.. _release-notes: ############# Release Notes ############# 1.2 (Crux) ========== 1.2.4 ----- 1.2.4 is a maintenance release made in December 2019. Resolved issues ^^^^^^^^^^^^^^^ * :vytask:`T258` Can not configure wan load-balancing on vyos-1.2 * :vytask:`T818` SNMP v3 - remove required engineid from user node * :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4) * :vytask:`T1183` BFD Support via FRR * :vytask:`T1299` Allow SNMPd to be extended with custom scripts * :vytask:`T1351` accel-pppoe adding CIDR based IP pool option * :vytask:`T1391` In route-map set community additive * :vytask:`T1394` syslog systemd and host_name.py race condition * :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters * :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix * :vytask:`T1430` Add options for custom DHCP client-id and hostname * :vytask:`T1447` Python subprocess called without import in host_name.py * :vytask:`T1470` improve output of "show dhcpv6 server leases" * :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf * :vytask:`T1496` Separate rolling release and LTS kernel builds * :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting * :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address * :vytask:`T1578` completion offers "show table", but show table does not exist * :vytask:`T1593` Support ip6gre * :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog" * :vytask:`T1638` vyos-hostsd not setting system domain name * :vytask:`T1678` hostfile-update missing line feed * :vytask:`T1694` NTPd: Do not listen on all interfaces by default * :vytask:`T1701` Delete domain-name and domain-search won't work * :vytask:`T1705` High CPU usage by bgpd when snmp is active * :vytask:`T1707` DHCP static mapping and exclude address not working * :vytask:`T1708` Update Rolling Release Kernel to 4.19.76 * :vytask:`T1709` Update WireGuard to 0.0.20190913 * :vytask:`T1716` Update Intel NIC drivers to recent versions * :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07 * :vytask:`T1728` Update Linux Kernel to 4.19.79 * :vytask:`T1737` SNMP tab completion missing * :vytask:`T1738` Copy SNMP configuration from node to node raises exception * :vytask:`T1740` Broken OSPFv2 virtual-link authentication * :vytask:`T1742` NHRP unable to commit. * :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop * :vytask:`T1749` numeric validator doesn't support multiple ranges * :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM) * :vytask:`T1772` constraints in XML are partially broken * :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR * :vytask:`T1780` Adding ipsec ike closeaction * :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation * :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation * :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1 * :vytask:`T1800` Update Linux Kernel to v4.19.84 * :vytask:`T1809` Wireless: SSID scan does not work in AP mode * :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp * :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling * :vytask:`T1819` Reboot kills SNMPv3 configuration * :vytask:`T1822` Priority inversion wireless interface dhcpv6 * :vytask:`T1825` Improve DHCP configuration error message * :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml * :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS" * :vytask:`T1841` PPP ipv6-up.d direcotry missing * :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface * :vytask:`T1903` Implementation udev predefined interface naming * :vytask:`T1904` update eth1 and eth2 link files for the vep4600 1.2.3 ----- 1.2.3 is a maintenance and feature backport release made in September 2019. New features ^^^^^^^^^^^^ * HTTP API * :vytask:`T1524` "set service dns forwarding allow-from " option for limiting queries to specific client networks * :vytask:`T1503` Functions for checking if a commit is in progress * :vytask:`T1543` "set system contig-mangement commit-archive source-address" option * :vytask:`T1554` Intel NIC drivers now support receive side scaling and multiqueue Resolved issues ^^^^^^^^^^^^^^^ * :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit errors * :vytask:`T1333` Fixes issue with DNS forwarding not performing recursive lookups on domain specific forwarders * :vytask:`T1362` Special characters in VRRP passwords are handled correctly * :vytask:`T1377` BGP weight is applied properly * :vytask:`T1420` Fixed permission for log files * :vytask:`T1425` Wireguard interfaces now support /31 addresses * :vytask:`T1428` Wireguard correctly handles firewall marks * :vytask:`T1439` DHCPv6 static mappings now work correctly * :vytask:`T1450` Flood ping commands now works correctly * :vytask:`T1460` Op mode "show firewall" commands now support counters longer than 8 digits (T1460) * :vytask:`T1465` Fixed priority inversion in VTI commands * :vytask:`T1468` Fixed remote-as check in the BGP route-reflector-client option * :vytask:`T1472` It's now possible to re-create VRRP groups with RFC compatibility mode enabled * :vytask:`T1527` Fixed a typo in DHCPv6 server help strings * :vytask:`T1529` Unnumbered BGP peers now support VLAN interfaces * :vytask:`T1530` Fixed "set system syslog global archive file" command * :vytask:`T1531` Multiple fixes in cluster configuration scripts * :vytask:`T1537` Fixed missing help text for "service dns" * :vytask:`T1541` Fixed input validation in DHCPv6 relay options * :vytask:`T1551` It's now possible to create a QinQ interface and a firewall assigned to it in one commit * :vytask:`T1559` URL filtering now uses correct rule database path and works again * :vytask:`T1579` "show log vpn ipsec" command works again * :vytask:`T1576` "show arp interface " command works again * :vytask:`T1605` Fixed regression in L2TP/IPsec server * :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly * :vytask:`T1616` "renew dhcpv6" command now works from op mode * :vytask:`T1642` BGP remove-private-as option iBGP vs eBGP check works correctly now * :vytask:`T1540`, :vytask:`T1360`, :vytask:`T1264`, :vytask:`T1623` Multiple improvements in name servers and hosts configuration handling Internals ^^^^^^^^^ ``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the *vyos-hostsd* service that listens on a ZMQ socket for update messages. 1.2.2 ----- 1.2.2 is a maintenance release made in July 2019. New features ^^^^^^^^^^^^ * Options for per-interface MSS clamping. * BGP extended next-hop capability * Relaxed BGP multipath option * Internal and external options for "remote-as" (accept any AS as long as it's the same to this router or different, respectively) * "Unnumbered" (interface-based) BGP peers * BGP no-prepend option * Additive BGP community option * OSPFv3 network type option * Custom arguments for VRRP scripts * A script for querying values from config files Resolved issues ^^^^^^^^^^^^^^^ * Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability * :vytask:`T1371` VRRP health-check scripts now can use arguments * :vytask:`T1497` DNS server addresses coming from a DHCP server are now correctly propagated to resolv.conf * :vytask:`T1469` Domain-specific name servers in DNS forwarding are now used for recursive queries * :vytask:`T1433` ``run show dhcpv6 server leases`` now display leases correctly * :vytask:`T1461` Deleting ``firewall options`` node no longer causes errors * :vytask:`T1458` Correct hostname is sent to remote syslog again * :vytask:`T1438` Board serial number from DMI is correctly displayed in ``show version`` * :vytask:`T1358`, :vytask:`T1355`, :vytask:`T1294` Multiple corrections in remote syslog config * :vytask:`T1255` Fixed missing newline in ``/etc/hosts`` * :vytask:`T1174` ``system domain-name`` is correctly included in ``/etc/resolv.conf`` * :vytask:`T1465` Fixed priority inversion in ``interfaces vti vtiX ip`` settings * :vytask:`T1446` Fixed errors when installing with RAID1 on UEFI machines * :vytask:`T1387` Fixed an error on disabling an interfaces that has no address * :vytask:`T1367` Fixed deleting VLAN interface with non-default MTU * :vytask:`T1505` vyos.config ``return_effective_values()`` function now correctly returns a list rather than a string 1.2.1 ----- VyOS 1.2.1 is a maintenance release made in April 2019. Resolved issues ^^^^^^^^^^^^^^^ * Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers * :vytask:`T1326` The kernel now includes drivers for various USB serial adapters, which allows people to add a serial console to a machine without onboard RS232, or connect to something else from the router * The collection of network card firmware is now much more extensive * :vytask:`T1271` VRRP now correctly uses a virtual rather than physical MAC addresses in the RFC-compliant mode * :vytask:`T1330` DHCP WPAD URL option works correctly again * :vytask:`T1312` Many to many NAT rules now can use source/destination and translation networks of non-matching size. If 1:1 network bits translation is desired, it's now users responsibility to check if prefix length matches. * :vytask:`T1290` IPv6 network prefix translation is fixed * :vytask:`T1308` Non-alphanumeric characters such as ``>`` can now be safely used in PPPoE passwords * :vytask:`T1305` ``show | commands`` no longer fails when a config section ends with a leaf node such as ``timezone`` in ``show system | commands`` * :vytask:`T1235` ``show | commands`` correctly works in config mode now * :vytask:`T1298` VTI is now compatible with the DHCP-interface IPsec option * :vytask:`T1277` ``show dhcp server statistics`` command was broken in latest Crux * :vytask:`T1261` An issue with TFTP server refusing to listen on addresses other than loopback was fixed * :vytask:`T1224` Template issue that might cause UDP broadcast relay fail to start is fixed * :vytask:`T1067` VXLAN value validation is improved * :vytask:`T1211` Blank hostnames in DHCP updates no longer can crash DNS forwarding * :vytask:`T1322` Correct configuration is now generated for DHCPv6 relays with more than one upstream interface * :vytask:`T1234` ``relay-agents-packets`` option works correctly now * :vytask:`T1231` Dynamic DNS data is now cleaned on configuration change * :vytask:`T1282` Remote Syslog can now use a fully qualified domain name * :vytask:`T1279` ACPI power off works again * :vytask:`T1247` Negation in WAN load balancing rules works again * :vytask:`T1218` FRR staticd now starts on boot correctly * :vytask:`T1296` The installer now correctly detects SD card devices * :vytask:`T1225` Wireguard peers can be disabled now * :vytask:`T1217` The issue with Wireguard interfaces impossible to delete is fixed * :vytask:`T1160` Unintended IPv6 access is fixed in SNMP configuration * :vytask:`T1060` It's now possible to exclude hosts from the transparent web proxy * :vytask:`T484` An issue with rules impossible to delete from the zone-based firewall is fixed Earlier releases ================ Release notes for legacy versions (1.1.x, 1.0.x) can be found in the `archived wiki `_.