Merge pull request #618 from vyos/update-dependencies-master

Github: update current branch

3 files changed, 98 insertions, 653 deletions

diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x
-Subproject 0a82936aff8bbfcc6253f4767ea82805525c47e
+Subproject f86b7314d025fd0cf11c2d91638ed3cc7c4fa50
diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst
index fd9bedeb..f3bb8e81 100644
--- a/docs/changelog/1.3.rst
+++ b/docs/changelog/1.3.rst
@@ -8,6 +8,54 @@
    _ext/releasenotes.py
 
 
+2021-09-11
+==========
+
+* :vytask:`T3402` (feature): Add VyOS programming library for operational level commands
+* :vytask:`T3275` (default): Disable conntrack helpers by default
+
+
+2021-09-10
+==========
+
+* :vytask:`T3802` (bug): Commit fails if ethernet interface doesn't support flow control
+* :vytask:`T3819` (bug): Upgrade Salt Stack 3002.3 -> 3003 release train
+* :vytask:`T3421` (bug): MTR/Traceroute broken in 1.3-beta
+* :vytask:`T3820` (feature): PowerDNS recursor - update from 4.3 -> 4.4 to sync with current
+* :vytask:`T1770` (bug): webproxy breaks commit and http access on routed client
+* :vytask:`T915` (feature): MPLS Support
+
+
+2021-09-09
+==========
+
+* :vytask:`T3816` (bug): Error after entering outbound-interface command in NAT
+* :vytask:`T3814` (bug): wireguard: commit error showing incorrect peer name from the configured name
+* :vytask:`T3805` (bug): OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface
+
+
+2021-09-07
+==========
+
+* :vytask:`T2322` (bug): CLI [op-mode] bugs. Root task
+* :vytask:`T1894` (bug): FRR config not loaded after daemons segfault or restart
+* :vytask:`T3807` (bug): Op Command "show interfaces wireguard"  does not show the output
+* :vytask:`T3808` (default): ipsec is mistakenly restarted after delete
+
+
+2021-09-06
+==========
+
+* :vytask:`T3806` (bug): Don't set link local ipv6 address if MTU less then 1280
+* :vytask:`T3803` (default): Add source-address option to the ping CLI
+* :vytask:`T3431` (bug): Show version all bug
+* :vytask:`T3362` (bug): 1.3 - RC1 ifb redirect failing to commit
+* :vytask:`T3291` (bug): Fault on setting offload RPS with single-core CPU
+* :vytask:`T2920` (bug): Commit crash when adding the second mGRE tunnel with the same key
+* :vytask:`T2895` (bug): VPN IPsec "leftsubnet" declared 2 times
+* :vytask:`T2019` (bug): LLDP wrong config generation for interface 'all'
+
+
 2021-09-05
 ==========
 
@@ -28,7 +76,7 @@
 * :vytask:`T3788` (bug): Keys are not allowed with ipip and sit tunnels
 * :vytask:`T3683` (bug): VXLAN not accept ipv6 and source-interface options and mtu bug
 * :vytask:`T3634` (feature): Add op command option for ping for do not fragment bit to be set
-* :vytask:`T690` (feature): openvpn push-route allow different metric
+* :vytask:`T690` (feature): Allow OpenVPN servers to push routes with custom metric values
 
 
 2021-09-02
@@ -149,7 +197,6 @@
 ==========
 
 * :vytask:`T3756` (default): VyOS generates invalid QR code for wireguard clients
-* :vytask:`T3275` (default): Disable conntrack helpers by default
 
 
 2021-08-14
@@ -192,7 +239,7 @@
 ==========
 
 * :vytask:`T2027` (bug): get_config_dict is failing when the configuration section is empty/missing
-* :vytask:`T169` (feature): Image install should put correct serial console device in created grub menuentry
+* :vytask:`T169` (feature): Image install should put correct serial console device in created GRUB menu entry
 
 
 2021-08-07
@@ -308,12 +355,6 @@
 * :vytask:`T3593` (bug): PPPoE server called-sid format does not work
 
 
-2021-06-27
-==========
-
-* :vytask:`T3653` (default): Cloudinit subnet error if a cidr (/24) is used instead of a subnet mask (255.255.255.0)
-
-
 2021-06-25
 ==========
 
@@ -331,7 +372,6 @@
 ==========
 
 * :vytask:`T3629` (bug): IPoE server shifting address in the range
-* :vytask:`T3582` (default): 'delete log file' does not work
 
 
 2021-06-20
@@ -344,7 +384,6 @@
 ==========
 
 * :vytask:`T3633` (feature): Add LRO offload for interface ethernet
-* :vytask:`T3632` (bug): policy: route-map: unable to configure route-target / site-of-origin
 
 
 2021-06-17
@@ -356,7 +395,6 @@
 2021-06-16
 ==========
 
-* :vytask:`T3623` (default): Fix for dummy interface option in the operational command "clear interfaces dummy"
 * :vytask:`T2425` (feature): Rewrite all policy zebra filters to XML/Python style
 * :vytask:`T3630` (feature): op-mode: add "show version kernel" command
 
@@ -374,7 +412,6 @@
 
 * :vytask:`T3250` (bug): PPPoE server:  wrong local usernames
 * :vytask:`T3138` (bug): ddclient improperly updated when apply rfc2136 config
-* :vytask:`T2620` (feature): Add ipsec peer-name to log to simplifies grepping and troubleshooting
 * :vytask:`T2645` (default): Editing route-map action requires adding a new rule
 
 
@@ -383,7 +420,6 @@
 
 * :vytask:`T3602` (bug): Renaming BGP Peer Groups Leaves Router Broken
 * :vytask:`T2916` (bug): A state of VTI interface in a configuration does not being processing properly
-* :vytask:`T2855` (default): disabled vti interfaces still working
 
 
 2021-06-08
@@ -391,7 +427,6 @@
 
 * :vytask:`T3605` (default): Allow to set prefer-global for ipv6-next-hop
 * :vytask:`T3607` (feature): [route-map] set ipv6 next-hop prefer-global
-* :vytask:`T3289` (bug): No description for node "service" conf-mode
 
 
 2021-06-07
@@ -418,7 +453,6 @@
 2021-05-30
 ==========
 
-* :vytask:`T3524` (default): Please implement  bgp graceful-shutdown
 * :vytask:`T1866` (bug): Commit archive over SFTP doesn't work with non-standard ports
 * :vytask:`T3589` (feature): op-mode: support clearing out logfiles from CLI
 * :vytask:`T3508` (bug): Check if there's enough drive space for an upgrade before downloading an image
@@ -435,7 +469,6 @@
 * :vytask:`T2436` (default): equuleus: Testing: vyos-1x: syntax checking Python scripts in PR
 * :vytask:`T2184` (bug): OpenVPN op_mode tools broken
 * :vytask:`T1944` (bug): FRR: Invalid route in BGP causes update storm, memory leak, and failure of Zebra
-* :vytask:`T1995` (bug): "show vpn ike sa" command always show child-sas as down
 
 
 2021-05-28
@@ -462,12 +495,6 @@
 * :vytask:`T2807` (feature): IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces
 
 
-2021-05-25
-==========
-
-* :vytask:`T3569` (bug): Firewall wrong completion help values
-
-
 2021-05-24
 ==========
 
@@ -503,12 +530,6 @@
 * :vytask:`T2462` (default): LLDP op-mode exception: IndexError: list index out of range
 
 
-2021-05-17
-==========
-
-* :vytask:`T3557` (bug): ddclient: FileNotFoundError in op-mode
-
-
 2021-05-15
 ==========
 
@@ -525,7 +546,6 @@
 
 * :vytask:`T3346` (bug): nat 4-to-5 migration script fails when a 'source' or 'destination' node exists but there are no rules
 * :vytask:`T3248` (default): Deal with VRRP mode-force command that exists in 1.2 but not in 1.3
-* :vytask:`T2809` (bug): An issue with config migration (system ntp server)
 * :vytask:`T3426` (default): add support for script arguments to vyos-configd
 
 
@@ -554,12 +574,6 @@
 * :vytask:`T3528` (bug): Frr 7.5.1 uses 'seq' for community-lists
 
 
-2021-05-09
-==========
-
-* :vytask:`T3531` (bug): policy: prefix-list and route-map names do not allow underscores in names (FRR does)
-
-
 2021-05-08
 ==========
 
@@ -569,7 +583,6 @@
 2021-05-07
 ==========
 
-* :vytask:`T3333` (bug): "show vpn ipsec sa" reports ESP tunnels to be up when they are not.
 * :vytask:`T1171` (bug): 1.2.0 epa2 - IPsec VPN initiation
 
 
@@ -618,7 +631,6 @@
 2021-04-23
 ==========
 
-* :vytask:`T3395` (bug): WAN load-balancing fails with nexthop dhcp
 * :vytask:`T3290` (bug): Disabling GRE conntrack module fails
 
 
@@ -647,12 +659,6 @@
 * :vytask:`T3454` (enhancment): dhclient reject option
 
 
-2021-04-08
-==========
-
-* :vytask:`T3456` (bug): firewall: rules that should be deleted seem to be still in use
-
-
 2021-04-05
 ==========
 
@@ -718,7 +724,7 @@
 ==========
 
 * :vytask:`T2271` (feature): OSPF: add per VRF instance support
-* :vytask:`T175` (feature): Add source route option to vti interface
+* :vytask:`T175` (feature): Add source route option to VTI interfaces
 
 
 2021-03-13
@@ -733,7 +739,6 @@
 
 * :vytask:`T3399` (bug): RPKI: dashes in hostnames are replaced with underscores when rendering the FRR config
 * :vytask:`T3305` (bug): Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot
-* :vytask:`T2927` (bug): isc-dhcpd release and expiry events never execute
 * :vytask:`T899` (bug): Tunnels cannot be moved from one bridge to another
 * :vytask:`T786` (feature): new style xml and conf-mode scripts: posibillity to add tagNode value as parameter to conf-script
 
@@ -808,7 +813,6 @@
 2021-02-24
 ==========
 
-* :vytask:`T1774` (default): Add a show config operation to the HTTP API
 * :vytask:`T3303` (feature): Change welcome message on boot
 
 
@@ -816,20 +820,12 @@
 ==========
 
 * :vytask:`T3163` (feature): ethernet ring-buffer can be set with an invalid value
-* :vytask:`T2521` (bug): Need to restart pdns-recursor to check new entries in /etc/hosts
-
-
-2021-02-20
-==========
-
-* :vytask:`T2647` (default): ipsec disableuniqreqids generate a wrong ipsec.conf
 
 
 2021-02-19
 ==========
 
 * :vytask:`T3326` (bug): OSPFv3: Cannot add L2TPv3 interface
-* :vytask:`T2061` (bug): protocol logs not sent to remote syslog
 
 
 2021-02-18
@@ -868,33 +864,22 @@
 * :vytask:`T2387` (feature): Create XML scheme for [conf_mode] BGP 
 * :vytask:`T2174` (feature): Rewrite protocol BGP to new XML/Python style
 * :vytask:`T1987` (bug): A default route can be deleted by dhclient-script in some cases
-* :vytask:`T2310` (bug): vyos-cloud-init use global config to configure pass and ssh login
 * :vytask:`T723` (feature): Add support for first boot or installation time saved config modification
 * :vytask:`T1775` (bug): Cloud-init not running userdata runcmd
 * :vytask:`T1389` (feature): Add support for NoCloud cloud-init datasource
 * :vytask:`T1315` (feature): Allow BGP to use address-family l2vpn evpn
 
 
-2021-02-12
-==========
-
-* :vytask:`T3301` (bug): Wrong format and valueHelp for policy as-path-list regex
-
-
 2021-02-11
 ==========
 
 * :vytask:`T2638` (default): FRR: New framework for configuring FRR 
-* :vytask:`T3035` (enhancment): Allow IPv4 over IPv6 IPsec and vice versa
-* :vytask:`T1957` (feature): PPPoE server: maintenance mode
-* :vytask:`T1773` (default): Make it possible to export config to JSON
 
 
 2021-02-08
 ==========
 
 * :vytask:`T3295` (feature): Update Linux Kernel to v5.4.96 / 5.10.14
-* :vytask:`T3292` (bug): RIPng: access-lists/prefix-list reference IPv4 and not IPv6 lists during verification
 
 
 2021-02-07
@@ -907,7 +892,7 @@
 ==========
 
 * :vytask:`T3285` (feature): Schedule reboots through systemd-shutdownd instead of atd
-* :vytask:`T661` (feature): Show a warning if router going to reboot soon (due to "commit-confirm" command)
+* :vytask:`T661` (feature): Show a warning if the router is going to reboot soon (due to "commit-confirm" command)
 
 
 2021-02-05
@@ -917,12 +902,6 @@
 * :vytask:`T208` (feature): Ability to ignore default-route from dhcpcd per interface
 
 
-2021-02-04
-==========
-
-* :vytask:`T2834` (bug): Config rollback function is broken due lack access to the config.boot
-
-
 2021-02-03
 ==========
 
@@ -956,7 +935,6 @@
 
 * :vytask:`T3269` (bug): VIF-C interfaces don't verify configuration
 * :vytask:`T3240` (feature): Support per-interface DHCPv6 DUIDs
-* :vytask:`T3037` (bug): Bgp afi ipv6-unicast capability dynamic bug
 * :vytask:`T3273` (default): PPPoE static default-routes deleted on interface down when not added by interface up
 
 
@@ -965,17 +943,13 @@
 
 * :vytask:`T3262` (bug): DHCPv6 client runs when dhcpv6-options is configured without requesting an address or PD
 * :vytask:`T3261` (bug): Does not possible to disable pppoe client interface.
-* :vytask:`T3246` (bug): OSPFv3 router ID not configured in FRR
-* :vytask:`T3126` (bug): unsuppress-map doesn't work for BGP IPv4
 
 
 2021-01-27
 ==========
 
 * :vytask:`T3257` (feature): tcpdump supporting complete protocol
-* :vytask:`T3194` (bug): OSPF redistribution metric issue
 * :vytask:`T3110` (bug): Broken pipe in show interfaces
-* :vytask:`T3085` (feature): IPv6 BGP Neighbor Weight
 * :vytask:`T651` (enhancment): Split CI'ed, VyOS-specific packages and other packages into separate repos
 * :vytask:`T597` (enhancment): Code testing on sonarcloud.com
 * :vytask:`T516` (default): Make Python / XML code development more testable
@@ -994,7 +968,6 @@
 2021-01-25
 ==========
 
-* :vytask:`T3252` (bug): rpki: AttributeError: 'Config' object has no attribute 'return__value'
 * :vytask:`T3249` (feature): Support operation mode forwarding table output
 
 
@@ -1005,12 +978,6 @@
 * :vytask:`T3243` (feature): Update Linux Kernel to v5.4.92 / 5.10.10
 
 
-2021-01-21
-==========
-
-* :vytask:`T3237` (bug): DHCP Server Static-Mapping Validation Error
-
-
 2021-01-18
 ==========
 
@@ -1110,7 +1077,6 @@
 ==========
 
 * :vytask:`T3185` (bug): [conf-mode] Wrong CompletionHelp for Tunnel local-ip
-* :vytask:`T3152` (bug): wan-load-balance does not show connections
 * :vytask:`T2601` (bug): pppoe-server: Cannot disable CCP
 
 
@@ -1123,7 +1089,6 @@
 2021-01-02
 ==========
 
-* :vytask:`T3175` (bug): Dynamic DNS validations don't reflect supported protocols in ddclient
 * :vytask:`T2321` (feature): VRF support for SSH, NTP, SNMP service
 * :vytask:`T3177` (bug): Rolling Release no longer reports VMware UUID
 
@@ -1277,7 +1242,6 @@
 2020-12-01
 ==========
 
-* :vytask:`T3094` (bug): Can not specify multiple deny ports in FW rule
 * :vytask:`T3102` (bug): Destination NAT fails to commit
 * :vytask:`T2713` (bug): VyOS must not change permissions on files in /config/auth
 
@@ -1376,7 +1340,6 @@
 * :vytask:`T3069` (bug): OpenVPN routed networks not available
 * :vytask:`T3038` (feature): Supporting AZERTY keyboards 
 * :vytask:`T2993` (bug): op-mode: lldp: show lldp neighbors - AttributeError: 'str' object has no attribute 'items'
-* :vytask:`T2564` (enhancment): Extend VyOS to support appliance LCDs
 
 
 2020-11-14
@@ -1453,7 +1416,6 @@
 ==========
 
 * :vytask:`T3036` (feature): OpenVPN remote-address does not accept IPv6 address
-* :vytask:`T3032` (feature): Ability to "set table" in the policy route-map
 * :vytask:`T2193` (feature): Display disabled VRRP instances in a `show vrrp` output
 
 
@@ -1488,17 +1450,10 @@
 * :vytask:`T1721` (bug): Recursive Next Hop not updated for static routes
 
 
-2020-10-26
-==========
-
-* :vytask:`T3016` (feature): dhcp-server: use better constraint error message on invalid subnet
-
-
 2020-10-24
 ==========
 
 * :vytask:`T3007` (default): HTTP-API should use config load script, not backend config load
-* :vytask:`T2984` (bug): (igb, ixgbe) HW queues applied only for the first 2 interfaces 
 * :vytask:`T3009` (bug): vpn l2tp remoteaccess require option broken
 * :vytask:`T3010` (bug): ttl option of gre-bridge
 * :vytask:`T3005` (bug): Intel: update out-of-tree drivers, i40e driver warning
@@ -1556,12 +1511,6 @@
 * :vytask:`T2792` (default): Failed to run `sudo make qemu`  with vyos-build container due to the change of packer
 
 
-2020-10-14
-==========
-
-* :vytask:`T2972` (bug): PPPoE server rate limiter allows max 65535 kbps to be set
-
-
 2020-10-13
 ==========
 
@@ -1575,18 +1524,6 @@
 * :vytask:`T2782` (bug): Changing timezone, does not restart rsyslog
 
 
-2020-10-11
-==========
-
-* :vytask:`T2973` (bug): tftp-server cannot listen on IPv6 address
-
-
-2020-10-08
-==========
-
-* :vytask:`T2891` (feature): Support to change ring-buffers from CLI
-
-
 2020-10-06
 ==========
 
@@ -1632,7 +1569,6 @@
 ==========
 
 * :vytask:`T2939` (bug): Wireguard Remove Peer Fails
-* :vytask:`T2932` (bug): The second QAT device does not start
 
 
 2020-09-29
@@ -1653,9 +1589,7 @@
 2020-09-26
 ==========
 
-* :vytask:`T2902` (bug): "add system image" fails when appending XX to image name
 * :vytask:`T2856` (bug): equuleus: `show version all` throws broken pipe exception on abort
-* :vytask:`T2482` (enhancment): Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
 * :vytask:`T2929` (bug): Upgrading from 1.2 (crux) to 1.3 rolling causes vyos.configtree.ConfigTreeError for RADIUS settings
 * :vytask:`T2928` (bug): MTU less then 1280 bytes and IPv6 will raise FileNotFoundError
 * :vytask:`T2926` (bug): snmp.py missing an import
@@ -1730,10 +1664,8 @@
 2020-09-13
 ==========
 
-* :vytask:`T2878` (feature): LACP / bonding: new op-mode command: show interfaces bonding bond0 detail
 * :vytask:`T2858` (feature): Rewrite dynamic dns client to get_config_dict()
 * :vytask:`T2857` (feature): Cleanup Intel QAT configuration script
-* :vytask:`T2841` (bug): "monitor bandwidth-test initiate" does not accept IPv6 address as option
 * :vytask:`T2877` (feature): LACP / bonding: support configuration of minimum number of links
 
 
@@ -1979,7 +1911,7 @@
 ==========
 
 * :vytask:`T1117` (feature): 'show ipv6 bgp route-map' missing
-* :vytask:`T928` (feature): pimd support
+* :vytask:`T928` (feature): Add support for PIM (Protocol-Independent Multicast)
 
 
 2020-07-27
@@ -1992,7 +1924,6 @@
 * :vytask:`T1222` (bug): OSPF routing problem - route looping
 * :vytask:`T1158` (bug): Route-Map configuration dropped updating rc11 to epa2
 * :vytask:`T1130` (bug): Deleting BGP communities from prefix does not work
-* :vytask:`T1086` (bug): Configs not saving
 * :vytask:`T2067` (feature): pppoe-server: Add possibility set multiple service-name
 
 
@@ -2061,7 +1992,6 @@
 ==========
 
 * :vytask:`T2709` (bug): Destination NAT translation port without address fails to commit
-* :vytask:`T2717` (default): Wrong DHCP server pool size in statistics
 * :vytask:`T2519` (bug): Broadcast address does not add automatically
 
 
@@ -2432,7 +2362,6 @@
 ==========
 
 * :vytask:`T2480` (bug): NAT: after rewrite commit tells that dnat IP address is not locally connected
-* :vytask:`T103` (bug): DHCP server prepends shared network name to hostnames
 
 
 2020-05-19
@@ -2663,7 +2592,6 @@
 * :vytask:`T2286` (default): IPoE server vulnerability
 * :vytask:`T2224` (feature): Update Linux Kernel to v4.19.114
 * :vytask:`T2110` (feature): RADIUS: supply include file for radius config to have a uniform CLI
-* :vytask:`T1874` (bug): FRR crashing triggered by RPKI
 * :vytask:`T2324` (feature): Cleanup IPoE server implementation and CLI commands
 
 
@@ -2712,10 +2640,6 @@
 * :vytask:`T2273` (default): OpenVPN no longer starts in latest rolling, migrate to systemd
 * :vytask:`T2263` (feature): Reset feature for SSTP sessions
 * :vytask:`T2262` (bug): Broken reset commands for pptp and l2tp
-* :vytask:`T2059` (default): Set source-validation on bond vif don't work
-* :vytask:`T2276` (default): PPPoE server vulnerability
-* :vytask:`T1490` (bug): BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
-* :vytask:`T1828` (bug): Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
 * :vytask:`T2031` (bug): pseudo-ethernet link interface cannot be changed
 
 
@@ -2742,7 +2666,6 @@
 ==========
 
 * :vytask:`T2260` (feature): vxlan, pseudo-ethernet: convert link nodes to source-interface
-* :vytask:`T2252` (bug): HTTP API add system image can return '504 Gateway Time-out'
 * :vytask:`T2172` (feature): Enable conf VXLAN without remote address
 * :vytask:`T2237` (bug): l2tp, pptp, pppoe wrong chap-secrets file
 
@@ -2761,11 +2684,9 @@
 2020-04-05
 ==========
 
-* :vytask:`T2228` (bug): WireGuard does not allow ports < 1024 to be used
 * :vytask:`T2212` (bug): vyos-1x: WiFi card antenna count not set accordingly
 * :vytask:`T2230` (feature): Split out inlined Jina2 template to data/templates folder
 * :vytask:`T2206` (feature): Split WireGuard endpoint into proper host and port nodes
-* :vytask:`T2032` (bug): Monitor bandwidth bits
 
 
 2020-04-04
@@ -2795,7 +2716,6 @@
 ==========
 
 * :vytask:`T2166` (bug): Broken proxy-arp on vif
-* :vytask:`T2069` (bug): PPPoE-client does not works with service-name option
 * :vytask:`T2180` (bug): get_config_dict should be independent of CLI edit level
 * :vytask:`T2053` (default): Update vyos-load-config.py for version string syntax change
 * :vytask:`T2052` (default): Update vyos-merge-config.py for version string syntax change
@@ -2859,8 +2779,6 @@
 
 * :vytask:`T2150` (feature): SSTP ssl certificates can only be stored in /config/user-data/sstp
 * :vytask:`T2149` (feature): Update Linux Kernel to v4.19.112
-* :vytask:`T1884` (default): Keeping VRRP transition-script native behaviour and adding stop-script
-* :vytask:`T1020` (bug): OSPF Stops distributing default route after a while
 * :vytask:`T476` (enhancment): Update the base system to Debian 10 (Buster)
 
 
@@ -2869,7 +2787,6 @@
 
 * :vytask:`T2142` (bug): vyos-build: Add required packages and step to build-GCE-image script
 * :vytask:`T1870` (feature): Extend Pipeline scripts to support PullRequests
-* :vytask:`T1936` (feature): pppoe-server CLI control features
 
 
 2020-03-20
@@ -2887,7 +2804,6 @@
 * :vytask:`T2135` (bug): Login banner missing spacing now
 * :vytask:`T2132` (feature): Document kernel boot parameter 'vyos-config-debug'
 * :vytask:`T1744` (default): Config load fails in ConfigTree with ValueError: Failed to parse config: lexing: empty token
-* :vytask:`T1301` (default): bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
 
 
 2020-03-17
@@ -2899,7 +2815,6 @@
 2020-03-16
 ==========
 
-* :vytask:`T1803` (bug): Unbind NTP while it's not requested
 * :vytask:`T2131` (feature): Improve syslog remote host CLI definition
 
 
@@ -2909,27 +2824,17 @@
 * :vytask:`T2122` (feature): Update Intel out-of-tree drivers to latest version(s)
 * :vytask:`T2121` (feature): Update Linux Kernel to v4.19.109
 * :vytask:`T2119` (bug): Error on boot when removing ethernet interface from VM
-* :vytask:`T1970` (bug): Correct adding interfaces on boot
-* :vytask:`T1967` (bug): BGP parameter "enforce-first-as" does not work anymore
-* :vytask:`T1432` (enhancment): Implement config write API for Python
-* :vytask:`T1431` (feature): Implement an HTTP API for config reading and modification
-* :vytask:`T2120` (bug): "reset vpn ipsec-peer" doesn't work with named peers
-* :vytask:`T2001` (bug): Error when router reboot
-* :vytask:`T1891` (bug): Router announcements broken on boot
-* :vytask:`T1832` (feature): radvd adding feature DNSSL branch.example.com example.com to existing package
 
 
 2020-03-14
 ==========
 
-* :vytask:`T834` (feature): accel-ppp: l2tp implementation
+* :vytask:`T834` (feature): New L2TP server implementation based on accel-ppp
 
 
 2020-03-13
 ==========
 
-* :vytask:`T1935` (bug): NIC identification and usage problem in Hyper-V environments
-* :vytask:`T1821` (bug): "authentication mode radius" has no effect for PPPoE server
 * :vytask:`T1622` (default): Add failsafe and back trace to boot config loader
 
 
@@ -2951,7 +2856,6 @@
 
 * :vytask:`T2111` (feature): VRF add route leaking support
 * :vytask:`T2109` (bug): Ping by name broken in VyOS 1.3-rolling-202003080217
-* :vytask:`T1416` (default): 2 dhcp server run in failover mode can't  sync  hostname with each other
 * :vytask:`T2065` (bug): VyOS 1.3 Don't set daemon in openvpn-{intf}.conf file
 * :vytask:`T31` (feature): Add VRF support
 
@@ -2992,7 +2896,6 @@
 
 * :vytask:`T2082` (bug): WireGuard broken after merging T2057
 * :vytask:`T2089` (feature): RADIUS: do not query servers when commit is running started from a non RADIUS user
-* :vytask:`T2087` (feature): Add maxfail 0 option to pppoe configuration.
 * :vytask:`T2086` (feature): Move sudo session open/close log entries to auth.log
 
 
@@ -3000,7 +2903,6 @@
 ==========
 
 * :vytask:`T2046` (feature): allowing sub-classes of Interface to redefine how the interface is created
-* :vytask:`T2077` (bug): ISO build from crux branch is failing
 
 
 2020-02-28
@@ -3014,7 +2916,6 @@
 ==========
 
 * :vytask:`T2075` (feature): Add support for OpenVPN tls-crypt file option
-* :vytask:`T2079` (feature): Update Linux Kernel to v4.19.106
 * :vytask:`T2068` (feature): Update Linux Kernel to v4.19.105
 * :vytask:`T1703` (default): Macvlan PPPoE support 
 * :vytask:`T2078` (feature): Kernel: remove unused RAID functions 5,6,10,jbod,dm
@@ -3023,7 +2924,6 @@
 2020-02-25
 ==========
 
-* :vytask:`T1971` (bug): Missing modules in initrd.img for PXE boot
 * :vytask:`T2070` (feature): Rewrite (dis-)connect op-mode commands in XML and Python
 * :vytask:`T2071` (feature): Add possibility to temporary disable a RADIUS server used for system login
 
@@ -3032,7 +2932,6 @@
 ==========
 
 * :vytask:`T2055` (feature): Remove IPv6 router-advert options for PPPoE
-* :vytask:`T1998` (feature): Update FRR to 7.3
 * :vytask:`T1318` (feature): PPPoE client CLI redesign
 
 
@@ -3106,12 +3005,6 @@
 * :vytask:`T1931` (bug): Enabling SNMP commit error
 
 
-2020-02-08
-==========
-
-* :vytask:`T1851` (bug): wireguard - changing the pubkey on an existing peer seems to destroy the running config.
-
-
 2020-02-05
 ==========
 
@@ -3158,16 +3051,11 @@
 2020-01-29
 ==========
 
-* :vytask:`T1392` (bug): Large firewall rulesets cause the system to lose configuration and crash at startup
 * :vytask:`T1996` (feature): Update Linux Kernel to 4.19.99
 * :vytask:`T1862` (default): Use regex pattern \s+ to split strings on whitespace in Python 3.7
-* :vytask:`T1780` (feature): Adding ipsec ike closeaction
 * :vytask:`T1755` (bug): Python KeyError exceptions raised with 'show vpn ipsec sa' command under use of certain IPSEC cipher suites
 * :vytask:`T1747` (bug): L2TP breaks after upgrading to VyOS 1.2-rolling-201910180117  [issue report and proposed solution]
 * :vytask:`T1664` (bug): Ipoe with bond per vlan don't work
-* :vytask:`T1452` (feature): accel-pppoe - add vendor option to shaper 
-* :vytask:`T1376` (feature): Incorrect DHCP lease counting
-* :vytask:`T1341` (default): Adding rate-limiter for pppoe server users
 * :vytask:`T1895` (feature): There is not restriction on selection of syslog facility
 * :vytask:`T1670` (feature): OpenVPN option for tls-auth
 
@@ -3178,14 +3066,6 @@
 * :vytask:`T1937` (bug): snmpd throwing a tremendous amount of errors
 * :vytask:`T1767` (bug): IPoE - vyos.config rewrite
 * :vytask:`T1765` (bug): wireguard - vyos.config rewrite
-* :vytask:`T1964` (default): SNMP Script-extensions allows names with spaces, but commit fails
-
-
-2020-01-25
-==========
-
-* :vytask:`T1902` (feature): Add redistribute non main table in bgp
-* :vytask:`T1900` (default): Enable SNMP for VRRP.
 
 
 2020-01-24
@@ -3224,13 +3104,6 @@
 ==========
 
 * :vytask:`T1959` (bug): Error message when adding IPSec VPN
-* :vytask:`T1827` (feature): Increase default gc_thresh
-
-
-2020-01-13
-==========
-
-* :vytask:`T1909` (bug): Incorrect behaviour of static routes with overlapping networks
 
 
 2020-01-09
@@ -3255,10 +3128,7 @@
 2020-01-01
 ==========
 
-* :vytask:`T1903` (default): Implementation udev predefined interface naming
-* :vytask:`T1825` (feature): Improve DHCP configuration error message
 * :vytask:`T1779` (bug): Tunnel interfaces aren't suggested as being available for bridging
-* :vytask:`T1430` (default): Add options for custom DHCP client-id and hostname
 
 
 2019-12-31
@@ -3276,14 +3146,12 @@
 * :vytask:`T1897` (bug): IPSec - 1.2 to 1.3 migration failed
 * :vytask:`T1921` (bug): snmp: VyOS options no longer recognized
 * :vytask:`T1922` (feature): Add VXLAN IPv6 support
-* :vytask:`T1858` (default): l2tp: Delete deprecated outside-nexthop and add gateway-address 
 * :vytask:`T1919` (feature): Migrate "system options" to XML/Python representation
 
 
 2019-12-28
 ==========
 
-* :vytask:`T1917` (feature): Update WireGuard to Debian release 0.0.20191219-1
 * :vytask:`T1916` (feature): Update Linux Kernel to v4.19.91
 * :vytask:`T1915` (bug): Remove "system ipv6 blacklist" option
 * :vytask:`T1912` (feature): Migrate "system (ip|ipv6)" to XML/Python representation
@@ -3307,7 +3175,6 @@
 
 * :vytask:`T1898` (enhancment): Support multiple IPv4/IPv6 LLDP management addresses
 * :vytask:`T1878` (bug): accel-ppp: pppoe single-session option implementation
-* :vytask:`T258` (default): Can not configure wan load-balancing on vyos-1.2
 
 
 2019-12-22
@@ -3320,7 +3187,6 @@
 ==========
 
 * :vytask:`T1892` (default): vyos-build: Do not install recommends in docker image [enhancement]
-* :vytask:`T1893` (bug): igmp-proxy: Do not allow adding unknown interface
 * :vytask:`T1411` (enhancment): equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster
 
 
@@ -3328,7 +3194,6 @@
 ==========
 
 * :vytask:`T1873` (default): DHCP server fails to start due to a change in isc-dhcp-server init scripts
-* :vytask:`T1881` (bug): Execute permissions are removed from custom SNMP scripts at commit time
 
 
 2019-12-18
@@ -3345,29 +3210,16 @@
 * :vytask:`T1887` (feature): Update WireGuard to Debian release 0.0.20191212-1
 
 
-2019-12-15
-==========
-
-* :vytask:`T1879` (bug): Extend Dynamic DNS XML definition value help strings and validators
-
-
 2019-12-13
 ==========
 
 * :vytask:`T1861` (default): hosts lost after modified static-host-mapping
 
 
-2019-12-12
-==========
-
-* :vytask:`T1864` (feature): Lower IPSec DPD timeout lower limit from 10s -> 2s
-
-
 2019-12-10
 ==========
 
 * :vytask:`T1843` (feature): Add GCC preprocessor support for XML files
-* :vytask:`T1017` (bug): 1.2.0-rc7 duplex auto (autogenerated config) setting not accepted
 
 
 2019-12-08
@@ -3388,7 +3240,6 @@
 * :vytask:`T1860` (feature): Update WireGuard to Debian release 0.0.20191127-2
 * :vytask:`T1859` (feature): Update Linux Kernel to v4.19.88
 * :vytask:`T1854` (bug): Dynamic DNS configuration cannot be deleted
-* :vytask:`T1568` (default): strip-private command improvement for additional masking of IPv6 and MAC address
 * :vytask:`T1849` (bug): DHCPv6 client does not start
 * :vytask:`T1169` (bug): LLDP potentially broken
 * :vytask:`T586` (bug): Cannot add ethernet vif-s vif-c interface to bridge-group
@@ -3418,16 +3269,9 @@
 2019-12-02
 ==========
 
-* :vytask:`T1841` (bug): PPP ipv6-up.d direcotry missing
 * :vytask:`T1840` (bug): PPPoE doesn't not rename pppX to pppoeX
 
 
-2019-11-28
-==========
-
-* :vytask:`T1299` (feature): Allow SNMPd to be extended with custom scripts
-
-
 2019-11-25
 ==========
 
@@ -3444,23 +3288,7 @@
 2019-11-23
 ==========
 
-* :vytask:`T1812` (bug): DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling 
 * :vytask:`T1627` (feature): Rewrite wireless interface in new style XML syntax
-* :vytask:`T1811` (bug): Upgrade from 1.1.8: Config file migration failed: module=l2tp
-
-
-2019-11-22
-==========
-
-* :vytask:`T1786` (bug): disable-dhcp-nameservers is missed in current host_name.py implementation
-* :vytask:`T1749` (bug): numeric validator doesn't support multiple ranges
-* :vytask:`T1701` (bug): Delete domain-name and domain-search won't work
-* :vytask:`T1694` (default): NTPd: Do not listen on all interfaces by default
-* :vytask:`T1678` (bug): hostfile-update missing line feed
-* :vytask:`T1593` (feature): Support ip6gre
-* :vytask:`T1391` (feature): In route-map set community additive
-* :vytask:`T1772` (bug): <regex> constraints in XML are partially broken
-* :vytask:`T1597` (bug): /usr/sbin/rsyslogd after deleting "system syslog"
 
 
 2019-11-21
@@ -3470,32 +3298,6 @@
 * :vytask:`T1814` (default): Add log of migration scripts run during config migration
 
 
-2019-11-19
-==========
-
-* :vytask:`T1705` (default): High CPU usage by bgpd when snmp is active
-
-
-2019-11-17
-==========
-
-* :vytask:`T1742` (default): NHRP unable to commit.
-* :vytask:`T1740` (default): Broken OSPFv2 virtual-link authentication
-* :vytask:`T1485` (bug): Enable 'AdvIntervalOpt' option in for radvd.conf
-* :vytask:`T1470` (enhancment): improve output of "show dhcpv6 server leases"
-* :vytask:`T1421` (bug): OpenVPN client push-route stopped working, needs added quotes to fix
-* :vytask:`T1183` (feature): BFD Support via FRR
-* :vytask:`T1578` (bug): completion offers "show table", but show table does not exist
-* :vytask:`T1401` (bug): Copying files with the FTP protocol fails if the password contains special characters
-* :vytask:`T1351` (feature): accel-pppoe adding CIDR based IP pool option
-
-
-2019-11-16
-==========
-
-* :vytask:`T1788` (feature): Intel QAT (QuickAssist Technology ) implementation
-
-
 2019-11-14
 ==========
 
@@ -3505,12 +3307,6 @@
 * :vytask:`T1424` (default): Rewrite the config load script
 
 
-2019-11-12
-==========
-
-* :vytask:`T1800` (feature): Update Linux Kernel to v4.19.84
-
-
 2019-11-11
 ==========
 
@@ -3520,17 +3316,9 @@
 2019-11-10
 ==========
 
-* :vytask:`T1598` (default): New implementation of the resolv.conf and hosts update mechanism
-* :vytask:`T1792` (feature): Update WireGuard to Debian release 0.0.20191012-1
 * :vytask:`T1791` (feature): Update Linux Kernel to 4.19.82
 
 
-2019-11-09
-==========
-
-* :vytask:`T1030` (bug): Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
-
-
 2019-11-08
 ==========
 
@@ -3550,26 +3338,6 @@
 * :vytask:`T1783` (bug): Interface can't unpin from bridge
 
 
-2019-10-30
-==========
-
-* :vytask:`T1778` (bug): Kilobits/Megabits difference in configuration Vyos/FRR
-
-
-2019-10-28
-==========
-
-* :vytask:`T1769` (feature): Remove complex SNMPv3 Transport Security Model (TSM)
-* :vytask:`T1738` (bug): Copy SNMP configuration from node to node raises exception
-* :vytask:`T818` (feature): SNMP v3 - remove required engineid from user node
-
-
-2019-10-26
-==========
-
-* :vytask:`T1560` (default): "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
-
-
 2019-10-22
 ==========
 
@@ -3586,7 +3354,6 @@
 ==========
 
 * :vytask:`T1746` (bug): 201910180117 fails startup with 'Permission Denied' errors
-* :vytask:`T1745` (default): dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
 * :vytask:`T1743` (default): equuleus: remove references to SSH key type "rsa1" deprecated in Debian Buster
 
 
@@ -3594,29 +3361,9 @@
 ==========
 
 * :vytask:`T1712` (default): DHCP client sometimes doesn't start
-* :vytask:`T1684` (bug): Unable to enable IPv6 autoconf on PPPoE
 * :vytask:`T1604` (enhancment): equuleus: buster: vbash: tab completion breaks
 
 
-2019-10-17
-==========
-
-* :vytask:`T1737` (bug): SNMP tab completion missing
-
-
-2019-10-14
-==========
-
-* :vytask:`T1726` (bug): Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
-* :vytask:`T1716` (feature): Update Intel NIC drivers to recent versions
-
-
-2019-10-13
-==========
-
-* :vytask:`T1728` (feature): Update Linux Kernel to 4.19.79
-
-
 2019-10-11
 ==========
 
@@ -3641,15 +3388,6 @@
 ==========
 
 * :vytask:`T1713` (feature): Remove deprecated packages no longer required after migration to Accel-PPP
-* :vytask:`T1709` (bug): Update WireGuard to 0.0.20190913
-* :vytask:`T1708` (bug): Update Rolling Release Kernel to 4.19.76
-
-
-2019-10-04
-==========
-
-* :vytask:`T1707` (bug): DHCP static mapping and exclude address not working
-* :vytask:`T1496` (bug): Separate rolling release and LTS kernel builds
 
 
 2019-10-03
@@ -3667,7 +3405,6 @@
 2019-09-30
 ==========
 
-* :vytask:`T1642` (bug): BGP configuration error when using remove-private-as
 * :vytask:`T1688` (feature): OpenVPN - Add new cipher aes-(128|192|256)-gcm
 
 
@@ -3729,7 +3466,7 @@
 2019-09-17
 ==========
 
-* :vytask:`T239` (bug): firewall all-ping setting is confusing
+* :vytask:`T239` (bug): Improve documentation for the firewall all-ping setting
 
 
 2019-09-16
@@ -3785,18 +3522,9 @@
 
 * :vytask:`T1624` (bug): Failed to set up config session
 * :vytask:`T1636` (feature): Rewrite VXLAN in new style XML/Python
-* :vytask:`T1623` (default): Systemd reports dependency cycle during boot
 * :vytask:`T1479` (bug): libvyosconfig error reporting doesn't include line numbers
 * :vytask:`T808` (feature): replace lighthttpd with nginx
-* :vytask:`T1616` (bug): 'renew dhcpv6 interface <interfaceName>' command fails, but work within config session
 * :vytask:`T1478` (bug): libvyosconfig parser does not support escaped quotes inside single-quoted strings
-* :vytask:`T1360` (bug): DNS nameservers from dhcp not set
-
-
-2019-09-05
-==========
-
-* :vytask:`T1443` (default): New "service https" implementation
 
 
 2019-09-04
@@ -3804,11 +3532,8 @@
 
 * :vytask:`T1632` (bug): OpenVPN 'push' options with quotes
 * :vytask:`T1631` (bug): Multiple push-route options cause error generating openvpn configuration
-* :vytask:`T1605` (bug): L2tp over IPsec not working in Crux
 * :vytask:`T1557` (feature): Create generic abstraction for configuring interfaces e.g. IP address
-* :vytask:`T1439` (bug): DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id
 * :vytask:`T1628` (feature): Adopt WireGuard configuration script to new vyos.ifconfig class
-* :vytask:`T1543` (enhancment): Add a source address/interface option for commit archive connections
 * :vytask:`T1614` (feature): Rewrite bonding interface in new style XML syntax
 
 
@@ -3821,30 +3546,7 @@
 2019-08-31
 ==========
 
-* :vytask:`T1559` (default): webproxy (squidguard) doesn't work
-* :vytask:`T1531` (bug): Several bugs in cluster configuration
-* :vytask:`T1530` (bug): vyos 1.2.1 "set system syslog global archive file" don't work
-* :vytask:`T1529` (bug): BGP unnumbered is not working with a vif interface
-* :vytask:`T1472` (bug): Impossible to recreate group in rfc3768-compatibility mode
-* :vytask:`T1468` (bug): BGP route-reflector-client config erroneously claims remote-as is incorrect
-* :vytask:`T1460` (bug): "show firewall ...." doesn't support counters with more than eight digits
 * :vytask:`T1456` (bug): Port group cannot be configured if the same port is configured as standalone and inside a range
-* :vytask:`T1450` (default): crux: ping * flood is not working
-* :vytask:`T1428` (default): Wireguard: fwmark setting is not honored
-* :vytask:`T1420` (bug): logrotate permission errors on vyatta logfiles
-* :vytask:`T1362` (bug): Incorrect handling of special characters in VRRP passwords
-
-
-2019-08-30
-==========
-
-* :vytask:`T1587` (bug): New implementation of "monitor interface"
-
-
-2019-08-29
-==========
-
-* :vytask:`T1571` (bug): `show log vpn ipsec` produces no output 
 
 
 2019-08-28
@@ -3856,7 +3558,6 @@
 2019-08-27
 ==========
 
-* :vytask:`T1613` (bug): IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG)
 * :vytask:`T1617` (default): OpenVPN push route failure
 * :vytask:`T1250` (bug): FRR not setting default gateway from dhcp
 
@@ -3874,8 +3575,6 @@
 ==========
 
 * :vytask:`T1611` (default): Migration to latest rolling fails with vyos.configtree.ConfigTreeError: Path [b'interfaces bridge br0 igmp-snooping querier'] doesn't exist
-* :vytask:`T1333` (bug): pdns_recursor does not perform recursive lookups on domain specific forwarders
-* :vytask:`T1524` (feature): Add support to set allow-from network in DNS forwarding
 
 
 2019-08-23
@@ -3884,12 +3583,6 @@
 * :vytask:`T1606` (bug): Rolling release no longer boots after adding hostname daemon
 
 
-2019-08-22
-==========
-
-* :vytask:`T1131` (bug): open-vm-tools causing 100% CPU load
-
-
 2019-08-21
 ==========
 
@@ -3908,14 +3601,12 @@
 
 * :vytask:`T1580` (feature): Rewrite dummy interface type with new style XML/Python interface
 * :vytask:`T1590` (default): Convert 'show system' operations from vyatta-op to python/xml syntax
-* :vytask:`T1377` (default): BGP Weight Not properly applying
 
 
 2019-08-17
 ==========
 
 * :vytask:`T1592` (feature): Update Linux Kernel to v4.19.67
-* :vytask:`T1551` (default): Error when creating QinQ interface without earlier sets firewall name, if it used
 
 
 2019-08-15
@@ -3948,16 +3639,10 @@
 * :vytask:`T1561` (bug): VyOS rolling ISO cluttered with vyatta-ravpn Git Repo
 
 
-2019-08-03
-==========
-
-* :vytask:`T1554` (bug): Enable RSS (Receive Side Scaling) and Multiqueue for Intel drivers
-
-
 2019-08-02
 ==========
 
-* :vytask:`T853` (feature): accel-ppp: SSTP implementation
+* :vytask:`T853` (feature): Add SSTP server support
 * :vytask:`T742` (feature): Replace poptop and xl2tpd with accel-ppp
 
 
@@ -4013,43 +3698,19 @@
 * :vytask:`T533` (feature): Support for PPPoE MTU greater than 1492
 
 
-2019-07-15
-==========
-
-* :vytask:`T1526` (feature): [SNMP] write documentation for snmp script extension
-* :vytask:`T1516` (bug): [wireguard] config changes cause an error
-
-
-2019-07-14
-==========
-
-* :vytask:`T1066` (bug): Missing NICs
-
-
-2019-07-10
-==========
-
-* :vytask:`T1505` (bug): vyos.config return_effective_values does not convert the output to a list
-* :vytask:`T1503` (feature): Add functions for commit lock checking
-* :vytask:`T1504` (bug): DHCP-provided DNS servers are not propagated to resolv.conf
-* :vytask:`T1400` (bug): iBGP: remote-as and router AS can't be the same value
-
-
 2019-07-08
 ==========
 
-* :vytask:`T1465` (bug): Priority inversion in "interfaces vti vtiX ip"
 * :vytask:`T1510` (feature): [IPoE] vlan-mon option implementation
 * :vytask:`T1508` (feature): [pppoe] migration script for service pppoe-server interface
 * :vytask:`T1494` (feature): accel-ppp: IPoE update documentation
-* :vytask:`T989` (feature): accel-ppp: IPoE implementation
+* :vytask:`T989` (feature): Add support for IPoE server
 
 
 2019-07-03
 ==========
 
 * :vytask:`T1502` (feature): Add build sanity checking tools to the dev builds
-* :vytask:`T1469` (enhancment): Create forward-zones-recurse entry instead of forward-zones when setting service dns forwarding
 
 
 2019-07-02
@@ -4069,35 +3730,24 @@
 ==========
 
 * :vytask:`T1482` (feature): Add OpenVPN SHA384 hashing algorithm
-* :vytask:`T1484` (bug): OSPF md5 key not removed in strip-private
 
 
 2019-06-23
 ==========
 
-* :vytask:`T1477` (feature): Intel i40evf fails to load - unknown symbol
-* :vytask:`T1474` (feature): Update WireGuard to 0.0.20190601
-* :vytask:`T1473` (feature): Update Kernel from 4.19.52 to 4.19.54
 * :vytask:`T1476` (bug): Update PowerDNS recursor to 4.2 series
-* :vytask:`T1475` (feature): Enable Kernel Data Center Bridging (CONFIG_DCB) support
-* :vytask:`T1471` (bug): Wireguard interfaces have no firewall subtree
-* :vytask:`T1455` (feature): Update Intel i40e driver to 2.9.21
-* :vytask:`T1464` (feature): FRR: Set explicit OSPFv3 network type for specified interface
 
 
 2019-06-22
 ==========
 
-* :vytask:`T1371` (bug): Arguments of VRRP health check scripts are ignored
 * :vytask:`T1313` (feature): Add support for reusable build flavours
 * :vytask:`T1202` (bug): Add `hvinfo` to the packages directory
-* :vytask:`T1433` (bug): "show dhcpv6 server leases" shows leases from wrong file
 
 
 2019-06-20
 ==========
 
-* :vytask:`T1461` (bug): Deleting 'firewall options' causes Python TypeError
 * :vytask:`T1413` (enhancment):  equuleus: buster: vyos-xe-guest-utilities is not installable and breaks live-build
 * :vytask:`T1412` (enhancment):  equuleus: buster: vyos-netplug is not installable and breaks live-build
 
@@ -4105,33 +3755,20 @@
 2019-06-19
 ==========
 
-* :vytask:`T1453` (bug): Warning: nss-myhostname is not installed
-* :vytask:`T1447` (bug): Python subprocess called without import in host_name.py
 * :vytask:`T1334` (feature): Migration script runner rewrite
 * :vytask:`T1327` (bug): Set the serial console speed to 115200 by default
-* :vytask:`T1454` (bug): Reading deprecated /etc/frr/daemons.conf
 
 
 2019-06-18
 ==========
 
 * :vytask:`T1451` (bug): Intel e1000e driver missing in lates rolling release
-* :vytask:`T1446` (default): Raid install with efi can generate some warning output.
-* :vytask:`T1444` (feature): Update Linux Kernel to v4.19.52
 
 
 2019-06-17
 ==========
 
-* :vytask:`T1394` (bug): syslog systemd and host_name.py race condition
 * :vytask:`T1408` (feature): pppoe-server - implement local-ipv6 for pure IPv6 based deployments
-* :vytask:`T1390` (default): Extend bgp config for bestpath as-path multipath-relax
-
-
-2019-06-16
-==========
-
-* :vytask:`T1438` (bug): DMI board/product serial can't be read
 
 
 2019-06-12
@@ -4146,31 +3783,12 @@
 * :vytask:`T1426` (default): Update the script that checks conntrack hash-size on reboot
 
 
-2019-06-04
-==========
-
-* :vytask:`T1379` (bug): Deprecated functions in /sbin/dhclient-script
-
-
 2019-06-03
 ==========
 
 * :vytask:`T1423` (default): When merging remote config files, create known_hosts file if not present.
 
 
-2019-06-01
-==========
-
-* :vytask:`T1422` (feature): Add a utility for querying values in config files
-* :vytask:`T1309` (bug): allow duplicate ip adresses on different interfaces
-
-
-2019-05-30
-==========
-
-* :vytask:`T1419` (bug): Can't delete multiple OSPF passive-interfaces in single commit
-
-
 2019-05-28
 ==========
 
@@ -4180,8 +3798,6 @@
 2019-05-26
 ==========
 
-* :vytask:`T1388` (bug): OpenVPN client connections with password and certificate authentication don't work
-* :vytask:`T1387` (bug): Disabling a DHCP interface with no address displays an error
 * :vytask:`T1404` (feature): Update iproute2 package to 4.19
 
 
@@ -4210,12 +3826,6 @@
 * :vytask:`T592` (bug): lldpcli: unknown command from argument 1: `#`
 
 
-2019-05-20
-==========
-
-* :vytask:`T1384` (bug): vxlan remote-port
-
-
 2019-05-16
 ==========
 
@@ -4223,36 +3833,12 @@
 * :vytask:`T1148` (bug): epa2 BGP peers initiate before config is fully loaded, routes leak.
 
 
-2019-05-13
-==========
-
-* :vytask:`T1378` (feature): Embed Git commit ID of vyos-build repo in resulting image
-
-
-2019-05-12
-==========
-
-* :vytask:`T1370` (bug): Webproxy with ldap authentication don't start
-
-
-2019-05-09
-==========
-
-* :vytask:`T1367` (bug): VIF deletion fails inconsistently
-
-
 2019-05-06
 ==========
 
 * :vytask:`T1368` (feature): Enable MPLS support in Linux Kernel
 
 
-2019-05-05
-==========
-
-* :vytask:`T1366` (feature): Update Linux Kernel to v4.19.40
-
-
 2019-05-04
 ==========
 
@@ -4262,47 +3848,20 @@
 2019-04-29
 ==========
 
-* :vytask:`T1359` (bug): Changing VLAN interface address from DHCP to static is not handeled in vyatta-address script
 * :vytask:`T1352` (feature): vyos-documentaion: accel-pppoe adding CIDR based IP pool option
 
 
-2019-04-26
-==========
-
-* :vytask:`T1357` (feature): Wrong exit code produced by dhcp-server migration script
-
-
-2019-04-25
-==========
-
-* :vytask:`T1355` (bug): rsyslog stopped after reboot or clean start
-
-
-2019-04-23
-==========
-
-* :vytask:`T1242` (bug): Error when setting 'pppoe 0 ipv6 address autoconf'
-* :vytask:`T1345` (feature): Specify RADIUS source IP for system login command
-* :vytask:`T41` (feature): Feature Request: Include bgpq3 for BGP policy creation
-
-
 2019-04-21
 ==========
 
 * :vytask:`T1348` (feature): Upgrade WireGuard to 0.0.20190406-1
 * :vytask:`T1347` (feature): Upgrade Linux Kernel to 4.19.36
-* :vytask:`T1343` (default): do not remove trailing zeroes from subnets in DHCP static route config
-* :vytask:`T1332` (bug): Upgrade ethtool from 3.16 to 4.19
 
 
 2019-04-20
 ==========
 
-* :vytask:`T1335` (default): Configuration migration issue from 1.1.8 to latest 1.2.0 regarding DHCP `authoritative enable` statement
-* :vytask:`T1336` (default): `system domain-name` statement doesn't allow domain names ending in a dot on latest 1.2.0
 * :vytask:`T1344` (feature): Unclutter "system login radius" configuration nodes
-* :vytask:`T1245` (default): Cannot Clamp MSS on Transient Bridge Interfaces - Turn On br_netfilter
-* :vytask:`T1310` (feature): Replace system prompt with FQDN
 
 
 2019-04-19
@@ -4311,16 +3870,9 @@
 * :vytask:`T1325` (default): GRE tunnel to Cisco router fails in 1.2.0 - works in 1.1.8
 
 
-2019-04-17
-==========
-
-* :vytask:`T14` (enhancment): Provide VMware OVF and OVA
-
-
 2019-04-16
 ==========
 
-* :vytask:`T1274` (feature): Update QLogic firmware files
 * :vytask:`T1184` (feature): wireguard - extend documentation with the show interface wireguard commands
 
 
@@ -4328,27 +3880,13 @@
 ==========
 
 * :vytask:`T1260` (feature): VICI-based implementation of "run show vpn ipsec sa"
-* :vytask:`T1273` (default): Add script profiling functionality to the config backend
 * :vytask:`T1248` (default): Add a function for copying nodes to the vyos.configtree library
 
 
-2019-04-10
-==========
-
-* :vytask:`T1329` (default): support installation on SD cards fix
-
-
-2019-04-07
-==========
-
-* :vytask:`T1296` (default): Image install can't install to SD cards (mmcblk...)
-
-
 2019-04-05
 ==========
 
 * :vytask:`T1324` (feature): update documtation for 'set system login user level'
-* :vytask:`T1322` (bug): Wrong configuration generated for DHCPv6 Relay
 
 
 2019-04-04
@@ -4357,72 +3895,17 @@
 * :vytask:`T1323` (feature): migrate operator accounts to admin accounts and remove the option to setup an operator account
 
 
-2019-03-26
-==========
-
-* :vytask:`T1312` (feature): Allow many to many NAT rules with networks of different size
-* :vytask:`T1305` (bug): libvyosconfig parser doesn't work when config lacks a version comment and ends at a leaf node
-
-
-2019-03-22
-==========
-
-* :vytask:`T1308` (bug): Use of '<' in PPPoE password fails
-* :vytask:`T1279` (bug): ACPI power event don't work
-
-
 2019-03-20
 ==========
 
-* :vytask:`T1282` (feature): Configure VyOS to send syslog messages to remote syslog using fully-qualified domain name
-* :vytask:`T1004` (feature): ISO + System Boot with Serial Console for APU2 and Embedded Devices
 * :vytask:`T405` (feature): Add binaries for lcdproc
 
 
-2019-03-17
-==========
-
-* :vytask:`T1218` (bug): Static routes not being applied in 1.2 Release
-* :vytask:`T1067` (feature): VXLAN support improvements
-* :vytask:`T1285` (bug): Kernel issues with 1.2.0 & 1.2.0-rolling+201903060337 causing lockup
-* :vytask:`T1252` (feature): Extend vyos-ci Kernel Pipeline to build Intel native drivers
-* :vytask:`T1240` (feature): Wireguard module update to 0.0.20190123
-* :vytask:`T484` (bug): Rules can't be deleted from firewall rule sets used in zone policies
-* :vytask:`T986` (feature): Please update the i40e driver
-
-
-2019-03-16
-==========
-
-* :vytask:`T1272` (bug): VRRP is using physical rather than virtual MAC in RFC-compliant mode
-
-
 2019-03-12
 ==========
 
 * :vytask:`T1284` (feature): accel-ppp: pptp implementation documention
-* :vytask:`T833` (feature): accel-ppp: pptp implementation
-
-
-2019-03-08
-==========
-
-* :vytask:`T1277` (bug): Source build of VyOS 1.2.0 (crux) FileNotFound exception in show_dhcp.py
-
-
-2019-03-02
-==========
-
-* :vytask:`T929` (bug): Replace Debian firmware packages with upstream Kernel
-
-
-2019-02-25
-==========
-
-* :vytask:`T1261` (default): TFTP-Server only listen on 127.0.0.1
-* :vytask:`T1211` (default): Blank hostnames from dhcpd are able to bring down DNS
-* :vytask:`T1247` (bug): WAN load-balancing fail when !<x.x.x.x/x> configured in rules
-* :vytask:`T1234` (bug): DHCP relay relay-agents-packets is dysfunctional
+* :vytask:`T833` (feature): New PPTP server implementation based on accel-ppp
 
 
 2019-02-22
@@ -4435,19 +3918,6 @@
 ==========
 
 * :vytask:`T1214` (bug): Add `ipaddrcheck` to the packages directory
-* :vytask:`T1255` (bug): /usr/libexec/vyos/conf_mode/host_name.py needs to add an additional newline char
-
-
-2019-02-19
-==========
-
-* :vytask:`T1051` (default): Update openvpn to support TLS 1.2
-
-
-2019-02-16
-==========
-
-* :vytask:`T1174` (bug): "system domain-name" is not reflected in /etc/resolv.conf
 
 
 2019-02-10
@@ -4459,31 +3929,5 @@
 2019-02-09
 ==========
 
-* :vytask:`T1239` (feature): make module build for vyos-accel-ppp dynamic
 * :vytask:`T1236` (feature): Update Linux Kernel to 4.19.20
 * :vytask:`T1238` (bug): Wireguard allows invalid IP's
-* :vytask:`T1010` (bug): improper pid file handling of webgui
-
-
-2019-02-08
-==========
-
-* :vytask:`T173` (bug): Static routes ignored with DHCP received gateway
-
-
-2019-02-05
-==========
-
-* :vytask:`T1231` (feature): Remove “service dns dynamic“ cache file on node change/delete
-
-
-2019-01-29
-==========
-
-* :vytask:`T166` (bug): NPTv6 is broken
-
-
-2018-12-07
-==========
-
-* :vytask:`T1060` (default): Add an option to exclude addresses from transparent wev proxying
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index 48622477..2c1b40eb 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,46 @@
    _ext/releasenotes.py
 
 
+2021-09-11
+==========
+
+* :vytask:`T3402` (feature): Add VyOS programming library for operational level commands
+* :vytask:`T3275` (default): Disable conntrack helpers by default
+
+
+2021-09-10
+==========
+
+* :vytask:`T3802` (bug): Commit fails if ethernet interface doesn't support flow control
+* :vytask:`T3819` (bug): Upgrade Salt Stack 3002.3 -> 3003 release train
+* :vytask:`T915` (feature): MPLS Support
+
+
+2021-09-09
+==========
+
+* :vytask:`T3812` (bug): Vyos and frr route-map config out of sync
+* :vytask:`T3814` (bug): wireguard: commit error showing incorrect peer name from the configured name
+* :vytask:`T3805` (bug): OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface
+* :vytask:`T3815` (bug): pki : the file command 'generate pki wireguard key-pair file' is not working
+
+
+2021-09-07
+==========
+
+* :vytask:`T1894` (bug): FRR config not loaded after daemons segfault or restart
+* :vytask:`T3807` (bug): Op Command "show interfaces wireguard"  does not show the output
+
+
+2021-09-06
+==========
+
+* :vytask:`T3806` (bug): Don't set link local ipv6 address if MTU less then 1280
+* :vytask:`T3803` (default): Add source-address option to the ping CLI
+* :vytask:`T3431` (bug): Show version all bug
+* :vytask:`T2920` (bug): Commit crash when adding the second mGRE tunnel with the same key
+
+
 2021-09-05
 ==========
 
@@ -26,7 +66,6 @@
 * :vytask:`T3788` (bug): Keys are not allowed with ipip and sit tunnels
 * :vytask:`T3634` (feature): Add op command option for ping for do not fragment bit to be set
 * :vytask:`T3798` (feature): bgp: add support for "neighbor <X> local-as replace-as" option
-* :vytask:`T690` (feature): openvpn push-route allow different metric
 
 
 2021-09-02
@@ -285,12 +324,6 @@
 * :vytask:`T1441` (feature): Add support for IPSec XFRM interfaces
 
 
-2021-06-27
-==========
-
-* :vytask:`T3653` (default): Cloudinit subnet error if a cidr (/24) is used instead of a subnet mask (255.255.255.0)
-
-
 2021-06-25
 ==========
 
@@ -311,7 +344,6 @@
 
 * :vytask:`T3629` (bug): IPoE server shifting address in the range
 * :vytask:`T3645` (feature): Bullseye: ethtool changed output for ring-buffer information
-* :vytask:`T3582` (default): 'delete log file' does not work
 
 
 2021-06-21
@@ -331,7 +363,6 @@
 ==========
 
 * :vytask:`T3633` (feature): Add LRO offload for interface ethernet
-* :vytask:`T3632` (bug): policy: route-map: unable to configure route-target / site-of-origin
 
 
 2021-06-18
@@ -382,7 +413,6 @@
 
 * :vytask:`T3250` (bug): PPPoE server:  wrong local usernames
 * :vytask:`T3138` (bug): ddclient improperly updated when apply rfc2136 config
-* :vytask:`T2620` (feature): Add ipsec peer-name to log to simplifies grepping and troubleshooting
 * :vytask:`T2645` (default): Editing route-map action requires adding a new rule
 
 
@@ -437,7 +467,6 @@
 2021-05-30
 ==========
 
-* :vytask:`T3524` (default): Please implement  bgp graceful-shutdown
 * :vytask:`T3518` (bug): Warning messages when using SCP commit-archive
 * :vytask:`T3093` (default): Add xml for vpn ipsec
 * :vytask:`T1866` (bug): Commit archive over SFTP doesn't work with non-standard ports
@@ -452,7 +481,6 @@
 
 * :vytask:`T1944` (bug): FRR: Invalid route in BGP causes update storm, memory leak, and failure of Zebra
 * :vytask:`T1888` (feature): Update to StrongSwan 5.9.1
-* :vytask:`T1995` (bug): "show vpn ike sa" command always show child-sas as down
 
 
 2021-05-27
@@ -468,12 +496,6 @@
 * :vytask:`T3540` (bug): Keepalived memory utilisation issue when constantly getting its state in JSON format
 
 
-2021-05-25
-==========
-
-* :vytask:`T3569` (bug): Firewall wrong completion help values
-
-
 2021-05-24
 ==========
 
@@ -523,12 +545,6 @@
 * :vytask:`T3525` (default): VMWare resume script syntax errors
 
 
-2021-05-17
-==========
-
-* :vytask:`T3557` (bug): ddclient: FileNotFoundError in op-mode
-
-
 2021-05-15
 ==========
 
@@ -544,7 +560,6 @@
 
 * :vytask:`T3346` (bug): nat 4-to-5 migration script fails when a 'source' or 'destination' node exists but there are no rules
 * :vytask:`T3248` (default): Deal with VRRP mode-force command that exists in 1.2 but not in 1.3
-* :vytask:`T2809` (bug): An issue with config migration (system ntp server)
 * :vytask:`T3426` (default): add support for script arguments to vyos-configd
 
 
@@ -574,13 +589,6 @@
 ==========
 
 * :vytask:`T3530` (bug): BGP peer-group can't contain a hyphen
-* :vytask:`T3531` (bug): policy: prefix-list and route-map names do not allow underscores in names (FRR does)
-
-
-2021-05-07
-==========
-
-* :vytask:`T3333` (bug): "show vpn ipsec sa" reports ESP tunnels to be up when they are not.
 
 
 2021-05-06
@@ -729,7 +737,6 @@
 ==========
 
 * :vytask:`T3462` (default): show ipv6 bgp -- missing
-* :vytask:`T3456` (bug): firewall: rules that should be deleted seem to be still in use
 * :vytask:`T3463` (bug): Prevent IPv4 Route exchange with IPv6 neighbors
 
 
@@ -1115,9 +1122,3 @@
 ==========
 
 * :vytask:`T3132` (feature): Enable egress flow accounting
-
-
-2020-07-20
-==========
-
-* :vytask:`T2717` (default): Wrong DHCP server pool size in statistics