1 files changed, 308 insertions, 0 deletions
diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst
index 86fec4d4..3919ade7 100644
--- a/docs/changelog/1.4.rst
+++ b/docs/changelog/1.4.rst
@@ -8,6 +8,314 @@
    _ext/releasenotes.py
 
 
+2023-12-03
+==========
+
+* :vytask:`T5753` ``(feature): Add VXLAN vnifilter support``
+* :vytask:`T5759` ``(feature): Change VXLAN default MTU to 1500 bytes``
+
+
+2023-11-30
+==========
+
+* :vytask:`T4601` ``(bug): dhcp : relay agent IP address issue.``
+
+
+2023-11-28
+==========
+
+* :vytask:`T4276` ``(bug): IPsec peers dh-group negotiation issue with pfs enabled and multiple proposals configured with IKEv1``
+
+
+2023-11-27
+==========
+
+* :vytask:`T5763` ``(bug): Fix imprecise check for remote file name in vyos-load-config.py``
+* :vytask:`T5783` ``(feature): frr: smoketests must notice any daemon crash``
+
+
+2023-11-26
+==========
+
+* :vytask:`T5760` ``(feature): DHCP client custom dhcp-options``
+* :vytask:`T2405` ``(feature): archive to GIT or other platform``
+
+
+2023-11-25
+==========
+
+* :vytask:`T5655` ``(bug): commit-archive: Ctrl+C should not eror out with stack trace, signal should be cought``
+* :vytask:`T4946` ``(default): Rewrite "add system image" in the new op-mode``
+* :vytask:`T4454` ``(default): `install-image` should check free storage``
+
+
+2023-11-24
+==========
+
+* :vytask:`T5776` ``(feature): Enable VFIO support``
+* :vytask:`T5402` ``(bug): VRRP router with rfc3768-compatibility sends multiple ARP replies``
+* :vytask:`T3895` ``(default): VYOS firewall rules do not adhere to time schedule unless placed in UTC mode.``
+
+
+2023-11-23
+==========
+
+* :vytask:`T4891` ``(bug): BFD flapping loop``
+* :vytask:`T4867` ``(bug): "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors``
+
+
+2023-11-22
+==========
+
+* :vytask:`T5767` ``(feature): Add reboot and poweroff the system via API``
+* :vytask:`T5729` ``(bug): Firewall, nat and policy route - Switch to valueless``
+* :vytask:`T5681` ``(feature): Interface match - Simplified and unified cli``
+* :vytask:`T4877` ``(bug): Need verification in using import vrf and import vpn, export vpn commands``
+* :vytask:`T4021` ``(bug): Long commit time on bridge interface with 1-4094 allowed VLAN tags``
+* :vytask:`T5338` ``(feature): Add 'mpls bgp forwarding' feature``
+* :vytask:`T3818` ``(bug): BGP export route-map only works after bgpd restart``
+* :vytask:`T5590` ``(default): Firewall "log enable" logs every packet``
+* :vytask:`T5426` ``(default): Add exceptions in vici functions calls``
+
+
+2023-11-21
+==========
+
+* :vytask:`T5762` ``(bug): http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server``
+
+
+2023-11-20
+==========
+
+* :vytask:`T2816` ``(default): Rewrite IPsec scripts with the new XML/Python approach``
+
+
+2023-11-18
+==========
+
+* :vytask:`T1354` ``(feature): Add support for VLAN-Aware bridges``
+
+
+2023-11-16
+==========
+
+* :vytask:`T5726` ``(bug): HTTPS API image cannot be updated``
+* :vytask:`T5738` ``(feature): Extend XML building blocks``
+* :vytask:`T5736` ``(feature): igmp: migrate "protocols igmp" to "protocols pim"``
+* :vytask:`T5733` ``(feature): pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features``
+* :vytask:`T5689` ``(default): FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix``
+* :vytask:`T5595` ``(feature): Multicast - PIM  bfd feature enable``
+* :vytask:`T3638` ``(bug): Passwords With Dollar Sign Set Incorrectly``
+
+
+2023-11-15
+==========
+
+* :vytask:`T5695` ``(feature): Build FRR with LUA scripts --enable-scripting option``
+* :vytask:`T5665` ``(bug): radius user not working``
+* :vytask:`T5728` ``(bug): Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client``
+* :vytask:`T5732` ``(bug): generate firewall rule-resequence drops geoip country-code from output``
+* :vytask:`T5661` ``(enhancment): Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection``
+* :vytask:`T1276` ``(bug): dhcp relay + VLAN fails``
+
+
+2023-11-13
+==========
+
+* :vytask:`T5698` ``(feature): EVPN ESI Multihoming``
+* :vytask:`T5563` ``(bug): container: Container environment variable cannot be set``
+* :vytask:`T5706` ``(bug): Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces``
+
+
+2023-11-10
+==========
+
+* :vytask:`T5727` ``(bug): validator: Use native URL validator instead of regex-based validator``
+
+
+2023-11-08
+==========
+
+* :vytask:`T5720` ``(bug): PPPoE-server adding new interface does not work``
+* :vytask:`T5716` ``(bug): PPPoE-server shaper template bug down-limiter option does not rely on fwmark``
+* :vytask:`T5702` ``(feature): Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces  for SNMP``
+* :vytask:`T5648` ``(bug): ldpd neighbour template errors``
+* :vytask:`T5564` ``(bug): Both show firewall group and show firewall summary fails``
+* :vytask:`T5559` ``(feature): Selective proxy-arp/proxy-ndp when doing SNAT/DNAT``
+* :vytask:`T5541` ``(bug): Zone-Based Firewalling in VyOS Sagitta 1.4``
+* :vytask:`T5513` ``(bug): Anomalies in show firewall command after refactoring``
+* :vytask:`T4864` ``(bug): `show firewall` command errors``
+
+
+2023-11-07
+==========
+
+* :vytask:`T5586` ``(feature): Disable by default SNMP for Keepalived VRRP``
+
+
+2023-11-06
+==========
+
+* :vytask:`T5705` ``(bug): rsyslog - Not working when using facility=all``
+* :vytask:`T5704` ``(feature): PPPoE-server add max-starting option``
+* :vytask:`T5707` ``(bug): Wireguard peer public key update leaves redundant peers and breaks connectivity``
+* :vytask:`T4269` ``(feature): node.def generator should automatically add default values``
+
+
+2023-11-05
+==========
+
+* :vytask:`T4020` ``(feature): Add ability to control FRR daemons options``
+
+
+2023-11-03
+==========
+
+* :vytask:`T5700` ``(bug): Monitoring telegraf deprecated plugins inputs outputs``
+* :vytask:`T5018` ``(bug): Redirect to IFB removed after change in qos policy``
+
+
+2023-11-02
+==========
+
+* :vytask:`T5701` ``(feature): Update telegraf package``
+
+
+2023-11-01
+==========
+
+* :vytask:`T5690` ``(bug): Change to definition of environment variable 'vyos_rootfs_dir' is incorrect``
+
+
+2023-10-31
+==========
+
+* :vytask:`T5699` ``(feature): vxlan: migrate "external" CLI know to "parameters external"``
+* :vytask:`T5668` ``(feature): Disable VXLAN bridge learning and enable neigh_suppress when using EVPN``
+
+
+2023-10-27
+==========
+
+* :vytask:`T5652` ``(bug): Config migrate to image upgrade does not properly generate home directory``
+* :vytask:`T4057` ``(bug): Commit time for deleting sflow configuration ~1.5 min``
+
+
+2023-10-26
+==========
+
+* :vytask:`T5683` ``(bug): reverse-proxy pki filenames mismatch``
+* :vytask:`T4903` ``(bug): conntrack ignore does not suppotr IPv6 addresses``
+* :vytask:`T4309` ``(feature): Support network/address-groups and  ipv6-network/ipv6-address-groups in conntrack ignore``
+* :vytask:`T5606` ``(feature): IPSec VPN: Allow multiple CAs certificates``
+* :vytask:`T5650` ``(default): Progressbars suffer from staircasing effect``
+* :vytask:`T5568` ``(default): Install image from live ISO always defaults boot to KVM entry``
+* :vytask:`T3509` ``(default): No BCP38 for IPv6 on VyOS``
+
+
+2023-10-23
+==========
+
+* :vytask:`T5299` ``(bug): QoS shaper ceiling does not work``
+* :vytask:`T5667` ``(feature): BGP label-unicast - enable ecmp``
+* :vytask:`T5337` ``(bug): MPLS/BGP: Route leak does not happen from the VPNv4 table to specific vrf``
+
+
+2023-10-22
+==========
+
+* :vytask:`T5254` ``(bug): Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond``
+* :vytask:`T5671` ``(feature): vxlan: change port to IANA assigned default port``
+
+
+2023-10-21
+==========
+
+* :vytask:`T5670` ``(bug): bridge: missing member interface validator``
+* :vytask:`T5617` ``(feature): Add an option to exclude single values to the numeric validator``
+* :vytask:`T5414` ``(bug): dhcp-server does not allow valid bootfile-names``
+* :vytask:`T5261` ``(feature): Add AWS gateway load-balanceing tunnel handler (gwlbtun)``
+* :vytask:`T5260` ``(bug): Python3 module crypt is deprecated``
+* :vytask:`T5191` ``(default): Replace underscores with hyphens in command-line options generated by vyos.opmode``
+* :vytask:`T5172` ``(default): Set Python3 version dependency for vyos-1x to 3.10``
+* :vytask:`T4956` ``(default): 'show hardware cpu' issue on arm64``
+* :vytask:`T4837` ``(default): Expose "show ip route summary" in the op mode API``
+* :vytask:`T4770` ``(feature): Rewrite OpenVPN op-mode to vyos.opmode format``
+* :vytask:`T4657` ``(bug): op-mode scripts with type hints in `return` do not work``
+* :vytask:`T4604` ``(bug): bgpd eats huge amount of memory (about 500Megs a day)``
+* :vytask:`T4432` ``(default): Display load average normalized according to the number of CPU cores``
+* :vytask:`T4416` ``(default): Convert 'traceroute' operation to the new syntax and expand available options using python``
+* :vytask:`T4402` ``(bug): OpenVPN client-ip-pool option is broken``
+* :vytask:`T3433` ``(default): A review of the use of racist language in VyOS``
+* :vytask:`T2719` ``(feature): Standardized op mode script structure``
+
+
+2023-10-20
+==========
+
+* :vytask:`T5233` ``(bug): Op-mode flow-accounting netflow with disable-imt errors``
+* :vytask:`T5232` ``(bug): Flow-accounting uacctd.service cannot restart correctly``
+
+
+2023-10-19
+==========
+
+* :vytask:`T4913` ``(default): Rewrite the wireless op mode in the new style``
+
+
+2023-10-18
+==========
+
+* :vytask:`T5642` ``(bug): op cmd: generate tech-support archive: does not work``
+* :vytask:`T5521` ``(bug): Home owner directory changed to vyos for the user after reboot``
+
+
+2023-10-17
+==========
+
+* :vytask:`T5662` ``(bug): Fix indexing error in configdep script organization``
+* :vytask:`T5235` ``(bug): SSH keys with special characters cannot be applied via Cloud-init``
+
+
+2023-10-16
+==========
+
+* :vytask:`T5165` ``(feature): Policy local-route ability set protocol and port``
+
+
+2023-10-14
+==========
+
+* :vytask:`T5629` ``(bug): Policy local-route bug after migration to destination node address``
+
+
+2023-10-13
+==========
+
+* :vytask:`T5227` ``(feature): mDNS reflector should allow additional domains to browse and allow filtering services``
+* :vytask:`T5166` ``(feature): Remove local minisign package from build repo for 1.4``
+* :vytask:`T5118` ``(bug): Cleanup vestigial ntp completion script``
+* :vytask:`T5115` ``(default): Support custom port for name servers for forwarding zones``
+* :vytask:`T5113` ``(default): PDNS: Support custom port for DNS forwarders``
+* :vytask:`T5112` ``(feature): Enable support for Network Time Security (NTS) for chrony``
+* :vytask:`T5143` ``(enhancment): Apply constraint on powerdns forward-zones configuration``
+
+
+2023-10-12
+==========
+
+* :vytask:`T5649` ``(bug): vyos-1x should generate XML cache after building command templates for less cryptic error on typo``
+
+
+2023-10-10
+==========
+
+* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option``
+* :vytask:`T5479` ``(bug): Helper leftovers found in nftables (firewall) even with all helpers disabled``
+* :vytask:`T5436` ``(bug): vyos-preconfig-bootup.script is missing``
+* :vytask:`T5014` ``(feature): Destination NAT - Add Load Balancing capabilities``
+
+
 2023-10-08
 ==========