get_config_dict()

2020-06-22

• T2486 (bug): DNS records set via ‘system static-host-mapping’ return NXDOMAIN from ‘service dns forwarding’ after a request to a forwarded zone

• T2463 (bug): DHCP-received nameserver not added to vyos-hostsd

• T2534 (bug): pdns-recursor override.conf error

• T2054 (bug): Changing “system name-server” doesn’t update dns forwarding config, neither does “restart dns forwarding”

• T2225 (default): PIM/IGMP documentation

2020-06-21

• T2624 (feature): Serial Console: fix migration script for configured powersave and no console

• T2610 (bug): default-lifetime is not reflected in the RA message

• T2299 (feature): login radius-server priority

• T1739 (bug): Serial interface seems not to be deleted properly

• T480 (bug): Error if no serial interface is present (/dev/ttyS0: not a tty)

2020-06-20

• T2621 (bug): show interfaces repeats interface description if it is longer then an arbitrary number of characters

• T2618 (default): Conversion from 1.2 to 1.3 lost RADVD prefix autonomous-flag setting

2020-06-19

• T2589 (bug): delete pseudo-ethernet failed

• T2490 (feature): Add serial (rs232) to ssh bridge service

2020-06-18

• T2614 (default): Add an option to mangle dict keys to vyos.config.get_config_dict()

• T2026 (default): Make cli-shell-api correctly exit with non-zero code on failures

• T1868 (default): Add opportunity to get current values from API

2020-06-17

• T2478 (feature): login radius: use NAS-IP-Address if defined source address

• T2141 (bug): Static ARP is not applied on boot

• T2609 (bug): router-advert: radvd does not start when lifetime is improperly configured

• T1720 (feature): support for more ‘show ip route’ commands

2020-06-16

• T2604 (default): Remove use of is_tag in system-syslog.py

• T2605 (bug): SNMP service is not disabled by default

• T2568 (bug): Add some missing checks in config

• T2156 (default): PIM op-mode commands

2020-06-15

• T2600 (bug): RADIUS system login configuration rendered wrongly

• T2599 (bug): “show interfaces” does not list VIF interfaces in ascending order

• T2591 (bug): show command has wrong interfaces ordering

• T2576 (bug): “show interfaces” does not return VTI

2020-06-14

• T2354 (bug): Wireless conf_mode errors

• T2593 (bug): source NAT translation port can not be set when translation address is set to masquerade

• T2594 (default): Missing firmware for iwlwifi

2020-06-11

• T2578 (bug): ipaddrcheck unaware of /31 host addresses - can no longer assign /31 mask to interface addresses

• T2571 (bug): NAT destination port with ! results in error

• T2570 (feature): Drop support for “system console device <device> modem”

• T2586 (bug): WWAN default route is not installed into VRF

• T2561 (feature): Drop support for “system console netconsole”

• T2569 (feature): Migrate “set system console” to XML and Python representation

2020-06-10

• T2575 (bug): pppoe-server: does not possibly assign IP address

• T2565 (bug): Does not possible connect to l2tp server with radius auth

• T2553 (bug): Regression: set interface ethN vif-s nnnn does not commit on 1.3-rolling-202006050621

2020-06-08

• T2559 (feature): Add operational mode command to retrieve hardware sensor data

2020-06-07

• T2529 (feature): WWAN: migrate from ttyUSB device to new device in /dev/serial/by-bus

• T2560 (feature): New op-mode command to display information about USB interfaces

2020-06-05

• T2548 (bug): Interfaces allowing inappropriate network addresses to be assigned

• T1958 (default): Include only firmware we actually need

2020-06-04

• T2514 (enhancment): “mac” setting for bond members

2020-06-02

• T2129 (feature): XML schema: tagNode not allowed on first level in new XML op-mode definition

• T2545 (feature): Show physical device offloading capabilities for specified ethernet interface

• T2544 (feature): Enable Kernel KONFIG_KALLSYMS

• T2543 (feature): Kernel: always build perf binary but ship as additional deb package to not bloat the image

• T1096 (bug): BGP process memory leak

2020-06-01

• T2535 (feature): Update Intel QAT drivers to 1.7.l.4.9.0-00008

• T2537 (feature): Migrate “show log dns” from vyatta-op to vyos-1x

• T2536 (bug): “show log dns forwarding” still refers to dnsmasq

• T2538 (feature): Update Intel NIC drivers to recent release (preparation for Kernel >=5.4)

• T2526 (feature): Wake-On-Lan CLI implementation

2020-05-31

• T2532 (feature): VRF aware OpenVPN

2020-05-30

• T2388 (feature): template rendering should create folder and set permission

• T2531 (feature): Update Linux Kernel to v4.19.125

• T2530 (bug): Error creating VRF with a name of exactly 16 characters

• T2460 (default): Migrate vyatta-nat-translations.pl to Python

2020-05-29

• T2528 (bug): “update dns dynamic” throws FileNotFoundError excepton

2020-05-28

• T1291 (default): Under certain conditions the VTI will stay forever down

2020-05-27

• T2395 (feature): HTTP API move to flask/flask-restx as microframework

• T1121 (bug): Can’t search for prefixes by community: Community malformed: AA:NN

2020-05-26

• T2520 (bug): Show conntrack fail

• T2502 (bug): PPPoE default route not installed for IPv6 when “default-route auto”

• T2458 (feature): Update FRR to 7.3.1

• T2506 (feature): DHCPv6-PD add prefix hint CLI option

2020-05-25

• T2391 (bug): pppoe-server session-control does not work

• T2269 (feature): SSTP specify tunnels names

• T1137 (bug): ‘sh ip bgp sum’ being truncated

2020-05-22

• T2491 (feature): MACsec: create CLI for replay protection

• T2489 (feature): Add MACsec interfaces to “show interfaces” output

• T2201 (feature): Rewrite protocol BGP [op-mode] to new XML/Python style

• T2492 (feature): Do not set encrypted user password when it is not changed

• T2496 (feature): Set default to new syntax for config file component versions

• T2493 (feature): Update Linux Kernel to v4.19.124

• T2380 (bug): After PPPoE 0 is restarted, the default static route is lost

2020-05-21

• T1876 (bug): IPSec VTI tunnels are deleted after rekey and dangling around as A/D

• T2488 (feature): Remove logfile for dialup interfaces like pppoe and wwan

• T2475 (bug): linting

• T1820 (bug): VRRP transition scripts for sync-groups are not supported in VyOS (anymore)

• T2364 (default): Add CLI command for mroute

• T2023 (feature): Add support for 802.1ae MACsec

2020-05-20

• T2480 (bug): NAT: after rewrite commit tells that dnat IP address is not locally connected

• T103 (bug): DHCP server prepends shared network name to hostnames

2020-05-19

• T2481 (feature): WireGuard: support tunnel via IPv6 underlay

• T421 (bug): VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support

• T815 (feature): Add DHCPv6 prefix-delegation support

2020-05-17

• T2471 (feature): PPPoE server: always add AdvAutonomousFlag when IPv6 is configured

• T2409 (default): At boot, effective config should not be equal to current config

2020-05-16

• T2466 (bug): live-build encounters apt dependency problem when building with local packages

• T2470 (feature): Update to PowerDNS recursor 4.3

• T2469 (feature): Update Linux Kernel to v4.19.123

• T2198 (default): Rewrite NAT in new XML/Python style

2020-05-15

• T2449 (bug): ‘ipv6 address autoconf’ and ‘address dhcpv6’ don’t work because interfaces have accept_ra=1 (they should have accept_ra=2 when forwarding=1)

2020-05-14

• T2456 (bug): netflow source-ip cannot be configured

2020-05-13

• T2435 (bug): Pseudo-ethernet Interfaces Broken

• T2294 (bug): ipoe-server broken (jinja2 template issue)

2020-05-12

• T2454 (feature): Update Linux Kernel to v4.19.122

• T2392 (bug): SSTP with ipv6

2020-05-10

• T2445 (bug): VRF route leaking for ipv4 not working

• T2372 (bug): VLAN: error on commit if main interface is disabled

• T2439 (bug): Configuration dependency problem, unable to load complex configuration after reboot

2020-05-09

• T2427 (default): Interface addressing broken since fix for T2372 was merged

• T2438 (default): isc-dhcp-server(6).service reports startup success immediately even if dhcpd fails to start up

• T2432 (default): dhcpd: Can’t create new lease file: Permission denied

• T2367 (default): Flush addresses from bridge members

2020-05-08

• T2441 (bug): TZ validator has a parse error

• T2429 (bug): Vyos cannot apply VLAN sub interface to bridge

2020-05-06

• T2402 (bug): Live ISO should warn when configuring that changes won’t persist

2020-05-05

• T1899 (bug): Unionfs metadata folder is copied to the active configuration directory

2020-05-04

• T2412 (bug): ping flood does not work

• T701 (bug): LTE interface dosen’t come up

• T951 (bug): command ‘isolate-stations true/false’ does not make any changes in the hostapd.conf

2020-05-03

• T2420 (feature): Update Linux Kernel to v4.19.120

• T2406 (feature): DHCPv6 CLI improvements

• T2421 (feature): Update WireGuard to Debian release 1.0.20200429-2_bpo10+1

2020-05-02

• T2414 (feature): Improve runtime from Python numeric validator

• T2413 (feature): Update Linux Kernel to v4.19.119

2020-05-01

• T2411 (feature): op-mode: make “monitor traceroute” VRF aware

• T2347 (bug): During commit, any script output directed to stdout will contain path

• T2239 (default): build-vmware-image script ignores the predefined file path, uses the environment variable unconditionally.

2020-04-29

• T2399 (bug): op-mode “dhcp client leases” does not return leases

• T2398 (bug): op-mode “dhcp client leases interface” completion helper misses interfaces

• T2394 (feature): dhcpv6 client does not start

• T2393 (feature): dhclient: migrate from SysVinit to systemd

• T2268 (bug): DHCPv6 is broken

2020-04-28

• T1227 (bug): rip PW can’t be set at interface config

2020-04-27

• T2373 (feature): Required auth options for pppoe-server

• T1381 (feature): Enable DHCP option 121 processing

• T2010 (bug): Reboot at reports wrong time or missing timezone

2020-04-26

• T2386 (bug): salt: upgrade to 2019.2 packages

• T2385 (bug): salt-minion: improve completion helpers

• T2384 (bug): salt-minion: log to syslog and remove custom logging option

• T2383 (feature): Update Linux Kernel to v4.19.118

• T2382 (bug): salt-minion: Throws KeyError on commit

• T2350 (bug): Interface geneve conf-mode error

2020-04-25

• T2304 (feature): “system login” add RADIUS VRF support

• T1842 (bug): Equuleus: “reboot at 04:00” command not working

2020-04-24

• T2375 (feature): WireGuard: throw exception if address and port are not given as both are mandatory

• T2348 (bug): On IPv6 address distribution and DHCPv6 bugs

2020-04-23

• T2369 (feature): VRF: can not leak interface route from default VRf to any other VRF

• T2368 (bug): VRF: missing completion helper when leaking to default table

• T2374 (bug): Tunnel interface can not be disabled

• T2362 (default): IPv6 link-local addresses missing due to EUI64 address code, causing router-advert not to work

• T2345 (default): IPv6 router-advert not working

2020-04-22

• T2361 (bug): Unable to delete VLAN vif interface

• T2339 (bug): OpenVPN: IPv4 no longer working after adding IPv6 support

• T2331 (bug): VRRP op-mode errors

• T2320 (bug): Wireguard creates non-existing interfaces in [op-mode].

• T2096 (feature): Provide “generate” and “show” commands via the http API

• T2351 (feature): Cleanup PPTP server implementation and CLI commands

2020-04-21

• T2341 (bug): Pseudo-ethernet Interfaces Not Loaded on Boot

• T2270 (bug): using load with scp/sftp and a username and password does not work

• T2255 (bug): DNS forwarding op-mode error

• T1907 (bug): Traceback on a non-existent interface.

• T2204 (feature): Support tunnel source-interface

2020-04-20

• T2335 (bug): Unable to assign IPv6 from ISP

• T2317 (bug): l2tp overwriting ipsec config files

• T2292 (bug): Ensure graceful shutdown of vyos-http-api

• T2344 (bug): PPPoE server client static IP assignment silently fails

2020-04-19

• T2337 (default): hw-id gone missing from interfaces after upgrade to 1.3-rolling-202004191028

• T2340 (feature): Remove informational “sg” messages from syslog

• T2338 (bug): Can’t delete static IPv6 route on vrf

• T2336 (bug): OpenVPN service fails to start

• T2308 (default): openvpn op-mode scripts broken after migrating to systemd service

• T2185 (default): Start daemons with systemd units instead of with start-stop-daemon

2020-04-18

• T2318 (bug): dns-forwarding migrationscript broken

• T2319 (feature): Update Linux Kernel to v4.19.116

• T2314 (feature): Cleanup PPPoE server implementation and CLI commands

• T2313 (bug): Accel-PPP / PPPoEserver raises “Floating point exception” when not all limits are defined

• T2312 (feature): Use LED modules to enable more visible feedback on VyOS hardware chassis

• T2306 (feature): Add new cipher suites to the WiFi configuration

• T2286 (default): IPoE server vulnerability

• T2224 (feature): Update Linux Kernel to v4.19.114

• T2110 (feature): RADIUS: supply include file for radius config to have a uniform CLI

• T1874 (bug): FRR crashing triggered by RPKI

• T2324 (feature): Cleanup IPoE server implementation and CLI commands

2020-04-17

• T2275 (bug): flow-accounting broken in rolling

• T2256 (feature): Accel-ppp op-mode syntax

2020-04-16

• T2295 (bug): Passwords with Special Characters Broken

• T2305 (feature): Add release name to “show version” command

• T2235 (default): OpenVPN server client IP doesn’t reserve that IP in the pool

• T149 (feature): IPv6 support in OpenVPN tunnel

2020-04-15

• T2293 (bug): OpenVPN: UnboundLocalError after merging server_network PullRequest

• T2298 (bug): Errors PDNS with name-server set

2020-04-14

• T2213 (bug): vyos-1x: WiFi mode ieee80211ac should also activate ieee80211n

2020-04-13

• T2283 (default): openvpn not starting: ccd path in template not moved to /run/openvpn/ccd

• T2236 (bug): DMVPN broken after tunnel rewrite to XML/Python

• T2284 (default): Upgrade ddclient to 3.9.1 which also brings systemd files

• T2282 (feature): Clarify hw-id in ethernet and wireless interface nodes

• T611 (feature): Static route syntax should reflect ip command routing capabilities, if possible.

2020-04-12

• T2273 (default): OpenVPN no longer starts in latest rolling, migrate to systemd

• T2263 (feature): Reset feature for SSTP sessions

• T2262 (bug): Broken reset commands for pptp and l2tp

• T2059 (default): Set source-validation on bond vif don’t work

• T2276 (default): PPPoE server vulnerability

• T1490 (bug): BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1

• T1828 (bug): Missing completion helper for “set system syslog host 192.0.2.1 facility all protocol”

• T2031 (bug): pseudo-ethernet link interface can not be changed

2020-04-11

• T2264 (feature): l2tp: cleanup CLI definition

• T2233 (bug): Typos in wlanX.cfg

• T2238 (bug): After re-writing list_interfaces.py to use Interfaces() pseudo-ethernet is missing

2020-04-10

• T2265 (feature): DHCP to be an attribute of the class instead of a inheritance

• T2261 (bug): “client-config-dir” not being set for openvpn in 1.3-rolling-202004090909

• T2248 (bug): PPPoE Broken in Latest 1.3 Rolling (1.3-rolling-202004070629)

• T1629 (bug): IP addresses configured on vif-s interfaces are not added to the system

• T2266 (default): openvpn bridged client-server doesn’t work (validation error)

• T2253 (default): Fix use of cmd in merge config and remote function helpers

2020-04-09

• T2260 (feature): vxlan, pseudo-ethernet: convert link nodes to source-interface

• T2252 (bug): HTTP API add system image can return ‘504 Gateway Time-out’

• T2172 (feature): Enable conf VXLAN without remote address

• T2237 (bug): l2tp, pptp, pppoe wrong chap-secrets file

2020-04-08

• T2244 (feature): WireGuard: cleanup Python implementation and reduce amount of boilerplate code

• T2186 (feature): Provide more information to the user when a traceback is reported to the user

• T2246 (bug): LLDP op-mode error

• T2240 (feature): Support for bind vif-c interfaces into VRFs

• T2160 (feature): Allow restricting HTTP API to specific virtual hosts

• T2247 (feature): WireGuard: add VRF support

2020-04-05

• T2228 (bug): WireGuard does not allow ports < 1024 to be used

• T2212 (bug): vyos-1x: WiFi card antenna count not set accordingly

• T2230 (feature): Split out inlined Jina2 template to data/templates folder

• T2206 (feature): Split WireGuard endpoint into proper host and port nodes

• T2032 (bug): Monitor bandwidth bits

2020-04-04

• T2158 (bug): Commit fails if ethernet interface doesn’t support flow control (pause)

• T2221 (bug): Ability to remove a VRF that has a next-hop-vrf as target

• T2211 (bug): vyos-1x: VHT channel width not set accordingly

• T2208 (bug): vyos-1x: commit on interfaces wireless wlanX capabilities vht link-adaptation (both|unsolicited) fails

• T2183 (bug): Number of bugs with wireguard script due to interface rearrangement.

• T2104 (default): ifconfig.py size

• T2028 (feature): Convert “interfaces tunnel” to new XML/Python representation

• T2219 (bug): VRF default route of PPPoE and WWAN interfaces do not get added into proper routing table

• T2222 (default): openvpn: requires “multihome” option to listen on all addresses with udp protocol

2020-04-02

• T2072 (bug): Shell autocomplete of option (config node) with quoted value doesn’t work

• T1823 (feature): l2tpv3 interface migration fails

• T2202 (feature): Update PowerDNS recursor to 4.2 series

• T2200 (feature): Add VRF support on wirelessmodem interfaces

2020-03-31

• T2166 (bug): Broken proxy-arp on vif

• T2069 (bug): PPPoE-client does not works with service-name option

• T2180 (bug): get_config_dict should be independent of CLI edit level

• T2053 (default): Update vyos-load-config.py for version string syntax change

• T2052 (default): Update vyos-merge-config.py for version string syntax change

• T2144 (default): vyos-build: docker: selection of text in the terminal still selects it in vim (mouse isn’t completely disabled)

2020-03-30

• T2176 (default): ‘WiFiIf’ object has no attribute ‘set_state’

• T2029 (feature): Switch to new syntax for config file component versions

2020-03-29

• T2178 (bug): VRF interface don’t get removed when VRF is deleted

• T2170 (feature): Add ability to create static route from default to VRF

• T1831 (feature): Denest IPv6 router-advert from Interfaces to general service

2020-03-28

• T2167 (bug): vyos.ifconfig.get_mac() broken

• T2151 (default): wireless: can’t delete interface present in config but not present in system

• T1988 (feature): Migrate wirelessmodem to new XML/Python style interface

2020-03-27

• T2164 (bug): Package libstrongswan-standard-plugins missing from image

• T2105 (bug): wireless: not possible to disabled wlan0

• T2169 (default): Remove redundant use of show_config in vyos-merge-config

2020-03-26

• T2162 (default): migration script for router-advert sets link-mtu 0 on bridge interfaces

• T1735 (bug): Issue in “show vpn ipsec/ike sa” output with ipsec encryption algorithm aes128gcm128/aes256gcm128/chacha etc

2020-03-25

• T2148 (default): openvpn: setting “server client” config without “server client ip” results in ValueError: ‘’ does not appear to be an IPv4 or IPv6 address

• T2146 (default): openvpn: “delete server client” doesn’t delete the corresponding ccd configs

2020-03-24

• T2157 (default): Organize service https listen-address/listen-port/server-name under ‘virtual-host’ node

• T1845 (bug): syslog host no longer accepts a port

2020-03-22

• T2150 (feature): SSTP ssl certificates can only be stored in /config/user-data/sstp

• T2149 (feature): Update Linux Kernel to v4.19.112

• T1884 (default): Keeping VRRP transition-script native behaviour and adding stop-script

• T1020 (bug): OSPF Stops distributing default route after a while

• T476 (enhancment): Start builds for Debian 10 (Buster)

2020-03-21

• T2142 (bug): vyos-build: Add required packages and step to build-GCE-image script

• T1870 (feature): Extend Pipeline scripts to support PullRequests

• T1936 (feature): pppoe-server CLI control features

2020-03-20

• T2006 (bug): SSTP RADIUS CLI accepts invalid values

• T2140 (default): openvpn: tls file check function checkCertHeader returns True even when no match is found

• T2007 (feature): SSTP accepts client MTU up to 16384 bytes

• T2008 (feature): Adjustment of SSTP CLI to be more consistent to the rest of VyOS

2020-03-19

• T2135 (bug): Login banner missing spacing now

• T2132 (feature): Document kernel boot parameter ‘vyos-config-debug’

• T1744 (default): Config load fails in ConfigTree with ValueError: Failed to parse config: lexing: empty token

• T1301 (default): bgp peer-groups don’t work when “no-ipv4-unicast” is enabled.

2020-03-17

• T2134 (bug): VXLAN: NameError: name ‘config’ is not defined

2020-03-16

• T1803 (bug): Unbind NTP while it’s not requested…

• T2131 (feature): Improve syslog remote host CLI definition

2020-03-15

• T2122 (feature): Update Intel out-of-tree drivers to latest version(s)

• T2121 (feature): Update Linux Kernel to v4.19.109

• T2119 (bug): Error on boot when removing ethernet interface from VM

• T1970 (bug): Correct adding interfaces on boot

• T1967 (bug): BGP parameter “enforce-first-as” does not work anymore

• T1432 (enhancment): Implement config write API for Python

• T1431 (feature): Implement an HTTP API for config reading and modification

• T2120 (bug): “reset vpn ipsec-peer” doesn’t work with named peers

• T2001 (bug): Error when router reboot

• T1891 (bug): Router announcements broken on boot

• T1832 (feature): radvd adding feature DNSSL branch.example.com example.com to existing package

2020-03-14

• T834 (feature): accel-ppp: l2tp implementation

2020-03-13

• T1935 (bug): NIC identification and usage problem in Hyper-V environments

• T1821 (bug): “authentication mode radius” has no effect for PPPoE server

• T1622 (default): Add failsafe and back trace to boot config loader

2020-03-11

• T1961 (bug): VXLAN - fails to commit due to non-existent variable, broken MTU

• T2084 (default): conntrack-tools package build error for current/equuleus

2020-03-10

• T1331 (bug): DNS stops working

2020-03-09

• T2111 (feature): VRF add route leaking support

• T2109 (bug): Ping by name broken in VyOS 1.3-rolling-202003080217

• T1416 (default): 2 dhcp server run in failover mode can’t sync hostname with each other

• T2065 (bug): VyOS 1.3 Don’t set daemon in openvpn-{intf}.conf file

• T31 (feature): Add VRF support

2020-03-08

• T1954 (bug): Having system login radius configured causes exponentially long boot times

• T1760 (bug): RADIUS shared secret is not redacted from “show configuration” op mode command

2020-03-07

• T2107 (bug): Wireless interfaces do not work in station mode without security

2020-03-05

• T2074 (bug): VyOS docker container: Does not possible to configure ethernet interface

2020-03-04

• T2098 (bug): Wrong call to cli-shell-api in generated op-mode templates for path completion helper

2020-03-03

• T2095 (bug): Copy command errors out

2020-03-01

• T2082 (bug): WireGuard broken after merging T2057

• T2089 (feature): RADIUS: do not query servers when commit is running started from a non RADIUS user

• T2087 (feature): Add maxfail 0 option to pppoe configuration.

• T2086 (feature): Move sudo session open/close log entries to auth.log

2020-02-29

• T2046 (feature): allowing sub-classes of Interface to redefine how the interface is created

• T2077 (bug): ISO build from crux branch is failing

2020-02-28

• T2083 (default): vyos-build: build-packages fails at mdns-repeater due to wrong branch

• T2080 (default): traffic-policy shaper error when setting bandwidth

2020-02-27

• T2075 (feature): Add support for OpenVPN tls-crypt file option

• T2079 (feature): Update Linux Kernel to v4.19.106

• T2068 (feature): Update Linux Kernel to v4.19.105

• T1703 (default): Macvlan PPPoE support

• T2078 (feature): Kernel: remove unused RAID functions 5,6,10,jbod,dm

2020-02-25

• T1971 (bug): Missing modules in initrd.img for PXE boot

• T2070 (feature): Rewrite (dis-)connect op-mode commands in XML and Python

• T2071 (feature): Add possibility to temporary disable a RADIUS server used for system login

2020-02-23

• T2055 (feature): Remove IPv6 router-advert options for PPPoE

• T1998 (feature): Update FRR to 7.3

• T1318 (feature): PPPoE client CLI redesign

2020-02-22

• T2063 (feature): vyos-salt-minion package is missing from vyos-world

2020-02-20

• T1969 (default): OSPF with WireGuard cause Route Inactive

2020-02-18

• T2034 (default): Removal of interfaces loopback lo removed 127.0.0.1 and ::1

2020-02-17

• T2047 (feature): Update Linux Kernel to v4.19.104

• T2048 (bug): ISO boot failes when wireleass adapter is present

2020-02-16

• T2043 (bug): Bond VLANs can’t be extended on the fly

• T2030 (bug): Bond doesn’t survive reboot

• T1992 (bug): Adding vlan on a bond resets all BGP connections on same bond

• T1908 (feature): Add zone option for Cloudflare DDNS

• T1246 (bug): VyOS 1.2.0 “openvpn-options” configuration does not allow quotes in values

2020-02-15

• T2042 (bug): Error on reboot after deleting “service snmp” and not “service lldp snmp enable”

• T2041 (bug): Adding non existent bond interface raises exception

2020-02-14

• T2039 (bug): Wrong system type displayed.

• T2040 (bug): vyos-http-api-server should reload Config in all routes

2020-02-13

• T2033 (feature): Drop vyos-replace package

• T1635 (feature): Rewrite interface pseudo-ethernet in new XML/Python style

2020-02-10

• T2024 (feature): Migrate “system login banner” to XML/Python

2020-02-09

• T2022 (feature): When RADIUS config is active, local logins won’t work

• T2020 (default): Unable to log in after upgrade to 1.3-rolling-202002080217

• T1931 (bug): Enabling SNMP commit error

2020-02-08

• T1851 (bug): wireguard - changing the pubkey on an existing peer seems to destroy the running config.

2020-02-05

• T1948 (bug): RADIUS login broken in 1.3

• T1990 (feature): Migrate “system login” to XML/Python representation

• T1585 (default): Add letsencrypt/certbot support for ‘service https’

2020-02-04

• T1965 (bug): VyOS-1.3: ping no longer supports specifying interface or source

2020-02-02

• T2011 (feature): Update Linux Kernel to v4.19.101

• T640 (bug): Images no longer work when built without “recommended” packages

2020-02-01

• T2009 (bug): Ethernet Interface always stays down

• T1989 (bug): conf.get_config_dict() throws exception

2020-01-31

• T1768 (bug): PPtP - vyos.config rewrite

• T2002 (bug): VLAN interfaces try to be enabled even if parent interface is A/D

2020-01-30

• T1994 (default): lldpd not bound to specified interfaces - Fix jinja template

• T1896 (enhancment): Remove LLDP-MED civic_based location information

• T1724 (feature): wireguard - add endpoint check in verify()

2020-01-29

• T1392 (bug): Large firewall rulesets cause the system to lose configuration and crash at startup

• T1996 (feature): Update Linux Kernel to 4.19.99

• T1950 (default): Store VyOS configuration syntax version data in JSON file

• T1862 (default): Use regex pattern s+ to split strings on whitespace in Python 3.7

• T1780 (feature): Adding ipsec ike closeaction

• T1755 (bug): Python KeyError exceptions raised with ‘show vpn ipsec sa’ command under use of certain IPSEC cipher suites.

• T1747 (bug): L2TP breaks after upgrading to VyOS 1.2-rolling-201910180117 [issue report and proposed solution]

• T1664 (bug): Ipoe with bond per vlan don’t work

• T1452 (feature): accel-pppoe - add vendor option to shaper

• T1376 (feature): Incorrect DHCP lease counting

• T1341 (default): Adding rate-limiter for pppoe server users

• T1895 (feature): There is not restriction on selection of syslog facility

• T1670 (feature): OpenVPN option for tls-auth

2020-01-26

• T1937 (bug): snmpd throwing a tremendous amount of errors

• T1767 (bug): IPoE - vyos.config rewrite

• T1765 (bug): wireguard - vyos.config rewrite

• T1964 (default): SNMP Script-extensions allows names with spaces, but commit fails

2020-01-25

• T1902 (feature): Add redistribute non main table in bgp

• T1900 (default): Enable SNMP for VRRP.

2020-01-24

• T1975 (bug): OpenVPN tap devices won’t come up automatically

2020-01-23

• T1766 (bug): service-pppoe - vyos.config rewrite

2020-01-21

• T1784 (bug): DMVPN with IPSec does not work in HUB mode

• T1977 (bug): webproxy error on fresh install

2020-01-18

• T1830 (feature): 1.3-rolling boots to GRUB prompt post-install on UEFI systems

• T1940 (bug): EFI Fresh Install fails to boot, 4K Sector Drives Fail to boot EFI

2020-01-16

• T1880 (default): “A stop job is running for live-tools - System Support Scripts” hangs, times out when shutting down equuleus live iso

2020-01-15

• T1959 (bug): Error message when adding IPSec VPN

• T1827 (feature): Increase default gc_thresh

2020-01-13

• T1909 (bug): Incorrect behaviour of static routes with overlapping networks

2020-01-09

• T1955 (feature): snmp - cli config val_help missing

• T1813 (bug): error in generated /etc/hosts file

2020-01-08

• T1946 (bug): Recovery ifname for PPtP remote-access

2020-01-03

• T1939 (feature): Provide abstraction for interface “ip” options

2020-01-01

• T1903 (default): Implementation udev predefined interface naming

• T1825 (feature): Improve DHCP configuration error message

• T1779 (bug): Tunnel interfaces aren’t suggested as being available for bridging

• T1430 (default): Add options for custom DHCP client-id and hostname

2019-12-31

• T1654 (bug): sFlow: multiple “sflow server” not work, and “disable-imt” could break configuration

• T1923 (feature): Migrate L2TPv3 interface to XML/Python

2019-12-30

• T1920 (bug): beep: Error: Running under sudo, which is not supported for security reasons.

• T1918 (bug): l2tp / ipsec config broken in latest daily

• T1897 (bug): IPSec - 1.2 to 1.3 migration failed

• T1921 (bug): snmp: VyOS options no longer recognized

• T1922 (feature): Add VXLAN IPv6 support

• T1858 (default): l2tp: Delete depricated outside-nexthop and add gateway-address

• T1919 (feature): Migrate “system options” to XML/Python representation

2019-12-28

• T1917 (feature): Update WireGuard to Debian release 0.0.20191219-1

• T1916 (feature): Update Linux Kernel to v4.19.91

• T1915 (bug): Remove “system ipv6 blacklist” option

• T1912 (feature): Migrate “system (ip|ipv6)” to XML/Python representation

2019-12-27

• T1910 (bug): Invalid parmissions on latest 1.3 rolling ISO images

2019-12-26

• T1794 (bug): Interface description can’t contain a colon

• T1906 (feature): Migrate “system time-zone” configuration to XML/Python

2019-12-23

• T1898 (enhancment): Support multiple IPv4/IPv6 LLDP management addresses

• T1878 (bug): accel-ppp: pppoe single-session option implementation

• T258 (default): Can not configure wan load-balancing on vyos-1.2

2019-12-22

• T393 (enhancment): Migrate vyatta-lldpd to vyos-1x

2019-12-20

• T1892 (default): vyos-build: Do not install recommends in docker image [enhancement]

• T1893 (bug): igmp-proxy: Do not allow adding unknown interface

• T1411 (enhancment): equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster

2019-12-19

• T1873 (default): DHCP server fails to start due to a change in isc-dhcp-server init scripts

• T1881 (bug): Execute permissions are removed from custom SNMP scripts at commit time

2019-12-18

• T1889 (bug): Error building docker build image

• T1132 (default): Build on Debian Buster

2019-12-17

• T1886 (feature): Update Linux Kernel to v4.19.89

• T1887 (feature): Update WireGuard to Debian release 0.0.20191212-1

2019-12-15

• T1879 (bug): Extend Dynamic DNS XML definition value help strings and validators

2019-12-13

• T1861 (default): hosts lost after modified static-host-mapping

2019-12-12

• T1864 (feature): Lower IPSec DPD timeout lower limit from 10s -> 2s

2019-12-10

• T1843 (feature): Add GCC preprocessor support for XML files

• T1017 (bug): 1.2.0-rc7 duplex auto (autogenerated config) setting not accepted

2019-12-08

• T1566 (feature): Extend L2TP/IPSec server with IPv6

2019-12-07

• T1714 (bug): Disable DHCP Nameservers Not Working

2019-12-06

• T1860 (feature): Update WireGuard to Debian release 0.0.20191127-2

• T1859 (feature): Update Linux Kernel to v4.19.88

• T1854 (bug): Dynamic DNS configuration cannot be deleted

• T1568 (default): strip-private command improvement for additional masking of IPv6 and MAC address

• T1849 (bug): DHCPv6 client does not start

• T1169 (bug): LLDP potentially broken

• T586 (bug): Cannot add ethernet vif-s vif-c interface to bridge-group

2019-12-05

• T1847 (bug): set_level incorrectly handles path given as empty string

2019-12-04

• T1787 (default): Failed config migration from V1.2.3 to 1.2-rolling-201911030217

• T1212 (bug): IPSec Tunnel to Cisco ASA drops reliably after 4.2GB transferred

• T1704 (feature): OpenVPN - Add support for ncp-ciphers

2019-12-03

• T1782 (bug): pppoe0: showing as “Coming up”

• T1801 (bug): Unescaped backslashes in config values cause configuration failure

2019-12-02

• T1841 (bug): PPP ipv6-up.d direcotry missing

• T1840 (bug): PPPoE doesn’t not rename pppX to pppoeX

2019-11-28

• T1299 (feature): Allow SNMPd to be extended with custom scripts

2019-11-25

• T1824 (bug): Permission denied: ‘/opt/vyatta/etc/config/vyos-migrate.log’

2019-11-24

• T1673 (bug): vif bridge-group not migrated to bridge member interface

• T1799 (feature): Add support for GENEVE (Generic Network Virtualization Encapsulation)

2019-11-23

• T1812 (bug): DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling

• T1627 (feature): Rewrite wireless interface in new style XML syntax

• T1811 (bug): Upgrade from 1.1.8: Config file migration failed: module=l2tp

2019-11-22

• T1786 (bug): disable-dhcp-nameservers is missed in current host_name.py implementation

• T1749 (bug): numeric validator doesn’t support multiple ranges

• T1701 (bug): Delete domain-name and domain-search won’t work

• T1694 (default): NTPd: Do not listen on all interfaces by default

• T1678 (bug): hostfile-update missing line feed

• T1593 (feature): Support ip6gre

• T1391 (feature): In route-map set community additive

• T1772 (bug): <regex> constraints in XML are partially broken

• T1597 (bug): /usr/sbin/rsyslogd after deleting “system syslog”

2019-11-21

• T1818 (default): Print name of migration script on failure

• T1814 (default): Add log of migration scripts run during config migration

2019-11-19

• T1705 (default): High CPU usage by bgpd when snmp is active

2019-11-17

• T1742 (default): NHRP unable to commit.

• T1740 (default): Broken OSPFv2 virtual-link authentication

• T1485 (bug): Enable ‘AdvIntervalOpt’ option in for radvd.conf

• T1470 (enhancment): improve output of “show dhcpv6 server leases”

• T1421 (bug): OpenVPN client push-route stopped working, needs added quotes to fix

• T1183 (feature): BFD Support via FRR

• T1578 (bug): completion offers “show table”, but show table does not exist

• T1401 (bug): Copying files with the FTP protocol fails if the password contains special characters

• T1351 (feature): accel-pppoe adding CIDR based IP pool option

2019-11-16

• T1788 (feature): Intel QAT (QuickAssist Technology ) implementation

2019-11-14

• T1710 (default): [equuleus] buster: add patch to fix live-build missing key error

• T1804 (default): Add python3-psutil to docker image

• T1736 (default): Decide on best practice for patching live-team packages for VyOS build system

• T1424 (default): Rewrite the config load script

2019-11-12

• T1800 (feature): Update Linux Kernel to v4.19.84

2019-11-11

• T1793 (feature): Editing description on an interface causes BGP sessions to reset on commit

2019-11-10

• T1598 (default): New implementation of the resolv.conf and hosts update mechanism

• T1792 (feature): Update WireGuard to Debian release 0.0.20191012-1

• T1791 (feature): Update Linux Kernel to 4.19.82

2019-11-09

• T1030 (bug): Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)

2019-11-08

• T1789 (bug): ddclient not working with generated RFC2136 / nsupdate config

2019-11-03

• T1777 (bug): Bonding interface MAC address missmatch after reboot

• T1752 (bug): PPPoE does not automatically start on boot

2019-11-02

• T1783 (bug): Interface can’t unpin from bridge

2019-10-30

• T1778 (bug): Kilobits/Megabits difference in configuration Vyos/FRR

2019-10-28

• T1769 (feature): Remove complex SNMPv3 Transport Security Model (TSM)

• T1738 (bug): Copy SNMP configuration from node to node raises exception

• T818 (feature): SNMP v3 - remove required engineid from user node

2019-10-26

• T1560 (default): “set load-balancing wan rule 0” causes segfault and prevents load balancing from starting

2019-10-22

• T1756 (feature): Modify output to be more useful - Wireguard

2019-10-21

• T1741 (feature): Add system wide proxy setting

2019-10-19

• T1746 (bug): 201910180117 fails startup with ‘Permission Denied’ errors

• T1745 (default): dhcp-server commit fails with “DHCP range stop address x must be greater or equal to the range start address y!” when static mapping has same IP as range stop

• T1743 (default): equuleus: remove references to SSH key type “rsa1” deprecated in Debian Buster

2019-10-18

• T1712 (default): DHCP client sometimes doesn’t start

• T1684 (bug): Unable to enable IPv6 autoconf on PPPoE

• T1604 (enhancment): equuleus: buster: vbash: tab completion breaks

2019-10-17

• T1737 (bug): SNMP tab completion missing

2019-10-14

• T1726 (bug): Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07

• T1716 (feature): Update Intel NIC drivers to recent versions

2019-10-13

• T1728 (feature): Update Linux Kernel to 4.19.79

2019-10-11

• T1723 (bug): wireguard - Interface wg01 could not be brought up in time

2019-10-09

• T1719 (feature): ssh deprecated options

• T1718 (bug): ISO check in /opt/vyatta/sbin/install-image faulty

• T1682 (feature): Migrate to new Jenkins Pipeline script

2019-10-08

• T1717 (bug): disable multiple daemons to autostart at boot

2019-10-06

• T1713 (feature): Remove deprecated packages no longer required after migration to Accel-PPP

• T1709 (bug): Update WireGuard to 0.0.20190913

• T1708 (bug): Update Rolling Release Kernel to 4.19.76

2019-10-04

• T1707 (bug): DHCP static mapping and exclude address not working

• T1496 (bug): Separate rolling release and LTS kernel builds

2019-10-03

• T1689 (feature): “reset openvpn” op-mode command should terminate and restart OpenVPN process

2019-10-01

• T1706 (bug): wireguard broken in latest rolling

2019-09-30

• T1642 (bug): BGP configuration error when using remove-private-as

• T1688 (feature): OpenVPN - Add new cipher aes-(128|192|256)-gcm

2019-09-28

• T1696 (bug): NTP - Tests fail when building vyos-1x

• T1512 (bug): vyos 1.2 openvpn client names with spaces created incorrectly

2019-09-27

• T1681 (feature): cleanup wireguard code since tagnodes are now visible

• T1695 (bug): Syntax error in interface-dummy.py

2019-09-26

• T1692 (bug): ipoe-server verify function error

• T1691 (bug): OpenVPN - Commiting config when OpenVPN peer/server not available makes commit hang

• T1690 (feature): restart op-mode commands for ‘service (pppoe|ipoe)-server’

2019-09-25

• T1672 (bug): Wireguard keys not automatically moved

2019-09-23

• T1679 (bug): during bootup: invalid literal for int() with base 10

• T1680 (feature): DHCP client does not release IP address on exit/deletion

2019-09-21

• T1676 (default): [equuleus] buster: update GRUB boot parameters during upgrade

• T1637 (feature): Rewrite ethernet interface in new style XML syntax

• T1675 (feature): OpenVPN - Specify minimum TLS version

2019-09-20

• T1602 (default): equuleus: buster: add live build apt options for choosing vyos packages

2019-09-19

• T1666 (feature): Deleting a bond will place member interfaces into A/D state

2019-09-17

• T239 (bug): firewall all-ping setting is confusing

2019-09-16

• T1040 (default): rc.local is executed too early

2019-09-15

• T1662 (default): openvpn: ‘show openvpn client’ error

• T1661 (default): openvpn: wrong checking for existence cert files

• T1630 (bug): OpenVPN after changing it from root to nobody (unprivileged user) cant add routes

2019-09-13

• T1660 (bug): Bonding dont’t work on VyOS 1.2-rolling-201909120338

• T1655 (enhancment): equuleus: buster: arm: vyos-accel-ppp build failes because of filename hardcoded as x86_64 in debian/rules

2019-09-12

• T1572 (feature): Wireguard keyPair per interface

• T1545 (bug): IPSEC vti issue

2019-09-10

• T1650 (feature): implement wireguard default key removal

• T1649 (feature): feature documentation different keypairs per interface

• T1648 (feature): add cli command ‘delete wireguard named-key <key>’

2019-09-09

• T1639 (bug): wireguard pubkey change error

2019-09-07

• T1640 (feature): Update Linux Kernel to v4.19.70

2019-09-06

• T1624 (bug): Failed to set up config session

• T1636 (feature): Rewrite VXLAN in new style XML/Python

• T1623 (default): Systemd reports dependency cycle during boot

• T1479 (bug): libvyosconfig error reporting doesn’t include line numbers

• T808 (feature): replace lighthttpd with nginx

• T1616 (bug): ‘renew dhcpv6 interface <interfaceName>’ command fails, but work within config session

• T1478 (bug): libvyosconfig parser does not support escaped quotes inside single-quoted strings

• T1360 (bug): DNS nameservers from dhcp not set

2019-09-05

• T1443 (default): New “service https” implementation

2019-09-04

• T1632 (bug): OpenVPN ‘push’ options with quotes

• T1631 (bug): Multiple push-route options cause error generating openvpn configuration

• T1605 (bug): L2tp over IPsec not working in Crux

• T1557 (feature): Create generic abstraction for configuring interfaces e.g. IP address

• T1439 (bug): DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id

• T1628 (feature): Adopt WireGuard configuration script to new vyos.ifconfig class

• T1543 (enhancment): Add a source address/interface option for commit archive connections

• T1614 (feature): Rewrite bonding interface in new style XML syntax

2019-09-02

• T1621 (default): Rewrite the rest of trivial vyatta-op commands to new syntax

2019-08-31

• T1559 (default): webproxy (squidguard) doesn’t work

• T1531 (bug): Several bugs in cluster configuration

• T1530 (bug): vyos 1.2.1 “set system syslog global archive file” don’t work

• T1529 (bug): BGP unnumbered is not working with a vif interface

• T1472 (bug): Impossible to recreate group in rfc3768-compatibility mode

• T1468 (bug): BGP route-reflector-client config erroneously claims remote-as is incorrect

• T1460 (bug): “show firewall ….” doesn’t support counters with more than eight digits

• T1456 (bug): Port group cannot be configured if the same port is configured as standalone and inside a range

• T1450 (default): crux: ping * flood is not working

• T1428 (default): Wireguard: fwmark setting is not honored

• T1420 (bug): logrotate permission errors on vyatta logfiles

• T1362 (bug): Incorrect handling of special characters in VRRP passwords

2019-08-30

• T1587 (bug): New implementation of “monitor interface”

2019-08-29

• T1571 (bug): show log vpn ipsec produces no output

2019-08-28

• T1615 (feature): After migration to pyroute2 the address DHCP statement is no longer covered

2019-08-27

• T1613 (bug): IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG)

• T1617 (default): OpenVPN push route failure

• T1250 (bug): FRR not setting default gateway from dhcp

2019-08-26

• T1591 (bug): OpenVPN “run show openvpn client status” does not work

• T1608 (feature): bridge: Bridge adding non existing interfaces is allowed but does not work

• T1548 (feature): Rewrite OpenVPN interface/op-commands in new style XML/Python

• T1607 (default): Convert ‘reset conntrack’ and ‘reset ip[v6] cache’ operations from vyatta-op to new syntax

2019-08-25

• T1611 (default): Migration to latest rolling fails with vyos.configtree.ConfigTreeError: Path [b’interfaces bridge br0 igmp-snooping querier’] doesn’t exist

• T1333 (bug): pdns_recursor does not perform recursive lookups on domain specific forwarders

• T1524 (feature): Add support to set allow-from network in DNS forwarding

2019-08-23

• T1606 (bug): Rolling release no longer boots after adding hostname daemon

2019-08-22

• T1131 (bug): open-vm-tools causing 100% CPU load

2019-08-21

• T1601 (feature): Rewrite loopback interface type with new style XML/Python interface

• T1596 (default): Convert ‘telnet’ and ‘traceroute’ vyatta-op commands to new syntax

2019-08-20

• T1595 (feature): Migrate deprecated “service dns forwarding listen-on” to listen-address

2019-08-19

• T1580 (feature): Rewrite dummy interface type with new style XML/Python interface

• T1590 (default): Convert ‘show system’ operations from vyatta-op to python/xml syntax

• T1377 (default): BGP Weight Not properly applying

2019-08-17

• T1592 (feature): Update Linux Kernel to v4.19.67

• T1551 (default): Error when creating QinQ interface without earlier sets firewall name, if it used

2019-08-15

• T1584 (default): equuleus: buster: add consistent grub options for predictable interface names

2019-08-13

• T1556 (feature): Rewrite Bridge in new style XML syntax

2019-08-09

• T1569 (feature): interfaceconfig class documetation

2019-08-05

• T1562 (feature): Change version scheme on current branch used for rolling releases

2019-08-04

• T1561 (bug): VyOS rolling ISO cluttered with vyatta-ravpn Git Repo

2019-08-03

• T1554 (bug): Enable RSS (Receive Side Scaling) and Multiqueue for Intel drivers

2019-08-02

• T853 (feature): accel-ppp: SSTP implementation

• T742 (feature): Implement accel-ppp in VyOS

2019-08-01

• T1544 (feature): L2TP documentation

2019-07-31

• T1552 (feature): accel-ppp: SSTP documentation

• T1553 (default): equuleus: buster: add ‘noautologin’ to boot parameters

2019-07-29

• T1532 (default): [equuleus] buster: GPG error on vyos package repository

2019-07-28

• T1547 (feature): accel-ppp/L2TP restructure CLI

• T1546 (bug): accel-ppp/L2TP radius-source address is not honored

2019-07-23

• T1533 (bug): Rolling builds broken!

• T1489 (feature): Add vlan_mon usage at Accel

2019-07-22

• T1435 (enhancment): Make ip-address [OPTIONAL] (in dhcp-server -> static-mapping) to cope with “unfriendly” client-hostnames of IoT-Devices

2019-07-21

• T823 (feature): Rewrite DHCP op mode in the new style

2019-07-18

• T1497 (bug): “set system name-server” generates invalid/incorrect resolv.conf

• T533 (feature): PPPoE MTU graeter than 1492

2019-07-15

• T1526 (feature): [SNMP] write documentation for snmp script extension

• T1516 (bug): [wireguard] config changes cause an error

2019-07-14

• T1066 (bug): Missing NICs

2019-07-10

• T1505 (bug): vyos.config return_effective_values does not convert the output to a list

• T1503 (feature): Add functions for commit lock checking

• T1504 (bug): DHCP-provided DNS servers are not propagated to resolv.conf

• T1400 (bug): iBGP: remote-as and router AS can’t be the same value

2019-07-08

• T1465 (bug): Priority inversion in “interfaces vti vtiX ip”

• T1510 (feature): [IPoE] vlan-mon option implementation

• T1508 (feature): [pppoe] migration script for service pppoe-server interface

• T1494 (feature): accel-ppp: IPoE update documentation

• T989 (feature): accel-ppp: IPoE implementation

2019-07-03

• T1502 (feature): Add build sanity checking tools to the dev builds

• T1469 (enhancment): Create forward-zones-recurse entry instead of forward-zones when setting service dns forwarding

2019-07-02

• T1099 (default): Openvpn: use config files instead of one long command.

• T1495 (feature): accel-ppp: IPoE implement IPv6 PD

2019-07-01

• T1498 (bug): Nameservers are not propagated into resolv.conf

2019-06-24

• T1482 (feature): Add OpenVPN SHA384 hashing algorithm

• T1484 (bug): OSPF md5 key not removed in strip-private

2019-06-23

• T1477 (feature): Intel i40evf fails to load - unknown symbol

• T1474 (feature): Update WireGuard to 0.0.20190601

• T1473 (feature): Update Kernel from 4.19.52 to 4.19.54

• T1476 (bug): Update PowerDNS recursor to 4.2 series

• T1475 (feature): Enable Kernel Data Center Bridging (CONFIG_DCB) support

• T1471 (bug): Wireguard interfaces have no firewall subtree

• T1455 (feature): Update Intel i40e driver to 2.9.21

• T1464 (feature): FRR: Set explicit OSPFv3 network type for specified interface

2019-06-22

• T1371 (bug): Arguments of VRRP health check scripts are ignored

• T1313 (feature): Add support for reusable build flavours

• T1202 (bug): Add hvinfo to the packages directory

• T1433 (bug): “show dhcpv6 server leases” shows leases from wrong file

2019-06-20

• T1461 (bug): Deleting ‘firewall options’ causes Python TypeError

• T1413 (enhancment): equuleus: buster: vyos-xe-guest-utilities is not installable and breaks live-build

• T1412 (enhancment): equuleus: buster: vyos-netplug is not installable and breaks live-build

2019-06-19

• T1453 (bug): Warning: nss-myhostname is not installed

• T1447 (bug): Python subprocess called without import in host_name.py

• T1334 (feature): Migration script runner rewrite

• T1327 (bug): Set the serial console speed to 115200 by default

• T1454 (bug): Reading deprecated /etc/frr/daemons.conf

2019-06-18

• T1451 (bug): Intel e1000e driver missing in lates rolling release

• T1446 (default): Raid install with efi can generate some warning output.

• T1444 (feature): Update Linux Kernel to v4.19.52

2019-06-17

• T1394 (bug): syslog systemd and host_name.py race condition

• T1408 (feature): pppoe-server - implement local-ipv6 for pure IPv6 based deployments

• T1390 (default): Extend bgp config for bestpath as-path multipath-relax

2019-06-16

• T1438 (bug): DMI board/product serial can’t be read

2019-06-12

• T1397 (default): Rewrite the config merge script

2019-06-05

• T1426 (default): Update the script that checks conntrack hash-size on reboot

2019-06-04

• T1379 (bug): Deprecated functions in /sbin/dhclient-script

2019-06-03

• T1423 (default): When merging remote config files, create known_hosts file if not present.

2019-06-01

• T1422 (feature): Add a utility for querying values in config files

• T1309 (bug): allow duplicate ip adresses on different interfaces

2019-05-30

• T1419 (bug): Can’t delete multiple OSPF passive-interfaces in single commit

2019-05-28

• T1410 (feature): Upgrade Linux Kernel to 4.19.46

2019-05-26

• T1388 (bug): OpenVPN client connections with password and certificate authentication don’t work

• T1387 (bug): Disabling a DHCP interface with no address displays an error

• T1404 (feature): Update iproute2 package to 4.19

2019-05-24

• T1407 (bug): pppoe IPv6 PD documention by practical example

2019-05-23

• T1402 (feature): Update Linux Kernel to 4.19.45

2019-05-22

• T1399 (bug): accel-ppp kernel modules missing in rolling build 20190522

• T1393 (bug): pppoe IPv6 pool doesn’t work

2019-05-21

• T592 (bug): lldpcli: unknown command from argument 1: #

2019-05-20

• T1384 (bug): vxlan remote-port

2019-05-16

• T1267 (feature): FRR: Add interface name for static routes

• T1148 (bug): epa2 BGP peers initiate before config is fully loaded, routes leak.

2019-05-13

• T1378 (feature): Embed Git commit ID of vyos-build repo in resulting image

2019-05-12

• T1370 (bug): Webproxy with ldap authentication don’t start

2019-05-09

• T1367 (bug): VIF deletion fails inconsistently

2019-05-06

• T1368 (feature): Enable MPLS support in Linux Kernel

2019-05-05

• T1366 (feature): Update Linux Kernel to v4.19.40

2019-05-04

• T1365 (bug): Cannot configure syslog on 1.2.0-rolling+201904260337

2019-04-29

• T1359 (bug): Changing VLAN interface address from DHCP to static is not handeled in vyatta-address script

• T1352 (feature): vyos-documentaion: accel-pppoe adding CIDR based IP pool option

2019-04-26

• T1357 (feature): Wrong exit code produced by dhcp-server migration script

2019-04-25

• T1355 (bug): rsyslog stopped after reboot or clean start

2019-04-23

• T1242 (bug): Error when setting ‘pppoe 0 ipv6 address autoconf’

• T1345 (feature): Specify RADIUS source IP for system login command

• T41 (feature): Feature Request: Include bgpq3 for BGP policy creation

2019-04-21

• T314 (default): Unable to apply MSS Clamp with VyOS configuration

• T1348 (feature): Upgrade WireGuard to 0.0.20190406-1

• T1347 (feature): Upgrade Linux Kernel to 4.19.36

• T1343 (default): do not remove trailing zeroes from subnets in DHCP static route config

• T1332 (bug): Upgrade ethtool from 3.16 to 4.19

2019-04-20

• T1335 (default): Configuration migration issue from 1.1.8 to latest 1.2.0 regarding DHCP authoritative enable statement

• T1336 (default): system domain-name statement doesn’t allow domain names ending in a dot on latest 1.2.0

• T1344 (feature): Unclutter “system login radius” configuration nodes

• T1245 (default): Cannot Clamp MSS on Transient Bridge Interfaces - Turn On br_netfilter

• T1310 (feature): Replace system prompt with FQDN

2019-04-19

• T1325 (default): GRE tunnel to Cisco router fails in 1.2.0 - works in 1.1.8

2019-04-17

• T14 (enhancment): Provide VMware OVF and OVA

2019-04-16

• T1274 (feature): Update QLogic firmware files

• T1184 (feature): wireguard - extend documentation with the show interface wireguard commands

2019-04-15

• T1260 (feature): VICI-based implementation of “run show vpn ipsec sa”

• T1273 (default): Add script profiling functionality to the config backend

• T1248 (default): Add a function for copying nodes to the vyos.configtree library

2019-04-10

• T1329 (default): support installation on SD cards fix

2019-04-07

• T1296 (default): Image install can’t install to SD cards (mmcblk…)

2019-04-05

• T1324 (feature): update documtation for ‘set system login user level’

• T1322 (bug): Wrong configuration generated for DHCPv6 Relay

2019-04-04

• T1323 (feature): migrate operator accounts to admin accounts and remove the option to setup an operator account

2019-03-26

• T1312 (feature): Allow many to many NAT rules with networks of different size

• T1305 (bug): libvyosconfig parser doesn’t work when config lacks a version comment and ends at a leaf node

2019-03-22

• T1308 (bug): Use of ‘<’ in PPPoE password fails

• T1279 (bug): ACPI power event don’t work

2019-03-20

• T1282 (feature): Configure VyOS to send syslog messages to remote syslog using fully-qualified domain name

• T1004 (feature): ISO + System Boot with Serial Console for APU2 and Embedded Devices

• T405 (feature): Add binaries for lcdproc

2019-03-17

• T1218 (bug): Static routes not being applied in 1.2 Release

• T1067 (feature): VXLAN support improvements

• T1285 (bug): Kernel issues with 1.2.0 & 1.2.0-rolling+201903060337 causing lockup

• T1252 (feature): Extend vyos-ci Kernel Pipeline to build Intel native drivers

• T1240 (feature): Wireguard module update to 0.0.20190123

• T484 (bug): Rules can’t be deleted from firewall rule sets used in zone policies

• T986 (feature): Please update the i40e driver

2019-03-16

• T1272 (bug): VRRP is using physical rather than virtual MAC in RFC-compliant mode

2019-03-12

• T1284 (feature): accel-ppp: pptp implementation documention

• T833 (feature): accel-ppp: pptp implementation

2019-03-08

• T1277 (bug): Source build of VyOS 1.2.0 (crux) FileNotFound exception in show_dhcp.py

2019-03-02

• T929 (bug): Replace Debian firmware packages with upstream Kernel

2019-02-25

• T1261 (default): TFTP-Server only listen on 127.0.0.1

• T1211 (default): Blank hostnames from dhcpd are able to bring down DNS

• T1247 (bug): WAN load-balancing fail when !<x.x.x.x/x> configured in rules

• T1234 (bug): DHCP relay relay-agents-packets is dysfunctional

2019-02-22

• T1257 (bug): implement ‘set system static-host-mapping’ in host_name.py and remove old function calls

2019-02-21

• T1214 (bug): Add ipaddrcheck to the packages directory

• T1255 (bug): /usr/libexec/vyos/conf_mode/host_name.py needs to add an additional newline char

2019-02-19

• T1051 (default): Update openvpn to support TLS 1.2

2019-02-16

• T1174 (bug): “system domain-name” is not reflected in /etc/resolv.conf

2019-02-10

• T1154 (default): use of local cache to build iso

2019-02-09

• T1239 (feature): make module build for vyos-accel-ppp dynamic

• T1236 (feature): Update Linux Kernel to 4.19.20

• T1238 (bug): Wireguard allows invalid IP’s

• T1010 (bug): improper pid file handling of webgui

2019-02-08

• T173 (bug): Static routes ignored with DHCP received gateway

2019-02-05

• T1231 (feature): Remove “service dns dynamic“ cache file on node change/delete

2019-01-29

• T166 (bug): NPTv6 is broken

2018-12-07

• T1060 (default): Add an option to exclude addresses from transparent wev proxying

2018-04-03

• T477 (bug): Strongswan issue #1220 (packet loss on AWS)