diff options
| -rw-r--r-- | docs/changelog/1.2.1.rst | 52 | ||||
| -rw-r--r-- | docs/changelog/1.2.2.rst | 46 | ||||
| -rw-r--r-- | docs/changelog/1.2.3.rst | 62 | ||||
| -rw-r--r-- | docs/changelog/1.2.4.rst | 77 | ||||
| -rw-r--r-- | docs/changelog/1.2.5.rst | 70 | ||||
| -rw-r--r-- | docs/changelog/1.2.6.rst | 108 | ||||
| -rw-r--r-- | docs/changelog/1.3.rst | 941 | ||||
| -rw-r--r-- | docs/changelog/1.4.rst | 433 | ||||
| -rw-r--r-- | docs/changelog/1.5.rst | 1295 | ||||
| -rw-r--r-- | docs/changelog/index.rst | 21 | ||||
| -rw-r--r-- | docs/index.rst | 1 |
11 files changed, 0 insertions, 3106 deletions
diff --git a/docs/changelog/1.2.1.rst b/docs/changelog/1.2.1.rst deleted file mode 100644 index 4f22dd0a..00000000 --- a/docs/changelog/1.2.1.rst +++ /dev/null @@ -1,52 +0,0 @@ -1.2.1 -===== - -VyOS 1.2.1 is a maintenance release made in April 2019. - -Resolved issues ---------------- - -* Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers -* :vytask:`T1326` The kernel now includes drivers for various USB serial - adapters, which allows people to add a serial console to a machine without - onboard RS232, or connect to something else from the router -* The collection of network card firmware is now much more extensive -* :vytask:`T1271` VRRP now correctly uses a virtual rather than physical MAC - addresses in the RFC-compliant mode -* :vytask:`T1330` DHCP WPAD URL option works correctly again -* :vytask:`T1312` Many to many NAT rules now can use source/destination and - translation networks of non-matching size. If 1:1 network bits translation is - desired, it's now users responsibility to check if prefix length matches. -* :vytask:`T1290` IPv6 network prefix translation is fixed -* :vytask:`T1308` Non-alphanumeric characters such as ``>`` can now be safely - used in PPPoE passwords -* :vytask:`T1305` ``show | commands`` no longer fails when a config section ends - with a leaf node such as ``timezone`` in ``show system | commands`` -* :vytask:`T1235` ``show | commands`` correctly works in config mode now -* :vytask:`T1298` VTI is now compatible with the DHCP-interface IPsec option -* :vytask:`T1277` ``show dhcp server statistics`` command was broken in latest - Crux -* :vytask:`T1261` An issue with TFTP server refusing to listen on addresses - other than loopback was fixed -* :vytask:`T1224` Template issue that might cause UDP broadcast relay fail to - start is fixed -* :vytask:`T1067` VXLAN value validation is improved -* :vytask:`T1211` Blank hostnames in DHCP updates no longer can crash DNS - forwarding -* :vytask:`T1322` Correct configuration is now generated for DHCPv6 relays with - more than one upstream interface -* :vytask:`T1234` ``relay-agents-packets`` option works correctly now -* :vytask:`T1231` Dynamic DNS data is now cleaned on configuration change -* :vytask:`T1282` Remote Syslog can now use a fully qualified domain name -* :vytask:`T1279` ACPI power off works again -* :vytask:`T1247` Negation in WAN load balancing rules works again -* :vytask:`T1218` FRR staticd now starts on boot correctly -* :vytask:`T1296` The installer now correctly detects SD card devices -* :vytask:`T1225` Wireguard peers can be disabled now -* :vytask:`T1217` The issue with Wireguard interfaces impossible to delete - is fixed -* :vytask:`T1160` Unintended IPv6 access is fixed in SNMP configuration -* :vytask:`T1060` It's now possible to exclude hosts from the transparent - web proxy -* :vytask:`T484` An issue with rules impossible to delete from the zone-based - firewall is fixed
\ No newline at end of file diff --git a/docs/changelog/1.2.2.rst b/docs/changelog/1.2.2.rst deleted file mode 100644 index 17ba941f..00000000 --- a/docs/changelog/1.2.2.rst +++ /dev/null @@ -1,46 +0,0 @@ -1.2.2 -===== - -1.2.2 is a maintenance release made in July 2019. - -New features ------------- - -* Options for per-interface MSS clamping. -* BGP extended next-hop capability -* Relaxed BGP multipath option -* Internal and external options for "remote-as" (accept any AS as long as it's - the same to this router or different, respectively) -* "Unnumbered" (interface-based) BGP peers -* BGP no-prepend option -* Additive BGP community option -* OSPFv3 network type option -* Custom arguments for VRRP scripts -* A script for querying values from config files - -Resolved issues ---------------- - -* Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability -* :vytask:`T1371` VRRP health-check scripts now can use arguments -* :vytask:`T1497` DNS server addresses coming from a DHCP server are now - correctly propagated to resolv.conf -* :vytask:`T1469` Domain-specific name servers in DNS forwarding are now used - for recursive queries -* :vytask:`T1433` ``run show dhcpv6 server leases`` now display leases correctly -* :vytask:`T1461` Deleting ``firewall options`` node no longer causes errors -* :vytask:`T1458` Correct hostname is sent to remote syslog again -* :vytask:`T1438` Board serial number from DMI is correctly displayed in - ``show version`` -* :vytask:`T1358`, :vytask:`T1355`, :vytask:`T1294` Multiple corrections in - remote syslog config -* :vytask:`T1255` Fixed missing newline in ``/etc/hosts`` -* :vytask:`T1174` ``system domain-name`` is correctly included in - ``/etc/resolv.conf`` -* :vytask:`T1465` Fixed priority inversion in ``interfaces vti vtiX ip`` - settings -* :vytask:`T1446` Fixed errors when installing with RAID1 on UEFI machines -* :vytask:`T1387` Fixed an error on disabling an interfaces that has no address -* :vytask:`T1367` Fixed deleting VLAN interface with non-default MTU -* :vytask:`T1505` vyos.config ``return_effective_values()`` function now - correctly returns a list rather than a string
\ No newline at end of file diff --git a/docs/changelog/1.2.3.rst b/docs/changelog/1.2.3.rst deleted file mode 100644 index 653beec1..00000000 --- a/docs/changelog/1.2.3.rst +++ /dev/null @@ -1,62 +0,0 @@ -1.2.3 -===== - -1.2.3 is a maintenance and feature backport release made in September 2019. - -New features ------------- - -* HTTP API -* :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>" - option for limiting queries to specific client networks -* :vytask:`T1503` Functions for checking if a commit is in progress -* :vytask:`T1543` "set system contig-mangement commit-archive source-address" - option -* :vytask:`T1554` Intel NIC drivers now support receive side scaling and - multiqueue - -Resolved issues ---------------- - -* :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit - errors -* :vytask:`T1333` Fixes issue with DNS forwarding not performing recursive - lookups on domain specific forwarders -* :vytask:`T1362` Special characters in VRRP passwords are handled correctly -* :vytask:`T1377` BGP weight is applied properly -* :vytask:`T1420` Fixed permission for log files -* :vytask:`T1425` Wireguard interfaces now support /31 addresses -* :vytask:`T1428` Wireguard correctly handles firewall marks -* :vytask:`T1439` DHCPv6 static mappings now work correctly -* :vytask:`T1450` Flood ping commands now works correctly -* :vytask:`T1460` Op mode "show firewall" commands now support counters longer - than 8 digits (T1460) -* :vytask:`T1465` Fixed priority inversion in VTI commands -* :vytask:`T1468` Fixed remote-as check in the BGP route-reflector-client option -* :vytask:`T1472` It's now possible to re-create VRRP groups with RFC - compatibility mode enabled -* :vytask:`T1527` Fixed a typo in DHCPv6 server help strings -* :vytask:`T1529` Unnumbered BGP peers now support VLAN interfaces -* :vytask:`T1530` Fixed "set system syslog global archive file" command -* :vytask:`T1531` Multiple fixes in cluster configuration scripts -* :vytask:`T1537` Fixed missing help text for "service dns" -* :vytask:`T1541` Fixed input validation in DHCPv6 relay options -* :vytask:`T1551` It's now possible to create a QinQ interface and a firewall - assigned to it in one commit -* :vytask:`T1559` URL filtering now uses correct rule database path and works - again -* :vytask:`T1579` "show log vpn ipsec" command works again -* :vytask:`T1576` "show arp interface <intf>" command works again -* :vytask:`T1605` Fixed regression in L2TP/IPsec server -* :vytask:`T1613` Netflow/sFlow captures IPv6 traffic correctly -* :vytask:`T1616` "renew dhcpv6" command now works from op mode -* :vytask:`T1642` BGP remove-private-as option iBGP vs eBGP check works - correctly now -* :vytask:`T1540`, :vytask:`T1360`, :vytask:`T1264`, :vytask:`T1623` Multiple - improvements in name servers and hosts configuration handling - -Internals ---------- - -``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the -*vyos-hostsd* service that listens on a ZMQ socket for update messages.
\ No newline at end of file diff --git a/docs/changelog/1.2.4.rst b/docs/changelog/1.2.4.rst deleted file mode 100644 index 3e228880..00000000 --- a/docs/changelog/1.2.4.rst +++ /dev/null @@ -1,77 +0,0 @@ -1.2.4 -===== - -1.2.4 is a maintenance release made in December 2019. - -Resolved issues ---------------- - -* :vytask:`T258` Can not configure wan load-balancing on vyos-1.2 -* :vytask:`T818` SNMP v3 - remove required engineid from user node -* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9. - (support Cloudflare API v4) -* :vytask:`T1183` BFD Support via FRR -* :vytask:`T1299` Allow SNMPd to be extended with custom scripts -* :vytask:`T1351` accel-pppoe adding CIDR based IP pool option -* :vytask:`T1391` In route-map set community additive -* :vytask:`T1394` syslog systemd and host_name.py race condition -* :vytask:`T1401` Copying files with the FTP protocol fails if the passwor - contains special characters -* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes - to fix -* :vytask:`T1430` Add options for custom DHCP client-id and hostname -* :vytask:`T1447` Python subprocess called without import in host_name.py -* :vytask:`T1470` improve output of "show dhcpv6 server leases" -* :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf -* :vytask:`T1496` Separate rolling release and LTS kernel builds -* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevent - load balancing from starting -* :vytask:`T1568` strip-private command improvement for additional masking o - IPv6 and MAC address -* :vytask:`T1578` completion offers "show table", but show table does not exist -* :vytask:`T1593` Support ip6gre -* :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog" -* :vytask:`T1638` vyos-hostsd not setting system domain name -* :vytask:`T1678` hostfile-update missing line feed -* :vytask:`T1694` NTPd: Do not listen on all interfaces by default -* :vytask:`T1701` Delete domain-name and domain-search won't work -* :vytask:`T1705` High CPU usage by bgpd when snmp is active -* :vytask:`T1707` DHCP static mapping and exclude address not working -* :vytask:`T1708` Update Rolling Release Kernel to 4.19.76 -* :vytask:`T1709` Update WireGuard to 0.0.20190913 -* :vytask:`T1716` Update Intel NIC drivers to recent versions -* :vytask:`T1726` Update Linux Firmware binaries to a more recen - version 2019-03-14 -> 2019-10-07 -* :vytask:`T1728` Update Linux Kernel to 4.19.79 -* :vytask:`T1737` SNMP tab completion missing -* :vytask:`T1738` Copy SNMP configuration from node to node raises exception -* :vytask:`T1740` Broken OSPFv2 virtual-link authentication -* :vytask:`T1742` NHRP unable to commit. -* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address - must be greater or equal to the range start address y!" when static mapping - has same IP as range stop -* :vytask:`T1749` numeric validator doesn't support multiple ranges -* :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM) -* :vytask:`T1772` <regex> constraints in XML are partially broken -* :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR -* :vytask:`T1780` Adding ipsec ike closeaction -* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.p - implementation -* :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation -* :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1 -* :vytask:`T1800` Update Linux Kernel to v4.19.84 -* :vytask:`T1809` Wireless: SSID scan does not work in AP mode -* :vytask:`T1811` Upgrade from 1.1.8: Config file migratio - failed: module=l2tp -* :vytask:`T1812` DHCP: hostnames of clients not resolving afte - update v1.2.3 -> 1.2-rolling -* :vytask:`T1819` Reboot kills SNMPv3 configuration -* :vytask:`T1822` Priority inversion wireless interface dhcpv6 -* :vytask:`T1825` Improve DHCP configuration error message -* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails - to create an xml -* :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS" -* :vytask:`T1841` PPP ipv6-up.d direcotry missing -* :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface -* :vytask:`T1903` Implementation udev predefined interface naming -* :vytask:`T1904` update eth1 and eth2 link files for the vep4600
\ No newline at end of file diff --git a/docs/changelog/1.2.5.rst b/docs/changelog/1.2.5.rst deleted file mode 100644 index 438e84f2..00000000 --- a/docs/changelog/1.2.5.rst +++ /dev/null @@ -1,70 +0,0 @@ -1.2.5 -===== - -1.2.5 is a maintenance release made in April 2020. - -Resolved issues ---------------- - -* :vytask:`T1020` OSPF Stops distributing default route after a while -* :vytask:`T1228` pppoe default-route force option not working (Rel 1.2.0-rc11) -* :vytask:`T1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled. -* :vytask:`T1341` Adding rate-limiter for pppoe server users -* :vytask:`T1376` Incorrect DHCP lease counting -* :vytask:`T1392` Large firewall rulesets cause the system to lose configuration - and crash at startup -* :vytask:`T1416` 2 dhcp server run in failover mode can't sync hostname with - each other -* :vytask:`T1452` accel-pppoe - add vendor option to shaper -* :vytask:`T1490` BGP configuration (is lost|not applied) when updating - 1.1.8 -> 1.2.1 -* :vytask:`T1780` Adding ipsec ike closeaction -* :vytask:`T1803` Unbind NTP while it's not requested... -* :vytask:`T1821` "authentication mode radius" has no effect for PPPoE server -* :vytask:`T1827` Increase default gc_thresh -* :vytask:`T1828` Missing completion helper for "set system syslog host - 192.0.2.1 facility all protocol" -* :vytask:`T1832` radvd adding feature DNSSL branch.example.com example.com to - existing package -* :vytask:`T1837` PPPoE unrecognized option 'replacedefaultroute' -* :vytask:`T1851` wireguard - changing the pubkey on an existing peer seems to - destroy the running config. -* :vytask:`T1858` l2tp: Delete depricated outside-nexthop and add gateway-address -* :vytask:`T1864` Lower IPSec DPD timeout lower limit from 10s -> 2s -* :vytask:`T1879` Extend Dynamic DNS XML definition value help strings and - validators -* :vytask:`T1881` Execute permissions are removed from custom SNMP scripts at - commit time -* :vytask:`T1884` Keeping VRRP transition-script native behaviour and adding - stop-script -* :vytask:`T1891` Router announcements broken on boot -* :vytask:`T1900` Enable SNMP for VRRP. -* :vytask:`T1902` Add redistribute non main table in bgp -* :vytask:`T1909` Incorrect behaviour of static routes with overlapping networks -* :vytask:`T1913` "system ipv6 blacklist" command has no effect -* :vytask:`T1914` IPv6 multipath hash policy does not apply -* :vytask:`T1917` Update WireGuard to Debian release 0.0.20191219-1 -* :vytask:`T1934` Change default hostname when deploy from OVA without params. -* :vytask:`T1935` NIC identification and usage problem in Hyper-V environments -* :vytask:`T1936` pppoe-server CLI control features -* :vytask:`T1964` SNMP Script-extensions allows names with spaces, but commit - fails -* :vytask:`T1967` BGP parameter "enforce-first-as" does not work anymore -* :vytask:`T1970` Correct adding interfaces on boot -* :vytask:`T1971` Missing modules in initrd.img for PXE boot -* :vytask:`T1998` Update FRR to 7.3 -* :vytask:`T2001` Error when router reboot -* :vytask:`T2032` Monitor bandwidth bits -* :vytask:`T2059` Set source-validation on bond vif don't work -* :vytask:`T2066` PPPoE interface can be created multiple times - last wins -* :vytask:`T2069` PPPoE-client does not works with service-name option -* :vytask:`T2077` ISO build from crux branch is failing -* :vytask:`T2079` Update Linux Kernel to v4.19.106 -* :vytask:`T2087` Add maxfail 0 option to pppoe configuration. -* :vytask:`T2100` BGP route adverisement wih checks rib -* :vytask:`T2120` "reset vpn ipsec-peer" doesn't work with named peers -* :vytask:`T2197` Cant add vif-s interface into a bridge -* :vytask:`T2228` WireGuard does not allow ports < 1024 to be used -* :vytask:`T2252` HTTP API add system image can return '504 Gateway Time-out' -* :vytask:`T2272` Set system flow-accounting disable-imt has syntax error -* :vytask:`T2276` PPPoE server vulnerability
\ No newline at end of file diff --git a/docs/changelog/1.2.6.rst b/docs/changelog/1.2.6.rst deleted file mode 100644 index 70786d07..00000000 --- a/docs/changelog/1.2.6.rst +++ /dev/null @@ -1,108 +0,0 @@ -1.2.6-S1 -======== - -1.2.6-S1 is a security release release made in September 2020. - -Resolved issues ---------------- - -VyOS 1.2.6 release was found to be suspectible to CVE-2020-10995. It's a low- -impact vulnerability in the PowerDNS recursor that allows an attacker to cause -performance degradation via a specially crafted authoritative DNS server reply. - -* :vytask:`T2899` remote syslog server migration error on update - -1.2.6 -===== - -1.2.6 is a maintenance release made in September 2020. - -.. _resovled issues 1.2.6: - -Resolved issues ---------------- - -* :vytask:`T103` DHCP server prepends shared network name to hostnames -* :vytask:`T125` Missing PPPoE interfaces in l2tp configuration -* :vytask:`T1194` cronjob is being setup even if not saved -* :vytask:`T1205` module pcspkr missing -* :vytask:`T1219` Redundant active-active configuration, asymmetric routing and - conntrack-sync cache -* :vytask:`T1220` Show transceiver information from plugin modules, e.g SFP+, - QSFP -* :vytask:`T1221` BGP - Default route injection is not processed by the specific - route-map -* :vytask:`T1241` Remove of policy route throws CLI error -* :vytask:`T1291` Under certain conditions the VTI will stay forever down -* :vytask:`T1463` Missing command `show ip bgp scan` appears in command - completion -* :vytask:`T1575` `show snmp mib ifmib` crashes with IndexError -* :vytask:`T1699` Default net.ipv6.route.max_size 32768 is too low -* :vytask:`T1729` PIM (Protocol Independent Multicast) implementation -* :vytask:`T1901` Semicolon in values is interpreted as a part of the shell - command by validators -* :vytask:`T1934` Change default hostname when deploy from OVA without params. -* :vytask:`T1938` syslog doesn't start automatically -* :vytask:`T1949` Multihop IPv6 BFD is unconfigurable -* :vytask:`T1953` DDNS service name validation rejects valid service names -* :vytask:`T1956` PPPoE server: support PADO-delay -* :vytask:`T1973` Allow route-map to match on BGP local preference value -* :vytask:`T1974` Allow route-map to set administrative distance -* :vytask:`T1982` Increase rotation for atop.acct -* :vytask:`T1983` Expose route-map when BGP routes are programmed in to FIB -* :vytask:`T1985` pppoe: Enable ipv6 modules without configured ipv6 pools -* :vytask:`T2000` strongSwan does not install routes to table 220 in certain - cases -* :vytask:`T2021` OSPFv3 doesn't support decimal area syntax -* :vytask:`T2062` Wrong dhcp-server static route subnet bytes -* :vytask:`T2091` swanctl.conf file is not generated properly is more than one - IPsec profile is used -* :vytask:`T2131` Improve syslog remote host CLI definition -* :vytask:`T2224` Update Linux Kernel to v4.19.114 -* :vytask:`T2286` IPoE server vulnerability -* :vytask:`T2303` Unable to delete the image version that came from OVA -* :vytask:`T2305` Add release name to "show version" command -* :vytask:`T2311` Statically configured name servers may not take precedence - over ones from DHCP -* :vytask:`T2327` Unable to create syslog server entry with different port -* :vytask:`T2332` Backport node option for a syslog server -* :vytask:`T2342` Bridge l2tpv3 + ethX errors -* :vytask:`T2344` PPPoE server client static IP assignment silently fails -* :vytask:`T2385` salt-minion: improve completion helpers -* :vytask:`T2389` BGP community-list unknown command -* :vytask:`T2398` op-mode "dhcp client leases interface" completion helper - misses interfaces -* :vytask:`T2402` Live ISO should warn when configuring that changes won't - persist -* :vytask:`T2443` NHRP: Add debugging information to syslog -* :vytask:`T2448` `monitor protocol bgp` subcommands fail with 'command - incomplete' -* :vytask:`T2458` Update FRR to 7.3.1 -* :vytask:`T2476` Bond member description change leads to network outage -* :vytask:`T2478` login radius: use NAS-IP-Address if defined source address -* :vytask:`T2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995 -* :vytask:`T2517` vyos-container: link_filter: No such file or directory -* :vytask:`T2526` Wake-On-Lan CLI implementation -* :vytask:`T2528` "update dns dynamic" throws FileNotFoundError excepton -* :vytask:`T2536` "show log dns forwarding" still refers to dnsmasq -* :vytask:`T2538` Update Intel NIC drivers to recent release (preparation for - Kernel >=5.4) -* :vytask:`T2545` Show physical device offloading capabilities for specified - ethernet interface -* :vytask:`T2563` Wrong interface binding for Dell VEP 1445 -* :vytask:`T2605` SNMP service is not disabled by default -* :vytask:`T2625` Provide generic Library for package builds -* :vytask:`T2686` FRR: BGP: large-community configuration is not applied - properly after upgrading FRR to 7.3.x series -* :vytask:`T2701` `vpn ipsec pfs enable` doesn't work with IKE groups -* :vytask:`T2728` Protocol option ignored for IPSec peers in transport mode -* :vytask:`T2734` WireGuard: fwmark CLI definition is inconsistent -* :vytask:`T2757` "show system image version" contains additional new-line - character breaking output -* :vytask:`T2797` Update Linux Kernel to v4.19.139 -* :vytask:`T2822` Update Linux Kernel to v4.19.141 -* :vytask:`T2829` PPPoE server: mppe setting is implemented as node instead of - leafNode -* :vytask:`T2831` Update Linux Kernel to v4.19.142 -* :vytask:`T2852` rename dynamic dns interface breaks ddclient.cache permissions -* :vytask:`T2853` Intel QAT acceleration does not work
\ No newline at end of file diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst deleted file mode 100644 index 42a94a63..00000000 --- a/docs/changelog/1.3.rst +++ /dev/null @@ -1,941 +0,0 @@ - -############ -1.3 Eqquleus -############ - -.. - Please don't add anything by hand. - This file is managed by the script: - _ext/releasenotes.py - - -1.3.9 (future release) -====================== - - - - - -**Bug fixes** - - -* :vytask:`T5926` ``IPSEC does not apply after l2tp configuration was changed`` - -**Other resolved issues** - - -* :vytask:`T1311` ``WAN load-balancing can't flush connections when conntrack-sync is enabled`` - -1.3.8 (25th June 2024) -====================== - - - - - -**Bug fixes** - - -* :vytask:`T5725` ``protocol IS-IS configuration is empty if a tunnel does not have remote address`` -* :vytask:`T6337` ``Upgrade from 1.3.5 fails if ssh public key name has a space in it`` -* :vytask:`T6359` ``Multicast does not forward after reboot`` - - -1.3.7 (13th May 2024) -===================== - -**Security** - - -* :vytask:`T6324` ``CVE-2024-2961`` - - - -**New features and improvements** - - -* :vytask:`T1244` ``Add support for StartupResync in conntrack-sync`` -* :vytask:`T5364` ``Make it possible to set the PADO delay to 0`` -* :vytask:`T5418` ``Allow arbitrary subnets in PPPoE client IP pools`` -* :vytask:`T5504` ``Make it possible to set more than one peer-address in unicast VRRP`` -* :vytask:`T6057` ``Add ability to disable syslog for conntrackd`` - -**Bug fixes** - - -* :vytask:`T1751` ``DNS server addresses from DHCPv6 are not added to resolv.conf`` -* :vytask:`T1976` ``deleting address-family under neighbor will disable neighbor`` -* :vytask:`T2044` ``RPKI doesn't boot properly`` -* :vytask:`T2113` ``OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping`` -* :vytask:`T2279` ``Router resolves as 127.0.1.1 when using Router's Recursive DNS`` -* :vytask:`T2590` ``DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` -* :vytask:`T2612` ``HTTPS API, changing API key fails but goes through`` -* :vytask:`T2801` ``conntrack-tools flooding logs`` -* :vytask:`T2998` ``SNMP v3 oid "exclude" option doesn't work`` -* :vytask:`T3437` ``BGP Confederation Addition Causes Error`` -* :vytask:`T3992` ``Unhandled exception when trying to add an interface with an assigned address to a bridge`` -* :vytask:`T4270` ``When "ignore-hosts-file" is unset, local hostname of the router resolves to 127.0.1.1 in the DNS forwarding service`` -* :vytask:`T4453` ``dhclient fails to renew DHCP lease with VRF`` -* :vytask:`T5239` ``Host name and domain name missing from the FRR configuration`` -* :vytask:`T5982` ``Isolated interfaces smoketest fail`` -* :vytask:`T6004` ``Missing RPKI boot priority prevents it from loading`` -* :vytask:`T6056` ``Applying 'system static-host-mapping' command calls unnecessary snmpd restart`` -* :vytask:`T6088` ``Configuration corrupted after saving and powercut or force reboot`` -* :vytask:`T6096` ``Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` -* :vytask:`T6110` ``Insufficient validation of range option with failover in DHCP server`` -* :vytask:`T6124` ``Docker equuleus build image doesn't build due to fpm`` -* :vytask:`T6141` ``Trying to set PADO delay in PPPoE server without also configuring the session options causes a commit failure`` -* :vytask:`T6150` ``Impossible to set a static IP address via RADIUS in IPoE`` -* :vytask:`T6193` ``dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` -* :vytask:`T6196` ``route-map and summary-only do not work in BGP aggregation at the same time`` -* :vytask:`T6243` ``Update vyos-http-api-tools for package idna security advisory`` - -**Other resolved issues** - - -* :vytask:`T1198` ``Extra hyphen in suggested image name on upgrade`` -* :vytask:`T3584` ``Migrate NTP server addresses from *.pool.ntp.org to our own`` -* :vytask:`T6261` ``Typo in the operational mode connect and disconnect command output`` - -1.3.6 (14th February 2024) -========================== - -**Security** - - -* :vytask:`T5318` ``Security Vulnerabilities for VyOS 1.3.3`` - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T2060` ``source-validation will be configured at different locations and could lead to massive confusion`` -* :vytask:`T2289` ``Denest cerbot certificate configuration from service https`` - -**New features and improvements** - - -* :vytask:`T1929` ``ipset in firewall`` -* :vytask:`T2060` ``source-validation will be configured at different locations and could lead to massive confusion`` -* :vytask:`T2116` ``Processing configuration via Cloud-init User-Data`` -* :vytask:`T2191` ``Using tallow to block sshd probes`` -* :vytask:`T2289` ``Denest cerbot certificate configuration from service https`` -* :vytask:`T3039` ``Resize a root partition and filesystem automatically during deployment in virtual environments`` -* :vytask:`T4039` ``Rsyslog to use 'protocol23format' for protocol UDP`` -* :vytask:`T4078` ``A hybrid of "network-group" and "address-group".`` -* :vytask:`T5182` ``Update Intel ice driver`` -* :vytask:`T5187` ``Update Realtek r8152 driver`` -* :vytask:`T5275` ``Add op mode commands for exporting certificates to PEM files with correct headers`` -* :vytask:`T5796` ``Openconnect - HTTPS security headers are missing`` - -**Bug fixes** - - -* :vytask:`T117` ``Cannot install from ISO via serial console on ttyS1`` -* :vytask:`T1925` ``DMVPN is always listed as down in "show vpn ipsec sa"`` -* :vytask:`T2085` ``Building some packages with vyos-build no longer works for Equuleus/current`` -* :vytask:`T2163` ``Disabled vif interface with "address dhcp" requests DHCP address`` -* :vytask:`T2404` ``Cannot change MTU`` -* :vytask:`T2509` ``No inotify notifications from /`` -* :vytask:`T2574` ``wan-load-balance snat bug and route problem`` -* :vytask:`T2793` ``compare + TAB completion does not show proper username if user contains _`` -* :vytask:`T2837` ``make-version-file executed too early during build process`` -* :vytask:`T3154` ``route-map CLI allows 32-bit ASNs in community options even though FRR doesn't`` -* :vytask:`T3980` ``vrrp transition-script validator makes warning fatal and also causes a python NameError exception`` -* :vytask:`T4062` ``VRRP IPSEC-AH : sequence number xxxxxxx already processed. Packet dropped. Local(xxxxxxx)`` -* :vytask:`T4566` ``Cannot log in on serial console on Equuleus v1.3.1`` -* :vytask:`T4752` ``ICMP redirects not working / not properly configured`` -* :vytask:`T4760` ``VyOS does not support running multiple instances of DHCPv6 clients`` -* :vytask:`T4990` ``Commit results may not be properly saved if power is cut immediately after a successful commit`` -* :vytask:`T5180` ``initramfs-tools ignores firmware from updates directory`` -* :vytask:`T5543` ``Fix source address handling in static joins`` -* :vytask:`T5625` ``"restart vpn" does not work if ipsec-interfaces is not set`` -* :vytask:`T5739` ``Password recovery does not work if public keys are configured`` -* :vytask:`T5800` ``HTTPS API unavailable after delete VRF`` -* :vytask:`T5852` ``Reboots fail with eapol WAN interface`` -* :vytask:`T5914` ``CVE-2023-48795 - Terrapin vulnerability`` -* :vytask:`T5924` ``Build cannot pass the smoketest dialup-router-medium-vpn`` -* :vytask:`T5967` ``Multi-hop BFD connections can't be established; please add minimum-ttl option.`` -* :vytask:`T6017` ``Update vyos-http-api-tools for security advisory`` - -**Other resolved issues** - - -* :vytask:`T922` ``OSPF - Process Crash after peer reboot`` -* :vytask:`T1297` ``Add GARP settings to VRRP/keepalived`` -* :vytask:`T1369` ``GCP Networking Failure`` -* :vytask:`T1500` ``Slow boot/load and CLI response times`` -* :vytask:`T1667` ``Add a tool for automatically importing old style command definitions into XML`` -* :vytask:`T1671` ``rewrite udev script logic /lib/udev/vyatta_net_name`` -* :vytask:`T1981` ``Allow route-map 'set src' to reference both IPv4 and IPv6`` -* :vytask:`T2223` ``convert operational show interfaces to python/XML`` -* :vytask:`T2353` ``Interface [conf_mode] errors parent task`` -* :vytask:`T2431` ``Python validators are slow`` -* :vytask:`T2452` ``Serial console related issues`` -* :vytask:`T2546` ``The root task for rewriting [op-mode] to XML`` -* :vytask:`T2579` ``The root task for VRF features`` -* :vytask:`T2655` ``ConfigError formatting issue`` -* :vytask:`T2720` ``Rework vyos.template Python module to make future extension easier`` -* :vytask:`T2755` ``Requirements for partial interface setup`` -* :vytask:`T2799` ``VyOS Certificates Manager`` -* :vytask:`T3191` ``PAM RADIUS freezing when accounting does not configured on RADIUS server`` -* :vytask:`T3348` ``dhcpd: Can't create new lease file: Permission denied`` -* :vytask:`T3403` ``Error on interrupting list of pppoe sessions`` -* :vytask:`T3513` ``Attempting to remove firewall rule results in error`` -* :vytask:`T3688` ``Fail to save configuration via scp/sftp`` -* :vytask:`T3737` ``openvpn-option needs to be able to support quotes as since openvpn 2.4.`` -* :vytask:`T3813` ``Some custom sysctl parameters can't be applied bug`` -* :vytask:`T4222` ``Support for TWAMP as round-trip metric`` -* :vytask:`T4646` ``USB serial output console does not work`` -* :vytask:`T5274` ``Add a deprecation warning for OpenVPN site-to-site with pre-shared secret`` -* :vytask:`T5714` ``IPSec VPN: op-mode: "show log vpn" does not show results`` -* :vytask:`T5715` ``IPSec VPN: restart vpn is not working`` -* :vytask:`T6014` ``Bump keepalived version`` -* :vytask:`T6249` ``ISO builder fails because of changed buster-backport repository`` - -1.3.5 (15th December 2023) -========================== - - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T2139` ``openvpn: allow "dh-file none" to disable DH for ECDH keys`` - -**New features and improvements** - - -* :vytask:`T1118` ``Obsolete "utc" option in time selector in firewall`` -* :vytask:`T2014` ``Use vendor specific NTP Pool hostname`` -* :vytask:`T2139` ``openvpn: allow "dh-file none" to disable DH for ECDH keys`` -* :vytask:`T4269` ``node.def generator should automatically add default values`` -* :vytask:`T5213` ``Accel-ppp sending accounting interim updates acct-interim-interval option`` -* :vytask:`T5270` ``Make OpenVPN `tls dh-params` optional`` -* :vytask:`T5271` ``Add support for peer-fingerprint to OpenVPN`` -* :vytask:`T5273` ``Add op mode commands for displaying certificate details and fingerprints`` -* :vytask:`T5387` ``dhcp6c: add a no release option`` -* :vytask:`T5576` ``Add bgp remove-private-as all option`` -* :vytask:`T5586` ``Disable by default SNMP for Keepalived VRRP`` -* :vytask:`T5630` ``pppoe: allow to specify MRU in addition to already configurable MTU`` -* :vytask:`T5661` ``Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection`` - -**Bug fixes** - - -* :vytask:`T305` ``loadbalancing does not work with one pppoe connection and another connection of either dhcp or static`` -* :vytask:`T971` ``authentication public-keys options quoting issue`` -* :vytask:`T1012` ``vyos-build configure script should check /etc/issue to avoid confusion`` -* :vytask:`T2051` ``Throughput anomalies`` -* :vytask:`T2250` ``vyos-build "make iso" error if configure was ran outside of the docker container`` -* :vytask:`T3020` ``The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location"`` -* :vytask:`T3045` ``Changes to Conntrack-Sync don't apply correctly (Mutlicast->UDP)`` -* :vytask:`T3940` ``DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook`` -* :vytask:`T4146` ``Nginx should not listen on port 80`` -* :vytask:`T4328` ``Large MTU on 1.3.1-S1`` -* :vytask:`T4402` ``OpenVPN client-ip-pool option is broken`` -* :vytask:`T4601` ``dhcp : relay agent IP address issue.`` -* :vytask:`T4776` ``NVME storage is not detected properly during installation`` -* :vytask:`T5223` ``tunnel key doesn't clear`` -* :vytask:`T5235` ``SSH keys with special characters cannot be applied via Cloud-init`` -* :vytask:`T5402` ``VRRP router with rfc3768-compatibility sends multiple ARP replies`` -* :vytask:`T5413` ``Deny the opportunity to use one public/private key pair on both wireguard peers.`` -* :vytask:`T5486` ``Service dns dynamic cannot pass the smoketest`` -* :vytask:`T5669` ``VXLAN interface changing port does not work`` -* :vytask:`T5670` ``bridge: missing member interface validator`` -* :vytask:`T5763` ``Fix imprecise check for remote file name in vyos-load-config.py`` -* :vytask:`T5777` ``frr: backport and upstream recent bgpd daemon crashes`` - -**Other resolved issues** - - -* :vytask:`T1276` ``dhcp relay + VLAN fails`` -* :vytask:`T2719` ``Standardized op mode script structure`` -* :vytask:`T3536` ``Unable to list all available routes`` -* :vytask:`T3702` ``Policy: Allow routing by fwmark`` -* :vytask:`T5191` ``Replace underscores with hyphens in command-line options generated by vyos.opmode`` -* :vytask:`T5268` ``OpenVPN: upgrade package to 2.6 series`` -* :vytask:`T5280` ``Update Expired keys (2023-06-08) for PowerDNS`` -* :vytask:`T5578` ``"ikev2-reauth" description contains outdated information`` -* :vytask:`T5624` ``Remove /etc/debian_version from the image`` -* :vytask:`T5632` ``Add jq package to parse JSON files`` -* :vytask:`T5817` ``Show openvpn server fails in some cases`` - -1.3.4 (17th October 2023) -========================= - - - - -**New features and improvements** - - -* :vytask:`T738` ``Add local-port and resolver port options for powerdns in CLI configuration tree`` -* :vytask:`T2123` ``Configure 3 NTP servers`` -* :vytask:`T2424` ``Ability to choose the direction of Mirroring`` -* :vytask:`T3144` ``Support op-mode command to release DHCP leases`` -* :vytask:`T3546` ``Add support for running scripts on PPPoE server session events`` -* :vytask:`T4151` ``IPV6 local PBR Support`` -* :vytask:`T4426` ``Add arpwatch to the image`` -* :vytask:`T4475` ``route-map does not support ipv6 peer`` -* :vytask:`T4825` ``interfaces veth/veth-pairs -standalone used`` -* :vytask:`T5190` ``Cloud-Init cannot fetch Meta-data on machines where the main Ethernet interface is not eth0`` -* :vytask:`T5265` ``WAN load-balancing: missing completion helpers`` -* :vytask:`T5315` ``vrrp: add support for version 3`` -* :vytask:`T5354` ``Add sshguard to protect against brut-forces for 1.3`` - -**Bug fixes** - - -* :vytask:`T2611` ``Prefix list names are shared between ipv4 and ipv6`` -* :vytask:`T2908` ``VRF and bridge membership isn’t mutually exclusive`` -* :vytask:`T2958` ``DHCP server doesn't work from a live CD`` -* :vytask:`T3070` ``Firewall going OOM, possible related to nftables migration`` -* :vytask:`T3098` ``Cannot talk to rtnetlink: Message too long Command failed -:1`` -* :vytask:`T3339` ``Cloud-Init domain search setting not applied`` -* :vytask:`T4113` ``Incorrect GRUB configuration parsing`` -* :vytask:`T4121` ``Nameservers from DHCP client cannot be used in specific cases`` -* :vytask:`T4407` ``Network-config v2 is broken in Cloud-init 22.1 and VyOS 1.3`` -* :vytask:`T4412` ``commit archive: reboot not working with sftp`` -* :vytask:`T4459` ``API service with VRF doesn't work in 1.3.1`` -* :vytask:`T4745` ``CLI TAB issue with values with '-' at the beginning in conf mode`` -* :vytask:`T4790` ``RADIUS login does not work if sum of timeouts more than 50s`` -* :vytask:`T4855` ``Trying to create more than one tunnel of the same type to the same address causes unhandled exception`` -* :vytask:`T4869` ``A network with `/32` or `/128` mask cannot be removed from a network-group`` -* :vytask:`T4895` ``Tag nodes are overwritten when configured by Cloud-Init from User-Data`` -* :vytask:`T5006` ``Http api segfault with concurrent requests`` -* :vytask:`T5140` ``Firewall network-group problems`` -* :vytask:`T5221` ``BGP as-override behavior differs from new FRR and other vendors`` -* :vytask:`T5240` ``Service router-advert failed to start radvd with more then 3 name-servers`` -* :vytask:`T5305` ``REST API configure operation should not be defined as async`` -* :vytask:`T5313` ``UDP broadcast relay - missing verify() that relay interfaces have an IP address assigned`` -* :vytask:`T5329` ``Wireguard interface as GRE tunnel source causes configuration error on boot`` -* :vytask:`T5428` ``dhcp: client renewal fails when running inside VRF`` -* :vytask:`T5506` ``Container bridge interfaces do not have a link-local address`` -* :vytask:`T5524` ``Add config directory to liveCD`` -* :vytask:`T5533` ``Keepalived VRRP IPv6 group enters in FAULT state`` -* :vytask:`T5545` ``sflow is not working`` -* :vytask:`T5555` ``Fix timezone migrator (system 13-to-14)`` -* :vytask:`T5594` ``VRRP - Error if using IPv6 Link Local as hello source address`` - -**Other resolved issues** - - -* :vytask:`T469` ``Problem after commit with errors`` -* :vytask:`T2296` ``Upgrade WALinux to 2.2.41`` -* :vytask:`T3424` ``PPPoE IA-PD doesn't work in VRF`` -* :vytask:`T3577` ``Generating vpn x509 key pair fails with command not found`` -* :vytask:`T3713` ``Create a meta-package for user utilities`` -* :vytask:`T4306` ``Do not check for ditry repository when building release images`` -* :vytask:`T4874` ``Add Warning message to Equuleus`` -* :vytask:`T4933` ``Malformed lines cause vyos.util.colon_separated_to_dict fail with a nondescript error`` -* :vytask:`T5272` ``Upgrade OpenVPN to 2.6 in Equuleus`` -* :vytask:`T5470` ``wlan: can not disable interface if SSID is not configured`` -* :vytask:`T5557` ``bgp: Use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802`` - -1.3.3 (22th June 2023) -====================== - -**Security** - - -* :vytask:`T3835` ``vyos router 1.2.7 snmp Dos bug`` -* :vytask:`T4970` ``pin OCaml pcre package to avoid JIT support`` - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T4628` ``ConfigTree() throws ValueError() if tagNode contains whitespaces`` - -**New features and improvements** - - -* :vytask:`T1024` ``Policy Based Routing by DSCP`` -* :vytask:`T1928` ``Is the 'Welcome to VyOS' message when using SSH an information leak?`` -* :vytask:`T1993` ``Extended pppoe rate-limiter`` -* :vytask:`T2603` ``pppoe-server: reduce min MTU`` -* :vytask:`T2640` ``Running VyOS inside Docker containers`` -* :vytask:`T2769` ``Add VRF support for syslog`` -* :vytask:`T3937` ``Rewrite "show system memory" in Python to make it usable as a library function`` -* :vytask:`T4219` ``support incoming-interface (iif) in local PBR`` -* :vytask:`T4575` ``vyos.utill add new wrapper "rc_cmd" to get the return code and output`` -* :vytask:`T4683` ``Add kitty-terminfo package to build`` -* :vytask:`T4727` ``Add RADIUS rate limit support to PPTP server`` -* :vytask:`T4743` ``Enable IPv6 address for Dynamic DNS`` -* :vytask:`T4785` ``snmp: Allow !, @, * and # in community name`` -* :vytask:`T4812` ``IPsec ability to show all configured connections`` -* :vytask:`T4898` ``Add mtu config option for dummy interfaces`` -* :vytask:`T4922` ``Add ssh-client source-interface CLI option`` -* :vytask:`T4947` ``Support mounting container volumes as ro or rw`` -* :vytask:`T4948` ``pppoe: add CLI option to allow definition of host-uniq flag`` -* :vytask:`T4949` ``Backport "monitor log" and "show log" op-mode definitions from current to equuleus`` -* :vytask:`T4959` ``Add container registry authentication config for containers`` -* :vytask:`T4971` ``Radius attribute "Framed-Pool" for PPPoE`` -* :vytask:`T5033` ``generate-public-key command fails for address with multiple public keys like GitHub`` -* :vytask:`T5098` ``PPPoE client holdoff configuration`` - -**Bug fixes** - - -* :vytask:`T2118` ``Failure to boot after power outage due to dirty filesystem and no fsck in initramfs`` -* :vytask:`T2189` ``Adding a large port-range will take ~ 20 minutes to commit`` -* :vytask:`T2516` ``vyos-container: cannot configure ethernet interface`` -* :vytask:`T2838` ``Ethernet device names changing, multiple hw-id being added`` -* :vytask:`T3852` ``DHCP client issue - interface has two dhclient processes when link is unpluged and then plug again`` -* :vytask:`T4117` ``Does not possible to configure PoD/CoA for L2TP vpn`` -* :vytask:`T4153` ``Monitor bandwidth-test initiate not working`` -* :vytask:`T4177` ``Strip-private doesn't work for service monitoring`` -* :vytask:`T4312` ``Telegraf configuration doesn't accept IPs for URL`` -* :vytask:`T4533` ``Radius clients don’t have simple permissions`` -* :vytask:`T4582` ``Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs`` -* :vytask:`T4628` ``ConfigTree() throws ValueError() if tagNode contains whitespaces`` -* :vytask:`T4630` ``Prevent attempts to use the same interface as a source interface for pseudo-ethernet and MACsec at the same time`` -* :vytask:`T4642` ``proxy: hyphen not allowed in proxy URL`` -* :vytask:`T4648` ``PPPoE: Ignore default router from RA when PPPoE default-route is set to none`` -* :vytask:`T4664` ``Add validation to reject whitespace in tag node value names`` -* :vytask:`T4668` ``Adding/removing members from bond doesn't work/results in incorrect interface state`` -* :vytask:`T4671` ``linux-firmware package is missing symlinks defined in WHENCE file`` -* :vytask:`T4679` ``OpenVPN site-to-site incorrect check for IPv6 local and remote address`` -* :vytask:`T4680` ``Telegraf prometheus-client listen-address invalid format`` -* :vytask:`T4702` ``Wireguard peers configuration is not synchronized with CLI`` -* :vytask:`T4709` ``TCP MSS clamping broken in equuleus`` -* :vytask:`T4730` ``Conntrack-sync error - listen-address is not the correct type in config as it should be`` -* :vytask:`T4737` ``FRRouting/zebra 7.5.1 does not redistribute routes to other protocols`` -* :vytask:`T4799` ``PowerDNS >= 4.7 does not get reloaded by vyos-hostsd`` -* :vytask:`T4872` ``Op-mode show openvpn misses a case when parsing for tunnel IP`` -* :vytask:`T4884` ``Missing a community6 in snmpd config`` -* :vytask:`T4896` ``ospfv3: Fix broken not-advertise option`` -* :vytask:`T4902` ``snmpd: exclude container storage from monitoring`` -* :vytask:`T4918` ``Odd show interface behavior`` -* :vytask:`T4939` ``VRRP command no-preempt not work as expected`` -* :vytask:`T4955` ``Openconnect radiusclient.conf generating with extra authserver`` -* :vytask:`T4975` ``CLI does not work after cutting off the power or reset`` -* :vytask:`T4978` ``KeyError: 'memory' container_config['memory'] on upgrading to 1.4-rolling-202302041536`` -* :vytask:`T4992` ``Incorrect check is_local_address for bgp neighbor with option ip_nonlocal_bind set`` -* :vytask:`T4993` ``Can't delete conntrack ignore rule`` -* :vytask:`T5009` ``op-mode command: restart dhcp relay-agent not working`` -* :vytask:`T5011` ``Some interface drivers don't support min_mtu and max_mtu and verify_mtu check should be skipped`` -* :vytask:`T5017` ``Bug with validator interface-name`` -* :vytask:`T5047` ``Recreate only a specific container`` -* :vytask:`T5066` ``Different GRE tunnel but same tunnel keys error`` -* :vytask:`T5136` ``Possible config corruption on upgrade`` -* :vytask:`T5152` ``Telegraf agent hostname isn't qualified`` -* :vytask:`T5175` ``http-api: error in MultiPart parser for FastAPI version >= 0.91.0`` -* :vytask:`T5176` ``http-api: update vyos-http-api-tools for FastAPI security vulnerability`` -* :vytask:`T5186` ``QoS test cannot pass for 1.3`` - -**Other resolved issues** - - -* :vytask:`T1288` ``FRR: rewrite staticd backend (/opt/vyatta/share/vyatta-cfg/templates/protocols/static/*)`` -* :vytask:`T1875` ``Add the ability to use network address as BGP neighbor (bgp listen range)`` -* :vytask:`T2913` ``Failure to install fpm while building builder docker image`` -* :vytask:`T3083` ``Add feature event-handler`` -* :vytask:`T3608` ``Standardize warnings from configure scripts`` -* :vytask:`T3810` ``webproxy squidguard rules don't work properly after rewriting to python.`` -* :vytask:`T4122` ``interface ip address config missing after upgrade from 1.2.8 to 1.3.0 (when redirect is configured?)`` -* :vytask:`T4262` ``install image doesn't respect chosen root partition size`` -* :vytask:`T4381` ``OpenVPN: Add "Tunnel IP" column in "show openvpn server" operational command`` -* :vytask:`T4511` ``IPv6 DNS lookup`` -* :vytask:`T4625` ``Update ocserv to current revision (1.1.6)`` -* :vytask:`T4652` ``Upgrade PowerDNS recursor to 4.7 series`` -* :vytask:`T4798` ``Migrate the file-exists validator away from Python`` -* :vytask:`T4832` ``dhcp: Add IPv6-only dhcp option support (RFC 8925)`` -* :vytask:`T4875` ``Replace Python validator 'interface-name' to avoid Python startup cost`` -* :vytask:`T4900` ``Cache intermediary results of get_config_diff in Config instance`` -* :vytask:`T4906` ``ipsec connections shows only one connection as up`` -* :vytask:`T4925` ``Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2`` -* :vytask:`T4999` ``vyos.util backport dict_search_recursive`` -* :vytask:`T5007` ``Interface multicast setting is invalid`` -* :vytask:`T5008` ``MACsec CKN of 32 chars is not allowed in CLI, but works fine`` -* :vytask:`T5111` ``pppd-dns.service startup failed`` -* :vytask:`T5243` ``Default route is inactive if an interface has multiple ip addresses of the same subnet in 1.3.2 Equuleus`` - -1.3.2 (7th November 2022) -========================= - - - - -**New features and improvements** - - -* :vytask:`T1375` ``Add clear dhcp server lease function`` -* :vytask:`T2580` ``Support for ip pools for ippoe`` -* :vytask:`T2683` ``no dual stack in system static-host-mapping host-name`` -* :vytask:`T2763` ``New SNMP resource request - SNMP over TCP`` -* :vytask:`T3318` ``Update Linux Kernel to v5.4.208 / 5.10.142`` -* :vytask:`T3785` ``Add unicode support to configtree backend`` -* :vytask:`T4260` ``Extend vyos.configdict.node_changed() to support recursiveness`` -* :vytask:`T4315` ``Telegraf - Output to prometheus`` -* :vytask:`T4336` ``isis: add support for MD5 authentication password on a circuit`` -* :vytask:`T4346` ``Deprecate "system ipv6 disable" option to disable address family within OS kernel`` -* :vytask:`T4373` ``PPPoE-server add multiplier option for shaper`` -* :vytask:`T4395` ``Extend show vpn debug`` -* :vytask:`T4421` ``Add support for floating point numbers in the numeric validator`` -* :vytask:`T4442` ``HTTP API add action "reset"`` -* :vytask:`T4456` ``NTP client in VRF tries to bind to interfaces outside VRF, logs many messages`` -* :vytask:`T4489` ``MPLS sysctl not persistent for tunnel interfaces`` -* :vytask:`T4507` ``IPoE-server add multiplier option for shaper`` -* :vytask:`T4509` ``Feature Request: DNS64`` -* :vytask:`T4515` ``Reduce telegraf binary size`` -* :vytask:`T4522` ``bond: add ability to specify mii monitor interval via CLI`` -* :vytask:`T4584` ``hostap: create custom package build`` -* :vytask:`T4614` ``OpenConnect split-dns directive`` -* :vytask:`T4647` ``Add Google Virtual NIC (gVNIC) support`` - -**Bug fixes** - - -* :vytask:`T2194` ``"show firewall" garbled output`` -* :vytask:`T2654` ``Multiple names unable to be assigned to the same static mapping`` -* :vytask:`T3507` ``Bond with mode LACP show u/u in show interfaces even if peer is not configured`` -* :vytask:`T3714` ``Some sysctl custom parameters disappear after reboot`` -* :vytask:`T4206` ``Policy Based Routing with DHCP Interface Issue`` -* :vytask:`T4230` ``OpenVPN server configuration deleted after reboot when using a VRRP virtual-address`` -* :vytask:`T4294` ``Adding a new openvpn-option does not restart the OpenVPN process`` -* :vytask:`T4313` ``"generate public-key-command" throws unhandled exceptions when it cannot retrieve the key`` -* :vytask:`T4319` ``The command "set system ipv6 disable" doesn't work as expected.`` -* :vytask:`T4324` ``wwan: check alive script should only be run via cron if a wwan interface is configured at all`` -* :vytask:`T4330` ``MTU settings cannot be applied when IPv6 is disabled`` -* :vytask:`T4331` ``IPv6 link local addresses are not configured when an interface is in a VRF`` -* :vytask:`T4337` ``isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError`` -* :vytask:`T4338` ``wwan: changing interface description should not trigger reconnect`` -* :vytask:`T4339` ``wwan: tab-completion results in "No such file or directory" if there is no WWAN interface`` -* :vytask:`T4341` ``login: disable user-account prior to deletion and wait until deletion is complete`` -* :vytask:`T4350` ``DMVPN opennhrp spokes dont work behind NAT`` -* :vytask:`T4354` ``Slave interfaces fall out from bonding during configuration change`` -* :vytask:`T4361` ```vyos.config.exists()` does not work for nodes with multiple values`` -* :vytask:`T4363` ``salt-minion: default mine_interval option is not set`` -* :vytask:`T4366` ``geneve: interface is removed on changes to e.g. description`` -* :vytask:`T4369` ``OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node`` -* :vytask:`T4388` ``dhcp-server: missing constraint on tftp-server-name option`` -* :vytask:`T4405` ``DHCP client sometimes ignores `no-default-route` option of an interface`` -* :vytask:`T4441` ``wwan: connection not possible after a change added after 1.3.1-S1 release`` -* :vytask:`T4447` ``DHCPv6 prefix delegation `sla-id` limited to 128`` -* :vytask:`T4468` ``web-proxy source group cannot start with a number bug`` -* :vytask:`T4510` ``set system static-host-mapping doesn't allow IPv4 and IPv6 for same name.`` -* :vytask:`T4513` ``Webproxy monitor commands do not work`` -* :vytask:`T4521` ``bond: ARP monitor interval is not configured despite set via CLI`` -* :vytask:`T4525` ``Delete interface from VRF and add it to bonding error`` -* :vytask:`T4527` ``Prevent to create VRF name default`` -* :vytask:`T4532` ``Flow-accounting IPv6 server/receiver bug`` -* :vytask:`T4534` ``bond: bridge: error out if member interface is assigned to a VRF instance`` -* :vytask:`T4537` ``MACsec not working with cipher gcm-aes-256`` -* :vytask:`T4538` ``Macsec does not work correctly when the interface status changes.`` -* :vytask:`T4565` ``vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249`` -* :vytask:`T4572` ``Add an option to force interface MTU to the value received from DHCP`` -* :vytask:`T4579` ``bridge: can not delete member interface CLI option when VLAN is enabled`` -* :vytask:`T4592` ``macsec: can not create two interfaces using the same source-interface`` -* :vytask:`T4616` ``openconnect: KeyError: 'local_users'`` -* :vytask:`T4618` ``Traffic policy not set on virtual interfaces`` -* :vytask:`T4632` ``VLAN-aware bridge not working`` -* :vytask:`T4653` ``Interface offload options are not applied correctly`` -* :vytask:`T4666` ``EAP-TLS no longer allows TLSv1.0 after T4537, T4584`` - -**Other resolved issues** - - -* :vytask:`T4415` ``Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size`` -* :vytask:`T4430` ``Show firewall output with visual shift default rule`` -* :vytask:`T4629` ``Raised ConfigErrors contain dict instead of only the dict key`` -* :vytask:`T4654` ``RPKI cache incorrect description`` - -1.3.1 (21th March 2022) -======================= - -**Security** - - -* :vytask:`T4204` ``Update Accel-PPP to a newer revision`` -* :vytask:`T4310` ``CVE-2022-0778: infinite loop in OpenSSL certificate parsing`` -* :vytask:`T4311` ``CVE-2021-4034: local privilege escalation in PolKit`` - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T1972` ``Allow setting interface name for virtual_ipaddress in VRRP VRID`` -* :vytask:`T4273` ``ssh: Upgrade from 1.2.X to 1.3.0 breaks config`` - -**New features and improvements** - - -* :vytask:`T1972` ``Allow setting interface name for virtual_ipaddress in VRRP VRID`` -* :vytask:`T2400` ``OpenVPN: dont restart server if no need`` -* :vytask:`T2764` ``Increase maximum number of NAT rules`` -* :vytask:`T3164` ``console-server ssh does not work with RADIUS PAM auth`` -* :vytask:`T3299` ``Allow the web proxy service to listen on all IP addresses`` -* :vytask:`T3854` ``Missing op-mode commands for conntrack-sync`` -* :vytask:`T3872` ``Add configurable telegraf monitoring service`` -* :vytask:`T4055` ``Add VRF support for HTTP(S) API service`` -* :vytask:`T4100` ``Firewall increase maximum number of rules`` -* :vytask:`T4120` ``[VXLAN] add ability to set multiple unicast-remotes`` -* :vytask:`T4128` ``keepalived: Upgrade package to add VRF support`` -* :vytask:`T4261` ``MACsec: add DHCP client support`` - -**Bug fixes** - - -* :vytask:`T2922` ``The `vpn ipsec logging log-modes` miss the IPSec daemons state check`` -* :vytask:`T3380` ``"show vpn ike sa" does not display IPv6 peers`` -* :vytask:`T3686` ``Bridging OpenVPN tap with no local-address breaks`` -* :vytask:`T3914` ``VRRP rfc3768-compatibility doesn't work with unicast peers`` -* :vytask:`T3924` ``VRRP stops working with VRF`` -* :vytask:`T4002` ``firewall group network-group long names restriction incorrect behavior`` -* :vytask:`T4081` ``VRRP health-check script stops working when setting up a sync group`` -* :vytask:`T4087` ``IPsec IKE-group proposals limit of 10 pieces`` -* :vytask:`T4092` ``IKEv2 mobike commit failed with DMVPN nhrp`` -* :vytask:`T4093` ``SNMPv3 snmpd.conf generation bug`` -* :vytask:`T4101` ``commit-archive: Use of uninitialized value $source_address in concatenation`` -* :vytask:`T4104` ``RAID1: "add raid md0 member sda1" does not restore boot sector`` -* :vytask:`T4110` ``[IPV6-SSH/DNS} enable IPv6 link local adresses as listen-address %eth0`` -* :vytask:`T4141` ``Set high-availability vrrp sync-group without members error`` -* :vytask:`T4142` ``Input ifbX interfaces not displayed in op-mode`` -* :vytask:`T4152` ``NHRP shortcut-target holding-time does not work`` -* :vytask:`T4154` ``Error add second gre tunnel with the same source interface`` -* :vytask:`T4165` ``Custom conntrack rules cannot be deleted`` -* :vytask:`T4168` ``IPsec VPN is impossible to restart when DMVPN is configured`` -* :vytask:`T4183` ``IPv6 link-local address not accepted as wireguard peer`` -* :vytask:`T4184` ``NTP allow-clients address doesn't work it allows to use ntp server for all addresses`` -* :vytask:`T4191` ``Lost access to host after VRF re-creating`` -* :vytask:`T4196` ``DHCP server client-prefix-length parameter results in non-functional leases`` -* :vytask:`T4203` ``Reconfigure DHCP client interface causes brief outages`` -* :vytask:`T4226` ``VRRP transition-script does not work for groups name which contains -(minus) sign`` -* :vytask:`T4228` ``bond: OS error thrown when two bonds use the same member`` -* :vytask:`T4233` ``ssh: sync regex for allow/deny usernames to "system login"`` -* :vytask:`T4234` ``Show firewall partly broken in 1.3.x`` -* :vytask:`T4237` ``Conntrack-sync error - error adding listen-address command`` -* :vytask:`T4240` ``Cannot add wlan0 to bridge via configure`` -* :vytask:`T4241` ``ocserv openconnect looks broken in recent bulds of 1.3 Equuleus`` -* :vytask:`T4242` ``ethernet speed/duplex can never be switched back to auto/auto`` -* :vytask:`T4258` ``[DHCP-SERVER] error parameter on Failover`` -* :vytask:`T4259` ``The conntrackd daemon can be started wrongly`` -* :vytask:`T4263` ``vyos.util.leaf_node_changed() dos not honor valueLess nodes`` -* :vytask:`T4264` ``vxlan: interface is destroyed and rebuild on description change`` -* :vytask:`T4267` ``Error - Missing required "ip key" parameter`` -* :vytask:`T4273` ``ssh: Upgrade from 1.2.X to 1.3.0 breaks config`` -* :vytask:`T4297` ``Interface configuration saving fails for ice/iavf based interfaces because they can't change speed/duplex settings`` -* :vytask:`T4377` ``generate tech-support archive includes previous archives`` - -**Other resolved issues** - - -* :vytask:`T4227` ``Typo in help completion of hello-time option of bridge interface`` -* :vytask:`T4255` ``Unexpected print of dict bridge on delete`` -* :vytask:`T4476` ``Next steps after installation is not communicated properly to new users`` - -1.3.0 (21th December 2021) -========================== - - -**Breaking changes** - - -* :vytask:`T3350` ``OpenVPN config file generation broken`` -* :vytask:`T3866` ``Configs with DNS forwarding listening on OpenVPN interfaces or interfaces without a fixed address cannot be migrated to the new syntax`` - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T2162` ``migration script for router-advert sets link-mtu 0 on bridge interfaces`` -* :vytask:`T2691` ``Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch`` -* :vytask:`T3293` ``RPKI migration script errors out after CLI rewrite`` - -**New features and improvements** - - -* :vytask:`T3704` ``Add ability to interact with Areca RAID adapers`` -* :vytask:`T3745` ``op-mode IPSec show vpn ipse sa sorting`` -* :vytask:`T3912` ``Use a more informative default post-login banner`` -* :vytask:`T3945` ``Add route-map for bgp aggregate-address`` -* :vytask:`T3971` ``Ability to build ISO images for XCP-NG hypervisor`` -* :vytask:`T4012` ``Add VRF support for TFTP`` -* :vytask:`T4013` ``Add pkg cloudwatch for AWS images`` -* :vytask:`T4046` ``Sflow - Add Source address parameter`` -* :vytask:`T4049` ``support command-style output with compare command`` -* :vytask:`T4082` ``Add op mode command to restart ldpd`` -* :vytask:`T4084` ``Dehardcode the default login banner`` - -**Bug fixes** - - -* :vytask:`T1624` ``Failed to set up config session`` -* :vytask:`T1710` ``[equuleus] buster: add patch to fix live-build missing key error`` -* :vytask:`T1847` ``set_level incorrectly handles path given as empty string`` -* :vytask:`T1876` ``IPSec VTI tunnels are deleted after rekey and dangling around as A/D`` -* :vytask:`T2009` ``Ethernet Interface always stays down`` -* :vytask:`T2022` ``When RADIUS config is active, local logins won't work`` -* :vytask:`T2082` ``WireGuard broken after merging T2057`` -* :vytask:`T2158` ``Commit fails if ethernet interface doesn't support flow control (pause)`` -* :vytask:`T2162` ``migration script for router-advert sets link-mtu 0 on bridge interfaces`` -* :vytask:`T2164` ``Package libstrongswan-standard-plugins missing from image`` -* :vytask:`T2167` ``vyos.ifconfig.get_mac() broken`` -* :vytask:`T2176` ``'WiFiIf' object has no attribute 'set_state'`` -* :vytask:`T2177` ``Commit fails on adding disabled interface to bridge`` -* :vytask:`T2241` ``Changing settings on an interface causes it to fall out of bridge`` -* :vytask:`T2273` ``OpenVPN no longer starts in latest rolling, migrate to systemd`` -* :vytask:`T2283` ``openvpn not starting: ccd path in template not moved to /run/openvpn/ccd`` -* :vytask:`T2293` ``OpenVPN: UnboundLocalError after merging server_network PullRequest`` -* :vytask:`T2318` ``dns-forwarding migration script breaks with invalid interface name`` -* :vytask:`T2337` ``hw-id gone missing from interfaces after upgrade to 1.3-rolling-202004191028`` -* :vytask:`T2427` ``Interface addressing broken since fix for T2372 was merged`` -* :vytask:`T2466` ``live-build encounters apt dependency problem when building with local packages`` -* :vytask:`T2578` ``ipaddrcheck unaware of /31 host addresses - can no longer assign /31 mask to interface addresses`` -* :vytask:`T2600` ``RADIUS system login configuration rendered wrongly`` -* :vytask:`T2624` ``Serial Console: fix migration script for configured powersave and no console`` -* :vytask:`T2642` ``sshd fails to start due to configuration error`` -* :vytask:`T2678` ``High RAM usage on SSH logins with lots of IPv6 routes in the routing table.`` -* :vytask:`T2682` ``VRF aware services - connection no longer possible after system reboot`` -* :vytask:`T2691` ``Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch`` -* :vytask:`T2746` ``IPv6 link-local addresses not configured`` -* :vytask:`T2758` ``router-advert: 'infinity' is not a valid integer number`` -* :vytask:`T2886` ``RADIUS authentication broken only returns operator level`` -* :vytask:`T2894` ``bond: lacp: member interfaces get removed once bond interface has vlans configured`` -* :vytask:`T2952` ``configd: timeout breaks synchronization of messages, causing freeze`` -* :vytask:`T3208` ``Does not possible to change user password`` -* :vytask:`T3350` ``OpenVPN config file generation broken`` -* :vytask:`T3370` ``dhcp: Invalid domain name "private"`` -* :vytask:`T3699` ``login: verify selected "system login user" name is not already used by the base system.`` -* :vytask:`T3707` ``Ping incorrect ip host checks`` -* :vytask:`T3822` ``OpenVPN processes do not have permission to read key files generated with `run generate openvpn key``` -* :vytask:`T3866` ``Configs with DNS forwarding listening on OpenVPN interfaces or interfaces without a fixed address cannot be migrated to the new syntax`` -* :vytask:`T3886` ``DHCP server can not start`` -* :vytask:`T3887` ``Removal of IPv6 BGP-peer with peer-group may trigger problems`` -* :vytask:`T3913` ``VRF traffic fails after upgrade from 1.3.0-RC6 to 1.3.0-EPA1/2`` -* :vytask:`T3934` ``Openconnect VPN broken: ocserv-worker general protection fault on client connect`` -* :vytask:`T3962` ``Image cannot be built without open-vm-tools`` -* :vytask:`T3972` ``Removing vif-c interface raises KeyError`` -* :vytask:`T4015` ``Update Accel-PPP to a newer revision`` -* :vytask:`T4019` ``Smoketests for SSTP and openconnect fails`` -* :vytask:`T4033` ``VRRP - Error security when setting scripts`` -* :vytask:`T4035` ``Geneve interfaces aren't displayed by operational mode commands`` -* :vytask:`T4052` ``Validator return traceback on VRRP configuration with the script path not in config dir`` -* :vytask:`T4053` ``VRRP impossible to set scripts out of the /config directory`` -* :vytask:`T4167` ``DMVPN apply wrong param on the first configuration`` -* :vytask:`T4201` ``Firewall - ICMPv6 matches not working as expected on 1.3.0`` -* :vytask:`T4268` ``Elevated LA while using VyOS monitoring feature`` -* :vytask:`T4296` ``Interface config injected by Cloud-Init may interfere with VyOS native`` -* :vytask:`T4344` ``DHCP statistics not matching, conf-mode generates incorrect pool name with dash`` -* :vytask:`T4571` ``Sflow with vrf configured does not use vrf to validate agent-address IP from vrf-configured interfaces`` - -**Other resolved issues** - - -* :vytask:`T1497` ``"set system name-server" generates invalid/incorrect resolv.conf`` -* :vytask:`T1606` ``Rolling release no longer boots after adding hostname daemon`` -* :vytask:`T1676` ``[equuleus] buster: update GRUB boot parameters during upgrade`` -* :vytask:`T2129` ``XML schema: tagNode not allowed on first level in new XML op-mode definition`` -* :vytask:`T2389` ``BGP community-list unknown command`` -* :vytask:`T2722` ``get_config_dict() and key_mangling=('-', '_') will alter CLI data for tagNodes`` -* :vytask:`T3182` ``Main blocker Task for FRR 7.4/7.5 series update`` -* :vytask:`T3293` ``RPKI migration script errors out after CLI rewrite`` -* :vytask:`T3302` ``Make vyos-configd relay stdout from scripts to the user's console`` -* :vytask:`T3687` ``IS-IS is missing IPv6 support`` -* :vytask:`T3689` ``static ipv6 route doesn't deleted in some cases`` -* :vytask:`T3695` ``OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues`` -* :vytask:`T3697` ``Impossible to delete IPsec completely`` -* :vytask:`T3711` ``service router-advert interface <name> dnssl option has no effects`` -* :vytask:`T3725` ``show configuration in json format`` -* :vytask:`T3735` ``Configuration with multiple network addresses of firewall network-group via colud-init fails`` -* :vytask:`T4065` ``IPSEC configuration error: connection to unix:///var/run/charon.ctl failed: No such file or directory`` -* :vytask:`T4088` ``Fix typo in login banner`` -* :vytask:`T4115` ``reboot in <x> not working as expected`` -* :vytask:`T4198` ``Error shown on commit`` - -1.3.0-epa3 (5th November 2021) -============================== - - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T3925` ``Tunnel: dhcp-interface not implemented - use source-interface instead`` - -**New features and improvements** - - -* :vytask:`T3927` ``Kernel: Enable kernel support for HW offload of the TLS protocol`` -* :vytask:`T3942` ``Generate IPSec debug archive from op-mode`` - -**Bug fixes** - - -* :vytask:`T3610` ``DHCP-Server creation for not primary IP address fails`` -* :vytask:`T3846` ``dmvpn configuration not reapllied after "restart vpn"`` -* :vytask:`T3921` ``tunnel: KeyError when using dhcp-interface`` -* :vytask:`T3922` ``NHRP: delete fails`` -* :vytask:`T3925` ``Tunnel: dhcp-interface not implemented - use source-interface instead`` -* :vytask:`T3926` ``strip-private does not sanitize "cisco-authentication" from NHRP configuration`` -* :vytask:`T3941` ``"show vpn ipsec sa" shows established time of parent SA not child SA's`` -* :vytask:`T3943` ``"netflow source-ip" prevents image upgrades if IP address does not exist locally`` -* :vytask:`T3944` ``VRRP fails over when adding new group to master`` -* :vytask:`T3954` ``FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error`` -* :vytask:`T3956` ``GRE tunnel - unable to move from source-interface to source-address, commit error`` -* :vytask:`T4004` ``IPsec ike-group parameters are not saved correctly (after reboot)`` -* :vytask:`T4034` ``"make xcp-ng-iso" still includes vyos-xe-guest-utilities`` - -**Other resolved issues** - - -* :vytask:`T3188` ``Tunnel local-ip to dhcp-interface Change Fails to Update`` -* :vytask:`T3341` ``Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command`` -* :vytask:`T3626` ``Configuring and disabling DHCP Server`` -* :vytask:`T3918` ``DHCPv6 prefix delegation incorrect verify error`` -* :vytask:`T3920` ``dhclient exit hook script 01-vyos-cleanup causes too many arguments error`` -* :vytask:`T3990` ``WATCHFRR: crashlog and per-thread log buffering unavailable (due to files left behind in /var/tmp/frr/ after reboot)`` -* :vytask:`T4005` ``Feature Request: IPsec IKEv1 + IKEv2 for one peer`` - -1.3.0-epa2 (18th October 2021) -============================== - - - - -**New features and improvements** - - -* :vytask:`T3277` ``DNS Forwarding - reverse zones`` -* :vytask:`T3885` ``dhcpv6-pd: randomly generated DUID is not persisted`` -* :vytask:`T3890` ``dhcp(v6): provide op-mode commands to retrieve both server and client logfiles`` -* :vytask:`T3899` ``Add support for hd44780 LCD displays`` - -**Bug fixes** - - -* :vytask:`T3750` ``pdns-recursor 4.4 issue with dont-query and private DNS servers`` -* :vytask:`T3874` ``D-Link Ethernet Interface not working.`` -* :vytask:`T3877` ``VRRP always enabled rfc3768-compatibility even when not specified`` -* :vytask:`T3878` ``get_config_dict() no_tag_node_value_mangle has no effect`` -* :vytask:`T3879` ``GPG key verification fails when upgrading from a 1.3 beta version`` -* :vytask:`T3883` ``VRF - Delette vrf config on interface`` -* :vytask:`T3893` ``MGRE Tunnel commit crash If sit tunnel available`` -* :vytask:`T3894` ``Tunnel Commit Failed if system does not have `eth0``` -* :vytask:`T3904` ``NTP pool associations silently fail`` - -**Other resolved issues** - - -* :vytask:`T3422` ``Dynamic DNS doesn't allow zone field with cloudflare protocol`` -* :vytask:`T3425` ``Scripts from the /config/scripts/ folder do not run on live system`` -* :vytask:`T3880` ``EFI boot shows error on display`` -* :vytask:`T3882` ``Upgrade PowerDNs recursor to 4.5 series`` -* :vytask:`T3888` ``Incorrect warning when poweroff command executed from configure mode.`` -* :vytask:`T3889` ``Migrate to journalctl when reading daemon logs`` - -1.3.0-epa1 (30th September 2021) -================================ - - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T3672` ``DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output`` -* :vytask:`T3779` ``Backport all 1.4 IS-IS features and configuration to 1.3 except VRF`` -* :vytask:`T3804` ``cli: Migrate and merge "system name-servers-dhcp" into "system name-server"`` -* :vytask:`T3842` ``Backport DHCP server improvements from VyOS 1.4 sagitta to 1.3 equuleus`` - -**New features and improvements** - - -* :vytask:`T1099` ``Openvpn: use config files instead of one long command.`` -* :vytask:`T1154` ``use of local cache to build iso`` -* :vytask:`T1176` ``FRR - BGP replicating routes`` -* :vytask:`T1350` ``VRRP transition script will be executed once only`` -* :vytask:`T3716` ``Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections`` -* :vytask:`T3779` ``Backport all 1.4 IS-IS features and configuration to 1.3 except VRF`` -* :vytask:`T3789` ``Add custom validator for base64 encoded CLI data`` -* :vytask:`T3803` ``Add source-address option to the ping CLI`` -* :vytask:`T3804` ``cli: Migrate and merge "system name-servers-dhcp" into "system name-server"`` -* :vytask:`T3840` ``dns forwarding: Cache size should allow values > 10k`` -* :vytask:`T3841` ``dhcp-server: add ping-check option to CLI`` -* :vytask:`T3842` ``Backport DHCP server improvements from VyOS 1.4 sagitta to 1.3 equuleus`` -* :vytask:`T3857` ``reboot: send wall message to all users for information`` -* :vytask:`T3859` ``Add "log-adjacency-changes" to ospfv3 process`` - -**Bug fixes** - - -* :vytask:`T945` ``Unable to change configuration after changing it from script (vbash + script-template)`` -* :vytask:`T1148` ``epa2 BGP peers initiate before config is fully loaded, routes leak.`` -* :vytask:`T1249` ``multiple PBR rules can set to a single interface`` -* :vytask:`T1894` ``FRR config not loaded after daemons segfault or restart`` -* :vytask:`T2019` ``LLDP wrong config generation for interface 'all'`` -* :vytask:`T2127` ``restart dhcp server reports a failure`` -* :vytask:`T2161` ``snmpd cannot start if ipv6 disabled`` -* :vytask:`T2328` ``dhcpv6 server not starting (disable check reversed?)`` -* :vytask:`T2430` ``cannot delete specific route static next-hop`` -* :vytask:`T2432` ``dhcpd: Can't create new lease file: Permission denied`` -* :vytask:`T2434` ``Duplicate Address Detection Breaks Interfaces`` -* :vytask:`T2525` ``OSPFv3 missing route map, not establishing`` -* :vytask:`T2623` ``Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation”`` -* :vytask:`T2738` ``Modifying configuration in the "interfaces" section from VRRP transition scripts causes configuration lockup and high CPU utilization`` -* :vytask:`T2759` ``validate-value prints error messages from validators that fail even if overall validation succeeds`` -* :vytask:`T2800` ``Pseudo-Ethernet: source-interface must not be member of a bridge`` -* :vytask:`T2895` ``VPN IPsec "leftsubnet" declared 2 times`` -* :vytask:`T2920` ``Commit crash when adding the second mGRE tunnel with the same key`` -* :vytask:`T2931` ``Unicode decode error causes vyos.configd service to restart`` -* :vytask:`T2941` ``Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py`` -* :vytask:`T3076` ``Router reboot adds unwanted 'conntrack-sync mcast-group '225.0.0.50'' line to configuration`` -* :vytask:`T3196` ``No NAT translations showing up`` -* :vytask:`T3219` ``Typo in openvpn server client config for IPv6 iroute`` -* :vytask:`T3601` ``Error in ssh keys for vmware cloud-init if ssh keys is left empty.`` -* :vytask:`T3637` ``vrf: bind-to-all didn't work properly`` -* :vytask:`T3672` ``DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output`` -* :vytask:`T3708` ``isisd and gre-bridge commit error`` -* :vytask:`T3731` ``verify_accel_ppp_base_service return wrong config error for SSP`` -* :vytask:`T3738` ``openvpn fails if server and authentication are configured`` -* :vytask:`T3740` ``HTTPs API breaks when the address is IPv6`` -* :vytask:`T3756` ``VyOS generates invalid QR code for wireguard clients`` -* :vytask:`T3772` ``VRRP virtual interfaces are not shown in show interfaces`` -* :vytask:`T3773` ``Delete the "show system integrity" command (to prepare for a re-implementation)`` -* :vytask:`T3777` ``adding IPv6 EUI64 address fails commit in 1.3.0-rc6`` -* :vytask:`T3781` ``Revert the NAT implementation in 1.3 back to iptables`` -* :vytask:`T3782` ``Ingress Shaping with IFB No Longer Functional with 1.3`` -* :vytask:`T3783` ``"set protocols isis spf-delay-ietf" is not working`` -* :vytask:`T3786` ``GRE tunnel source address 0.0.0.0 error`` -* :vytask:`T3788` ``Keys are not allowed with ipip and sit tunnels`` -* :vytask:`T3790` ``Does not possible to configure PPTP static ip-address to users`` -* :vytask:`T3792` ``login: A hypen present in a username from "system login user" is replaced by an underscore`` -* :vytask:`T3797` ``show interface errors with vrrp configuration`` -* :vytask:`T3802` ``Commit fails if ethernet interface doesn't support flow control`` -* :vytask:`T3805` ``OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface`` -* :vytask:`T3806` ``Don't set link local ipv6 address if MTU less then 1280`` -* :vytask:`T3807` ``Op Command "show interfaces wireguard" does not show the output`` -* :vytask:`T3808` ``ipsec is mistakenly restarted after delete`` -* :vytask:`T3816` ``Error after entering outbound-interface command in NAT`` -* :vytask:`T3850` ``Dots are no longer allowed in SSH public key names`` -* :vytask:`T3860` ``Error on pppoe, tunnel and wireguard interfaces for IPv6 EUI64 addresses`` -* :vytask:`T3867` ``vxlan: multicast group address is not validated`` - -**Other resolved issues** - - -* :vytask:`T1202` ``Add `hvinfo` to the packages directory`` -* :vytask:`T1214` ``Add `ipaddrcheck` to the packages directory`` -* :vytask:`T1236` ``Update Linux Kernel`` -* :vytask:`T2027` ``get_config_dict is failing when the configuration section is empty/missing`` -* :vytask:`T2555` ``XML op-mode generation scripts silently discard XML nodes`` -* :vytask:`T2727` ``Add a dotted decimal value validator`` -* :vytask:`T2927` ``isc-dhcpd release and expiry events never execute`` -* :vytask:`T3217` ``Save FRR configuration on each commit`` -* :vytask:`T3234` ``multi_to_list fails in certain cases, with root cause an element redundancy in XML interface-definitions`` -* :vytask:`T3254` ``Dynamic DNS status shows incorrect last update time`` -* :vytask:`T3291` ``Fault on setting offload RPS with single-core CPU`` -* :vytask:`T3362` ``1.3 - RC1 ifb redirect failing to commit`` -* :vytask:`T3381` ``Change GRE tunnel failed`` -* :vytask:`T3396` ``syslog can't be configured with an ipv6 literal destination in 1.2.x`` -* :vytask:`T3431` ``Show version all bug`` -* :vytask:`T3537` ``Unable to override the default OSPFv3 link cost for wireguard interface`` -* :vytask:`T3634` ``Add op command option for ping for do not fragment bit to be set`` -* :vytask:`T3683` ``VXLAN not accept ipv6 and source-interface options and mtu bug`` -* :vytask:`T3730` ``op-mode conntrack-sync miss some functions`` -* :vytask:`T3732` ``override-default helper should support adding defaultValues to default less nodes`` -* :vytask:`T3768` ``Remove early syntaxVersion implementation`` -* :vytask:`T3776` ``Rename FRR daemon restart op-mode commands`` -* :vytask:`T3814` ``wireguard: commit error showing incorrect peer name from the configured name`` -* :vytask:`T3819` ``Upgrade Salt Stack 3002.3 -> 3003 release train`` -* :vytask:`T3820` ``PowerDNS recursor - update from 4.3 -> 4.4 to sync with current`` diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst deleted file mode 100644 index 260020cc..00000000 --- a/docs/changelog/1.4.rst +++ /dev/null @@ -1,433 +0,0 @@ - -########### -1.4 Sagitta -########### - -.. - Please don't add anything by hand. - This file is managed by the script: - _ext/releasenotes.py - - -1.4.1 (future release) -====================== - - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T6505` ``Support VXLAN VLAN-VNI range mapping in CLI`` - -**New features and improvements** - - -* :vytask:`T5878` ``Make the list of SSH server ciphers configurable`` -* :vytask:`T5949` ``Disable USB autosuspend`` -* :vytask:`T6320` ``WiFi: Enable support for 6GHz AccesPoints`` -* :vytask:`T6423` ``Require command definition nodes that have an owner to also have a priority`` -* :vytask:`T6424` ``ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate`` -* :vytask:`T6454` ``Explicitly set the default reverse proxy mode to HTTP`` -* :vytask:`T6462` ``wireless: add op-mode command for hostapd and wpa_supplicant logs`` -* :vytask:`T6473` ``bgp: missing completion helper for peer-groups inside a VRF`` -* :vytask:`T6477` ``Adding Loki plugin to Telegraf`` -* :vytask:`T6505` ``Support VXLAN VLAN-VNI range mapping in CLI`` -* :vytask:`T6538` ``Allow adding a geneve interface to the vrf.`` -* :vytask:`T6539` ``Add logging options to load-balancer reverse-proxy`` -* :vytask:`T6566` ``op-mode: "monitor bandwidth" add support for listing all interfaces concurrently`` -* :vytask:`T6576` ``op-mode: ntp: add support for NTP service restart via CLI`` -* :vytask:`T6614` ``Initial support for smoketesting op-mode commands`` - -**Bug fixes** - - -* :vytask:`T2145` ``openvpn: server default topology net30 is incompatible with static client IPs for Windows clients`` -* :vytask:`T4287` ``wireless: cannot set regulatory domain`` -* :vytask:`T5514` ``Improve error handling when/if config.boot is deleted or missing`` -* :vytask:`T5552` ``'set system option performance throughput' enables IPv6 forwarding even if it's explicitly disabled with 'set system ipv6 disable-forwarding'`` -* :vytask:`T5725` ``protocol IS-IS configuration is empty if a tunnel does not have remote address`` -* :vytask:`T5947` ``[1.3.2 -> 1.4.0-RC1 Migration] Static ipv6 routes dropped`` -* :vytask:`T6148` ``Reset vpn ipsec command breaks tunnel and does not reset SAs that are down`` -* :vytask:`T6332` ``IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr`` -* :vytask:`T6401` ``Attempts to delete vlan-to-vni option causes an unhandled exception`` -* :vytask:`T6429` ``bug - isis metric-style not applied configuration`` -* :vytask:`T6431` ``monitor traceroute broken VRF support`` -* :vytask:`T6453` ``GRUB variables with `=` in a value are parsed improperly`` -* :vytask:`T6460` ``Showing DHCPv6 leases can fail due to DUID parsing issues`` -* :vytask:`T6463` ``reverse-proxy: service not reloaded when updating SSL certificate via PKI`` -* :vytask:`T6464` ``sstpc: interface not restarted when updating SSL certificate via PKI`` -* :vytask:`T6480` ``PermissionError: [Errno 13] Permission denied: '/config/auth/letsencrypt/live/..../cert.pem`` -* :vytask:`T6484` ``Smoketest fails: fastnetmon killed due to OOM`` -* :vytask:`T6503` ``Command 'restart ssh' not working`` -* :vytask:`T6519` ``interfaces: 20-to-21 -> migration fails if new system has less ethernet interfaces`` -* :vytask:`T6523` ``Error: "nft table ip vyos_filter not found" when commiting prometheus-client`` -* :vytask:`T6559` ``vyos-configd should return commit error on config dependency error`` -* :vytask:`T6584` ``Revert addition of Linux Kernel MT7921 driver`` -* :vytask:`T6593` ``Release DHCP interface does not work`` -* :vytask:`T6600` ``ospf: smoketest "router ospf' not found in" for ldp sync`` -* :vytask:`T6602` ``interfaces: verify supplied VRF name on all interface types`` -* :vytask:`T6603` ``vrf: nftables conntrack ct_iface_map contains multiple identical entries`` -* :vytask:`T6605` ```ConfigError()` behavior is wrong with running `vyos-configd``` -* :vytask:`T6610` ``Missing minisign pub key from image`` - -**Other resolved issues** - - -* :vytask:`T4026` ``PKI: generate pki certificate sign <ca-name> is not working`` -* :vytask:`T5570` ``PAM config RADIUS ignore for default and success`` -* :vytask:`T6290` ``SNMPD show logs systemstats_linux: unexpected header length`` -* :vytask:`T6379` ``"generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients`` -* :vytask:`T6446` ``Display the support URL from image build data in LTS builds`` -* :vytask:`T6486` ``Generate openvpn client-config ignores configured protocol type`` -* :vytask:`T6500` ``openconnect: add support for new multi ca-certificate CLI node`` -* :vytask:`T6524` ``Rewrite "release dhcp interface <interface>" to Python to drop remaining Perl dependencies`` -* :vytask:`T6592` ``Changing VRF on interface fails`` -* :vytask:`T6594` ``IPoE-server extended-scripts do not work`` -* :vytask:`T6597` ``wireless: hostapd occationly gets deactivated via systemd and causes loss in connectivity`` -* :vytask:`T6598` ``Unexpected podman version 4.3.1`` - -1.4.0 (4th June 2024) -===================== - - - - -**New features and improvements** - - -* :vytask:`T3202` ``Enable wireguard debug messages by default`` -* :vytask:`T4022` ``Add package nat-rtsp-dkms`` -* :vytask:`T4393` ``sstp: add support for configuring host-name (SNI)`` -* :vytask:`T5386` ``Execute VRRP transition script when `set high-availability disable` is commited`` -* :vytask:`T5752` ``Check compatibility of new image tools with XCP-NG images`` -* :vytask:`T6293` ``add Mediatek MT7921 to defconfig`` -* :vytask:`T6339` ``Display the flavor name and build comment in "show version"`` -* :vytask:`T6395` ``Enable VFIO No-IOMMU support in kernel config`` - -**Bug fixes** - - -* :vytask:`T4576` ``vpn l2tp logging level configuration`` -* :vytask:`T5527` ``Adjust for change in coreutils behavior on overlayfs`` -* :vytask:`T5939` ``[1.3.5 -> 1.4.0-RC1 Migration] as-path-list Entries Get Messed Up`` -* :vytask:`T5940` ``[1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate`` -* :vytask:`T6038` ``Losing default route after first reboot (cloud-init & DHCP)`` -* :vytask:`T6094` ``Destination Nat not Making Firewall Rules`` -* :vytask:`T6225` ``Unhandled exception when configuring random-detect QoS policy`` -* :vytask:`T6348` ``SNAT op-mode fails with flowtable offload entries`` -* :vytask:`T6356` ``Correct the syntax of config.boot.default [..., 'ntp', 'server'] from leaf node with value to tag node`` -* :vytask:`T6365` ``Negating interface names in NAT configuration causes invalid warnings`` -* :vytask:`T6377` ``PermissionError on /config/auth/letsencrypt/live/ when running show pki`` -* :vytask:`T6400` ``pki: unable to generate fingerprint for ACME issued certificates`` -* :vytask:`T6402` ``Invalid variables referenced in reverse proxy validation`` -* :vytask:`T6404` ``Include constraintGroup element in reference tree`` -* :vytask:`T6407` ``Generate ipsec profile error`` -* :vytask:`T6419` ``reverse-proxy: full CA chain is not build when verifying backend server`` -* :vytask:`T6421` ``host-name has no explicit priority to be set on system boot`` - -**Other resolved issues** - - -* :vytask:`T1981` ``Allow route-map 'set src' to reference both IPv4 and IPv6`` -* :vytask:`T3493` ``DHCPv6 does not have prefix range validation`` -* :vytask:`T4519` ``DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID`` -* :vytask:`T4909` ``Rewrite the NTP op mode in the new format`` -* :vytask:`T5351` ``VyOS deployed with cloud-init improperly saves config.boot`` -* :vytask:`T6022` ``set system image default-boot`` -* :vytask:`T6048` ``Exception in event handler script`` -* :vytask:`T6328` ``Add a warning message about deprecation of web proxy URL filtering`` -* :vytask:`T6333` ``non-free-firmware to trixie`` -* :vytask:`T6345` ``Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards`` -* :vytask:`T6346` ``Boot to multi-user.target instead of graphical.target`` -* :vytask:`T6358` ``Container config option to enable host pid`` -* :vytask:`T6367` ``op-mode: commit-archive: TypeError: attribute name must be string, not 'NoneType'`` -* :vytask:`T6383` ``Incorrect completion for rollback-soft`` -* :vytask:`T6384` ``rollback-soft should tell the user to compare and commit`` -* :vytask:`T6391` ``load-balancing reverse-proxy: typo in timeout help`` -* :vytask:`T6396` ``MINOR Typo: set system conntrack timeout custom ipv4 rule X`` -* :vytask:`T6409` ``Remove unused parameter node from reverse-proxy backend`` - -1.4.0-epa3 (14th May 2024) -========================== - -**Security** - - -* :vytask:`T6324` ``CVE-2024-2961`` - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T5535` ``Move disable-directed-broadcast to firewall global-options`` -* :vytask:`T6171` ``Rename the DHCP server "failover" command to "high-availability mode"`` -* :vytask:`T6208` ``container: rename "cap-add" CLI node to "capability"`` -* :vytask:`T6216` ``Firewall group names that contain the '+' character break the config`` -* :vytask:`T6295` ``netns: disable incomplete support in VyOS 1.4 sagitta`` - -**New features and improvements** - - -* :vytask:`T4309` ``Support network/address-groups and ipv6-network/ipv6-address-groups in "conntrack ignore"`` -* :vytask:`T4903` ``Support IPv6 addresses in "set system conntrack ignore"`` -* :vytask:`T5364` ``Make it possible to set the PADO delay to 0`` -* :vytask:`T6127` ``Ability to view logs for rules with Offload not functional`` -* :vytask:`T6133` ``Add domain-name to commit-archive`` -* :vytask:`T6143` ``Increase configuration timeout range for service config-sync`` -* :vytask:`T6154` ``Installer should ask for password twice`` -* :vytask:`T6161` ``Add support for displaying container image data in JSON`` -* :vytask:`T6162` ``ixgbe: Add 1000BASE-BX support`` -* :vytask:`T6171` ``Rename the DHCP server "failover" command to "high-availability mode"`` -* :vytask:`T6176` ``image-tools: rationalize setting of console type`` -* :vytask:`T6184` ``image-tools: add op-mode command to set default boot console type`` -* :vytask:`T6192` ``Support running SSH server in more than one VRF`` -* :vytask:`T6226` ``Add "tcp-requece inspect-delay" to reverse proxy`` -* :vytask:`T6257` ``Add op mode commands for dynamic firewall address groups`` -* :vytask:`T6258` ``Add IPv6 base-reachable-time option to interfaces`` -* :vytask:`T6260` ``image-tools: remove the image directory if it fails to install due to insufficient drive space`` -* :vytask:`T6267` ``Improve commit failure messages for wireless interface configuration`` -* :vytask:`T6278` ``Attempt hint for console type during image install`` -* :vytask:`T6291` ``Add op mode commands for displaying LACP information for bonding interfaces`` -* :vytask:`T6306` ``EVPN-MH - missing options in uplink ports`` - -**Bug fixes** - - -* :vytask:`T2590` ``DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` -* :vytask:`T3655` ``NAT doesn't work correctly with VRF`` -* :vytask:`T4718` ``DHCP server listen-address doesn't take effect if the interface is in a VRF`` -* :vytask:`T5164` ``op cmd: "show dhcp server leases state" with available options does not show any result`` -* :vytask:`T5862` ``Default MTU is not acceptable in some environments`` -* :vytask:`T5875` ``login: removing and re-adding a user keeps the home directory but changes the UID, thus SSH keys no longer work`` -* :vytask:`T5996` ``Incorrect behavior for backslash escapes in config save and compare commands`` -* :vytask:`T6082` ``BGP doesn't allow the same local AS and remote AS in peer groups`` -* :vytask:`T6085` ``VTI interfaces are in UP state by default`` -* :vytask:`T6089` ``[1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added`` -* :vytask:`T6090` ``Migration of "policy route" configs fails due to TCP flag case sensitivity`` -* :vytask:`T6100` ``NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version`` -* :vytask:`T6106` ``Improve the commit error message for the case when route-reflector-client option is defined in a peer-group`` -* :vytask:`T6119` ``Use a compliant TOML parser`` -* :vytask:`T6130` ``[1.3.6->1.4.0-epa2 Migration] BGP "set community" missing`` -* :vytask:`T6131` ``Disabling openvpn interface(s) causes OSPF to fail to load on reboot`` -* :vytask:`T6136` ``Configuring a dynamic address group, config script did not check whether the group was created`` -* :vytask:`T6138` ``Conntrack table op-mode fails with flowtable offload entries`` -* :vytask:`T6145` ``Service config-sync does not rely on priorities`` -* :vytask:`T6147` ``Conntrack not working as expected with global state-policy`` -* :vytask:`T6149` ``Update node_data when merging nodes in reference tree generation`` -* :vytask:`T6152` ``Kernel panic for ZimaBoard 232`` -* :vytask:`T6160` ``Unhandled exception when configuring IS-IS`` -* :vytask:`T6165` ``grub: vyos-grub-update failed to start on "slow" systems`` -* :vytask:`T6167` ``VNI not set on VRF after reboot`` -* :vytask:`T6168` ``"add system image" does not set the default boot image to the current console type in compatibility mode`` -* :vytask:`T6169` ``DNS forwarding configuration rejects underscores in SRV records`` -* :vytask:`T6173` ``Build Causes Errors When "--version" Contains Slashes ("/")`` -* :vytask:`T6175` ``op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface`` -* :vytask:`T6178` ``reverse-proxy doesn't check that a certificate exists at set time`` -* :vytask:`T6179` ``Incorrect HAProxy config generated for reverse-proxy rules with url-path`` -* :vytask:`T6186` ``'set system image default-boot' fails to find images that actually do exist in the system`` -* :vytask:`T6189` ``BGP L3VPN connectivity is broken after re-enabling VRF`` -* :vytask:`T6191` ``Policy route set-mss option is not working correctly`` -* :vytask:`T6193` ``dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` -* :vytask:`T6196` ``route-map and summary-only do not work in BGP aggregation at the same time`` -* :vytask:`T6197` ``Validation error in the IPoE server interface client-subnet option`` -* :vytask:`T6202` ``Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1`` -* :vytask:`T6205` ``ipoe: error in migration script logic while renaming mac-address to mac`` -* :vytask:`T6206` ``L2tp smoketest fails if vyos-configd is running`` -* :vytask:`T6207` ``image-tools: restore ability to copy config.boot.default on image install`` -* :vytask:`T6213` ``Validations in firewall groups mistakenly reject correct configurations`` -* :vytask:`T6216` ``Firewall group names that contain the '+' character break the config`` -* :vytask:`T6218` ``Container network interface in VRF fails to generate IPv6 link-local address`` -* :vytask:`T6221` ``Enabling VRF breaks connectivity`` -* :vytask:`T6222` ``VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters`` -* :vytask:`T6241` ``Updating CRL in "pki" config does not update OpenVPN`` -* :vytask:`T6243` ``Update vyos-http-api-tools for package idna security advisory`` -* :vytask:`T6250` ``"policy route-map set table" cannot be deleted from the rule`` -* :vytask:`T6252` ``GRE tunnels don't allow configuring MTU larger than 8024`` -* :vytask:`T6255` ``Static table description should not contain white-space`` -* :vytask:`T6263` ``Commit failures when trying to set an IGMP group with source address on an interface`` -* :vytask:`T6269` ``Polixy route "set table" option is not working correctly`` -* :vytask:`T6272` ``PPPoE configuration does not load after deleting a PPPoE interface from the system`` -* :vytask:`T6276` ``Do not call config dependencies on script error`` -* :vytask:`T6283` ``Cannot delete as-path prepend from policy when it contains more than one AS`` -* :vytask:`T6284` ``IPoE server op mode commands do not show IPv6 addresses`` -* :vytask:`T6299` ``Building VyOS (Dockerized) current ISO fails dues to unmet dependencies podman : Depends: libgpgme11t64 (>= 1.4.1) but it is not installable`` -* :vytask:`T6305` ``IPoE interface wildcard validation error in firewall rules`` -* :vytask:`T6307` ``procps is missing from vyos-1x build dependencies`` -* :vytask:`T6317` ``VLAN doesn't work on a bridge with a wireless interface member`` -* :vytask:`T6329` ``Firewall - Error while printing groups`` - -**Other resolved issues** - - -* :vytask:`T4516` ``Rewrite system image manipulation tools in Python`` -* :vytask:`T5535` ``Move disable-directed-broadcast to firewall global-options`` -* :vytask:`T6146` ``Add python script to get all priorities of service or section from XML`` -* :vytask:`T6159` ``"show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection`` -* :vytask:`T6180` ``Add application of mask to configtree`` -* :vytask:`T6185` ``Simplify marshalling of section and config data for config-sync`` -* :vytask:`T6187` ``Use correct CPU counts adjusted for SMT when necessary`` -* :vytask:`T6195` ``dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1`` -* :vytask:`T6198` ``configverify: add common helper for PKI certificate validation`` -* :vytask:`T6203` ``Remove references to the obsolete vyos.xml module (superseded by vyos.xml_ref)`` -* :vytask:`T6208` ``container: rename "cap-add" CLI node to "capability"`` -* :vytask:`T6234` ``PPPoE-server pado-delay refactoring`` -* :vytask:`T6245` ``Unhandled exception in "show openvpn server"`` -* :vytask:`T6295` ``netns: disable incomplete support in VyOS 1.4 sagitta`` -* :vytask:`T6327` ``Drop boot console type ttyUSB (USB serial)`` -* :vytask:`T6330` ``release.pref.chroot indentation broken`` - -1.4.0-epa2 (15th March 2024) -============================ - - - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T6079` ``dhcp: migration fails for duplicate static-mapping`` - -**New features and improvements** - - -* :vytask:`T4977` ``Babel routing protocol support`` -* :vytask:`T5504` ``Make it possible to set more than one peer-address in unicast VRRP`` -* :vytask:`T5530` ``Add LFA to IS-IS`` -* :vytask:`T5631` ``Ability to export the current configuration in JSON format`` -* :vytask:`T5717` ``ospfv3 - add allow to set metric-type to ospf redistribution while frr docs says its possible.`` -* :vytask:`T5772` ``Require HTTPS API server configurations to include at least one key if key-based auth is used`` -* :vytask:`T5781` ``Add ability to add additional minisign keys`` -* :vytask:`T6057` ``Add ability to disable syslog for conntrackd`` -* :vytask:`T6060` ``op-mode: container: support removing all container images at once`` -* :vytask:`T6087` ``ospfv3: add support to redistribute IS-IS routes`` - -**Bug fixes** - - -* :vytask:`T2998` ``SNMP v3 oid "exclude" option doesn't work`` -* :vytask:`T4270` ``When "ignore-hosts-file" is unset, local hostname of the router resolves to 127.0.1.1 in the DNS forwarding service`` -* :vytask:`T5121` ``Incorrect "architecture" config loaded`` -* :vytask:`T5646` ``QoS policy limiter broken if class without match`` -* :vytask:`T5909` ``Container registry with authentication prevents config load (section container) after reboot`` -* :vytask:`T6004` ``Missing RPKI boot priority prevents it from loading`` -* :vytask:`T6020` ``VRRP health-check script is not applied correctly in keepalived.conf`` -* :vytask:`T6054` ``load-balancing wan - doesn't configure a list of ports`` -* :vytask:`T6055` ``PKI error: "failed to install x value" when executed the command from conf mode`` -* :vytask:`T6061` ``connection-status nat destination firewall filter not working in 1.4.0-epa1`` -* :vytask:`T6069` ``HTTP API segfault during concurrent configuration requests`` -* :vytask:`T6070` ``bnx2x NIC causes a commit error due to incorrect implementation of EEE status reading`` -* :vytask:`T6073` ``Conntrack/NAT not being disabled when VRFs are defined`` -* :vytask:`T6074` ``container: do not allow deleting images which have a container running`` -* :vytask:`T6079` ``dhcp: migration fails for duplicate static-mapping`` -* :vytask:`T6081` ``QoS policy shaper target and interval wrong calcuations`` -* :vytask:`T6084` ``OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration`` -* :vytask:`T6086` ``NAT does not work with network-groups`` -* :vytask:`T6093` ``Incorrect dhcp-options vendor-class-id regex`` -* :vytask:`T6096` ``Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` -* :vytask:`T6098` ``Description doesnt seem to allow for non international characters`` -* :vytask:`T6104` ``Regression in commit-archive for non-interactive configuration`` -* :vytask:`T6107` ``Nginx does not allow big config queries for configure endpoint API`` -* :vytask:`T6141` ``Trying to set PADO delay in PPPoE server without also configuring the session options causes a commit failure`` - -**Other resolved issues** - - -* :vytask:`T2199` ``Rewrite firewall in new XML/Python style`` -* :vytask:`T5738` ``Extend XML building blocks`` -* :vytask:`T5870` ``ipsec remote access VPN: add x509 ("pubkey") authentication`` -* :vytask:`T5959` ``Streamline dns forwarding service`` -* :vytask:`T6071` ``firewall: CLI description limit of 256 characters cause config upgrade issues`` -* :vytask:`T6075` ``Applying firewall rules with a non-existent interface group`` -* :vytask:`T6077` ``banner: implement ASCII contest winner default logo`` -* :vytask:`T6083` ``ethtool: move string parsing to JSON parsing`` -* :vytask:`T6095` ``Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"`` -* :vytask:`T6214` ``Error when using some constraints`` - -1.4.0-epa1 (22th February 2024) -=============================== - -**Security** - - -* :vytask:`T4915` ``Minisign verification failure == pass??`` - -**Breaking changes** - - -* :vytask:`T5605` ``Do not generate keysize option in OpenVPN configs`` - -**Configuration syntax changes (automatically migrated)** - - -* :vytask:`T1991` ``Rework time services`` -* :vytask:`T5877` ``Reduce unnecessary nesting in system domain-search path and improve smoketest`` - -**New features and improvements** - - -* :vytask:`T160` ``Support NAT64`` -* :vytask:`T1991` ``Rework time services`` -* :vytask:`T4221` ``Add a template filter for converting scalars to single-item lists`` -* :vytask:`T4883` ``Add a description field for routing tables`` -* :vytask:`T4940` ``Interface debugging`` -* :vytask:`T5122` ``Move "archive-areas" to defaults.toml to support "non-free-firmware" repository`` -* :vytask:`T5418` ``Allow arbitrary subnets in PPPoE client IP pools`` -* :vytask:`T5449` ``Add options for TCP MSS probing`` -* :vytask:`T5497` ``Add ability to resequence rule numbers for firewall`` -* :vytask:`T5615` ``Narrow down spurious name conflict with mdns`` -* :vytask:`T5877` ``Reduce unnecessary nesting in system domain-search path and improve smoketest`` -* :vytask:`T5965` ``WWAN modems using raw-ip do not work with dhclient/dhcp6c`` -* :vytask:`T5972` ``login: add possibility to disable individual local user accounts`` - -**Bug fixes** - - -* :vytask:`T2113` ``OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping`` -* :vytask:`T2700` ``Redirecting traffic from PPPoE interface to IFB fails`` -* :vytask:`T2801` ``conntrack-tools flooding logs`` -* :vytask:`T3681` ``The VMware Tools resume script did not run successfully in this virtual machine.`` -* :vytask:`T3774` ``atop logs are not limited in size`` -* :vytask:`T3902` ``Firewall does not load on boot, address-group not found, even though it exists`` -* :vytask:`T4796` ``build-vyos-image ignores multiple options`` -* :vytask:`T5239` ``Host name and domain name missing from the FRR configuration`` -* :vytask:`T5245` ``Wireless interfaces do not get IPv6 link-local address assigned`` -* :vytask:`T5376` ``Conntrack FTP helper does not work properly`` -* :vytask:`T5890` ``OTP key generation is broken`` -* :vytask:`T5926` ``IPSEC does not apply after l2tp configuration was changed`` -* :vytask:`T5977` ``nftables: Operation not supported when using match-ipsec in outbound firewall`` -* :vytask:`T6005` ``Error on adding a wireguard interface to OSPFv3`` -* :vytask:`T6043` ``VxLAN and bridge error bug`` -* :vytask:`T6056` ``Applying 'system static-host-mapping' command calls unnecessary snmpd restart`` -* :vytask:`T6064` ``Can not build VyOS if repository it not cloned to a branch`` - -**Other resolved issues** - - -* :vytask:`T671` ``Identify and remove dead code`` -* :vytask:`T874` ``Support for Two Factor Authentication for CLI access via Google Authenticator/OTP`` -* :vytask:`T1311` ``WAN load-balancing can't flush connections when conntrack-sync is enabled`` -* :vytask:`T1436` ``Config entries with default values do not correctly show as changed`` -* :vytask:`T1487` ``DNS (pdns_recursor) stats logs not saved to disk`` -* :vytask:`T2433` ``Improve CLI value validator performance`` -* :vytask:`T3337` ``Add possibility to serve static DNS zones from the router`` -* :vytask:`T3471` ``DHCP hook is not able to detect all running DHCP instances`` -* :vytask:`T3474` ``Revisit storing syntax version of interface definitions in XML file`` -* :vytask:`T3522` ``policy based routing not working`` -* :vytask:`T3574` ``Add constraintGroup for combining validators with logical AND`` -* :vytask:`T3642` ``PKI configuration`` -* :vytask:`T3722` ``op-mode IPSec show vpn ike sa always shows L-TIME 0`` -* :vytask:`T3766` ``containers: Expanding options for networking and building containers`` -* :vytask:`T4723` ``Error when issuing 'show flow-accounting interface pppoe0'`` -* :vytask:`T4761` ``Add a generic URL validator`` -* :vytask:`T4795` ``Cleanup custom python validators`` -* :vytask:`T4951` ``Add an op mode exception for cases when operations fail due to insufficient system resources`` -* :vytask:`T5109` ``Improve OCaml XML validator`` -* :vytask:`T5195` ``Break up the vyos.util module`` -* :vytask:`T5348` ``Service config-sync can freeze the secondary router if it has commit-archive location`` -* :vytask:`T5605` ``Do not generate keysize option in OpenVPN configs`` -* :vytask:`T5754` ``Update to StrongSwan 5.9.11`` -* :vytask:`T5846` ``Refactor and simplify DUID definition in conf-mode`` -* :vytask:`T5903` ``NHRP don´t start on reboot from version 1.5-rolling-202401010026`` -* :vytask:`T6001` ``Add option to enable resolve-via-default`` -* :vytask:`T6015` ``"journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file`` -* :vytask:`T6050` ``Wrong scripting commands descriptions in accel-ppp services`` -* :vytask:`T6078` ``Update ethtool to 6.6`` diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst deleted file mode 100644 index 94d7b9ab..00000000 --- a/docs/changelog/1.5.rst +++ /dev/null @@ -1,1295 +0,0 @@ -############ -1.5 Circinus -############ - -.. - Please don't add anything by hand. - This file is managed by the script: - _ext/releasenotes.py - - -2024-04-26 -========== - -* :vytask:`T6259` ``(feature): PKI: Support RFC822 (email) names in SAN`` - - -2024-04-25 -========== - -* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address`` -* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF`` - - -2024-04-24 -========== - -* :vytask:`T6255` ``(bug): Static table description should not contain white-space`` -* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config`` -* :vytask:`T6109` ``(bug): remote syslog do not get all the logs`` -* :vytask:`T6262` ``(default): Update the boot splash for VyOS 1.5 ISO`` -* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger`` -* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse`` - - -2024-04-23 -========== - -* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error`` -* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` -* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients`` - - -2024-04-22 -========== - -* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands`` - - -2024-04-21 -========== - -* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x`` -* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options`` - - -2024-04-20 -========== - -* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024`` - - -2024-04-19 -========== - -* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity`` -* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires limit avpkt`` -* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options`` -* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification`` - - -2024-04-17 -========== - -* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode`` -* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` -* :vytask:`T6154` ``(enhancment): Installer should ask for password twice`` -* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments`` -* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes`` -* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network`` -* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration`` -* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers`` - - -2024-04-16 -========== - -* :vytask:`T6099` ``(bug): Suppress unsupported interfaces from appearing in messages log by Telegraf`` - - -2024-04-15 -========== - -* :vytask:`T6163` ``(bug): kea-dhcp4-server crashes due to incorrect lease file permissions after 1.5-rolling-202403120022 -> 1.5-rolling-202403230018 upgrade`` -* :vytask:`T6100` ``(bug): NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version`` -* :vytask:`T6174` ``(bug): can't view dhcp server leases if logged in as a tacacs account`` -* :vytask:`T5734` ``(bug): OpenVPN server dh-params that are not in PKI error`` - - -2024-04-14 -========== - -* :vytask:`T6210` ``(feature): Add container ability to configure capability sys-nice`` - - -2024-04-13 -========== - -* :vytask:`T6173` ``(bug): Build Causes Errors When "--version" Contains Slashes ("/")`` -* :vytask:`T2518` ``(feature): Support NAT for ipv6(NPT)`` - - -2024-04-12 -========== - -* :vytask:`T6214` ``(bug): Error when using some constraints`` -* :vytask:`T6213` ``(bug): Firewall group constraints`` -* :vytask:`T6222` ``(bug): VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters`` -* :vytask:`T6218` ``(bug): Container network interface in VRF fails to generate IPv6 link-local address`` -* :vytask:`T5044` ``(feature): High Availability in DHCPv6 -ISC DHCP Failover/Kea`` -* :vytask:`T6166` ``(bug): Tech support generation error for custom output location`` -* :vytask:`T344` ``(feature): Software basesd FastPath`` - - -2024-04-11 -========== - -* :vytask:`T4516` ``(feature): Rewrite system image manipulation tools in Python`` -* :vytask:`T4548` ``(feature): GRUB loader configuration rework`` -* :vytask:`T6228` ``(bug): Cleanup of not existing units`` - - -2024-04-10 -========== - -* :vytask:`T6207` ``(bug): image-tools: restore ability to copy config.boot.default on image install`` -* :vytask:`T6106` ``(bug): Valid commit error for route-reflector-client option defined in peer-group`` -* :vytask:`T5750` ``(bug): Upgrade from 1.3.4 to 1.4 Rolling fails QoS`` -* :vytask:`T5740` ``(bug): Generate wiregurad keys via HTTP-API fails`` -* :vytask:`T5858` ``(bug): Show conntrack statistics formatting is all over the place`` - - -2024-04-09 -========== - -* :vytask:`T6121` ``(feature): Extend service config-sync for sections vpn, policy, vrf`` - - -2024-04-08 -========== - -* :vytask:`T6197` ``(bug): IPoE-server interface client-subnet looks broken or works with the wrong logic`` -* :vytask:`T6196` ``(bug): Route-map and summary-only do not work in BGP aggregation at the same time`` -* :vytask:`T6068` ``(feature): dhcp server: allow switching between load-balanced and hotspare mode`` - - -2024-04-07 -========== - -* :vytask:`T6205` ``(bug): ipoe: error in migration script logic while renaming mac-address to mac node`` -* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments`` -* :vytask:`T6208` ``(feature): container: rename "cap-add" CLI node to "capability"`` -* :vytask:`T6188` ``(feature): Add Firewall Rule Description to "show firewall" commands`` -* :vytask:`T1244` ``(default): Support for StartupResync in conntrackd`` - - -2024-04-06 -========== - -* :vytask:`T6203` ``(enhancment): Remove obsoleted xml lib`` -* :vytask:`T6202` ``(bug): Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1`` - - -2024-04-05 -========== - -* :vytask:`T6089` ``(bug): [1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added`` -* :vytask:`T2590` ``(bug): DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` -* :vytask:`T6199` ``(feature): spring cleaning - drop unused Python imports`` - - -2024-04-04 -========== - -* :vytask:`T6119` ``(default): Use a compliant TOML parser`` -* :vytask:`T6171` ``(feature): dhcp server fail-over - Rename fail-over node`` -* :vytask:`T6128` ``(bug): minisign.pub is wrong on https://vyos.net/get/nightly-builds/`` -* :vytask:`T5882` ``(feature): vyos-utils: move to Dune as build system`` -* :vytask:`T5864` ``(default): 'show ntp' Commands Not Working`` -* :vytask:`T3843` ``(bug): l2tp configuration not cleared after delete`` -* :vytask:`T2187` ``(feature): Python Unit testing`` -* :vytask:`T788` ``(bug): Nightly builds are not signed`` - - -2024-04-03 -========== - -* :vytask:`T6198` ``(feature): configverify: add common helper for PKI certificate validation`` -* :vytask:`T6192` ``(feature): Multi VRF support for SSH`` - - -2024-04-02 -========== - -* :vytask:`T6167` ``(bug): VNI not set on VRF after reboot`` -* :vytask:`T6151` ``(default): BGP VRF - Route-leaking not work when the next-hop is a recursive route.`` -* :vytask:`T6033` ``(bug): hsflowd fails to start when using a tunnel interface`` - - -2024-04-01 -========== - -* :vytask:`T6195` ``(feature): dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1`` -* :vytask:`T6193` ``(bug): dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` -* :vytask:`T6178` ``(bug): Reverse-proxy should check that certificate exists during commit`` - - -2024-03-31 -========== - -* :vytask:`T6186` ``(bug): Fix regression in 'set system image default-boot'`` -* :vytask:`T5832` ``(feature): Keepalived: Allow using the 'dev' statement on excluded-addresses`` - - -2024-03-29 -========== - -* :vytask:`T6159` ``(bug): Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" for every client connection`` - - -2024-03-28 -========== - -* :vytask:`T6147` ``(bug): Conntrack not working as expected with global state-policy`` -* :vytask:`T6175` ``(bug): op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface`` -* :vytask:`T6102` ``(bug): Clear dhcp-server lease throws python exception on 1.5-rolling`` - - -2024-03-26 -========== - -* :vytask:`T6066` ``(bug): Setting same network in different ospf area will raise exception`` - - -2024-03-25 -========== - -* :vytask:`T6145` ``(bug): Service config-sync does not rely on priorities but must`` - - -2024-03-24 -========== - -* :vytask:`T6161` ``(feature): Output container images as JSON`` -* :vytask:`T6165` ``(bug): grub: vyos-grub-update failed to start on "slow" systems`` -* :vytask:`T6085` ``(bug): VTI interfaces are in UP state by default`` -* :vytask:`T6152` ``(bug): Kernel panic for ZimaBoard 232`` - - -2024-03-23 -========== - -* :vytask:`T6160` ``(bug): isis: NameError: name 'process' is not defined`` -* :vytask:`T6131` ``(bug): Disabling openvpn interface(s) causes OSPF to fail to load on reboot`` -* :vytask:`T4022` ``(feature): Add package nat-rtsp-dkms`` - - -2024-03-22 -========== - -* :vytask:`T6136` ``(bug): Configuring a dynamic address group, config script did not check whether the group was created`` -* :vytask:`T6130` ``(bug): [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing`` -* :vytask:`T6090` ``(bug): [1.3.6->1.4.0-epa1 Migration] policy route fails due tcp flag case sensitivity`` -* :vytask:`T6155` ``(default): ixgbe: failed to initialize because an unsupported SFP+ module type was detected.`` -* :vytask:`T6125` ``(feature): Support 802.1ad (0x88a8) vlan filtering for bridge`` - - -2024-03-21 -========== - -* :vytask:`T6143` ``(feature): Increase configuration timeout range for service config-sync`` - - -2024-03-20 -========== - -* :vytask:`T6133` ``(feature): Add domain-name to commit-archive`` -* :vytask:`T6129` ``(feature): bgp: add route-map option "as-path exclude all"`` - - -2024-03-19 -========== - -* :vytask:`T6127` ``(bug): Ability to view logs for rules with Offload not functional`` -* :vytask:`T6138` ``(bug): Conntrack table op-mode fails with flowtable offload entries`` - - -2024-03-15 -========== - -* :vytask:`T6118` ``(feature): radvd: RFC8781: add nat64prefix support`` - - -2024-03-12 -========== - -* :vytask:`T6020` ``(bug): VRRP health-check script is not applied correctly in keepalived.conf`` -* :vytask:`T5646` ``(bug): QoS policy limiter broken if class without match`` - - -2024-03-11 -========== - -* :vytask:`T6098` ``(bug): Description doesnt seem to allow for non international characters`` -* :vytask:`T2998` ``(bug): SNMP v3 oid "exclude" option doesn't work`` -* :vytask:`T6107` ``(bug): Nginx does not allow big config queries for configure endpoint API`` -* :vytask:`T6096` ``(bug): Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` -* :vytask:`T6093` ``(bug): Incorrect dhcp-options vendor-class-id regex`` -* :vytask:`T6083` ``(feature): ethtool: move string parsing to JSON parsing`` -* :vytask:`T6069` ``(bug): HTTP API segfault during concurrent configuration requests`` -* :vytask:`T6057` ``(feature): Add ability to disable syslog for conntrackd`` -* :vytask:`T5504` ``(feature): Keepalived VRRP ability to set more than one peer-address`` -* :vytask:`T5717` ``(feature): ospfv3 - add allow to set metric-type to ospf redistribution while frr docs says its possible.`` -* :vytask:`T6071` ``(bug): firewall: CLI description limit of 256 characters cause config upgrade issues`` - - -2024-03-08 -========== - -* :vytask:`T6086` ``(bug): NAT does not work with network-groups`` -* :vytask:`T6094` ``(bug): Destination Nat not Making Firewall Rules`` -* :vytask:`T6061` ``(bug): connection-status nat destination firewall filter not working in 1.4.0-epa1`` -* :vytask:`T6075` ``(bug): Applying firewall rules with a non-existent interface group`` - - -2024-03-07 -========== - -* :vytask:`T6104` ``(bug): Regression in commit-archive for non-interactive configuration`` -* :vytask:`T6084` ``(bug): OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration`` -* :vytask:`T5348` ``(bug): Service config-sync can freeze the secondary router if it has commit-archive location`` -* :vytask:`T6073` ``(bug): Conntrack/NAT not being disabled when VRFs are defined`` -* :vytask:`T6095` ``(default): Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"`` - - -2024-03-06 -========== - -* :vytask:`T6079` ``(bug): dhcp: migration fails for duplicate static-mapping`` -* :vytask:`T6063` ``(default): Kea DHCP: Expose match-client-id setting`` -* :vytask:`T5992` ``(default): DHCP: show dhcp server leases not showing all leases`` - - -2024-03-05 -========== - -* :vytask:`T5903` ``(bug): NHRP don´t start on reboot from version 1.5-rolling-202401010026`` -* :vytask:`T2447` ``(feature): Additional Boot Argument Configuration to limit CPU C-States`` - - -2024-03-04 -========== - -* :vytask:`T6087` ``(feature): ospfv3: add support to redistribute IS-IS routes`` - - -2024-03-02 -========== - -* :vytask:`T6081` ``(bug): QoS policy shaper target and interval wrong calcuations`` - - -2024-02-29 -========== - -* :vytask:`T6078` ``(feature): Update ethtool to 6.6`` -* :vytask:`T6077` ``(feature): banner: implement ASCII contest winner default logo`` -* :vytask:`T6074` ``(feature): container: do not allow deleting images which have a container running`` - - -2024-02-28 -========== - -* :vytask:`T4270` ``(bug): dns forwarding - When "ignore-hosts-file" is unset, local hostname of router resolves to 127.0.1.1`` - - -2024-02-26 -========== - -* :vytask:`T6064` ``(bug): Can not build VyOS if repository it not cloned to a branch`` -* :vytask:`T5754` ``(default): Update to StrongSwan 5.9.11`` - - -2024-02-25 -========== - -* :vytask:`T6060` ``(feature): op-mode: container: support removing all container images at once`` - - -2024-02-24 -========== - -* :vytask:`T5909` ``(bug): Container registry with authentication prevents config load (section container) after reboot`` - - -2024-02-23 -========== - -* :vytask:`T5376` ``(bug): Conntrack FTP helper does not work properly`` - - -2024-02-22 -========== - -* :vytask:`T6048` ``(bug): Exception in event handler script`` - - -2024-02-21 -========== - -* :vytask:`T6050` ``(bug): Wrong scripting commands descriptions in accel-ppp services`` -* :vytask:`T3771` ``(feature): DHCPv6 server prefix delegation - dynamically add route to delegated prefix via requesting router`` - - -2024-02-19 -========== - -* :vytask:`T5971` ``(default): Create the same view of ppp section for all accel-ppp services`` -* :vytask:`T6029` ``(default): Rewrite Accel-PPP services to an identical feature set`` -* :vytask:`T3722` ``(bug): op-mode IPSec show vpn ike sa always shows L-TIME 0`` - - -2024-02-18 -========== - -* :vytask:`T6043` ``(bug): VxLAN and bridge error bug`` -* :vytask:`T6041` ``(bug): image-tools: install fails from PXE boot into live iso due to restrictive logic`` - - -2024-02-17 -========== - -* :vytask:`T5972` ``(feature): login: add possibility to disable individual local user accounts`` - - -2024-02-16 -========== - -* :vytask:`T6009` ``(bug): Firewall - Time not working properly when not using UTC`` -* :vytask:`T6005` ``(bug): Error on adding a wireguard interface to OSPFv3`` -* :vytask:`T6019` ``(feature): Bump nftables and libnftnl version`` -* :vytask:`T6001` ``(default): Add option to enable resolve-via-default`` -* :vytask:`T5965` ``(bug): WWAN modems using raw-ip do not work with dhclient/dhcp6c`` -* :vytask:`T5245` ``(bug): Wireless interfaces do not get IPv6 link-local address assigned`` - - -2024-02-15 -========== - -* :vytask:`T5977` ``(bug): nftables: Operation not supported when using match-ipsec in outbound firewall`` -* :vytask:`T2612` ``(bug): HTTPS API, changing API key fails but goes through`` -* :vytask:`T5989` ``(bug): IP subnets not usable in UPnP ACLs`` -* :vytask:`T5719` ``(default): mdns repeater: Add op-mode commands`` -* :vytask:`T4839` ``(feature): Dynamic Firewall groups`` - - -2024-02-14 -========== - -* :vytask:`T6034` ``(feature): rpki: move file based SSH keys for authentication to PKI subsystem`` -* :vytask:`T5981` ``(bug): IPsec site-to-site migrated PKI ca certificates are created with an '@'`` -* :vytask:`T5930` ``(bug): vrf - route-leak not work using route-target both command.`` -* :vytask:`T5709` ``(bug): IPoE-server fails if next pool mentioned but not defined`` -* :vytask:`T2044` ``(bug): RPKI doesn't boot properly`` -* :vytask:`T6032` ``(feature): bgp: add EVPN MAC-VRF Site-of-Origin support`` -* :vytask:`T5960` ``(default): Rewriting authentication section in accel-ppp services`` - - -2024-02-13 -========== - -* :vytask:`T5928` ``(bug): Configuration fails to load on boot if offloading has VLAN interfaces defined`` -* :vytask:`T5064` ``(bug): Value validation for domain-groups seems to be broken`` - - -2024-02-12 -========== - -* :vytask:`T6010` ``(bug): Support setting multiple values in BGP path-attribute`` -* :vytask:`T6004` ``(bug): RPKI is not configured`` -* :vytask:`T5952` ``(default): DHCP allow same MAC Address on same subnet`` -* :vytask:`T5849` ``(feature): Add SRv6 route commands`` - - -2024-02-10 -========== - -* :vytask:`T6023` ``(bug): rpki: add support for CLI knobs expire-interval and retry-interval`` - - -2024-02-09 -========== - -* :vytask:`T6028` ``(bug): QoS policy shaper wrong class_id_max and default_minor_id`` -* :vytask:`T6026` ``(bug): QoS hide attempts to delete qdisc from devices`` -* :vytask:`T5788` ``(feature): frr: update to 9.1 release`` -* :vytask:`T5703` ``(bug): QoS config on pppoe interface resets back to fq_codel after tunnel reboots`` -* :vytask:`T5685` ``(feature): Keepalived VRRP prefix is not necessary for the virtual address`` - - -2024-02-08 -========== - -* :vytask:`T6014` ``(feature): Bump keepalived version`` -* :vytask:`T5910` ``(bug): Grub problem(?) Serial Console no longer working`` -* :vytask:`T6021` ``(bug): QoS r2q wrong calculation`` - - -2024-02-07 -========== - -* :vytask:`T6017` ``(bug): Update vyos-http-api-tools for security advisory`` -* :vytask:`T6016` ``(bug): Resolve intermittent failures in cleanup function after failed image install`` -* :vytask:`T6024` ``(feature): bgp: add additional missing FRR features`` -* :vytask:`T6011` ``(feature): rpki: known-hosts-file is no longer supported by FRR CLI - remove VyOS CLI node`` -* :vytask:`T5998` ``(feature): replay_window setting under vpn in config`` - - -2024-02-06 -========== - -* :vytask:`T6018` ``(default): smoketest: updating http-api framework requires a pause before test`` -* :vytask:`T5921` ``(bug): Trying to commit an OpenConnect configuration without any local users results in an exception`` -* :vytask:`T5687` ``(feature): Implement ECS settings for PowerDNS recursor`` - - -2024-02-05 -========== - -* :vytask:`T5974` ``(bug): QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class`` -* :vytask:`T5865` ``(feature): Rewrite ipv6 pool section to ipv6 named pools in Accel-ppp services`` - - -2024-02-02 -========== - -* :vytask:`T5739` ``(bug): Password recovery does not work if public keys are configured`` -* :vytask:`T5955` ``(feature): Rootless containers/set uid/gid for container`` -* :vytask:`T6003` ``(feature): Add 'show rpki as-number' and 'show rpki prefix'`` -* :vytask:`T5848` ``(feature): Add triple-isolate flow isolation option to CAKE QoS policy`` - - -2024-02-01 -========== - -* :vytask:`T5995` ``(bug): Kernel NIC-drivers for Huawei NICs are not properly enabled`` -* :vytask:`T5978` ``(bug): ethernet: hw-tc-offload does not actually get enabled on the NIC`` -* :vytask:`T5979` ``(enhancment): Add configurable kernel boot parameters`` -* :vytask:`T5973` ``(bug): vrf: RTNETLINK answers: File exists`` -* :vytask:`T5967` ``(bug): Multi-hop BFD connections can't be established; please add minimum-ttl option.`` -* :vytask:`T5619` ``(default): Update the Intel ixgbe driver due to issues with Intel X533`` - - -2024-01-31 -========== - -* :vytask:`T6000` ``(bug): [1.3.x -> 1.5.x] migrating threw exception in /opt/vyatta/etc/config-migrate/migrate/https/5-to-6, performed workaround`` -* :vytask:`T5999` ``(bug): load-balancing reverse-proxy can't configure root as a redirect`` - - -2024-01-30 -========== - -* :vytask:`T5980` ``(feature): Add image-tools support for configurable kernel boot options`` - - -2024-01-29 -========== - -* :vytask:`T5988` ``(bug): image-tools: a check of valid image name is missing from 'add image'`` -* :vytask:`T5994` ``(bug): Fix typo in 'remote' module preventing 'add system image' via ftp`` - - -2024-01-26 -========== - -* :vytask:`T5957` ``(bug): Firewall fails to delete inbound-interface name`` -* :vytask:`T5779` ``(bug): custom conntrack timeout rule not applicable`` -* :vytask:`T5984` ``(feature): Add user util numactl`` - - -2024-01-25 -========== - -* :vytask:`T5983` ``(bug): image-tools: minor regression in pruning version files in compatibility mode`` -* :vytask:`T5927` ``(bug): QoS policy shaper-hfsc class does not have a `bandwidth` node but requires one in the check`` -* :vytask:`T5834` ``(bug): Rename 'enable-default-log' to 'default-log'`` - - -2024-01-22 -========== - -* :vytask:`T5968` ``(feature): hsflowd: add VRF support`` -* :vytask:`T5961` ``(bug): QoS policy shaper vif with ceiling fails on commit`` -* :vytask:`T5958` ``(bug): QoS policy shaper-hfsc is not implemented`` -* :vytask:`T5969` ``(feature): op-mode: list multicast group membership`` - - -2024-01-21 -========== - -* :vytask:`T5799` ``(bug): vyos unbootable after 1.4-rolling-202308240020 to 1.5-rolling-202312010026 upgrade`` -* :vytask:`T5787` ``(bug): dhcp-server allows duplicate static-mapping for the same IP address`` -* :vytask:`T5912` ``(bug): DHCP Static mapping don't work on every first lease`` -* :vytask:`T5692` ``(enhancment): NTP leap smear`` -* :vytask:`T5954` ``(feature): Enable nvme_hwmon and drivetemp in KERNEL`` - - -2024-01-20 -========== - -* :vytask:`T5964` ``(bug): disconnect interface wwan0 throws exception`` -* :vytask:`T5948` ``(bug): pdns-recursor crashes on restart if hostfile-update is enabled and dhcp client sends hostname with trailing dot`` -* :vytask:`T5945` ``(bug): Missing minisign public key for rolling release`` -* :vytask:`T5922` ``(bug): Firewall - bug in zone config`` -* :vytask:`T5915` ``(bug): Firewall zone - Re add op-mode commands`` -* :vytask:`T5724` ``(feature): About dhcp client hooks`` -* :vytask:`T5721` ``(bug): Error in migrating configuration from VyOS 1.4`` -* :vytask:`T5550` ``(bug): Source validation on interface does not work properly`` -* :vytask:`T5239` ``(bug): frr 'hostname' missing or incorrect, and domain-name missing totally`` -* :vytask:`T4726` ``(default): Add completion and validation for the accel-ppp RADIUS vendor option`` -* :vytask:`T4085` ``(feature): Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict`` -* :vytask:`T5963` ``(bug): QoS policy shaper rate calculations could be wrong for some ethernet devices`` -* :vytask:`T5876` ``(bug): Dhcp bug in latest 1.5 rolling releases`` -* :vytask:`T5962` ``(feature): QoS policy set default speed to 100mbit or 1gbit instead of 10mbit`` - - -2024-01-19 -========== - -* :vytask:`T5897` ``(bug): VyOS with Cloud-init and VRF stucks at reboot/shutdown process`` -* :vytask:`T5554` ``(bug): Disable sudo for PAM RADIUS`` -* :vytask:`T4754` ``(default): Improvement: system login: show configured 2FA OTP key`` -* :vytask:`T5857` ``(bug): show interfaces wireless info`` -* :vytask:`T5841` ``(default): Remove old ssh-session-cleanup.service`` -* :vytask:`T5884` ``(default): Minor description fix (op-mode: generate wireguard)`` -* :vytask:`T5781` ``(default): Add ability to add additional minisign keys`` - - -2024-01-18 -========== - -* :vytask:`T5863` ``(bug): Failure to Load Config on Recent 1.5 Versions`` -* :vytask:`T4638` ``(bug): Deleting a parent interface does not delete its underlying VLAN interfaces`` -* :vytask:`T5953` ``(default): Rename 'close_action' value from `hold` to `trap` in IPSEC IKE`` - - -2024-01-17 -========== - -* :vytask:`T5923` ``(bug): Config mode system_console.py is not aware of revised GRUB file structure`` -* :vytask:`T4658` ``(feature): Rename DPD action `hold` to `trap``` - - -2024-01-16 -========== - -* :vytask:`T5859` ``(bug): Invalid format of pool range in accel-ppp services`` -* :vytask:`T5842` ``(feature): Rewrite PPTP service to get_config_dict`` -* :vytask:`T5801` ``(feature): Rewrite L2TP service to get_config_dict`` -* :vytask:`T5688` ``(default): Create the same view of pool configuration for all accel-ppp services`` - - -2024-01-15 -========== - -* :vytask:`T5944` ``(bug): "reboot in 1" not working`` -* :vytask:`T5936` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] OSPF Passive Interface Configuration Not Working Correctly`` -* :vytask:`T5247` ``(bug): the bug of the command "show interfaces system"`` -* :vytask:`T5901` ``(bug): Cloud-init and DHCP exit hook errors`` -* :vytask:`T2556` ``(bug): "show interfaces vrrp" does not return any interface`` - - -2024-01-12 -========== - -* :vytask:`T5925` ``(feature): Containers change systemd KillMode`` -* :vytask:`T5919` ``(bug): Firewall - opmode for ipv6`` -* :vytask:`T5306` ``(default): bgp config migration failed with v6only option configured with peer-group`` -* :vytask:`T3429` ``(bug): Hyper-V integration services not working on VyOS 1.4 (sagitta/current)`` - - -2024-01-11 -========== - -* :vytask:`T5713` ``(bug): strip-private doesn't strip string after "secret"`` -* :vytask:`T5532` ``(bug): After add system image the boot stuck and works again after the second reboot`` -* :vytask:`T5814` ``(bug): VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration`` -* :vytask:`T3191` ``(bug): PAM RADIUS freezing when accounting does not configured on RADIUS server`` -* :vytask:`T5917` ``(feature): Restore annotations of (running)/(default boot) in select image list`` -* :vytask:`T5916` ``(default): Added segment routing check for index size and SRGB size`` -* :vytask:`T5913` ``(feature): Allow for Peer-Groups in ipv4-labeled-unicast SAFI`` - - -2024-01-10 -========== - -* :vytask:`T5918` ``(bug): Verification problem for `set vpn ipsec interface``` -* :vytask:`T5911` ``(bug): pki: service update ignored if certificate name contains a hyphen (-)`` -* :vytask:`T5886` ``(feature): Add support for ACME protocol (LetsEncrypt)`` -* :vytask:`T5766` ``(bug): http: rewrite conf-mode script to get_config_dict()`` -* :vytask:`T4256` ``(feature): Display static DHCP server leases in the operational command output`` -* :vytask:`T5902` ``(bug): http: remove virtual-host configuration in webserver`` -* :vytask:`T3316` ``(feature): Use Kea DHCP(v6) instead of ISC DHCP(v6)`` -* :vytask:`T5791` ``(default): Update dynamic dns configuration path to be consistent with other areas of VyOS`` -* :vytask:`T5708` ``(default): Additional dynamic dns improvements to align with ddclient 3.11.1 release`` -* :vytask:`T5573` ``(bug): Fix ddclient cache entries`` -* :vytask:`T5614` ``(default): Add conntrack helper matching on firewall`` - - -2024-01-09 -========== - -* :vytask:`T5898` ``(bug): Replace partprobe with partx due to unable to install VyOS`` -* :vytask:`T5840` ``(feature): Upgrade Kea to 2.4.x`` -* :vytask:`T5838` ``(feature): Add Infiniband kernel modules`` -* :vytask:`T5785` ``(bug): API output of show container image broken`` -* :vytask:`T5249` ``(feature): Add rollback-soft feature to rollback without a reboot`` -* :vytask:`T2511` ``(feature): Migrate vyatta-op-quagga to new XML format`` -* :vytask:`T5905` ``(bug): pki: IPsec and VTI interface priority inversion when using x509 site-to-site peer`` - - -2024-01-08 -========== - -* :vytask:`T5888` ``(bug): Firewall upgrade fails because of icmpv6`` -* :vytask:`T5844` ``(bug): HTTPS API doesn't start without configured keys even when GraphQL authentication type is set to token`` -* :vytask:`T5904` ``(feature): op-mode: add "show ipv6 route vrf <name> <prefix>" command`` - - -2024-01-07 -========== - -* :vytask:`T5899` ``(feature): VyOS vm images use bookworm repo`` -* :vytask:`T5887` ``(feature): Upgrade Linux Kernel to 6.6.y (2023 LTS edition)`` - - -2024-01-06 -========== - -* :vytask:`T3214` ``(bug): OpenVPN IPv6 fixes`` - - -2024-01-05 -========== - -* :vytask:`T5894` ``(feature): Extend get_config_dict() with additional parameter with_pki that defaults to False`` - - -2024-01-03 -========== - -* :vytask:`T5880` ``(bug): verify_source_interface should not allow dynamic interfaces like ppp, l2tp, ipoe or sstpc client interfaces`` -* :vytask:`T5879` ``(bug): tunnel: sourceing from dynamic pppoe0 interface will fail on reboots`` - - -2024-01-02 -========== - -* :vytask:`T5885` ``(default): image-tools: relax restriction on image-name length from 32 to 64`` - - -2024-01-01 -========== - -* :vytask:`T5883` ``(bug): Preserve file ownership in /config subdirs on add system image`` -* :vytask:`T5474` ``(feature): Establish common file name pattern for XML conf mode commands`` - - -2023-12-30 -========== - -* :vytask:`T5875` ``(bug): login: removing and re-adding a user keeps the home directory but UID will change, thus SSH keys no longer work`` -* :vytask:`T5653` ``(feature): Command to display fingerprint`` - - -2023-12-29 -========== - -* :vytask:`T5829` ``(bug): Can't Add IPv6 Address to Containers`` -* :vytask:`T5852` ``(bug): Reboots fail with eapol WAN interface`` -* :vytask:`T5869` ``(bug): vyos.template.first_host_address() does not honor RFC4291 section 2.6.1`` - - -2023-12-28 -========== - -* :vytask:`T5827` ``(bug): image-tools: 'show system image' Command Not in Order`` -* :vytask:`T4163` ``(feature): [BMP-BGP] Routing monitoring feature`` -* :vytask:`T5867` ``(feature): Upgrade podman to Debian Trixie version 4.7.x`` -* :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon`` -* :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages`` -* :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings`` -* :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release`` - - -2023-12-25 -========== - -* :vytask:`T5855` ``(feature): Migrate "set service lldp snmp enable" -> `set service lldp snmp"`` -* :vytask:`T5837` ``(bug): vyos.configdict.node_changed does not return keys per adding`` -* :vytask:`T5856` ``(bug): SNMP service removal fails`` - - -2023-12-23 -========== - -* :vytask:`T5678` ``(feature): Improvements in PPPoE configuration`` - - -2023-12-22 -========== - -* :vytask:`T5804` ``(bug): SNAT "any" interface error`` - - -2023-12-21 -========== - -* :vytask:`T5807` ``(bug): NAT66 op-mode bugs`` -* :vytask:`T5778` ``(bug): The show dhcp server leases operation mode command does not work as expected`` -* :vytask:`T5775` ``(default): Migrated Firewall Global State Policy ineffective on latest firewall zone config`` -* :vytask:`T5676` ``(bug): NAT66 source rule with negation source/destination prefix causes TypeError`` -* :vytask:`T5637` ``(bug): Firewall default-action log`` -* :vytask:`T5796` ``(bug): Openconnect - HTTPS security headers are missing`` - - -2023-12-20 -========== - -* :vytask:`T5823` ``(feature): Protocol BGP add default values for config dictionary`` -* :vytask:`T5798` ``(enhancment): reverse-proxy load-balancing service should support multiple certificates for frontend`` - - -2023-12-19 -========== - -* :vytask:`T5828` ``(default): Fix GRUB installation on arm64`` - - -2023-12-18 -========== - -* :vytask:`T5751` ``(feature): Adjust new image tools for non-interactive use`` -* :vytask:`T5831` ``(feature): show system image should reverse order by addition date`` -* :vytask:`T5825` ``(bug): image-tools: restore authentication on 'add system image'`` -* :vytask:`T5821` ``(bug): image-tools: restore vrf-aware 'add system image'`` -* :vytask:`T5819` ``(bug): Don't echo password on install image`` -* :vytask:`T5806` ``(bug): Clear old raid data on new install image`` -* :vytask:`T5789` ``(bug): image-tools should copy ssh host keys on image update`` -* :vytask:`T5758` ``(default): Restore scanning configs when live installing`` - - -2023-12-15 -========== - -* :vytask:`T5824` ``(bug): busybox cannot connect some websites from initramfs`` -* :vytask:`T5770` ``(bug): MACsec not encrypting`` -* :vytask:`T5803` ``(default): git/github: Adjust configuration for safe and baseline defaults`` - - -2023-12-14 -========== - -* :vytask:`T5773` ``(bug): Unable to load config via HTTP`` -* :vytask:`T5816` ``(bug): BGP Large Community List Validation Broken`` -* :vytask:`T5812` ``(bug): rollback check max revision number does not work`` -* :vytask:`T5749` ``(feature): Show MAC address VRF and MTU by default for "show interfaces"`` -* :vytask:`T5774` ``(bug): commit-archive to FTP server broken after update (VyOS 1.5-rolling)`` -* :vytask:`T5826` ``(default): Add dmicode as an explicit dependency`` -* :vytask:`T5793` ``(default): mdns-repeater: Cleanup avahi-daemon configuration in /etc`` - - -2023-12-13 -========== - -* :vytask:`T591` ``(feature): Support SRv6`` - - -2023-12-12 -========== - -* :vytask:`T5815` ``(enhancment): Add load_config module`` - - -2023-12-11 -========== - -* :vytask:`T5741` ``(bug): WAN Load Balancing failover route tables aren't created`` - - -2023-12-10 -========== - -* :vytask:`T5658` ``(default): Add VRF support for mtr`` - - -2023-12-09 -========== - -* :vytask:`T5808` ``(bug): op-mode: ipv6 ospfv3 graceful-restart description contains incorrect info`` -* :vytask:`T5802` ``(bug): ping (ip or hostname) interface <tab> produces error`` -* :vytask:`T5747` ``(feature): op-mode add MAC VRF and MTU for show interfaces summary`` -* :vytask:`T3983` ``(bug): show pki certificate Doesnt show x509 certificates`` - - -2023-12-08 -========== - -* :vytask:`T5782` ``(enhancment): Use a single config mode script for https and http-api`` -* :vytask:`T5768` ``(enhancment): Remove auxiliary http-api.conf for simplification of http-api config mode script`` - - -2023-12-04 -========== - -* :vytask:`T5769` ``(bug): VTI tunnels lose their v6 Link Local addresses when set down/up`` - - -2023-12-03 -========== - -* :vytask:`T5753` ``(feature): Add VXLAN vnifilter support`` -* :vytask:`T5759` ``(feature): Change VXLAN default MTU to 1500 bytes`` - - -2023-11-27 -========== - -* :vytask:`T5763` ``(bug): Fix imprecise check for remote file name in vyos-load-config.py`` -* :vytask:`T5783` ``(feature): frr: smoketests must notice any daemon crash`` - - -2023-11-26 -========== - -* :vytask:`T5760` ``(feature): DHCP client custom dhcp-options`` -* :vytask:`T2405` ``(feature): archive to GIT or other platform`` - - -2023-11-25 -========== - -* :vytask:`T5655` ``(bug): commit-archive: Ctrl+C should not eror out with stack trace, signal should be cought`` - - -2023-11-24 -========== - -* :vytask:`T5776` ``(feature): Enable VFIO support`` -* :vytask:`T5402` ``(bug): VRRP router with rfc3768-compatibility sends multiple ARP replies`` - - -2023-11-23 -========== - -* :vytask:`T5659` ``(bug): VPP cannot add interface to dataplane if it already has an address configured`` - - -2023-11-22 -========== - -* :vytask:`T5767` ``(feature): Add reboot and poweroff the system via API`` -* :vytask:`T5729` ``(bug): Firewall, nat and policy route - Switch to valueless`` -* :vytask:`T5681` ``(feature): Interface match - Simplified and unified cli`` -* :vytask:`T5643` ``(feature): NAT - Allow interface groups on nat rules`` -* :vytask:`T5616` ``(feature): Firewall mark - Add capabilities for matching firewall mark`` -* :vytask:`T5590` ``(default): Firewall "log enable" logs every packet`` - - -2023-11-21 -========== - -* :vytask:`T5762` ``(bug): http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server`` - - -2023-11-18 -========== - -* :vytask:`T1354` ``(feature): Add support for VLAN-Aware bridges`` - - -2023-11-16 -========== - -* :vytask:`T5726` ``(bug): HTTPS API image cannot be updated`` -* :vytask:`T5738` ``(feature): Extend XML building blocks`` -* :vytask:`T5736` ``(feature): igmp: migrate "protocols igmp" to "protocols pim"`` -* :vytask:`T5733` ``(feature): pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features`` -* :vytask:`T5689` ``(default): FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix`` -* :vytask:`T5595` ``(feature): Multicast - PIM bfd feature enable`` - - -2023-11-15 -========== - -* :vytask:`T5695` ``(feature): Build FRR with LUA scripts --enable-scripting option`` -* :vytask:`T5677` ``(bug): show lldp neighbors generates TypeError when neighbor has no `descr``` -* :vytask:`T5728` ``(bug): Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client`` -* :vytask:`T5732` ``(bug): generate firewall rule-resequence drops geoip country-code from output`` -* :vytask:`T5661` ``(enhancment): Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection`` - - -2023-11-13 -========== - -* :vytask:`T5698` ``(feature): EVPN ESI Multihoming`` -* :vytask:`T5563` ``(bug): container: Container environment variable cannot be set`` -* :vytask:`T5706` ``(bug): Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces`` - - -2023-11-10 -========== - -* :vytask:`T5727` ``(bug): validator: Use native URL validator instead of regex-based validator`` - - -2023-11-08 -========== - -* :vytask:`T5720` ``(bug): PPPoE-server adding new interface does not work`` -* :vytask:`T5716` ``(bug): PPPoE-server shaper template bug down-limiter option does not rely on fwmark`` -* :vytask:`T5702` ``(feature): Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP`` -* :vytask:`T5693` ``(feature): Adding variable vyos_persistence_dir (and improve variable vyos_rootfs_dir)`` -* :vytask:`T5648` ``(bug): ldpd neighbour template errors`` -* :vytask:`T5564` ``(bug): Both show firewall group and show firewall summary fails`` -* :vytask:`T5559` ``(feature): Selective proxy-arp/proxy-ndp when doing SNAT/DNAT`` -* :vytask:`T5541` ``(bug): Zone-Based Firewalling in VyOS Sagitta 1.4`` - - -2023-11-07 -========== - -* :vytask:`T5586` ``(feature): Disable by default SNMP for Keepalived VRRP`` - - -2023-11-06 -========== - -* :vytask:`T5705` ``(bug): rsyslog - Not working when using facility=all`` -* :vytask:`T5704` ``(feature): PPPoE-server add max-starting option`` -* :vytask:`T5707` ``(bug): Wireguard peer public key update leaves redundant peers and breaks connectivity`` - - -2023-11-03 -========== - -* :vytask:`T5700` ``(bug): Monitoring telegraf deprecated plugins inputs outputs`` - - -2023-11-02 -========== - -* :vytask:`T5701` ``(feature): Update telegraf package`` - - -2023-11-01 -========== - -* :vytask:`T5690` ``(bug): Change to definition of environment variable 'vyos_rootfs_dir' is incorrect`` - - -2023-10-31 -========== - -* :vytask:`T5699` ``(feature): vxlan: migrate "external" CLI know to "parameters external"`` -* :vytask:`T5668` ``(feature): Disable VXLAN bridge learning and enable neigh_suppress when using EVPN`` - - -2023-10-27 -========== - -* :vytask:`T5663` ``(bug): pmacct package contains unwanted data`` -* :vytask:`T5652` ``(bug): Config migrate to image upgrade does not properly generate home directory`` - - -2023-10-26 -========== - -* :vytask:`T5683` ``(bug): reverse-proxy pki filenames mismatch`` -* :vytask:`T5600` ``(bug): Firewall - Remove or extend constraint on 'interface-name'`` -* :vytask:`T5598` ``(bug): unknown parameter 'nf_conntrack_helper' ignored`` -* :vytask:`T5571` ``(bug): Firewall does not delete networks from the table raw`` -* :vytask:`T4903` ``(bug): conntrack ignore does not suppotr IPv6 addresses`` -* :vytask:`T4309` ``(feature): Support network/address-groups and ipv6-network/ipv6-address-groups in conntrack ignore`` -* :vytask:`T5594` ``(bug): VRRP - Error if using IPv6 Link Local as hello source address`` -* :vytask:`T5606` ``(feature): IPSec VPN: Allow multiple CAs certificates`` -* :vytask:`T5568` ``(default): Install image from live ISO always defaults boot to KVM entry`` -* :vytask:`T5558` ``(default): Update config test to check resulting migrations`` - - -2023-10-23 -========== - -* :vytask:`T5299` ``(bug): QoS shaper ceiling does not work`` -* :vytask:`T5667` ``(feature): BGP label-unicast - enable ecmp`` - - -2023-10-22 -========== - -* :vytask:`T5254` ``(bug): Modification of any interface setting sets MTU back to default when MTU has been inherited from a bond`` -* :vytask:`T5671` ``(feature): vxlan: change port to IANA assigned default port`` - - -2023-10-21 -========== - -* :vytask:`T5670` ``(bug): bridge: missing member interface validator`` -* :vytask:`T5617` ``(feature): Add an option to exclude single values to the numeric validator`` - - -2023-10-20 -========== - -* :vytask:`T5233` ``(bug): Op-mode flow-accounting netflow with disable-imt errors`` -* :vytask:`T5232` ``(bug): Flow-accounting uacctd.service cannot restart correctly`` - - -2023-10-19 -========== - -* :vytask:`T4913` ``(default): Rewrite the wireless op mode in the new style`` - - -2023-10-18 -========== - -* :vytask:`T5642` ``(bug): op cmd: generate tech-support archive: does not work`` -* :vytask:`T5521` ``(bug): Home owner directory changed to vyos for the user after reboot`` - - -2023-10-17 -========== - -* :vytask:`T5662` ``(bug): Fix indexing error in configdep script organization`` -* :vytask:`T5644` ``(bug): Firewall groups deletion can break config`` - - -2023-10-16 -========== - -* :vytask:`T5165` ``(feature): Policy local-route ability set protocol and port`` - - -2023-10-14 -========== - -* :vytask:`T5629` ``(bug): Policy local-route bug after migration to destination node address`` - - -2023-10-12 -========== - -* :vytask:`T5649` ``(bug): vyos-1x should generate XML cache after building command templates for less cryptic error on typo`` - - -2023-10-10 -========== - -* :vytask:`T5589` ``(bug): Nonstripped binaries exists in VyOS`` -* :vytask:`T5489` ``(feature): Change to BBR as TCP congestion control, or at least make it an config option`` - - -2023-10-08 -========== - -* :vytask:`T5630` ``(feature): pppoe: allow to specify MRU in addition to already configurable MTU`` - - -2023-10-06 -========== - -* :vytask:`T5576` ``(feature): Add bgp remove-private-as all option`` - - -2023-10-05 -========== - -* :vytask:`T4320` ``(default): Remove legacy version files in vyatta-cfg-system/cfg-version`` - - -2023-10-04 -========== - -* :vytask:`T5632` ``(feature): Add jq package to parse JSON files`` -* :vytask:`T3655` ``(bug): NAT Problem with VRF`` -* :vytask:`T5585` ``(bug): Fix file access mode for dynamic dns configuration`` - - -2023-10-03 -========== - -* :vytask:`T5618` ``(bug): Flow-accounting crushes when IMT is enabled`` -* :vytask:`T5579` ``(bug): Log firewall - Wrong command after firewall refactor`` -* :vytask:`T5561` ``(feature): NAT - Inbound or outbound interface should not be mandatory`` -* :vytask:`T5626` ``(feature): Only select required Kernel CGROUP controllers`` -* :vytask:`T5628` ``(feature): op-mode: login: DeprecationWarning: 'spwd'`` - - -2023-09-28 -========== - -* :vytask:`T5596` ``(feature): bgp: add new features from FRR 9`` -* :vytask:`T5412` ``(feature): Add support for extending config-mode dependencies in supplemental package`` - - -2023-09-24 -========== - -* :vytask:`T5604` ``(bug): List of debian archives is out of date (non-free-firmware is missing)`` -* :vytask:`T5591` ``(feature): Cleanup of FRR daemons-file and various FRR fixes`` - - -2023-09-22 -========== - -* :vytask:`T5602` ``(feature): For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration`` -* :vytask:`T5609` ``(enhancment): Add util to get drive device name from id`` -* :vytask:`T5608` ``(enhancment): Rewrite add/delete raid member to Python and remove from vyatta-op`` -* :vytask:`T5607` ``(bug): Adjust RAID smoketest for non-deterministic SCSI device probing`` - - -2023-09-20 -========== - -* :vytask:`T5588` ``(bug): Add kernel conntrack_bridge module`` -* :vytask:`T5241` ``(feature): Support veth interfaces to working with netns`` -* :vytask:`T5592` ``(feature): salt: upgrade minion to 3005.2`` - - -2023-09-19 -========== - -* :vytask:`T5597` ``(feature): isis: add new features from FRR 9.`` - - -2023-09-18 -========== - -* :vytask:`T5575` ``(bug): ARP/NDP table-size isnt set properly`` - - -2023-09-15 -========== - -* :vytask:`T5587` ``(bug): Firwall can not pass the smoketest`` -* :vytask:`T5581` ``(feature): Add "show ip nht" op-mode command (IPv4 nexthop tracking table)`` - - -2023-09-11 -========== - -* :vytask:`T5562` ``(bug): Smoketests fail for vyos:current (test_netns.py)`` -* :vytask:`T5551` ``(bug): Missing check for boot_configuration_complete raises error in vyos-save-config.py`` -* :vytask:`T5353` ``(bug): config-mgmt: normalize archive updates and commit log entries`` - - -2023-09-10 -========== - -* :vytask:`T5555` ``(bug): Fix timezone migrator (system 13-to-14)`` - - -2023-09-09 -========== - -* :vytask:`T5423` ``(bug): ipsec: no output for op-cmd "show vpn ike secrets"`` - - -2023-09-08 -========== - -* :vytask:`T5560` ``(bug): VyOS version in current branch should be changed from 1.4 to 1.5`` - - -2023-09-07 -========== - -* :vytask:`T5556` ``(bug): reboot now and poweroff does not work`` - - -2023-09-06 -========== - -* :vytask:`T5548` ``(bug): HAProxy renders timeouts incorrectly`` diff --git a/docs/changelog/index.rst b/docs/changelog/index.rst deleted file mode 100644 index 9467a716..00000000 --- a/docs/changelog/index.rst +++ /dev/null @@ -1,21 +0,0 @@ -.. _release-notes: - - -######### -Changelog -######### - - -.. toctree:: - :maxdepth: 1 - :includehidden: - - 1.5 - 1.4 - 1.3 - 1.2.6 - 1.2.5 - 1.2.4 - 1.2.3 - 1.2.2 - 1.2.1 diff --git a/docs/index.rst b/docs/index.rst index 00db5dda..70b862b4 100644 --- a/docs/index.rst +++ b/docs/index.rst @@ -56,7 +56,6 @@ VyOS User Guide introducing/about introducing/history - changelog/index .. toctree:: |