path: root/docs/changelog/1.3.rst

############
1.3 Equuleus
############

..
   Please don't add anything by hand.
   This file is managed by the script:
   _ext/releasenotes.py


2022-05-30
==========

* :vytask:`T4315` (feature): Telegraf - Output to prometheus


2022-05-27
==========

* :vytask:`T4441` (bug): wwan: connection not possible after a change added after 1.3.1-S1 release


2022-05-26
==========

* :vytask:`T4442` (feature): HTTP API add action "reset"


2022-05-25
==========

* :vytask:`T2194` (default): "show firewall" garbled output


2022-05-19
==========

* :vytask:`T4430` (bug): Show firewall output with visual shift default rule


2022-05-16
==========

* :vytask:`T4377` (default): generate tech-support archive includes previous archives


2022-05-12
==========

* :vytask:`T4100` (feature): Firewall increase maximum number of rules


2022-05-11
==========

* :vytask:`T4405` (bug): DHCP client sometimes ignores `no-default-route` option of an interface


2022-05-10
==========

* :vytask:`T1972` (feature): Allow setting interface name for virtual_ipaddress in VRRP VRID


2022-05-07
==========

* :vytask:`T4361` (bug): `vyos.config.exists()` does not work for nodes with multiple values
* :vytask:`T4354` (bug): Slave interfaces fall out from bonding during configuration change


2022-05-03
==========

* :vytask:`T4395` (feature): Extend show vpn debug 


2022-05-01
==========

* :vytask:`T4369` (bug): OpenVPN: daemon not restarted on changes to "openvpn-option" CLI node
* :vytask:`T4363` (bug): salt-minion: default mine_interval option is not set


2022-04-29
==========

* :vytask:`T4388` (bug): dhcp-server: missing constraint on tftp-server-name option
* :vytask:`T4366` (bug): geneve: interface is removed on changes to e.g. description


2022-04-26
==========

* :vytask:`T4235` (default): Add config tree diff algorithm


2022-04-19
==========

* :vytask:`T4344` (bug): DHCP statistics not matching, conf-mode generates incorrect pool name with dash
* :vytask:`T4268` (bug): Elevated LA while using VyOS monitoring feature


2022-04-08
==========

* :vytask:`T4331` (bug): IPv6 link local addresses are not configured when an interface is in a VRF
* :vytask:`T4339` (bug): wwan: tab-completion results in "No such file or directory" if there is no WWAN interface
* :vytask:`T4338` (bug): wwan: changing interface description should not trigger reconnect
* :vytask:`T4324` (bug): wwan: check alive script should only be run via cron if a wwan interface is configured at all


2022-04-07
==========

* :vytask:`T4330` (bug): MTU settings cannot be applied when IPv6 is disabled
* :vytask:`T4346` (feature): Deprecate "system ipv6 disable" option to disable address family within OS kernel
* :vytask:`T4337` (bug): isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError
* :vytask:`T4319` (bug): The command "set system ipv6 disable" doesn't work as expected.
* :vytask:`T4341` (feature): login: disable user-account prior to deletion and wait until deletion is complete
* :vytask:`T4336` (feature): isis: add support for MD5 authentication password on a circuit


2022-04-06
==========

* :vytask:`T4308` (feature): Op-comm "Show log frr"  to view specific protocol logs


2022-03-29
==========

* :vytask:`T3686` (bug): Bridging OpenVPN tap with no local-address breaks


2022-03-24
==========

* :vytask:`T4294` (bug): Adding a new openvpn-option does not restart the OpenVPN process
* :vytask:`T4230` (bug): OpenVPN server configuration deleted after reboot when using a VRRP virtual-address


2022-03-21
==========

* :vytask:`T4311` (bug): CVE-2021-4034: local privilege escalation in PolKit
* :vytask:`T4310` (bug): CVE-2022-0778: infinite loop in OpenSSL certificate parsing


2022-03-12
==========

* :vytask:`T4296` (bug): Interface config injected by Cloud-Init may interfere with VyOS native
* :vytask:`T4002` (default): firewall group network-group long names restriction incorrect behavior


2022-03-11
==========

* :vytask:`T4297` (bug): Interface configuration saving fails for ice/iavf based interfaces because they can't change speed/duplex settings


2022-03-05
==========

* :vytask:`T4259` (bug): The conntrackd daemon can be started wrongly


2022-02-28
==========

* :vytask:`T4273` (bug): ssh: Upgrade from 1.2.X to 1.3.0 breaks config
* :vytask:`T4115` (bug): reboot in <x> not working as expected


2022-02-24
==========

* :vytask:`T4267` (bug): Error - Missing required "ip key" parameter


2022-02-23
==========

* :vytask:`T4264` (bug): vxlan: interface is destroyed and rebuild on description change
* :vytask:`T4263` (bug): vyos.util.leaf_node_changed() dos not honor valueLess nodes


2022-02-21
==========

* :vytask:`T4120` (feature): [VXLAN] add ability to set multiple unicast-remotes


2022-02-20
==========

* :vytask:`T4261` (feature): MACsec: add DHCP client support
* :vytask:`T4203` (bug): Reconfigure DHCP client interface causes brief outages


2022-02-19
==========

* :vytask:`T4258` (bug): [DHCP-SERVER]  error parameter on Failover


2022-02-17
==========

* :vytask:`T4241` (bug): ocserv openconnect looks broken in recent bulds of 1.3 Equuleus
* :vytask:`T4255` (bug): Unexpected print of dict bridge on delete
* :vytask:`T4240` (bug): Cannot add wlan0 to bridge via configure
* :vytask:`T4154` (bug): Error add second gre tunnel with the same source interface


2022-02-16
==========

* :vytask:`T4237` (bug): Conntrack-sync error - error adding listen-address command


2022-02-15
==========

* :vytask:`T4201` (bug): Firewall - ICMPv6 matches not working as expected on 1.3.0
* :vytask:`T3006` (bug): Accel-PPP & vlan-mon config get invalid VLAN
* :vytask:`T3494` (bug): DHCPv6 leases traceback when PD using


2022-02-13
==========

* :vytask:`T4242` (bug): ethernet speed/duplex can never be switched back to auto/auto
* :vytask:`T4191` (bug): Lost access to host after VRF re-creating


2022-02-11
==========

* :vytask:`T3872` (feature): Add configurable telegraf monitoring service
* :vytask:`T4234` (bug): Show firewall partly broken in 1.3.x


2022-02-10
==========

* :vytask:`T4165` (bug): Custom conntrack rules cannot be deleted


2022-02-08
==========

* :vytask:`T4227` (bug): Typo in help completion of hello-time option of bridge interface


2022-02-07
==========

* :vytask:`T4233` (bug): ssh: sync regex for allow/deny usernames to "system login"
* :vytask:`T4087` (feature): IPsec IKE-group proposals limit of 10 pieces 


2022-02-06
==========

* :vytask:`T4228` (bug): bond: OS error thrown when two bonds use the same member


2022-02-05
==========

* :vytask:`T4226` (bug): VRRP transition-script does not work for groups name which contains -(minus) sign


2022-02-04
==========

* :vytask:`T4196` (bug): DHCP server client-prefix-length parameter results in non-functional leases


2022-02-03
==========

* :vytask:`T3643` (bug): show vpn ipsec sa doesn't show tunnels in "down" state


2022-02-01
==========

* :vytask:`T4198` (bug): Error shown on commit


2022-01-29
==========

* :vytask:`T4153` (bug): Monitor bandwidth-test initiate not working


2022-01-28
==========

* :vytask:`T4184` (bug): NTP allow-clients address doesn't work it allows to use ntp server for all addresses


2022-01-24
==========

* :vytask:`T4204` (feature): Update Accel-PPP to a newer revision


2022-01-17
==========

* :vytask:`T3164` (bug): console-server ssh does not work with RADIUS PAM auth


2022-01-15
==========

* :vytask:`T4183` (feature): IPv6 link-local address not accepted as wireguard peer
* :vytask:`T4110` (feature): [IPV6-SSH/DNS}  enable IPv6 link local adresses as listen-address %eth0


2022-01-12
==========

* :vytask:`T4168` (bug): IPsec VPN is impossible to restart when DMVPN is configured
* :vytask:`T4167` (bug): DMVPN apply wrong param on the first configuration
* :vytask:`T4152` (bug): NHRP shortcut-target holding-time does not work


2022-01-10
==========

* :vytask:`T3299` (bug): Allow the web proxy service to listen on all IP addresses
* :vytask:`T3115` (feature): Add support for firewall on L3 VIF bridge interface


2022-01-09
==========

* :vytask:`T3822` (bug): OpenVPN processes do not have permission to read key files generated with `run generate openvpn key`
* :vytask:`T4142` (bug): Input ifbX interfaces not displayed in op-mode
* :vytask:`T3914` (bug): VRRP rfc3768-compatibility doesn't work with unicast peers


2022-01-07
==========

* :vytask:`T3924` (bug): VRRP stops working with VRF


2022-01-06
==========

* :vytask:`T4141` (bug): Set high-availability vrrp sync-group without members error


2022-01-03
==========

* :vytask:`T4065` (bug): IPSEC configuration error: connection to unix:///var/run/charon.ctl failed: No such file or directory
* :vytask:`T4052` (bug): Validator return traceback on VRRP configuration with the script path not in config dir
* :vytask:`T4128` (bug): keepalived: Upgrade package to add VRF support


2021-12-31
==========

* :vytask:`T4081` (bug): VRRP health-check script stops working when setting up a sync group


2021-12-29
==========

* :vytask:`T2922` (bug): The `vpn ipsec logging log-modes` miss the IPSec daemons state check
* :vytask:`T2695` (bug): Flow-accounting bug with subinterfaces
* :vytask:`T2400` (default): OpenVPN: dont restart server if no need
* :vytask:`T4086` (default): system login banner is not removed on deletion.


2021-12-28
==========

* :vytask:`T3380` (bug): Show vpn ike sa with IPv6 remote peer
* :vytask:`T2933` (feature): VRRP add option virtual_ipaddress_excluded


2021-12-27
==========

* :vytask:`T2566` (bug): sstp not able to run tunnels ipv6 only
* :vytask:`T4093` (bug): SNMPv3 snmpd.conf generation bug
* :vytask:`T2764` (enhancment): Increase maximum number of NAT rules


2021-12-26
==========

* :vytask:`T4104` (bug): RAID1: "add raid md0 member sda1" does not restore boot sector


2021-12-25
==========

* :vytask:`T4101` (bug): commit-archive: Use of uninitialized value $source_address in concatenation
* :vytask:`T4055` (feature): Add VRF support for HTTP(S) API service


2021-12-24
==========

* :vytask:`T3854` (bug): Missing op-mode commands for conntrack-sync


2021-12-23
==========

* :vytask:`T4092` (bug): IKEv2 mobike commit failed with DMVPN nhrp
* :vytask:`T3354` (default): Convert strip-private script from Perl to Python


2021-12-22
==========

* :vytask:`T3356` (feature): Script for remote file transfers


2021-12-21
==========

* :vytask:`T4053` (bug): VRRP impossible to set scripts out of the /config directory
* :vytask:`T4013` (bug): Add pkg cloudwatch for AWS images
* :vytask:`T3913` (bug): VRF traffic fails after upgrade from 1.3.0-RC6 to 1.3.0-EPA1/2


2021-12-20
==========

* :vytask:`T4088` (default): Fix typo in login banner


2021-12-19
==========

* :vytask:`T3912` (default): Use a more informative default post-login banner


2021-12-17
==========

* :vytask:`T3176` (bug): Ordering of ports on EdgeCore SAF51015I is mixed up?
* :vytask:`T4059` (bug): VRRP sync-group transition script does not persist after reboot


2021-12-16
==========

* :vytask:`T4046` (feature): Sflow - Add Source address parameter
* :vytask:`T2615` (default): Provide an explicit option for server fingerprint in commit archive, and make insecure the default
* :vytask:`T4076` (enhancment): Allow setting CORS options in HTTP API
* :vytask:`T3378` (bug): commit-archive source-address broken for IPv6 addresses


2021-12-15
==========

* :vytask:`T4077` (bug): op-mode: bfd: drop "show protocols bfd" in favour of "show bfd"
* :vytask:`T4073` (bug): "show protocols bfd peer <>" shows incorrect peer information.


2021-12-14
==========

* :vytask:`T4071` (feature): Allow HTTP API to bind to unix domain socket


2021-12-12
==========

* :vytask:`T4036` (bug): VXLAN incorrect raiseError if set multicast network instead of singe address


2021-12-10
==========

* :vytask:`T4068` (feature): Python: ConfigError should insert line breaks into the error message


2021-12-09
==========

* :vytask:`T4033` (bug): VRRP - Error security when setting scripts
* :vytask:`T4064` (bug): IP address for vif is not removed from the system when deleted in configuration
* :vytask:`T4063` (bug): VRRP log error - /usr/libexec/vyos/vyos-vrrp-conntracksync.sh - No such file or directory
* :vytask:`T4060` (enhancment): Extend configquery for use before boot configuration is complete


2021-12-08
==========

* :vytask:`T4024` (bug): Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval


2021-12-07
==========

* :vytask:`T4041` (servicerequest): "transition-script" doesn't work on "sync-group"


2021-12-06
==========

* :vytask:`T4012` (feature): Add VRF support for TFTP


2021-12-05
==========

* :vytask:`T4034` (bug): "make xcp-ng-iso" still includes vyos-xe-guest-utilities
* :vytask:`T2076` (feature): RAID install: sfdisk change-id is deprecated in favor of --part-type
* :vytask:`T1126` (bug): Reusing a RAID from a BIOS install in an EFI install causes a failure to boot


2021-12-04
==========

* :vytask:`T4049` (feature): support command-style output with compare command
* :vytask:`T4047` (bug): Wrong regex validation in XML definitions
* :vytask:`T4045` (bug): Unable to "format disk <new> like <old>"


2021-12-02
==========

* :vytask:`T4035` (bug): Geneve interfaces aren't displayed by operational mode commands


2021-12-01
==========

* :vytask:`T3695` (bug): OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues


2021-11-30
==========

* :vytask:`T3725` (feature): show configuration in json format


2021-11-29
==========

* :vytask:`T2661` (bug): SSTP wrong certificates check
* :vytask:`T3946` (enhancment): Automatically resize the root partition if the drive has extra space


2021-11-28
==========

* :vytask:`T3999` (bug): show lldp neighbor Traceback error


2021-11-26
==========

* :vytask:`T4019` (bug): Smoketests for SSTP and openconnect fails 


2021-11-25
==========

* :vytask:`T4005` (feature): Feature Request: IPsec IKEv1 + IKEv2 for one peer


2021-11-24
==========

* :vytask:`T4015` (feature): Update Accel-PPP to a newer revision
* :vytask:`T1083` (feature): Implement persistent/random address and port mapping options for NAT rules


2021-11-23
==========

* :vytask:`T3990` (bug): WATCHFRR: crashlog and per-thread log buffering unavailable (due to files left behind in /var/tmp/frr/ after reboot)


2021-11-20
==========

* :vytask:`T4004` (bug): IPsec ike-group parameters are not saved correctly (after reboot)


2021-11-19
==========

* :vytask:`T4003` (bug): API for "show interfaces ethernet" does not include the interface description
* :vytask:`T4011` (bug): ethernet: deleting interface should place interface in admin down state


2021-11-18
==========

* :vytask:`T3995` (feature): OpenVPN: do not stop/start service on configuration change
* :vytask:`T4008` (feature): dhcp: change client retry interval form 300 -> 60 seconds
* :vytask:`T3795` (bug): WWAN: issues with non connected interface / no signal


2021-11-17
==========

* :vytask:`T3350` (bug): OpenVPN config file generation broken
* :vytask:`T3996` (bug): SNMP service error in log


2021-11-15
==========

* :vytask:`T3934` (bug): Openconnect VPN broken: ocserv-worker general protection fault on client connect
* :vytask:`T3724` (feature): Allow setting host-name in l2tp section of accel-ppp


2021-11-14
==========

* :vytask:`T3974` (bug): route-map commit fails if interface does not exist


2021-11-11
==========

* :vytask:`T1349` (bug): L2TP remote-access vpn terminated and not showing as connected
* :vytask:`T1058` (default): hw-id is ignored when naming interfaces
* :vytask:`T914` (feature): Extend list_interfaces.py to support multiple interface types
* :vytask:`T688` (enhancment): Move component versions used for config migration purposes into vyos-1x


2021-11-10
==========

* :vytask:`T3982` (bug): DHCP server commit fails if static-mapping contains + or .


2021-11-09
==========

* :vytask:`T3962` (bug): Image cannot be built without open-vm-tools
* :vytask:`T2088` (bug): Increased boot time from 1.2.4 -> 1.3 rolling by 100%
* :vytask:`T2136` (bug): XML command definition convertor doesn't disallow tag nodes with multi flag on


2021-11-07
==========

* :vytask:`T2874` (feature): Add MTU and TCP-MSS discovery tool
* :vytask:`T3626` (bug): Configuring and disabling DHCP Server


2021-11-06
==========

* :vytask:`T3971` (feature): Ability to build ISO images for XCP-NG hypervisor
* :vytask:`T3514` (bug): NIC flap at any interface change


2021-11-05
==========

* :vytask:`T3972` (bug): Removing vif-c interface raises KeyError


2021-11-04
==========

* :vytask:`T3964` (bug): SSTP: local-user static-ip CLI node accepts invalid IPv4 addresses


2021-11-03
==========

* :vytask:`T3610` (bug): DHCP-Server creation for not primary IP address fails


2021-11-01
==========

* :vytask:`T3846` (bug): dmvpn configuration not reapllied after "restart vpn"
* :vytask:`T3956` (bug): GRE tunnel - unable to move from source-interface to source-address, commit error


2021-10-31
==========

* :vytask:`T3945` (feature): Add route-map for bgp aggregate-address
* :vytask:`T3341` (bug): Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command
* :vytask:`T3954` (bug): FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error
* :vytask:`T3943` (bug): "netflow source-ip" prevents image upgrades if IP address does not exist locally


2021-10-29
==========

* :vytask:`T3942` (feature): Generate IPSec debug archive from op-mode


2021-10-28
==========

* :vytask:`T3941` (bug): "show vpn ipsec sa" shows established time of parent SA not child SA's


2021-10-27
==========

* :vytask:`T3944` (bug): VRRP fails over when adding new group to master


2021-10-25
==========

* :vytask:`T3935` (bug): Update from rc5 to EPA2 failed


2021-10-22
==========

* :vytask:`T3188` (bug): Tunnel local-ip to dhcp-interface Change Fails to Update


2021-10-21
==========

* :vytask:`T3920` (bug): dhclient exit hook script 01-vyos-cleanup causes too many arguments error
* :vytask:`T3926` (bug): strip-private does not sanitize "cisco-authentication" from NHRP configuration
* :vytask:`T3925` (feature): Tunnel: dhcp-interface not implemented - use source-interface instead
* :vytask:`T3927` (feature): Kernel: Enable kernel support for HW offload of the TLS protocol


2021-10-20
==========

* :vytask:`T3922` (bug): NHRP: delete fails 
* :vytask:`T3918` (bug): DHCPv6 prefix delegation incorrect verify error
* :vytask:`T3921` (bug): tunnel: KeyError when using dhcp-interface


2021-10-19
==========

* :vytask:`T3396` (bug): syslog can't be configured with an ipv6 literal destination in 1.2.x
* :vytask:`T690` (feature): Allow OpenVPN servers to push routes with custom metric values


2021-10-17
==========

* :vytask:`T3786` (bug): GRE tunnel source address 0.0.0.0 error
* :vytask:`T3425` (bug): Scripts from the /config/scripts/ folder do not run on live system
* :vytask:`T3217` (default): Save FRR configuration on each commit
* :vytask:`T3076` (bug): Router reboot adds unwanted 'conntrack-sync mcast-group '225.0.0.50'' line to configuration
* :vytask:`T2800` (bug): Pseudo-Ethernet: source-interface must not be member of a bridge
* :vytask:`T3422` (bug): Dynamic DNS doesn't allow zone field with cloudflare protocol
* :vytask:`T3381` (bug): Change GRE tunnel failed
* :vytask:`T3254` (bug): Dynamic DNS status shows incorrect last update time
* :vytask:`T3253` (bug): rpki: multiple peers cannot be configured 
* :vytask:`T3219` (default): Typo in openvpn server client config for IPv6 iroute
* :vytask:`T2100` (feature): BGP route adverisement wih checks rib
* :vytask:`T1663` (enhancment): T1656 equuleus: buster: arm64/aarch64: ipaddrcheck does not complete testing
* :vytask:`T1243` (bug): BGP local-as accept wrong values
* :vytask:`T770` (bug): Bonded interfaces get updated with incorrect hw-id in config.
* :vytask:`T697` (bug): Clean up and sanitize package dependencies
* :vytask:`T3837` (default): OpenConnect: Fix typo in help property
* :vytask:`T1440` (bug): Creating two DHCPv6 shared-network-names with the same subnet is allowed, causes dhcpd to fail to start.


2021-10-16
==========

* :vytask:`T3879` (bug): GPG key verification fails when upgrading from a 1.3 beta version
* :vytask:`T3851` (bug): Missing ospf and rip options for bridge vifs


2021-10-13
==========

* :vytask:`T3904` (bug): NTP pool associations silently fail
* :vytask:`T3277` (feature): DNS Forwarding - reverse zones


2021-10-11
==========

* :vytask:`T2607` (feature): Support for pppoe-server radius mode auth and config radius accouting port


2021-10-10
==========

* :vytask:`T3750` (bug): pdns-recursor 4.4 issue with dont-query and private DNS servers
* :vytask:`T3885` (default): dhcpv6-pd: randomly generated DUID is not persisted
* :vytask:`T3899` (enhancment): Add support for hd44780 LCD displays


2021-10-09
==========

* :vytask:`T3894` (bug): Tunnel Commit Failed if system does not have `eth0`


2021-10-08
==========

* :vytask:`T3893` (bug): MGRE Tunnel commit crash If sit tunnel available


2021-10-04
==========

* :vytask:`T3888` (bug): Incorrect warning when poweroff command executed from configure mode.
* :vytask:`T3890` (feature): dhcp(v6): provide op-mode commands to retrieve both server and client logfiles
* :vytask:`T3889` (feature): Migrate to journalctl when reading daemon logs


2021-10-03
==========

* :vytask:`T3880` (bug): EFI boot shows error on display


2021-10-02
==========

* :vytask:`T3882` (feature): Upgrade PowerDNs recursor to 4.5 series
* :vytask:`T3883` (bug): VRF - Delette vrf config on interface


2021-10-01
==========

* :vytask:`T3877` (bug): VRRP always enabled rfc3768-compatibility even when not specified


2021-09-30
==========

* :vytask:`T3874` (bug): D-Link Ethernet Interface not working.


2021-09-27
==========

* :vytask:`T3858` (bug): Deleting OSPFv3 process yields: Unknown command: no router-id


2021-09-26
==========

* :vytask:`T3860` (bug): Error on pppoe, tunnel and wireguard interfaces for IPv6 EUI64 addresses
* :vytask:`T3857` (feature): reboot: send wall message to all users for information
* :vytask:`T3867` (bug): vxlan: multicast group address is not validated
* :vytask:`T3859` (bug): Add "log-adjacency-changes" to ospfv3 process


2021-09-23
==========

* :vytask:`T3850` (bug): Dots are no longer allowed in SSH public key names


2021-09-21
==========

* :vytask:`T2602` (bug): pptp/sstp/l2tp add possibility enable or disable CCP


2021-09-19
==========

* :vytask:`T3841` (feature): dhcp-server: add ping-check option to CLI
* :vytask:`T2738` (bug): Modifying configuration in the "interfaces" section from VRRP transition scripts causes configuration lockup and high CPU utilization
* :vytask:`T3842` (feature): Backport DHCP server improvements from VyOS 1.4 sagitta to 1.3 equuleus
* :vytask:`T3840` (feature): dns forwarding: Cache size should allow values > 10k
* :vytask:`T3672` (bug): DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output 


2021-09-11
==========

* :vytask:`T3402` (feature): Add VyOS programming library for operational level commands
* :vytask:`T3275` (default): Disable conntrack helpers by default


2021-09-10
==========

* :vytask:`T3802` (bug): Commit fails if ethernet interface doesn't support flow control
* :vytask:`T3819` (bug): Upgrade Salt Stack 3002.3 -> 3003 release train
* :vytask:`T3421` (bug): MTR/Traceroute broken in 1.3-beta
* :vytask:`T3820` (feature): PowerDNS recursor - update from 4.3 -> 4.4 to sync with current
* :vytask:`T1770` (bug): webproxy breaks commit and http access on routed client
* :vytask:`T915` (feature): MPLS Support


2021-09-09
==========

* :vytask:`T3816` (bug): Error after entering outbound-interface command in NAT
* :vytask:`T3814` (bug): wireguard: commit error showing incorrect peer name from the configured name
* :vytask:`T3805` (bug): OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface


2021-09-07
==========

* :vytask:`T2322` (bug): CLI [op-mode] bugs. Root task
* :vytask:`T1894` (bug): FRR config not loaded after daemons segfault or restart
* :vytask:`T3807` (bug): Op Command "show interfaces wireguard"  does not show the output
* :vytask:`T3808` (default): ipsec is mistakenly restarted after delete


2021-09-06
==========

* :vytask:`T3806` (bug): Don't set link local ipv6 address if MTU less then 1280
* :vytask:`T3803` (default): Add source-address option to the ping CLI
* :vytask:`T3431` (bug): Show version all bug
* :vytask:`T3362` (bug): 1.3 - RC1 ifb redirect failing to commit
* :vytask:`T3291` (bug): Fault on setting offload RPS with single-core CPU
* :vytask:`T2920` (bug): Commit crash when adding the second mGRE tunnel with the same key
* :vytask:`T2895` (bug): VPN IPsec "leftsubnet" declared 2 times
* :vytask:`T2019` (bug): LLDP wrong config generation for interface 'all'


2021-09-05
==========

* :vytask:`T3804` (feature): cli: Migrate and merge "system name-servers-dhcp" into "system name-server"


2021-09-04
==========

* :vytask:`T3697` (bug): Impossible to delete IPsec completely
* :vytask:`T3619` (bug): Performance Degradation 1.2 --> 1.3 | High ksoftirqd CPU usage
* :vytask:`T1785` (bug): Deleting partitions on disks (Raid1) with default value 'no'


2021-09-03
==========

* :vytask:`T3788` (bug): Keys are not allowed with ipip and sit tunnels
* :vytask:`T3683` (bug): VXLAN not accept ipv6 and source-interface options and mtu bug
* :vytask:`T3634` (feature): Add op command option for ping for do not fragment bit to be set


2021-09-02
==========

* :vytask:`T3792` (bug): login: A hypen present in a username from "system login user" is replaced by an underscore
* :vytask:`T3790` (bug): Does not possible to configure PPTP static ip-address to users


2021-09-01
==========

* :vytask:`T2434` (bug): Duplicate Address Detection Breaks Interfaces


2021-08-31
==========

* :vytask:`T3789` (feature): Add custom validator for base64 encoded CLI data
* :vytask:`T3782` (default): Ingress Shaping with IFB No Longer Functional with 1.3


2021-08-30
==========

* :vytask:`T3777` (bug): adding IPv6 EUI64 address fails commit in 1.3.0-rc6
* :vytask:`T3768` (default): Remove early syntaxVersion implementation
* :vytask:`T2558` (feature): Add some CPU information to `show version` + fix broken hypervisor detection
* :vytask:`T2430` (default): cannot delete specific route static next-hop
* :vytask:`T1350` (bug): VRRP transition script will be executed once only
* :vytask:`T2941` (default): Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py
* :vytask:`T3787` (bug): Remove deprecated UDP fragmentation offloading option
* :vytask:`T3677` (feature): "sipcalc" not included in 1.3


2021-08-29
==========

* :vytask:`T3708` (bug): isisd and gre-bridge commit error
* :vytask:`T3783` (bug): "set protocols isis spf-delay-ietf" is not working
* :vytask:`T2750` (default): Use m4 as a template processor


2021-08-27
==========

* :vytask:`T3182` (bug): Main blocker Task for FRR 7.4/7.5 series update
* :vytask:`T2108` (default): Use minisign/signify instead of GPG for release signing


2021-08-26
==========

* :vytask:`T3781` (bug): Revert the NAT implementation in 1.3 back to iptables
* :vytask:`T3776` (default): Rename FRR daemon restart op-mode commands
* :vytask:`T3779` (feature): Backport all 1.4 IS-IS features and configuration to 1.3 except VRF


2021-08-25
==========

* :vytask:`T3773` (bug): Delete the "show system integrity" command (to prepare for a re-implementation)
* :vytask:`T1514` (default): Add ability to restart frr processes


2021-08-24
==========

* :vytask:`T3772` (bug): VRRP virtual interfaces are not shown in show interfaces


2021-08-23
==========

* :vytask:`T2555` (bug): XML op-mode generation scripts silently discard XML nodes


2021-08-21
==========

* :vytask:`T3682` (bug): Remove running dhclient from ether-resume.py
* :vytask:`T3681` (default): The VMware Tools resume script did not run successfully in this virtual machine.


2021-08-20
==========

* :vytask:`T1950` (default): Store VyOS configuration syntax version data in JSON file


2021-08-19
==========

* :vytask:`T2759` (bug): validate-value prints error messages from validators that fail even if overall validation succeeds
* :vytask:`T3234` (bug): multi_to_list fails in certain cases, with root cause an element redundancy in XML interface-definitions
* :vytask:`T3732` (feature): override-default helper should support adding defaultValues to default less nodes
* :vytask:`T3574` (default): Add constraintGroup for combining validators with logical AND
* :vytask:`T1962` (default): Add syntax version to schema


2021-08-17
==========

* :vytask:`T2525` (bug): OSPFv3 missing route map, not establishing
* :vytask:`T508` (bug): ISC DHCP incorrect UDP checksum generation
* :vytask:`T1643` (bug): Deleting all firewall zones failed and locked out box
* :vytask:`T1550` (bug): Add support for Large BGP Community show commands


2021-08-16
==========

* :vytask:`T3738` (default): openvpn fails if server and authentication are configured
* :vytask:`T1594` (bug): l2tpv3 error on IPv6 local-ip


2021-08-15
==========

* :vytask:`T3756` (default): VyOS generates invalid QR code for wireguard clients


2021-08-14
==========

* :vytask:`T3745` (feature): op-mode IPSec show vpn ipse sa sorting
* :vytask:`T521` (bug): Network services may fail if vyatta-router.service startup takes longer than a few seconds


2021-08-13
==========

* :vytask:`T3740` (bug): HTTPs API breaks when the address is IPv6


2021-08-12
==========

* :vytask:`T3731` (bug): verify_accel_ppp_base_service return wrong config error for SSP
* :vytask:`T3405` (feature): PPPoE server unit-cache
* :vytask:`T2432` (default): dhcpd: Can't create new lease file: Permission denied
* :vytask:`T3746` (feature): Inform users logging into the system about a pending reboot
* :vytask:`T3744` (default): Dns forwarding statistics formatting missing a new line


2021-08-10
==========

* :vytask:`T3730` (bug): op-mode conntrack-sync miss some functions


2021-08-09
==========

* :vytask:`T1501` (bug): VPN Commit Errors


2021-08-08
==========

* :vytask:`T2027` (bug): get_config_dict is failing when the configuration section is empty/missing
* :vytask:`T169` (feature): Image install should put correct serial console device in created GRUB menu entry


2021-08-07
==========

* :vytask:`T548` (feature): BGP IPv6 multipath support


2021-08-06
==========

* :vytask:`T1153` (bug): VyOS 1.2.0RC10, RAID-1, fresh install, unable to save config


2021-08-05
==========

* :vytask:`T696` (feature): Rewrite conntrack  sync to XML


2021-08-04
==========

* :vytask:`T3704` (feature): Add ability to interact with Areca RAID adapers
* :vytask:`T320` (default): OSPF does not redistribute connected routes associated with virtual tunnel interfaces


2021-08-02
==========

* :vytask:`T2623` (bug): Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation”
* :vytask:`T2161` (default): snmpd cannot start if ipv6 disabled
* :vytask:`T3601` (default): Error in ssh keys for vmware cloud-init if ssh keys is left empty.


2021-08-01
==========

* :vytask:`T3707` (bug): Ping incorrect ip host checks


2021-07-31
==========

* :vytask:`T3716` (feature): Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections
* :vytask:`T1626` (bug): BGP exchanges prefixes without specified address-family


2021-07-30
==========

* :vytask:`T1176` (default): FRR - BGP replicating routes
* :vytask:`T1123` (bug): Inconsistency in community-list naming validation


2021-07-29
==========

* :vytask:`T2931` (bug): Unicode decode error causes vyos.configd service to restart
* :vytask:`T2727` (bug): Add a dotted decimal value validator
* :vytask:`T2328` (default): dhcpv6 server not starting (disable check reversed?)
* :vytask:`T1758` (default): Switch vyos.config to libvyosconfig
* :vytask:`T954` (bug): Using the 10.255.255.0/24 subnet on other interfaces breaks L2TP/IPSec


2021-07-23
==========

* :vytask:`T3699` (bug): login: verify selected "system login user" name is not already used by the base system.


2021-07-21
==========

* :vytask:`T3689` (bug): static ipv6 route doesn't deleted in some cases
* :vytask:`T3685` (feature): IPv6 PBR doesn't allow setting of an egress interface


2021-07-20
==========

* :vytask:`T3691` (bug): GRETAP: key is not applied when interface is created


2021-07-13
==========

* :vytask:`T3679` (default): Point the unexpected exception message link to the new rolling release location


2021-07-11
==========

* :vytask:`T3665` (bug): Missing VRF support for VxLAN but already documented


2021-07-06
==========

* :vytask:`T3660` (feature): Conntrack-Sync configuration command to specify destination udp port for peer


2021-07-01
==========

* :vytask:`T3658` (feature): Add support for dhcpdv6 fixed-prefix6


2021-06-29
==========

* :vytask:`T3593` (bug): PPPoE server called-sid format does not work


2021-06-25
==========

* :vytask:`T3650` (bug): OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0
* :vytask:`T3649` (feature): Add bonding additional hash-policy


2021-06-24
==========

* :vytask:`T2722` (bug): get_config_dict() and key_mangling=('-', '_') will alter CLI data for tagNodes


2021-06-22
==========

* :vytask:`T3629` (bug): IPoE server shifting address in the range


2021-06-20
==========

* :vytask:`T3637` (bug): vrf: bind-to-all didn't work properly


2021-06-19
==========

* :vytask:`T3633` (feature): Add LRO offload for interface ethernet


2021-06-17
==========

* :vytask:`T3631` (feature): route-map: migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax


2021-06-16
==========

* :vytask:`T2425` (feature): Rewrite all policy zebra filters to XML/Python style
* :vytask:`T3630` (feature): op-mode: add "show version kernel" command


2021-06-13
==========

* :vytask:`T3620` (feature): Rename WWAN interface from wirelessmodem to wwan to use QMI interface
* :vytask:`T3622` (feature): WWAN: add support for APN authentication
* :vytask:`T3621` (bug): PPPoE interface does not validate if password is supplied when username is set


2021-06-10
==========

* :vytask:`T3250` (bug): PPPoE server:  wrong local usernames
* :vytask:`T3138` (bug): ddclient improperly updated when apply rfc2136 config
* :vytask:`T2645` (default): Editing route-map action requires adding a new rule


2021-06-09
==========

* :vytask:`T3602` (bug): Renaming BGP Peer Groups Leaves Router Broken
* :vytask:`T2916` (bug): A state of VTI interface in a configuration does not being processing properly


2021-06-08
==========

* :vytask:`T3605` (default): Allow to set prefer-global for ipv6-next-hop
* :vytask:`T3607` (feature): [route-map] set ipv6 next-hop prefer-global


2021-06-07
==========

* :vytask:`T3581` (bug): Incomplete command `show ipv6 ospfv3 linkstate`
* :vytask:`T3516` (bug): FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route
* :vytask:`T3461` (bug): OpenConnect Server redundancy check
* :vytask:`T3455` (bug): system users can not be added in "edit"


2021-06-04
==========

* :vytask:`T3592` (feature): Set default TTL 64 for tunnels


2021-06-01
==========

* :vytask:`T406` (bug): VPN configuration error: IPv6 over IPv4 IPsec is not supported when using IPv6 ONLY tunnel.


2021-05-30
==========

* :vytask:`T1866` (bug): Commit archive over SFTP doesn't work with non-standard ports
* :vytask:`T3589` (feature): op-mode: support clearing out logfiles from CLI
* :vytask:`T3508` (bug): Check if there's enough drive space for an upgrade before downloading an image
* :vytask:`T1506` (enhancment): commit-archive scp/sftp public key authentication


2021-05-29
==========

* :vytask:`T3135` (bug): BFD configurations fail to be applied
* :vytask:`T3103` (default): Rewrite parts of vyos\frr.py for readability, logging and to fix mulitiline regex "bugs"
* :vytask:`T2739` (default): vyos-utils is not compiled with a Jenkins pipeline.
* :vytask:`T2451` (bug): Cannot use !tcp or !tcp_udp while adding firewall rule
* :vytask:`T2436` (default): equuleus: Testing: vyos-1x: syntax checking Python scripts in PR
* :vytask:`T2184` (bug): OpenVPN op_mode tools broken
* :vytask:`T1944` (bug): FRR: Invalid route in BGP causes update storm, memory leak, and failure of Zebra


2021-05-28
==========

* :vytask:`T1579` (feature): Rewrite all interface types in new XML/Python style


2021-05-27
==========

* :vytask:`T2629` (bug): VXLAN interfaces don't actually allow you to configure most settings
* :vytask:`T2617` (feature): Rewrite vyatta-op-quagga "show" to XML
* :vytask:`T2512` (feature): vyatta-op-quagga [show ip] to XML format
* :vytask:`T1905` (default): Update to Keepalived 2.0.19
* :vytask:`T2669` (bug): DHCP-server overlapping ranges.


2021-05-26
==========

* :vytask:`T3558` (default): autocomplete options for dhcp-interface is not showing for the static route command
* :vytask:`T3540` (bug): Keepalived memory utilisation issue when constantly getting its state in JSON format
* :vytask:`T2807` (feature): IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces


2021-05-24
==========

* :vytask:`T3575` (bug): pseudo-ethernet: must check source-interface MTU
* :vytask:`T3571` (bug): Broken Show Tab Complete
* :vytask:`T3576` (bug): ISIS does not support IPV6


2021-05-23
==========

* :vytask:`T3570` (default): Prevent setting of a larger MTU on child interfaces
* :vytask:`T3572` (feature): Basic Drive Diagnostic Tools


2021-05-20
==========

* :vytask:`T3554` (feature): Add area-type stub for ospfv3


2021-05-19
==========

* :vytask:`T3562` (feature): Update Accel-PPP to a newer revision
* :vytask:`T3559` (feature): Add restart op-command for OpenConnect Server


2021-05-18
==========

* :vytask:`T3525` (default): VMWare resume script syntax errors
* :vytask:`T2462` (default): LLDP op-mode exception: IndexError: list index out of range


2021-05-15
==========

* :vytask:`T3549` (bug): DHCPv6 "service dhcpv6-server global-parameters name-server" is not correctly exported to dhcpdv6.conf when multiple name-server entries are present
* :vytask:`T3532` (bug): Not possible to change ethertype after interface creation
* :vytask:`T3550` (bug): Router-advert completion typo
* :vytask:`T3547` (feature): conntrackd: remove deprecated config options
* :vytask:`T3535` (feature): Rewrite vyatta-conntrack-sync in new XML and Python flavor
* :vytask:`T2049` (feature): Update strongSwan cipher suites list for IPSec settings


2021-05-14
==========

* :vytask:`T3346` (bug): nat 4-to-5 migration script fails when a 'source' or 'destination' node exists but there are no rules
* :vytask:`T3248` (default): Deal with VRRP mode-force command that exists in 1.2 but not in 1.3
* :vytask:`T3426` (default): add support for script arguments to vyos-configd


2021-05-13
==========

* :vytask:`T3544` (feature): DHCP server should validate configuration before applying it
* :vytask:`T3543` (feature): Support for setting lacp_rate on LACP bonded interfaces


2021-05-12
==========

* :vytask:`T3302` (default): Make vyos-configd relay stdout from scripts to the user's console


2021-05-11
==========

* :vytask:`T3526` (bug): Smoketest policy fail in CI


2021-05-10
==========

* :vytask:`T3528` (bug): Frr 7.5.1 uses 'seq' for community-lists


2021-05-08
==========

* :vytask:`T3517` (bug): FRR 7.5 bfd behavior for 1.3


2021-05-07
==========

* :vytask:`T1171` (bug): 1.2.0 epa2 - IPsec VPN initiation


2021-05-06
==========

* :vytask:`T3519` (bug): Cannot add / assign L2TPv3 to vrf


2021-05-01
==========

* :vytask:`T3379` (feature): Add global-parameters name-server  for dhcpv6-server
* :vytask:`T3491` (default): Change Kernel HZ to 1000


2021-04-30
==========

* :vytask:`T3170` (default): Add a sanity check for empty node.def files


2021-04-29
==========

* :vytask:`T3502` (bug): "system ip multipath layer4-hashing" doesn't work
* :vytask:`T3029` (bug): Generated NGINX configuration is wrong for the redirection (http -> https)
* :vytask:`T3156` (feature): Add op and additional conf commands for ISIS
* :vytask:`T2012` (feature): Global PBR 
* :vytask:`T1314` (feature): Allow BGP on unnumbered interfaces


2021-04-27
==========

* :vytask:`T2946` (bug): Calling 'stty_size' causes show interfaces API to fail


2021-04-25
==========

* :vytask:`T3468` (bug): Tunnel interfaces aren't suggested as being available for bridging (regression)
* :vytask:`T1802` (feature): Wireguard QR code in cli for mobile devices


2021-04-23
==========

* :vytask:`T3290` (bug): Disabling GRE conntrack module fails


2021-04-18
==========

* :vytask:`T3481` (default): Exclude tag node values from key mangling
* :vytask:`T3475` (bug): XML dictionary cache unable to process syntaxVersion elements


2021-04-15
==========

* :vytask:`T3386` (bug): PPPoE-server don't start with local authentication


2021-04-14
==========

* :vytask:`T3055` (bug): op-mode incorrect naming for ipsec policy-based tunnels 


2021-04-12
==========

* :vytask:`T3454` (enhancment): dhclient reject option


2021-04-05
==========

* :vytask:`T1612` (default): dhcp-server time-offset fails to validate
* :vytask:`T3438` (bug): VRF: removing vif which belongs to a vrf, will delete the entire vrf from the operating system
* :vytask:`T3418` (bug): BGP: system wide known interface can not be used as neighbor


2021-04-04
==========

* :vytask:`T3457` (feature): Output the "monitor log" command in a colorful way


2021-03-31
==========

* :vytask:`T3445` (bug): vyos-1x build include not all nodes


2021-03-25
==========

* :vytask:`T2639` (feature): sort output of show vpn ipsec sa 


2021-03-22
==========

* :vytask:`T3284` (bug): merge/load fail silently if unable to resolve host


2021-03-21
==========

* :vytask:`T3416` (bug): NTP: when running inside a VRF op-mode commands do not work


2021-03-20
==========

* :vytask:`T3392` (bug): vrrp over dhcp default route bug (unexpected vrf)
* :vytask:`T3373` (feature): Upgrade to SaltStack version 3002.5
* :vytask:`T3329` (default): "system conntrack ignore" rules can no longer be created due to an iptables syntax change
* :vytask:`T3300` (feature): Add DHCP default route distance
* :vytask:`T3306` (feature): Extend set route-map aggregator as to 4 Bytes 


2021-03-18
==========

* :vytask:`T3411` (default): Extend the redirect_stdout context manager in vyos-configd to redirect stdout from subprocesses
* :vytask:`T3271` (bug): qemu-kvm grub issue


2021-03-17
==========

* :vytask:`T3413` (bug): Configuring invalid IPv6 EUI64 address results in "OSError: illegal IP address string passed to inet_pton"


2021-03-14
==========

* :vytask:`T2271` (feature): OSPF: add per VRF instance support
* :vytask:`T175` (feature): Add source route option to VTI interfaces


2021-03-13
==========

* :vytask:`T3406` (bug): tunnel: interface no longer supports specifying encaplimit none - or migrator is missing
* :vytask:`T3407` (bug): console-server: do not allow to spawn a console-server session on serial port used by "system console"


2021-03-11
==========

* :vytask:`T3399` (bug): RPKI: dashes in hostnames are replaced with underscores when rendering the FRR config
* :vytask:`T3305` (bug): Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot
* :vytask:`T2927` (bug): isc-dhcpd release and expiry events never execute
* :vytask:`T899` (bug): Tunnels cannot be moved from one bridge to another
* :vytask:`T786` (feature): new style xml and conf-mode scripts: posibillity to add tagNode value as parameter to conf-script


2021-03-09
==========

* :vytask:`T3382` (bug): Error creating Console Server


2021-03-08
==========

* :vytask:`T3387` (bug): Command "Monitor vpn ipsec"  is not working


2021-03-07
==========

* :vytask:`T3319` (bug): VXLAN uses ttl 1 (auto) by default
* :vytask:`T3391` (feature): Add CLI support for specifying maximum-paths per address family ipv4 unicast and ipv6 unicast
* :vytask:`T3211` (feature): ability to redistribute ISIS into other routing protocols


2021-03-05
==========

* :vytask:`T2659` (feature): Add fastnetmon (DDoS detection) support


2021-03-04
==========

* :vytask:`T2861` (bug): route-map "set community additive" not working correctly


2021-03-03
==========

* :vytask:`T2966` (feature): tunnel: add new encapsulation types ip6tnl and ip6gretap


2021-03-01
==========

* :vytask:`T3342` (bug): On xen-netback interfaces must set "scattergather" offload before MTU>1500


2021-02-28
==========

* :vytask:`T3370` (bug): dhcp: Invalid domain name "private"
* :vytask:`T3369` (feature): VXLAN: add IPv6 underlay support


2021-02-27
==========

* :vytask:`T2291` (bug): Bad hostnames in /etc/hosts with static-mapping in dhcp server config
* :vytask:`T3364` (feature): tunnel: cleanup/rename CLI nodes
* :vytask:`T3368` (feature): macsec: add support for gcm-aes-256 cipher
* :vytask:`T3366` (bug): tunnel: can not change local / remote ip address for gre-bridge tunnel
* :vytask:`T3173` (feature): Need 'nopmtudisc' option for tunnel interface


2021-02-26
==========

* :vytask:`T3357` (default): HTTP-API redirect from http correct https port


2021-02-24
==========

* :vytask:`T3303` (feature): Change welcome message on boot


2021-02-21
==========

* :vytask:`T3163` (feature): ethernet ring-buffer can be set with an invalid value


2021-02-19
==========

* :vytask:`T3326` (bug): OSPFv3: Cannot add L2TPv3 interface


2021-02-18
==========

* :vytask:`T3259` (default): many dnat rules makes the vyos http api crash, even showConfig op timeouts


2021-02-17
==========

* :vytask:`T3047` (bug): OSPF : virtual-link and passive-interface default parameters does not work together
* :vytask:`T3312` (feature): SolarFlare NICs support


2021-02-16
==========

* :vytask:`T3318` (feature): Update Linux Kernel to v5.4.191 / 5.10.113


2021-02-14
==========

* :vytask:`T2152` (bug): ddclient has bug which prevents use_web from being used
* :vytask:`T3308` (feature): BGP: add gracefull shutdown support


2021-02-13
==========

* :vytask:`T3028` (feature): Create a default user when metadata is not available (for Cloud-init builds)
* :vytask:`T2867` (feature): Cleanup DataSourceOVF.py in the Cloud-init
* :vytask:`T2726` (feature): Allow to use all supported SSH key types in Cloud-init
* :vytask:`T2403` (feature): Full support for networking config in Cloud-init
* :vytask:`T2387` (feature): Create XML scheme for [conf_mode] BGP 
* :vytask:`T2174` (feature): Rewrite protocol BGP to new XML/Python style
* :vytask:`T1987` (bug): A default route can be deleted by dhclient-script in some cases
* :vytask:`T723` (feature): Add support for first boot or installation time saved config modification
* :vytask:`T1775` (bug): Cloud-init not running userdata runcmd
* :vytask:`T1389` (feature): Add support for NoCloud cloud-init datasource
* :vytask:`T1315` (feature): Allow BGP to use address-family l2vpn evpn


2021-02-11
==========

* :vytask:`T2638` (default): FRR: New framework for configuring FRR 


2021-02-08
==========

* :vytask:`T3295` (feature): Update Linux Kernel to v5.4.96 / 5.10.14


2021-02-07
==========

* :vytask:`T3293` (bug): RPKI migration script errors out after CLI rewrite


2021-02-06
==========

* :vytask:`T3285` (feature): Schedule reboots through systemd-shutdownd instead of atd
* :vytask:`T661` (feature): Show a warning if the router is going to reboot soon (due to "commit-confirm" command)


2021-02-05
==========

* :vytask:`T2450` (feature): Rewrite "protocols vrf" tree in XML and Python
* :vytask:`T208` (feature): Ability to ignore default-route from dhcpcd per interface


2021-02-03
==========

* :vytask:`T3239` (default): XML: override 'defaultValue' for mtu of certain interfaces; remove workarounds
* :vytask:`T2910` (feature): XML: generator should support override of variables
* :vytask:`T2873` (bug): "show nat destination translation address" doesn't filter at all


2021-02-02
==========

* :vytask:`T3018` (bug): Unclear behaviour when configuring vif and vif-s interfaces
* :vytask:`T3255` (default): Rewrite protocol RPKI to new XML/Python style


2021-02-01
==========

* :vytask:`T3268` (feature): Add VRF support to VIF-S interfaces
* :vytask:`T3274` (default): ask_yes_no() doesn't handle EOFError


2021-01-31
==========

* :vytask:`T3276` (feature): Update Linux Kernel to v5.4.94 / 5.10.12


2021-01-30
==========

* :vytask:`T3269` (bug): VIF-C interfaces don't verify configuration
* :vytask:`T3240` (feature): Support per-interface DHCPv6 DUIDs
* :vytask:`T3273` (default): PPPoE static default-routes deleted on interface down when not added by interface up


2021-01-29
==========

* :vytask:`T3262` (bug): DHCPv6 client runs when dhcpv6-options is configured without requesting an address or PD
* :vytask:`T3261` (bug): Does not possible to disable pppoe client interface.


2021-01-27
==========

* :vytask:`T3257` (feature): tcpdump supporting complete protocol
* :vytask:`T3110` (bug): Broken pipe in show interfaces
* :vytask:`T651` (enhancment): Split CI'ed, VyOS-specific packages and other packages into separate repos
* :vytask:`T597` (enhancment): Code testing on sonarcloud.com
* :vytask:`T516` (default): Make Python / XML code development more testable
* :vytask:`T625` (default): Lack of IKEv1 lifetime negotiation
* :vytask:`T613` (bug): Missing linux-kbuild
* :vytask:`T505` (bug): Hostapd cannot log


2021-01-26
==========

* :vytask:`T3251` (bug): PPPoE client trying to authorize with the wrong username
* :vytask:`T2859` (bug): show nat source translation - Errors out


2021-01-25
==========

* :vytask:`T3249` (feature): Support operation mode forwarding table output


2021-01-24
==========

* :vytask:`T3230` (bug): RPKI can't be deleted
* :vytask:`T3243` (feature): Update Linux Kernel to v5.4.92 / 5.10.10


2021-01-18
==========

* :vytask:`T2761` (feature): Extend "show vrrp" op-mode command with router priority
* :vytask:`T2679` (feature): VRRP with BFD Failure Detection
* :vytask:`T3212` (bug): SSH: configuration directory is not always created on boot
* :vytask:`T3231` (bug): "system option ctrl-alt-delete" has no effect


2021-01-17
==========

* :vytask:`T3222` (bug): Typo in BGP dampening description
* :vytask:`T2944` (bug): NTP by default listen on any address/interface
* :vytask:`T3226` (bug): Repair bridge smoke test damage
* :vytask:`T2442` (enhancment): Move application of STP settings for bridge members from interfaces-bridge.py to Interface.add_to_bridge()
* :vytask:`T2381` (bug): OpenVPN: openvpn-option parsed/rendered improperly


2021-01-16
==========

* :vytask:`T3215` (bug): Operational command "show ipv6 route" is broken
* :vytask:`T3172` (bug): Builds sometime after 2020-12-17 have broken routing after reboot
* :vytask:`T3157` (bug): salt-minion fails to start due to permission error accessing /root/.salt/minion.log
* :vytask:`T3167` (default): Recurring bugs in Intel NIC drivers
* :vytask:`T3151` (default): Decide on the final list of packages for 1.3
* :vytask:`T3137` (feature): Let VLAN aware bridge approach the behavior of professional equipment
* :vytask:`T3223` (feature): Update Linux Kernel to v5.4.89 / 5.10.7


2021-01-15
==========

* :vytask:`T3210` (feature): ISIS three-way-handshake
* :vytask:`T3184` (feature): Add correct desctiptions for BGP neighbors
* :vytask:`T2850` (feature): Add  BGP template for FRR


2021-01-14
==========

* :vytask:`T3218` (feature): Replace Intel out-of-tree drivers with Linux Kernel stock drivers.


2021-01-13
==========

* :vytask:`T3186` (bug): NAT: Commit failed when applying negated(!) addresses 


2021-01-12
==========

* :vytask:`T3205` (bug): Does not possible to configure tunnel mode gre-bridge


2021-01-11
==========

* :vytask:`T3208` (bug): Does not possible to change user password
* :vytask:`T3198` (bug): OSPF database filtering issue
* :vytask:`T3206` (bug): Unable to delete destination NAT rule
* :vytask:`T3193` (bug): DHCPv6 PD verification issues
* :vytask:`T3201` (bug): Operational command "show log all" is not working for RADIUS users


2021-01-10
==========

* :vytask:`T3178` (feature): Migrate vyatta-op-quagga to vyos-1x


2021-01-09
==========

* :vytask:`T2467` (bug): Restarting flow accounting fails with systemd error
* :vytask:`T3199` (feature): Update Linux Kernel to v5.4.88 / 5.10.6


2021-01-07
==========

* :vytask:`T3192` (feature): login: radius: add support for IPv6 RADIUS servers


2021-01-05
==========

* :vytask:`T3169` (enhancment): Reimplement smoke test of span (mirror)
* :vytask:`T3161` (default): Consider removing ConfigLoad.pm
* :vytask:`T1398` (default): Remove vyatta-config-migrate package
* :vytask:`T805` (enhancment): Drop config compatibility with Vyatta Core older than 6.5


2021-01-04
==========

* :vytask:`T3185` (bug): [conf-mode] Wrong CompletionHelp for Tunnel local-ip
* :vytask:`T2601` (bug): pppoe-server: Cannot disable CCP


2021-01-03
==========

* :vytask:`T3180` (bug): DHCP server raises NameError


2021-01-02
==========

* :vytask:`T2321` (feature): VRF support for SSH, NTP, SNMP service
* :vytask:`T3177` (bug): Rolling Release no longer reports VMware UUID


2021-01-01
==========

* :vytask:`T3171` (feature): Add CLI option to enable RPS (Receive Packet Steering)


2020-12-31
==========

* :vytask:`T3162` (bug): Wrong PPPoE server pado-delay parameter added to config
* :vytask:`T3160` (bug): PPPoE server called-sid option defined in wrong section
* :vytask:`T3168` (feature): Update Linux Kernel to v5.4.86


2020-12-29
==========

* :vytask:`T3082` (bug): multi_to_list must distinguish between values and defaults
* :vytask:`T1466` (feature): Add EAPOL login support


2020-12-28
==========

* :vytask:`T1732` (feature): Removing vyatta-webproxy module
* :vytask:`T2666` (feature): Packet Processing with eBPF and XDP
* :vytask:`T2581` (default): webproxy: implement proxy chaining
* :vytask:`T563` (feature): webproxy: migrate 'service webproxy' to get_config_dict()


2020-12-27
==========

* :vytask:`T3150` (bug): When configuring QoS, the setting procedure of port mirroring is wrong


2020-12-23
==========

* :vytask:`T3143` (bug): OpenVPN server: Push route config format is wrong
* :vytask:`T3146` (feature): Upgrade FRR from 7.4 -> 7.5 version incl. new libyang
* :vytask:`T3145` (feature): Update Linux Kernel to v5.4.85
* :vytask:`T3147` (feature): Upgrade to SaltStack version 3002.2


2020-12-22
==========

* :vytask:`T3142` (bug): OpenVPN op-command completion fails due to missing status file
* :vytask:`T2940` (feature): Update FRR to 7.4
* :vytask:`T2573` (bug): BFD op-mode commands are broken
* :vytask:`T2495` (feature): Add xml for ISIS [conf_mode]
* :vytask:`T1316` (feature): Support for IS-IS 


2020-12-21
==========

* :vytask:`T2619` (bug): Bug: Changes in NAT or ZONES from 1.2 to 1.3


2020-12-20
==========

* :vytask:`T3131` (bug): Typo in ipsec preshared-secret help
* :vytask:`T3134` (bug): DHCPv6 DUID configuration node missing
* :vytask:`T3140` (feature): Relax "ethernet offload-options" CLI definition
* :vytask:`T3132` (feature): Enable egress flow accounting


2020-12-17
==========

* :vytask:`T2810` (default): Docs for vpn anyconnect-server
* :vytask:`T2036` (default): Open Connect VPN Server () support


2020-12-14
==========

* :vytask:`T3128` (bug): pppoe smoke test failed
* :vytask:`T3129` (feature): Update Linux Kernel to v5.4.83
* :vytask:`T3089` (feature): Migrate port mirroring to vyos-1x and support two-way traffic mirroring
* :vytask:`T3130` (feature): Replace vyos-netplug with upstream debian version


2020-12-13
==========

* :vytask:`T3114` (bug): When the bridge member is a non-ethernet interface, setting VLAN-aware bridge parameters fails


2020-12-11
==========

* :vytask:`T3123` (bug): Configuration of vti interface impossible 


2020-12-10
==========

* :vytask:`T3117` (bug): OpenVPN config migration errors upgrading from 1.3-rolling-202010280217 to 1.3-rolling-202012060217


2020-12-09
==========

* :vytask:`T3122` (feature): Update Linux Kernel to v4.19.162
* :vytask:`T3121` (bug): get_config_dict() and key_mangling=('-', '_') Broke PowerDNS dns_forwarding config file


2020-12-08
==========

* :vytask:`T2562` (bug): VyOS can't be used as a DHCP server for a DHCP relay


2020-12-07
==========

* :vytask:`T3120` (bug): Python error when deleting nat rule
* :vytask:`T3119` (feature): migrate "system ip" to get_config_dict() and provide smoketest


2020-12-05
==========

* :vytask:`T2744` (bug): igmp-proxy issue: Address already in use


2020-12-04
==========

* :vytask:`T3108` (bug): Section config overlapped match with FRRConfig
* :vytask:`T3112` (feature): PPPoE IPv6: remove "enable" node
* :vytask:`T3100` (feature): Migrate DHCP/DHCPv6 server to get_config_dict()


2020-12-03
==========

* :vytask:`T3105` (bug): static-host-mapping writing in one line
* :vytask:`T3107` (feature): Update Linux Kernel to v4.19.161
* :vytask:`T3104` (bug): LLDP Traceback error


2020-12-01
==========

* :vytask:`T3102` (bug): Destination NAT fails to commit
* :vytask:`T2713` (bug): VyOS must not change permissions on files in /config/auth


2020-11-30
==========

* :vytask:`T3091` (feature): Add "tag" for static route
* :vytask:`T1207` (feature): DMVPN behind NAT


2020-11-29
==========

* :vytask:`T3095` (feature): Migrate dhcp-relay and dhcpv6-relay to get_config_dict()


2020-11-28
==========

* :vytask:`T2890` (bug): NAT error adding translation address range
* :vytask:`T2868` (bug): Tcp-mss option in policy calls kernel-panic
* :vytask:`T3092` (feature): nat: migrate to get_config_dict()


2020-11-27
==========

* :vytask:`T2715` (feature): Duplicate address detection option supporting ARP
* :vytask:`T2714` (feature): A collection of utilities supporting IPv6 or ipv4
* :vytask:`T3088` (feature): Migrate IGMP-Proxy over to get_config_dict() and add smoketests


2020-11-24
==========

* :vytask:`T3087` (feature): Update Linux Kernel to v4.19.160


2020-11-23
==========

* :vytask:`T2177` (default): Commit fails on adding disabled interface to bridge
* :vytask:`T3066` (bug): reboot in - Invalid time
* :vytask:`T2802` (bug): Tunnel interface does not apply EUI-64 IPv6 Address
* :vytask:`T2359` (bug): Adding IPIP6 tun interface to bridge [conf_mode] errors
* :vytask:`T2357` (bug): GRE-bridge conf_mode errors
* :vytask:`T2259` (feature): Support for bind vif-c interfaces into VRFs
* :vytask:`T2205` (bug): "set interface ethernet" fails on Hyper-V
* :vytask:`T2182` (bug): Failure to commit an IPv6 address on a tunnel interface
* :vytask:`T2155` (bug): Cannot set anything on Intel 82599ES 10-Gigabit SFI/SFP+
* :vytask:`T2153` (bug): traceroute circular reference
* :vytask:`T3081` (bug): get_config_dict() does not honor whitespaces in the CLI values field
* :vytask:`T3080` (bug): OpenVPN failing silently for a number of reasons in rolling post Nov/02
* :vytask:`T3074` (bug): OpenVPN site-to-site creates wrong peer address
* :vytask:`T2542` (bug): OpenVPN client tap interfaces not coming up
* :vytask:`T3084` (bug): wifi: TypeError on "show interfaces wireless info"


2020-11-21
==========

* :vytask:`T3079` (bug): Fix the problem that VLAN 1 will be deleted in VLAN-aware bridge
* :vytask:`T3060` (bug): OpenVPN virtual interface not coming up after upgrade


2020-11-20
==========

* :vytask:`T3078` (feature): CLI cleanup: rename "system options" -> "system option"
* :vytask:`T2997` (feature): DHCP: disallow/do-not-request certain options when requesting IP address from server
* :vytask:`T3077` (feature): WireGuard: automatically create link-local IPv6 adresses
* :vytask:`T2550` (default): OpenVPN: IPv4 not working in client mode
* :vytask:`T3072` (feature): Migrate tunnel interfaces to new get_config_dict() approach
* :vytask:`T3065` (feature): Add "interfaces wirelessmodem" IPv6 support
* :vytask:`T3048` (feature): Drop static smp-affinity for a more dynamic way using tuned


2020-11-19
==========

* :vytask:`T3067` (bug): Wireless interface can no longer be added to the bridge after bridge VLAN support
* :vytask:`T3075` (feature): Update Linux Kernel to v4.19.158


2020-11-16
==========

* :vytask:`T3003` (enhancment): Extend smoketest framework to allow loading an arbitrary config file


2020-11-15
==========

* :vytask:`T3069` (bug): OpenVPN routed networks not available
* :vytask:`T3038` (feature): Supporting AZERTY keyboards 
* :vytask:`T2993` (bug): op-mode: lldp: show lldp neighbors - AttributeError: 'str' object has no attribute 'items'


2020-11-14
==========

* :vytask:`T3041` (bug): Intel QAT: vyos-1.3-rolling-202011020217-amd64 kernel panic during configure


2020-11-13
==========

* :vytask:`T3063` (feature): Add support for Huawei LTE Module ME909s-120
* :vytask:`T3059` (bug): L2TPv3 interface: Enforced to shutdown but no command to enable interface permanently


2020-11-12
==========

* :vytask:`T3064` (feature): Update Linux Kernel to v4.19.157


2020-11-10
==========

* :vytask:`T2103` (bug): Abnormal interface names if VIF present


2020-11-08
==========

* :vytask:`T3050` (bug): Broken address/subnet validation on NAT configuration


2020-11-07
==========

* :vytask:`T2914` (bug): OpenVPN: Fix for IPv4 remote-host hostname in client mode:
* :vytask:`T2653` (feature): "set interfaces" Python handler code improvements - next iteration
* :vytask:`T311` (feature): DHCP: set client-hostname via CLI


2020-11-06
==========

* :vytask:`T3051` (bug): OpenVPN: multiple client routes do not work in server mode
* :vytask:`T3046` (bug): openvpn directory is not auto-created
* :vytask:`T3052` (feature): Update Linux firmware files to 20201022 version
* :vytask:`T2731` (bug): "show interfaces" returns invalid state when link is down


2020-11-05
==========

* :vytask:`T3049` (feature): Update Linux Kernel to v4.19.155
* :vytask:`T2994` (feature): Migrate OpenVPN interfaces to get_config_dict() syntax


2020-11-03
==========

* :vytask:`T3043` (feature): Wireless: Refactor CLI
* :vytask:`T3034` (feature): Add WiFi WPA 3 support
* :vytask:`T2967` (bug): Duplicate IPv6 BFD peers created
* :vytask:`T2483` (bug): DHCP most likely not restarting pdns_recursor


2020-11-02
==========

* :vytask:`T3024` (bug): DHCPv6 PD configuration doesn't really render an expected behavior


2020-11-01
==========

* :vytask:`T3036` (feature): OpenVPN remote-address does not accept IPv6 address
* :vytask:`T2193` (feature): Display disabled VRRP instances in a `show vrrp` output


2020-10-30
==========

* :vytask:`T2790` (feature): Add ability to set ipv6 protocol route-map for OSPFv3
* :vytask:`T3033` (feature): Update Linux Kernel to v4.19.154
* :vytask:`T2969` (bug): OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit


2020-10-28
==========

* :vytask:`T2631` (default): l2tp, sstp, pptp add option to disable radius accounting
* :vytask:`T2630` (feature): Allow Interface MTU over 9000
* :vytask:`T3027` (bug): Unable to update system Signature check FAILED
* :vytask:`T2995` (bug): Enhancements/bugfixes for vyos_dict_search()
* :vytask:`T2968` (feature): Add support for Intel Atom C2000 series QAT


2020-10-27
==========

* :vytask:`T3026` (default): qemu: update script for deprecated ssh_host_port_min/max
* :vytask:`T2938` (feature): Adding remote Syslog RFC5424 compatibility
* :vytask:`T2924` (bug): Using 'set src' in a route-map invalidates it as part of a subsequent boot-up
* :vytask:`T2587` (bug): Cannot enable the interface when the MTU is set to less than 1280
* :vytask:`T2885` (default): configd: print commit errors to config session terminal
* :vytask:`T2808` (default): Add smoketest to ensure script consistency with config daemon
* :vytask:`T2582` (default): Script daemon to offload processing during commit
* :vytask:`T1721` (bug): Recursive Next Hop not updated for static routes


2020-10-24
==========

* :vytask:`T3007` (default): HTTP-API should use config load script, not backend config load
* :vytask:`T3009` (bug): vpn l2tp remoteaccess require option broken
* :vytask:`T3010` (bug): ttl option of gre-bridge
* :vytask:`T3005` (bug): Intel: update out-of-tree drivers, i40e driver warning
* :vytask:`T3004` (feature): ConfigSession should (optionally) use config load script
* :vytask:`T2723` (feature): Support tcptraceroute


2020-10-22
==========

* :vytask:`T2978` (bug): IPoE service does not work on shared mode
* :vytask:`T2906` (bug): OpenVPN: tls-auth missing key direction


2020-10-21
==========

* :vytask:`T2828` (bug): BGP conf_mode error enforce-first-as
* :vytask:`T2749` (bug): Setting ethx configuration takes a long time
* :vytask:`T2138` (default): Can't load archived configs as they are gzipped


2020-10-20
==========

* :vytask:`T2987` (bug): VxLAN not working properly after upgrading to latest October build and with a new installation
* :vytask:`T2989` (default): MPLS documentation expansion


2020-10-19
==========

* :vytask:`T1588` (bug): VRRP failed to start if any of its interaces not exist
* :vytask:`T1385` (feature): Allow bonding interfaces to have pseudo-ethernet interfaces
* :vytask:`T3000` (bug): Mismatch between "prefix-length" and "preference" in dhcp6-server syntax
* :vytask:`T2992` (feature): Automatically verify sha256 checksum on ISO download
* :vytask:`T752` (feature): Add an option to disable IPv4 forwarding on specific interface only


2020-10-18
==========

* :vytask:`T2965` (feature): Brief BFD Peer Info
* :vytask:`T2907` (feature): OpenVPN: Option to disable encryption
* :vytask:`T2985` (feature): Add glue code to create bridge interface on demand


2020-10-17
==========

* :vytask:`T2980` (bug): FRR bfdd crash due to invalid length
* :vytask:`T2991` (feature): Update WireGuard to 1.0.20200908
* :vytask:`T2990` (feature): Update Linux Kernel to v4.19.152
* :vytask:`T2981` (feature): MPLS LDP neighbor session clear capability
* :vytask:`T2792` (default): Failed to run `sudo make qemu`  with vyos-build container due to the change of packer


2020-10-13
==========

* :vytask:`T2976` (bug): Client IP pool does not work for PPPoE local users


2020-10-12
==========

* :vytask:`T2951` (bug): Cannot enable logging for monitor nat
* :vytask:`T2782` (bug): Changing timezone, does not restart rsyslog


2020-10-06
==========

* :vytask:`T2957` (bug): show openvpn not printing anything


2020-10-05
==========

* :vytask:`T2963` (bug): Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is


2020-10-04
==========

* :vytask:`T2953` (feature): Accel-PPP services CLI config cleanup (SSTP, L2TP, PPPoE, IPoE)
* :vytask:`T2829` (bug): PPPoE server: mppe setting is implemented as node instead of leafNode
* :vytask:`T2960` (feature): sstp: migrate to get_config_dict()


2020-10-03
==========

* :vytask:`T2956` (feature): Add support for list of defaultValues
* :vytask:`T2955` (feature): Update Linux Kernel to v4.19.149


2020-10-02
==========

* :vytask:`T2952` (bug): configd: timeout breaks synchronization of messages, causing freeze


2020-10-01
==========

* :vytask:`T2945` (bug): Interface removed from bridge on setting change
* :vytask:`T2948` (bug): NAT: OSError when configuring translation address range
* :vytask:`T2936` (feature): Migrate PPPoE server to get_config_dict() do reduce boilerplate code


2020-09-30
==========

* :vytask:`T2939` (bug): Wireguard Remove Peer Fails


2020-09-29
==========

* :vytask:`T2919` (feature): PPPoE server: Called-Station-Id attribute
* :vytask:`T2918` (feature): Accounting interim jitter for pppoe, l2tp, pptp, ipoe
* :vytask:`T2917` (feature): PPPoE server: Preallocate NAS-Port-Id
* :vytask:`T2937` (feature): Update Linux Kernel to v4.19.148


2020-09-27
==========

* :vytask:`T2930` (feature): Support configuration of MAC address for VXLAN and GENEVE tunnel


2020-09-26
==========

* :vytask:`T2856` (bug): equuleus: `show version all` throws broken pipe exception on abort
* :vytask:`T2929` (bug): Upgrading from 1.2 (crux) to 1.3 rolling causes vyos.configtree.ConfigTreeError for RADIUS settings
* :vytask:`T2928` (bug): MTU less then 1280 bytes and IPv6 will raise FileNotFoundError
* :vytask:`T2926` (bug): snmp.py missing an import
* :vytask:`T2912` (feature): When setting MTU check for hardware maximum supported MTU size


2020-09-25
==========

* :vytask:`T2915` (bug): Lost "proxy-arp-pvlan" option for vlan
* :vytask:`T2925` (feature): Update Linux Kernel to v4.19.147
* :vytask:`T2921` (feature): Migrate "service dns forwarding" to get_config_dict() for ease of source maintenance


2020-09-24
==========

* :vytask:`T2896` (bug): set ip route 0.0.0.0/0 dhcp-interface eth0
* :vytask:`T2923` (bug): Configuring DHCPv6-PD without a interface to delegate to raises TypeError


2020-09-23
==========

* :vytask:`T2846` (bug): ip route doesn't show longer-prefixes


2020-09-20
==========

* :vytask:`T2904` (feature): 802.1ad / Q-in-Q ethertype default not utilized
* :vytask:`T2905` (feature): Sync CLI nodes between PPPoE and WWAN interface
* :vytask:`T2903` (feature): Q-in-Q (802.1.ad) ethertype should be defined explicitly and not via its raw value


2020-09-19
==========

* :vytask:`T2894` (bug): bond: lacp: member interfaces get removed once bond interface has vlans configured
* :vytask:`T2901` (feature): Update Linux Kernel to v4.19.146
* :vytask:`T2900` (bug): DNS forwarding: invalid warning is shown for "system name-server" or "system name-servers-dhcp" even if present


2020-09-18
==========

* :vytask:`T945` (bug): Unable to change configuration after changing it from script (vbash + script-template)


2020-09-16
==========

* :vytask:`T2886` (bug): RADIUS authentication broken only returns operator level
* :vytask:`T2887` (bug): WiFi ht40+ channel width is not set in hostaptd.conf


2020-09-15
==========

* :vytask:`T2515` (bug): Ethernet interface is automatically disabled when removing it from bond


2020-09-14
==========

* :vytask:`T2872` (bug): "Show log" for nat and openvpn got intermixed
* :vytask:`T2301` (bug): Cannot delete PBR
* :vytask:`T2880` (feature): Update Linux Kernel to v4.19.145
* :vytask:`T2879` (feature): Cleanup 4.19.144 kernel configuration


2020-09-13
==========

* :vytask:`T2858` (feature): Rewrite dynamic dns client to get_config_dict()
* :vytask:`T2857` (feature): Cleanup Intel QAT configuration script
* :vytask:`T2877` (feature): LACP / bonding: support configuration of minimum number of links


2020-09-12
==========

* :vytask:`T2863` (default): Wireguard IPv6 Link-Local Addresses Are Not Unique
* :vytask:`T2876` (feature): Update Linux Kernel to v4.19.144


2020-09-10
==========

* :vytask:`T2870` (feature): Update Linux Kernel to v5.8.8


2020-09-09
==========

* :vytask:`T2728` (bug): Protocol option ignored for IPSec peers in transport mode
* :vytask:`T1934` (default): Change default hostname when deploy from OVA without params.
* :vytask:`T1953` (bug): DDNS service name validation rejects valid service names


2020-09-07
==========

* :vytask:`T1729` (default): PIM (Protocol Independent Multicast) implementation


2020-09-06
==========

* :vytask:`T2860` (bug): Update Accel-PPP to fix l2tp CVE


2020-09-02
==========

* :vytask:`T2833` (bug): RIP outgoing update filter list no longer operational
* :vytask:`T2849` (bug): vyos.xml.defaults should return a list on multi nodes, by default


2020-08-31
==========

* :vytask:`T2636` (bug): get_config_dict() shall always return a list on <multi/> nodes


2020-08-30
==========

* :vytask:`T2843` (feature): Upgrade Linux Kernel to 5.8 series
* :vytask:`T2814` (default): kernel 5.1+ : NAT : module `nft_chain_nat_ipv4` renamed
* :vytask:`T2839` (feature): Upgrade WireGuard user-space tools and Kernel module
* :vytask:`T2842` (feature): Replace custom "wireguard, wireguard-tools" package with debian-backports version


2020-08-29
==========

* :vytask:`T2836` (default): show system integrity broken in 1.3


2020-08-28
==========

* :vytask:`T2126` (bug): show vpn ipsec sa IPSec - Process NOT Running
* :vytask:`T2813` (bug): NAT: possible to commit illegal source nat without translation 
* :vytask:`T1463` (bug): Missing command `show ip bgp scan` appears in command completion


2020-08-27
==========

* :vytask:`T2832` (feature): Migrate vyos-smoketest content into vyos-1x


2020-08-26
==========

* :vytask:`T2830` (default): Migrate "service https" to use get_config_dict()
* :vytask:`T2831` (feature): Update Linux Kernel to v4.19.142


2020-08-25
==========

* :vytask:`T2826` (bug): frr: frr python lib error in replace_section


2020-08-24
==========

* :vytask:`T2423` (bug): Loadkey scp ssh key errors


2020-08-23
==========

* :vytask:`T2811` (bug): Cannot delete vpn anyconnect
* :vytask:`T2823` (bug): VXLAN has state A/D after configuration
* :vytask:`T2812` (default): Add basic smoketest for anyconnect


2020-08-22
==========

* :vytask:`T2822` (feature): Update Linux Kernel to v4.19.141
* :vytask:`T2821` (feature): Support DHCPv6-PD without "address dhcpv6"
* :vytask:`T2677` (feature): Proposal for clearer DHCPv6-PD configuration options


2020-08-20
==========

* :vytask:`T2209` (bug): Documentation has reference to the old 'user x level admin' option
* :vytask:`T1665` (default): prefix-list and prefix-list6 rules incorrectly accept a host address where prefix is required
* :vytask:`T2815` (default): Move certbot config directory under /config/auth


2020-08-19
==========

* :vytask:`T2794` (bug): op-mode: lldp: "show lldp neighbors" IndexError: list index out of range
* :vytask:`T2791` (feature): "monitor traceroute" has no explicit IPv4/IPv6 support
* :vytask:`T1515` (bug): FRR ospf6d crashes when performing: "show ipv6 ospfv3 database"


2020-08-16
==========

* :vytask:`T2277` (bug): dhclient-script-vyos does not support VRFs
* :vytask:`T2090` (default): Deleting 'service salt-minion' causes python TypeError


2020-08-15
==========

* :vytask:`T2797` (feature): Update Linux Kernel to v4.19.139
* :vytask:`T2796` (bug): PPPoE-Server: listen interface is mandatory but validation check is missing


2020-08-14
==========

* :vytask:`T2795` (bug): console server fails to commit


2020-08-12
==========

* :vytask:`T2786` (bug): OSPF Interface Cost
* :vytask:`T2325` (bug): NHRP op-mode errors with missing daemon socket
* :vytask:`T2227` (feature): MPLS documentation
* :vytask:`T2767` (bug): The interface cannot be disabled for network enabled configuration
* :vytask:`T2316` (bug): DHCP-server op-mode errors


2020-08-11
==========

* :vytask:`T2779` (bug): LLDP: "show lldp neighbors interface" does not yield any result
* :vytask:`T2379` (bug): DHCPv6 address for interface deletion triggers a script error
* :vytask:`T2784` (default): Remove unused arg from host_name.py functions verify and get_config


2020-08-10
==========

* :vytask:`T2780` (feature): Update Linux Kernel to v4.19.138


2020-08-08
==========

* :vytask:`T2716` (bug): Shaper-HFSC shapes but does not control latency correctly
* :vytask:`T2497` (default): Cache config string during commit
* :vytask:`T2501` (bug): Cannot recover from failed boot config load
* :vytask:`T1974` (feature): Allow route-map to set administrative distance
* :vytask:`T1949` (bug): Multihop IPv6 BFD is unconfigurable


2020-08-04
==========

* :vytask:`T2758` (bug): router-advert: 'infinity' is not a valid integer number
* :vytask:`T2637` (bug): Vlan is not removed from the system
* :vytask:`T1287` (bug): No DHCPv6 leases reported for "show dhcpv6 client leases"


2020-08-03
==========

* :vytask:`T2241` (default): Changing settings on an interface causes it to fall out of bridge
* :vytask:`T2757` (bug): "show system image version" contains additional new-line character breaking output
* :vytask:`T1826` (bug): Misleading message on "reboot at" command
* :vytask:`T1511` (default): Rewrite ethernet setup scripts to python
* :vytask:`T1600` (default): Convert 'ping' operation from vyatta-op to new syntax
* :vytask:`T1486` (bug): Unknown LLDP version reported to peers
* :vytask:`T1414` (enhancment):  equuleus: buster: 10-unmountfs.chroot fail under apply
* :vytask:`T1076` (bug): SSH: make configuration (sshd_config) volatile and store it to /run
* :vytask:`T2724` (feature): Support for IPv6 Toolset
* :vytask:`T2323` (bug): LLDP: "show lldp neighbors detail" returns warnings when service is not configured
* :vytask:`T1754` (bug): DHCPv6 client is impossible to restart


2020-08-02
==========

* :vytask:`T2756` (feature): Accel-PPP: make RADIUS accounting port configurable


2020-08-01
==========

* :vytask:`T2752` (bug): Exception when configuring unavailable ethernet interface
* :vytask:`T2751` (feature): Update Linux Kernel to v4.19.136
* :vytask:`T2753` (feature): Rewrite "add system image" op mode commands in XML
* :vytask:`T2690` (feature): Add VRF support to the add system image command


2020-07-30
==========

* :vytask:`T2746` (feature): IPv6 link-local addresses not configured
* :vytask:`T2678` (bug): High RAM usage on SSH logins with lots of IPv6 routes in the routing table.
* :vytask:`T2701` (bug): `vpn ipsec pfs enable` doesn't work with IKE groups
* :vytask:`T2745` (feature): router-advert: migrate to get_config_dict()


2020-07-29
==========

* :vytask:`T2743` (feature): WireGuard: move key migration from config script to migration script
* :vytask:`T2742` (feature): mDNS repeater: migrate to get_config_dict()


2020-07-28
==========

* :vytask:`T1117` (feature): 'show ipv6 bgp route-map' missing
* :vytask:`T928` (feature): Add support for PIM (Protocol-Independent Multicast)


2020-07-27
==========

* :vytask:`T2729` (feature): Pseudo-ethernet replace fail message
* :vytask:`T1249` (feature): multiple PBR rules can set to a single interface
* :vytask:`T1956` (feature): PPPoE server: support PADO-delay
* :vytask:`T1295` (feature): FRR: update documentation 
* :vytask:`T1222` (bug): OSPF routing problem - route looping
* :vytask:`T1158` (bug): Route-Map configuration dropped updating rc11 to epa2
* :vytask:`T1130` (bug): Deleting BGP communities from prefix does not work
* :vytask:`T2067` (feature): pppoe-server: Add possibility set multiple service-name


2020-07-26
==========

* :vytask:`T2734` (feature): WireGuard: fwmark CLI definition is inconsistent
* :vytask:`T2733` (feature): Support MTU configuration on pseudo ethernet devices
* :vytask:`T2644` (default): Bonding interfaces cannot be disabled
* :vytask:`T2476` (bug): Bond member description change leads to network outage
* :vytask:`T2443` (feature): NHRP: Add debugging information to syslog
* :vytask:`T2021` (bug): OSPFv3 doesn't support decimal area syntax
* :vytask:`T1901` (bug): Semicolon in values is interpreted as a part of the shell command by validators
* :vytask:`T2000` (bug): strongSwan does not install routes to table 220 in certain cases
* :vytask:`T2091` (bug): swanctl.conf file is not generated properly if more than one IPsec profile is used
* :vytask:`T1983` (feature): Expose route-map when BGP routes are programmed in to FIB
* :vytask:`T1973` (feature): Allow route-map to match on BGP local preference value
* :vytask:`T1853` (bug): wireguard - disable peer doesn't work 
* :vytask:`T1985` (feature): pppoe: Enable ipv6 modules without configured ipv6 pools


2020-07-25
==========

* :vytask:`T2730` (feature): Update Linux Kernel to v4.19.134
* :vytask:`T2106` (bug): Wrong interface states after reboot
* :vytask:`T1507` (default): cli: logical redundancy with boolean type


2020-07-24
==========

* :vytask:`T2097` (bug): Problems when using <path> as completion helper in op-mode
* :vytask:`T2092` (bug): dhcp-server rfc3442 static route should add default route
* :vytask:`T1817` (bug): BGP next-hop-self not working.
* :vytask:`T1462` (bug): Upgrade path errors 1.1.8 to 1.2.1-S2
* :vytask:`T1372` (bug): Diff functionality behaves incorrectly in some cases
* :vytask:`T2073` (feature): ipoe-server: reset op-mode command for sessions
* :vytask:`T1715` (bug): System DNS Server Order Incorrect


2020-07-23
==========

* :vytask:`T2673` (bug): After the bridge is configured with Mac, bridge is automatically disabled
* :vytask:`T2626` (bug): Changing pseudo-ethernet mode, throws CLI error
* :vytask:`T2608` (bug): delete pseudo-ethernet failed (another error type)
* :vytask:`T2527` (bug): bonding: the last slave interface is not deleted
* :vytask:`T2358` (bug): ip6ip6 bridge conf_mode errors
* :vytask:`T2346` (bug): Setting hostname yields temporary file error
* :vytask:`T2330` (bug): Vpn op-mode syntax
* :vytask:`T2188` (default): NTP op-mode commands don't work


2020-07-22
==========

* :vytask:`T2718` (bug): ntp.conf updated incorrectly
* :vytask:`T2658` (bug): Interface description comment display error
* :vytask:`T2643` (bug): show interfaces does not scale with terminal width
* :vytask:`T2725` (bug): Config fails to load if user has no password
* :vytask:`T2707` (default): Allow alternative initialization data for Config


2020-07-20
==========

* :vytask:`T2709` (bug): Destination NAT translation port without address fails to commit
* :vytask:`T2519` (bug): Broadcast address does not add automatically


2020-07-19
==========

* :vytask:`T2708` (bug): "show flow-accounting" should not display script's "usage" help
* :vytask:`T2592` (default): dhcp-relay discarding packets on valid interfaces
* :vytask:`T2712` (feature): udp-broadcast-relay: serivce no longer starts
* :vytask:`T2706` (feature): Support NDP protocol monitoring


2020-07-18
==========

* :vytask:`T2704` (bug): connect/disconnect Missing newline in op-mode tab completion helper
* :vytask:`T2689` (feature): Add helper functions to query changes between session and effective configs
* :vytask:`T2585` (bug): Unable to access the Internet after opening PPPoE on-demand dialing


2020-07-15
==========

* :vytask:`T2675` (bug): DNS service failed to start
* :vytask:`T2596` (feature): Allow specifying source IP for 'add system image'


2020-07-12
==========

* :vytask:`T1575` (default): `show snmp mib ifmib` crashes with IndexError
* :vytask:`T2696` (bug): Some bugfixes of vyatta-wanloadbalance


2020-07-11
==========

* :vytask:`T2687` (feature): SNMP: change logic on v3 password encryption
* :vytask:`T2693` (bug): Dhcp6c cannot be restarted after PPPoE link is reset


2020-07-08
==========

* :vytask:`T2692` (bug): Evaluate Setting Default Hash Policy to L3+L4
* :vytask:`T2646` (bug): Sysctl for IPv4 ECMP Hash Policy Not Set


2020-07-07
==========

* :vytask:`T2691` (bug): Upgrade from 1.2.5 to 1.3-rolling-202007040117 results in broken config due to case mismatch
* :vytask:`T2389` (bug): BGP community-list unknown command
* :vytask:`T2686` (bug): FRR: BGP: large-community configuration is not applied properly after upgrading FRR to 7.3.x series


2020-07-06
==========

* :vytask:`T2680` (bug): dhcp6c service cannot recover when it fails


2020-07-05
==========

* :vytask:`T2684` (feature): Update Linux Kernel to v4.19.131
* :vytask:`T2685` (feature): Update Accel-PPP to fix SSTP client issues
* :vytask:`T2681` (bug): PPPoE stops negotiating IPv6


2020-07-04
==========

* :vytask:`T2682` (bug): VRF aware services - connection no longer possible after system reboot


2020-07-03
==========

* :vytask:`T2670` (default): Remove dependency on show_config from get_config_dict
* :vytask:`T2676` (feature): NTP: migrate to get_config_dict() implementation


2020-07-02
==========

* :vytask:`T2668` (default): get_config_dict: add get_first_key arg to utility function get_sub_dict


2020-07-01
==========

* :vytask:`T2662` (default): get_config_dict includes node name as key only for tag and leaf nodes
* :vytask:`T2667` (feature): get_config_dict: Use utility function for non-empty path argument


2020-06-28
==========

* :vytask:`T2660` (bug): XML: Python default dictionary does not obey underscore (_)  when flat is False


2020-06-27
==========

* :vytask:`T2656` (bug): XML: Python default dictionary returns wrong dictionary level(s)


2020-06-26
==========

* :vytask:`T2642` (bug): sshd fails to start due to configuration error
* :vytask:`T2588` (default): Add support for default values to the interface-definition format
* :vytask:`T2622` (bug): Pseudo-ethernet interface config disappears across versions
* :vytask:`T2057` (feature): Generalised Interface configuration
* :vytask:`T2625` (feature): Provide generic Library for package builds


2020-06-25
==========

* :vytask:`T2487` (bug): VRRP does not display info when group disabled
* :vytask:`T2329` (bug): Show remote config openvpn 
* :vytask:`T2165` (bug): When trying to add route to ripng it complains that ip address should be IPv4 format
* :vytask:`T2159` (default): webproxy log read from wrong file
* :vytask:`T2101` (feature): Fix VXLAN config option parsing
* :vytask:`T2062` (bug): Wrong dhcp-server static route subnet bytes
* :vytask:`T1986` (bug): Python configuration manipulation library leaks open files
* :vytask:`T1762` (bug): VLAN interface configuration fails after internal representation of edit level was switched from a string to a list
* :vytask:`T1538` (bug): Update conntrack-sync packages to fix VRRP issues
* :vytask:`T1808` (feature): add package nftables


2020-06-24
==========

* :vytask:`T2634` (feature): remove autogeneration of interface "ip section" from vyatta-cfg-system
* :vytask:`T2633` (bug): Error with arp_accept on tun interface
* :vytask:`T2595` (feature): Update Linux Kernel to v4.19.128
* :vytask:`T1938` (bug): syslog doesn't start automatically


2020-06-23
==========

* :vytask:`T2632` (bug): WireGuard: Cannot use only one preshared-key for one peer
* :vytask:`T1829` (bug): Install Image script does not respect size of partition greater than 2G but less than disk size
* :vytask:`T2635` (feature): SSH: migrate to get_config_dict()


2020-06-22
==========

* :vytask:`T2486` (bug): DNS records set via 'system static-host-mapping' return NXDOMAIN from 'service dns forwarding' after a request to a forwarded zone
* :vytask:`T2463` (bug): DHCP-received nameserver not added to vyos-hostsd
* :vytask:`T2534` (bug): pdns-recursor override.conf error
* :vytask:`T2054` (bug): Changing "system name-server" doesn't update dns forwarding config, neither does "restart dns forwarding"
* :vytask:`T2225` (default): PIM/IGMP documentation


2020-06-21
==========

* :vytask:`T2624` (feature): Serial Console: fix migration script for configured powersave and no console
* :vytask:`T2610` (bug): default-lifetime is not reflected in the RA message
* :vytask:`T2299` (feature): login radius-server priority
* :vytask:`T1739` (bug): Serial interface seems not to be deleted properly
* :vytask:`T480` (bug): Error if no serial interface is present (/dev/ttyS0: not a tty)


2020-06-20
==========

* :vytask:`T2621` (bug): show interfaces repeats interface description if it is longer then an arbitrary number of characters
* :vytask:`T2618` (default): Conversion from 1.2 to 1.3 lost RADVD prefix autonomous-flag setting


2020-06-19
==========

* :vytask:`T2589` (bug): delete pseudo-ethernet failed
* :vytask:`T2490` (feature): Add serial (rs232) to ssh bridge service


2020-06-18
==========

* :vytask:`T2614` (default): Add an option to mangle dict keys to vyos.config.get_config_dict()
* :vytask:`T2026` (default): Make cli-shell-api correctly exit with non-zero code on failures
* :vytask:`T1868` (default): Add opportunity to get current values from API


2020-06-17
==========

* :vytask:`T2478` (feature): login radius: use NAS-IP-Address if defined source address
* :vytask:`T2141` (bug): Static ARP is not applied on boot
* :vytask:`T2609` (bug): router-advert: radvd does not start when lifetime is improperly configured
* :vytask:`T1720` (feature): support for more 'show ip route' commands 


2020-06-16
==========

* :vytask:`T2604` (default): Remove use of is_tag in system-syslog.py
* :vytask:`T2605` (bug): SNMP service is not disabled by default
* :vytask:`T2568` (bug): Add some missing checks in config
* :vytask:`T2156` (default): PIM op-mode commands


2020-06-15
==========

* :vytask:`T2600` (bug): RADIUS system login configuration rendered wrongly
* :vytask:`T2599` (bug): "show interfaces" does not list VIF interfaces in ascending order
* :vytask:`T2591` (bug): show command has wrong interfaces ordering
* :vytask:`T2576` (bug): "show interfaces" does not return VTI


2020-06-14
==========

* :vytask:`T2354` (bug): Wireless conf_mode errors
* :vytask:`T2593` (bug): source NAT translation port can not be set when translation address is set to masquerade
* :vytask:`T2594` (default): Missing firmware for iwlwifi


2020-06-11
==========

* :vytask:`T2578` (bug): ipaddrcheck unaware of /31 host addresses - can no longer assign /31 mask to interface addresses
* :vytask:`T2571` (bug): NAT destination port with ! results in error
* :vytask:`T2570` (feature): Drop support for "system console device <device> modem"
* :vytask:`T2586` (bug): WWAN default route is not installed into VRF
* :vytask:`T2561` (feature): Drop support for "system console netconsole"
* :vytask:`T2569` (feature): Migrate "set system console" to XML and Python representation


2020-06-10
==========

* :vytask:`T2575` (bug): pppoe-server: does not possibly assign IP address
* :vytask:`T2565` (bug): Cannot connect to l2tp server with radius auth
* :vytask:`T2553` (bug): set interface ethN vif-s nnnn does not commit


2020-06-08
==========

* :vytask:`T2559` (feature): Add operational mode command to retrieve hardware sensor data


2020-06-07
==========

* :vytask:`T2529` (feature): WWAN: migrate from ttyUSB device to new device in /dev/serial/by-bus
* :vytask:`T2560` (feature): New op-mode command to display information about USB interfaces


2020-06-05
==========

* :vytask:`T2548` (bug): Interfaces allowing inappropriate network addresses to be assigned
* :vytask:`T1958` (default): Include only firmware we actually need


2020-06-04
==========

* :vytask:`T2514` (enhancment): "mac" setting for bond members


2020-06-02
==========

* :vytask:`T2129` (feature): XML schema: tagNode not allowed on first level in new XML op-mode definition
* :vytask:`T2545` (feature): Show physical device offloading capabilities for specified ethernet interface
* :vytask:`T2544` (feature): Enable Kernel KONFIG_KALLSYMS
* :vytask:`T2543` (feature): Kernel: always build perf binary but ship as additional deb package to not bloat the image
* :vytask:`T1096` (bug): BGP process memory leak


2020-06-01
==========

* :vytask:`T2535` (feature): Update Intel QAT drivers to 1.7.l.4.9.0-00008
* :vytask:`T2537` (feature): Migrate "show log dns" from vyatta-op to vyos-1x
* :vytask:`T2536` (bug): "show log dns forwarding" still refers to dnsmasq
* :vytask:`T2538` (feature): Update Intel NIC drivers to recent release (preparation for Kernel >=5.4)
* :vytask:`T2526` (feature): Wake-On-Lan CLI implementation


2020-05-31
==========

* :vytask:`T2532` (feature): VRF aware OpenVPN


2020-05-30
==========

* :vytask:`T2388` (feature): template rendering should create folder and set permission
* :vytask:`T2531` (feature): Update Linux Kernel to v4.19.125
* :vytask:`T2530` (bug): Error creating VRF with a name of exactly 16 characters
* :vytask:`T2460` (default): Migrate vyatta-nat-translations.pl to Python


2020-05-29
==========

* :vytask:`T2528` (bug): "update dns dynamic" throws FileNotFoundError excepton


2020-05-28
==========

* :vytask:`T1291` (default): Under certain conditions the VTI will stay forever down


2020-05-27
==========

* :vytask:`T2395` (feature): HTTP API move to flask/flask-restx as microframework
* :vytask:`T1121` (bug): Can't search for prefixes by community: Community malformed: AA:NN


2020-05-26
==========

* :vytask:`T2520` (bug): show conntrack fails with Perl error
* :vytask:`T2502` (bug): PPPoE default route not installed for IPv6 when "default-route auto"
* :vytask:`T2458` (feature): Update FRR to 7.3.1
* :vytask:`T2506` (feature): DHCPv6-PD add prefix hint CLI option


2020-05-25
==========

* :vytask:`T2391` (bug): pppoe-server session-control does not work
* :vytask:`T2269` (feature): SSTP specify tunnels names
* :vytask:`T1137` (bug): 'sh ip bgp sum' being truncated


2020-05-22
==========

* :vytask:`T2491` (feature): MACsec: create CLI for replay protection
* :vytask:`T2489` (feature): Add MACsec interfaces to "show interfaces" output
* :vytask:`T2201` (feature): Rewrite protocol BGP [op-mode] to new XML/Python style
* :vytask:`T2492` (feature): Do not set encrypted user password when it is not changed
* :vytask:`T2496` (feature): Set default to new syntax for config file component versions
* :vytask:`T2493` (feature): Update Linux Kernel to v4.19.124
* :vytask:`T2380` (bug): After PPPoE 0 is restarted, the default static route is lost


2020-05-21
==========

* :vytask:`T1876` (bug): IPSec VTI tunnels are deleted after rekey and dangling around as A/D
* :vytask:`T2488` (feature): Remove logfile for dialup interfaces like pppoe and wwan
* :vytask:`T2475` (bug): linting
* :vytask:`T1820` (bug): VRRP transition scripts for sync-groups are not supported in VyOS (anymore)
* :vytask:`T2364` (default): Add CLI command for mroute 
* :vytask:`T2023` (feature): Add support for 802.1ae MACsec


2020-05-20
==========

* :vytask:`T2480` (bug): NAT: after rewrite commit tells that dnat IP address is not locally connected


2020-05-19
==========

* :vytask:`T2481` (feature): WireGuard: support tunnel via IPv6 underlay
* :vytask:`T421` (bug): Add Pv6 prefix delegation support
* :vytask:`T815` (feature): Add DHCPv6 server prefix-delegation support


2020-05-17
==========

* :vytask:`T2471` (feature): PPPoE server: always add AdvAutonomousFlag when IPv6 is configured
* :vytask:`T2409` (default): At boot, effective config should not be equal to current config


2020-05-16
==========

* :vytask:`T2466` (bug): live-build encounters apt dependency problem when building with local packages
* :vytask:`T2470` (feature): Update to PowerDNS recursor 4.3
* :vytask:`T2469` (feature): Update Linux Kernel to v4.19.123
* :vytask:`T2198` (default): Rewrite NAT in new XML/Python style


2020-05-15
==========

* :vytask:`T2449` (bug): 'ipv6 address autoconf' and 'address dhcpv6' don't work because interfaces have accept_ra=1 (they should have accept_ra=2 when forwarding=1)


2020-05-14
==========

* :vytask:`T2456` (bug): netflow source-ip cannot be configured


2020-05-13
==========

* :vytask:`T2435` (bug): Pseudo-ethernet Interfaces Broken
* :vytask:`T2294` (bug): ipoe-server broken (jinja2 template issue)


2020-05-12
==========

* :vytask:`T2454` (feature): Update Linux Kernel to v4.19.122
* :vytask:`T2392` (bug): SSTP with ipv6


2020-05-10
==========

* :vytask:`T2445` (bug): VRF route leaking for ipv4 not working
* :vytask:`T2372` (bug): VLAN: error on commit if main interface is disabled
* :vytask:`T2439` (bug): Configuration dependency problem, unable to load complex configuration after reboot


2020-05-09
==========

* :vytask:`T2427` (default): Interface addressing broken since fix for T2372 was merged
* :vytask:`T2438` (default): isc-dhcp-server(6).service reports startup success immediately even if dhcpd fails to start up
* :vytask:`T2367` (default): Flush addresses from bridge members


2020-05-08
==========

* :vytask:`T2441` (bug): TZ validator has a parse error
* :vytask:`T2429` (bug): Vyos cannot apply VLAN sub interface to bridge


2020-05-06
==========

* :vytask:`T2402` (bug): Live ISO should warn when configuring that changes won't persist


2020-05-05
==========

* :vytask:`T1899` (bug): Unionfs metadata folder is copied to the active configuration directory


2020-05-04
==========

* :vytask:`T2412` (bug): ping flood does not work as unprivileged user
* :vytask:`T701` (bug): LTE interface dosen't come up
* :vytask:`T951` (bug): command 'isolate-stations true/false' does not make any changes in the hostapd.conf


2020-05-03
==========

* :vytask:`T2420` (feature): Update Linux Kernel to v4.19.120
* :vytask:`T2406` (feature): DHCPv6 CLI improvements
* :vytask:`T2421` (feature): Update WireGuard to Debian release 1.0.20200429-2_bpo10+1


2020-05-02
==========

* :vytask:`T2414` (feature): Improve runtime from Python numeric validator
* :vytask:`T2413` (feature): Update Linux Kernel to v4.19.119


2020-05-01
==========

* :vytask:`T2411` (feature): op-mode: make "monitor traceroute" VRF aware
* :vytask:`T2347` (bug): During commit, any script output directed to stdout will contain path
* :vytask:`T2239` (default): build-vmware-image script ignores the predefined file path, uses the environment variable unconditionally.


2020-04-29
==========

* :vytask:`T2399` (bug): op-mode "dhcp client leases" does not return leases
* :vytask:`T2398` (bug): op-mode "dhcp client leases interface" completion helper misses interfaces
* :vytask:`T2394` (feature): dhcpv6 client does not start
* :vytask:`T2393` (feature): dhclient: migrate from SysVinit to systemd
* :vytask:`T2268` (bug): DHCPv6 is broken


2020-04-28
==========

* :vytask:`T1227` (bug): rip PW can't be set at interface config


2020-04-27
==========

* :vytask:`T2373` (feature): Required auth options for pppoe-server
* :vytask:`T1381` (feature): Enable DHCP option 121 processing
* :vytask:`T2010` (bug): Reboot at reports wrong time or missing timezone


2020-04-26
==========

* :vytask:`T2386` (bug): salt: upgrade to 2019.2 packages
* :vytask:`T2385` (bug): salt-minion: improve completion helpers
* :vytask:`T2384` (bug): salt-minion: log to syslog and remove custom logging option
* :vytask:`T2383` (feature): Update Linux Kernel to v4.19.118
* :vytask:`T2382` (bug): salt-minion: Throws KeyError on commit
* :vytask:`T2350` (bug): Interface geneve conf-mode error


2020-04-25
==========

* :vytask:`T2304` (feature): "system login" add RADIUS VRF support 
* :vytask:`T1842` (bug): Equuleus: "reboot at 04:00" command not working


2020-04-24
==========

* :vytask:`T2375` (feature): WireGuard: throw exception if address and port are not given as both are mandatory
* :vytask:`T2348` (bug): On IPv6 address distribution and DHCPv6 bugs


2020-04-23
==========

* :vytask:`T2369` (feature): VRF: can not leak interface route from default VRf to any other VRF
* :vytask:`T2368` (bug): VRF: missing completion helper when leaking to default table
* :vytask:`T2374` (bug): Tunnel  interface can not be disabled
* :vytask:`T2362` (default): IPv6 link-local addresses missing due to EUI64 address code, causing router-advert not to work
* :vytask:`T2345` (default): IPv6 router-advert not working


2020-04-22
==========

* :vytask:`T2361` (bug): Unable to delete VLAN vif interface
* :vytask:`T2339` (bug): OpenVPN: IPv4 no longer working after adding IPv6 support
* :vytask:`T2331` (bug): VRRP op-mode errors
* :vytask:`T2320` (bug): Wireguard creates non-existing interfaces in [op-mode].
* :vytask:`T2096` (feature): Provide "generate" and "show" commands via the http API
* :vytask:`T2351` (feature): Cleanup PPTP server implementation and CLI commands


2020-04-21
==========

* :vytask:`T2341` (bug): Pseudo-ethernet Interfaces Not Loaded on Boot
* :vytask:`T2270` (bug): using load with scp/sftp and a username and password does not work
* :vytask:`T2255` (bug): DNS forwarding op-mode error
* :vytask:`T1907` (bug): Traceback on a non-existent interface.
* :vytask:`T2204` (feature): Support tunnel source-interface


2020-04-20
==========

* :vytask:`T2335` (bug): Unable to assign IPv6 from ISP
* :vytask:`T2317` (bug): l2tp overwriting ipsec config files
* :vytask:`T2292` (bug): Ensure graceful shutdown of vyos-http-api
* :vytask:`T2344` (bug): PPPoE server client static IP assignment silently fails


2020-04-19
==========

* :vytask:`T2337` (default): hw-id gone missing from interfaces after upgrade to 1.3-rolling-202004191028
* :vytask:`T2340` (feature): Remove informational "sg" messages from syslog
* :vytask:`T2338` (bug): Can't delete static IPv6 route on vrf
* :vytask:`T2336` (bug): OpenVPN service fails to start
* :vytask:`T2308` (default): openvpn op-mode scripts broken after migrating to systemd service
* :vytask:`T2185` (default): Start daemons with systemd units instead of with start-stop-daemon


2020-04-18
==========

* :vytask:`T2318` (bug): dns-forwarding migration script breaks with invalid interface name
* :vytask:`T2319` (feature): Update Linux Kernel to v4.19.116
* :vytask:`T2314` (feature): Cleanup PPPoE server implementation and CLI commands
* :vytask:`T2313` (bug): Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined
* :vytask:`T2312` (feature): Use LED modules to enable more visible feedback on VyOS hardware chassis
* :vytask:`T2306` (feature): Add new cipher suites to the WiFi configuration
* :vytask:`T2286` (default): IPoE server vulnerability
* :vytask:`T2224` (feature): Update Linux Kernel to v4.19.114
* :vytask:`T2110` (feature): RADIUS: supply include file for radius config to have a uniform CLI
* :vytask:`T2324` (feature): Cleanup IPoE server implementation and CLI commands


2020-04-17
==========

* :vytask:`T2275` (bug): flow-accounting broken in rolling
* :vytask:`T2256` (feature): Accel-ppp op-mode syntax


2020-04-16
==========

* :vytask:`T2295` (bug): Passwords with Special Characters Broken
* :vytask:`T2305` (feature): Add release name to "show version" command
* :vytask:`T2235` (default): OpenVPN server client IP doesn't reserve that IP in the pool
* :vytask:`T149` (feature): IPv6 support in OpenVPN tunnel


2020-04-15
==========

* :vytask:`T2293` (bug): OpenVPN: UnboundLocalError after merging server_network PullRequest
* :vytask:`T2298` (bug): Errors PDNS with name-server set


2020-04-14
==========

* :vytask:`T2213` (bug): vyos-1x: WiFi mode ieee80211ac should also activate ieee80211n


2020-04-13
==========

* :vytask:`T2283` (default): openvpn not starting: ccd path in template not moved to /run/openvpn/ccd
* :vytask:`T2236` (bug): DMVPN broken after tunnel rewrite to XML/Python
* :vytask:`T2284` (default): Upgrade ddclient to 3.9.1 which also brings systemd files
* :vytask:`T2282` (feature): Clarify hw-id in ethernet and wireless interface nodes
* :vytask:`T611` (feature): Static route syntax should reflect `ip` command routing capabilities, if possible.


2020-04-12
==========

* :vytask:`T2273` (default): OpenVPN no longer starts in latest rolling, migrate to systemd
* :vytask:`T2263` (feature): Reset feature for SSTP sessions
* :vytask:`T2262` (bug): Broken reset commands for pptp and l2tp
* :vytask:`T2031` (bug): pseudo-ethernet link interface cannot be changed


2020-04-11
==========

* :vytask:`T2264` (feature): l2tp: cleanup CLI definition
* :vytask:`T2233` (bug): Typos in wlanX.cfg
* :vytask:`T2238` (bug): After re-writing list_interfaces.py to use Interfaces() pseudo-ethernet is missing


2020-04-10
==========

* :vytask:`T2265` (feature): DHCP to be an attribute of the class instead of a inheritance
* :vytask:`T2261` (bug): "client-config-dir" not being set for openvpn
* :vytask:`T2248` (bug): PPPoE Broken in Latest 1.3 Rolling (1.3-rolling-202004070629)
* :vytask:`T1629` (bug): IP addresses configured on vif-s interfaces are not added to the system
* :vytask:`T2266` (default): openvpn bridged client-server doesn't work (validation error)
* :vytask:`T2253` (default): Fix use of cmd in merge config and remote function helpers


2020-04-09
==========

* :vytask:`T2260` (feature): vxlan, pseudo-ethernet: convert link nodes to source-interface
* :vytask:`T2172` (feature): Enable conf VXLAN without remote address
* :vytask:`T2237` (bug): l2tp, pptp, pppoe wrong chap-secrets file


2020-04-08
==========

* :vytask:`T2244` (feature): WireGuard: cleanup Python implementation and reduce amount of boilerplate code
* :vytask:`T2186` (feature): Provide more information to the user when a traceback is reported to the user
* :vytask:`T2246` (bug): LLDP op-mode error
* :vytask:`T2240` (feature): Support for bind vif-c interfaces into VRFs
* :vytask:`T2160` (feature): Allow restricting HTTP API to specific virtual hosts
* :vytask:`T2247` (feature): WireGuard: add VRF support


2020-04-05
==========

* :vytask:`T2212` (bug): vyos-1x: WiFi card antenna count not set accordingly
* :vytask:`T2230` (feature): Split out inlined Jina2 template to data/templates folder
* :vytask:`T2206` (feature): Split WireGuard endpoint into proper host and port nodes


2020-04-04
==========

* :vytask:`T2158` (bug): Commit fails if ethernet interface doesn't support flow control (pause)
* :vytask:`T2221` (bug): Ability to remove a VRF that has a next-hop-vrf as target
* :vytask:`T2211` (bug): vyos-1x: VHT channel width not set accordingly
* :vytask:`T2208` (bug): vyos-1x: commit on interfaces wireless wlanX capabilities vht link-adaptation (both|unsolicited) fails
* :vytask:`T2183` (bug): A number of bugs with wireguard script due to interface rearrangement
* :vytask:`T2104` (default): ifconfig.py size
* :vytask:`T2028` (feature): Convert "interfaces tunnel" to new XML/Python representation
* :vytask:`T2219` (bug): VRF default route of PPPoE and WWAN interfaces do not get added into proper routing table
* :vytask:`T2222` (default): openvpn: requires "multihome" option to listen on all addresses with udp protocol


2020-04-02
==========

* :vytask:`T2072` (bug): Shell autocomplete of option (config node) with quoted value doesn't work
* :vytask:`T1823` (feature): l2tpv3 interface migration fails
* :vytask:`T2202` (feature): Update PowerDNS recursor to 4.2 series
* :vytask:`T2200` (feature): Add VRF support on wirelessmodem interfaces


2020-03-31
==========

* :vytask:`T2166` (bug): Broken proxy-arp on vif
* :vytask:`T2180` (bug): get_config_dict should be independent of CLI edit level
* :vytask:`T2053` (default): Update vyos-load-config.py for version string syntax change
* :vytask:`T2052` (default): Update vyos-merge-config.py for version string syntax change
* :vytask:`T2144` (default): vyos-build: docker: selection of text in the terminal still selects it in vim (mouse isn't completely disabled) 


2020-03-30
==========

* :vytask:`T2176` (default): 'WiFiIf' object has no attribute 'set_state'
* :vytask:`T2029` (feature): Switch to new syntax for config file component versions


2020-03-29
==========

* :vytask:`T2178` (bug): VRF interface don't get removed when VRF is deleted
* :vytask:`T2170` (feature): Add ability to create static route from default to VRF
* :vytask:`T1831` (feature): Denest IPv6 router-advert from Interfaces to general service


2020-03-28
==========

* :vytask:`T2167` (bug): vyos.ifconfig.get_mac() broken
* :vytask:`T2151` (default): wireless: can't delete interface present in config but not present in system
* :vytask:`T1988` (feature): Migrate wirelessmodem to new XML/Python style interface


2020-03-27
==========

* :vytask:`T2164` (bug): Package libstrongswan-standard-plugins missing from image
* :vytask:`T2105` (bug): wireless: not possible to disabled wlan0
* :vytask:`T2169` (default): Remove redundant use of show_config in vyos-merge-config


2020-03-26
==========

* :vytask:`T2162` (default): migration script for router-advert sets link-mtu 0 on bridge interfaces
* :vytask:`T1735` (bug): Issue in "show vpn ipsec/ike sa" output with ipsec encryption algorithm aes128gcm128/aes256gcm128/chacha etc


2020-03-25
==========

* :vytask:`T2148` (default): openvpn: setting "server client" config without "server client ip" results in ValueError: '' does not appear to be an IPv4 or IPv6 address
* :vytask:`T2146` (default): openvpn: "delete server client" doesn't delete the corresponding ccd configs


2020-03-24
==========

* :vytask:`T2157` (default): Organize service https listen-address/listen-port/server-name under 'virtual-host' node
* :vytask:`T1845` (bug): syslog host no longer accepts a port


2020-03-22
==========

* :vytask:`T2150` (feature): SSTP ssl certificates can only be stored in /config/user-data/sstp
* :vytask:`T2149` (feature): Update Linux Kernel to v4.19.112
* :vytask:`T476` (enhancment): Update the base system to Debian 10 (Buster)


2020-03-21
==========

* :vytask:`T2142` (bug): vyos-build: Add required packages and step to build-GCE-image script
* :vytask:`T1870` (feature): Extend Pipeline scripts to support PullRequests


2020-03-20
==========

* :vytask:`T2006` (bug): SSTP RADIUS CLI accepts invalid values
* :vytask:`T2140` (default): openvpn: tls file check function checkCertHeader returns True even when no match is found
* :vytask:`T2007` (feature): SSTP accepts client MTU up to 16384 bytes
* :vytask:`T2008` (feature): Adjustment of SSTP CLI to be more consistent to the rest of VyOS


2020-03-19
==========

* :vytask:`T2135` (bug): Login banner missing spacing now
* :vytask:`T2132` (feature): Document kernel boot parameter 'vyos-config-debug'
* :vytask:`T1744` (default): Config load fails in ConfigTree with ValueError: Failed to parse config: lexing: empty token


2020-03-17
==========

* :vytask:`T2134` (bug): VXLAN: `NameError: name 'config' is not defined`


2020-03-16
==========

* :vytask:`T2131` (feature): Improve syslog remote host CLI definition


2020-03-15
==========

* :vytask:`T2122` (feature): Update Intel out-of-tree drivers to latest version(s)
* :vytask:`T2121` (feature): Update Linux Kernel to v4.19.109
* :vytask:`T2119` (bug): Error on boot when removing ethernet interface from VM


2020-03-14
==========

* :vytask:`T834` (feature): New L2TP server implementation based on accel-ppp


2020-03-13
==========

* :vytask:`T1622` (default): Add failsafe and back trace to boot config loader


2020-03-11
==========

* :vytask:`T1961` (bug): VXLAN - fails to commit due to non-existent variable, broken MTU
* :vytask:`T2084` (default): conntrack-tools package build error for current/equuleus


2020-03-10
==========

* :vytask:`T1331` (bug): DNS stops working


2020-03-09
==========

* :vytask:`T2111` (feature): VRF add route leaking support
* :vytask:`T2109` (bug): Ping by name broken in VyOS 1.3-rolling-202003080217
* :vytask:`T2065` (bug): VyOS 1.3 Don't set daemon in openvpn-{intf}.conf file
* :vytask:`T31` (feature): Add VRF support


2020-03-08
==========

* :vytask:`T1954` (bug): Having `system login radius` configured causes exponentially long boot times
* :vytask:`T1760` (bug): RADIUS shared secret is not redacted from "show configuration" op mode command


2020-03-07
==========

* :vytask:`T2107` (bug): Wireless interfaces do not work in station mode without security


2020-03-05
==========

* :vytask:`T2074` (bug): VyOS docker container: Cannot configure ethernet interface


2020-03-04
==========

* :vytask:`T2098` (bug): Wrong call to cli-shell-api in generated op-mode templates for path completion helper


2020-03-03
==========

* :vytask:`T2095` (bug): Copy command errors out


2020-03-01
==========

* :vytask:`T2082` (bug): WireGuard broken after merging T2057
* :vytask:`T2089` (feature): RADIUS: do not query servers when commit is running started from a non RADIUS user
* :vytask:`T2086` (feature): Move sudo session open/close log entries to auth.log


2020-02-29
==========

* :vytask:`T2046` (feature): allowing sub-classes of Interface to redefine how the interface is created


2020-02-28
==========

* :vytask:`T2083` (default): vyos-build: build-packages fails at mdns-repeater due to wrong branch
* :vytask:`T2080` (default): traffic-policy shaper error when setting bandwidth


2020-02-27
==========

* :vytask:`T2075` (feature): Add support for OpenVPN tls-crypt file option
* :vytask:`T2068` (feature): Update Linux Kernel to v4.19.105
* :vytask:`T1703` (default): Macvlan PPPoE support 
* :vytask:`T2078` (feature): Kernel: remove unused RAID functions 5,6,10,jbod,dm


2020-02-25
==========

* :vytask:`T2070` (feature): Rewrite (dis-)connect op-mode commands in XML and Python
* :vytask:`T2071` (feature): Add possibility to temporary disable a RADIUS server used for system login


2020-02-23
==========

* :vytask:`T2055` (feature): Remove IPv6 router-advert options for PPPoE
* :vytask:`T1318` (feature): PPPoE client CLI redesign


2020-02-22
==========

* :vytask:`T2063` (feature): vyos-salt-minion package is missing from vyos-world


2020-02-20
==========

* :vytask:`T1969` (default): OSPF with WireGuard cause Route Inactive


2020-02-18
==========

* :vytask:`T2034` (default): Removal of interfaces loopback lo removed 127.0.0.1 and ::1


2020-02-17
==========

* :vytask:`T2047` (feature): Update Linux Kernel to v4.19.104
* :vytask:`T2048` (bug): ISO boot fails when wireless adapter is present


2020-02-16
==========

* :vytask:`T2043` (bug): Bond VLANs can't be extended on the fly
* :vytask:`T2030` (bug): Bond doesn't survive reboot
* :vytask:`T1992` (bug): Adding vlan on a bond resets all BGP connections on same bond
* :vytask:`T1908` (feature): Add zone option for Cloudflare DDNS
* :vytask:`T1246` (bug): VyOS 1.2.0 "openvpn-options" configuration does not allow quotes in values


2020-02-15
==========

* :vytask:`T2042` (bug): Error on reboot after deleting "service snmp" and not "service lldp snmp enable"
* :vytask:`T2041` (bug): Adding non existent bond interface raises exception


2020-02-14
==========

* :vytask:`T2039` (bug): Wrong system type displayed in show version
* :vytask:`T2040` (bug): vyos-http-api-server should reload Config in all routes


2020-02-13
==========

* :vytask:`T2033` (feature): Drop vyos-replace package
* :vytask:`T1635` (feature): Rewrite interface pseudo-ethernet in new XML/Python style


2020-02-10
==========

* :vytask:`T2024` (feature): Migrate "system login banner" to XML/Python


2020-02-09
==========

* :vytask:`T2022` (bug): When RADIUS config is active, local logins won't work
* :vytask:`T2020` (default): Unable to log in after upgrade to 1.3-rolling-202002080217
* :vytask:`T1931` (bug): Enabling SNMP commit error


2020-02-05
==========

* :vytask:`T1948` (bug): RADIUS login broken in 1.3
* :vytask:`T1990` (feature): Migrate "system login" to XML/Python representation
* :vytask:`T1585` (default): Add letsencrypt/certbot support for 'service https'


2020-02-04
==========

* :vytask:`T1965` (bug): VyOS-1.3: ping no longer supports specifying interface or source 


2020-02-02
==========

* :vytask:`T2011` (feature): Update Linux Kernel to v4.19.101
* :vytask:`T640` (bug): Images no longer work when built without "recommended" packages


2020-02-01
==========

* :vytask:`T2009` (bug): Ethernet Interface always stays down
* :vytask:`T1989` (bug): conf.get_config_dict() throws exception


2020-01-31
==========

* :vytask:`T1768` (bug): PPtP - vyos.config rewrite
* :vytask:`T2002` (bug): VLAN interfaces try to be enabled even if parent interface is A/D


2020-01-30
==========

* :vytask:`T1994` (default): lldpd not bound to specified interfaces - Fix jinja template
* :vytask:`T1896` (enhancment): Remove LLDP-MED civic_based location information
* :vytask:`T1724` (feature): wireguard - add endpoint check in verify()


2020-01-29
==========

* :vytask:`T1996` (feature): Update Linux Kernel to 4.19.99
* :vytask:`T1862` (default): Use regex pattern \s+ to split strings on whitespace in Python 3.7
* :vytask:`T1755` (bug): Python KeyError exceptions raised with 'show vpn ipsec sa' command under use of certain IPSEC cipher suites
* :vytask:`T1747` (bug): L2TP breaks after upgrading to VyOS 1.2-rolling-201910180117  [issue report and proposed solution]
* :vytask:`T1664` (bug): Ipoe with bond per vlan don't work
* :vytask:`T1895` (feature): There is not restriction on selection of syslog facility
* :vytask:`T1670` (feature): OpenVPN option for tls-auth


2020-01-26
==========

* :vytask:`T1937` (bug): snmpd throwing a tremendous amount of errors
* :vytask:`T1767` (bug): IPoE - vyos.config rewrite
* :vytask:`T1765` (bug): wireguard - vyos.config rewrite


2020-01-24
==========

* :vytask:`T1975` (bug): OpenVPN tap devices won't come up automatically


2020-01-23
==========

* :vytask:`T1766` (bug): service-pppoe - vyos.config rewrite


2020-01-21
==========

* :vytask:`T1784` (bug): DMVPN with IPSec does not work in HUB mode
* :vytask:`T1977` (bug): webproxy error on fresh install


2020-01-18
==========

* :vytask:`T1830` (feature): 1.3-rolling boots to GRUB prompt post-install on UEFI systems
* :vytask:`T1940` (bug): EFI Fresh Install fails to boot, 4K Sector Drives Fail to boot EFI


2020-01-16
==========

* :vytask:`T1880` (default): "A stop job is running for live-tools - System Support Scripts" hangs, times out when shutting down equuleus live iso


2020-01-15
==========

* :vytask:`T1959` (bug): Error message when adding IPSec VPN


2020-01-09
==========

* :vytask:`T1955` (feature): snmp - cli config val_help missing
* :vytask:`T1813` (bug): error in generated /etc/hosts file


2020-01-08
==========

* :vytask:`T1946` (bug): Recovery ifname for PPtP remote-access


2020-01-03
==========

* :vytask:`T1939` (feature): Provide abstraction for interface "ip" options


2020-01-01
==========

* :vytask:`T1779` (bug): Tunnel interfaces aren't suggested as being available for bridging


2019-12-31
==========

* :vytask:`T1654` (bug): sFlow: multiple "sflow server" not work, and "disable-imt" could break configuration
* :vytask:`T1923` (feature): Migrate L2TPv3 interface to XML/Python


2019-12-30
==========

* :vytask:`T1920` (bug): beep: Error: Running under sudo, which is not supported for security reasons.
* :vytask:`T1918` (bug): l2tp / ipsec config broken in latest daily
* :vytask:`T1897` (bug): IPSec - 1.2 to 1.3 migration failed
* :vytask:`T1921` (bug): snmp: VyOS options no longer recognized
* :vytask:`T1922` (feature): Add VXLAN IPv6 support
* :vytask:`T1919` (feature): Migrate "system options" to XML/Python representation


2019-12-28
==========

* :vytask:`T1916` (feature): Update Linux Kernel to v4.19.91
* :vytask:`T1915` (bug): Remove "system ipv6 blacklist" option
* :vytask:`T1912` (feature): Migrate "system (ip|ipv6)" to XML/Python representation


2019-12-27
==========

* :vytask:`T1910` (bug): Invalid parmissions on latest 1.3 rolling ISO images


2019-12-26
==========

* :vytask:`T1794` (bug): Interface description can't contain a colon
* :vytask:`T1906` (feature): Migrate "system time-zone" configuration to XML/Python


2019-12-23
==========

* :vytask:`T1898` (enhancment): Support multiple IPv4/IPv6 LLDP management addresses
* :vytask:`T1878` (bug): accel-ppp: pppoe single-session option implementation


2019-12-22
==========

* :vytask:`T393` (enhancment): Migrate vyatta-lldpd to vyos-1x


2019-12-20
==========

* :vytask:`T1892` (default): vyos-build: Do not install recommends in docker image [enhancement]
* :vytask:`T1411` (enhancment): equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster


2019-12-19
==========

* :vytask:`T1873` (default): DHCP server fails to start due to a change in isc-dhcp-server init scripts


2019-12-18
==========

* :vytask:`T1889` (bug): Error building docker build image
* :vytask:`T1132` (default): Build on Debian Buster


2019-12-17
==========

* :vytask:`T1886` (feature): Update Linux Kernel to v4.19.89
* :vytask:`T1887` (feature): Update WireGuard to Debian release 0.0.20191212-1


2019-12-13
==========

* :vytask:`T1861` (default): hosts lost after modified static-host-mapping


2019-12-10
==========

* :vytask:`T1843` (feature): Add GCC preprocessor support for XML files


2019-12-08
==========

* :vytask:`T1566` (feature): Extend L2TP/IPSec server with IPv6


2019-12-07
==========

* :vytask:`T1714` (bug): Disable DHCP Nameservers Not Working


2019-12-06
==========

* :vytask:`T1860` (feature): Update WireGuard to Debian release 0.0.20191127-2
* :vytask:`T1859` (feature): Update Linux Kernel to v4.19.88
* :vytask:`T1854` (bug): Dynamic DNS configuration cannot be deleted
* :vytask:`T1849` (bug): DHCPv6 client does not start
* :vytask:`T1169` (bug): LLDP potentially broken
* :vytask:`T586` (bug): Cannot add ethernet vif-s vif-c interface to bridge-group


2019-12-05
==========

* :vytask:`T1847` (bug): set_level incorrectly handles path given as empty string


2019-12-04
==========

* :vytask:`T1787` (default): Failed config migration from V1.2.3 to 1.2-rolling-201911030217
* :vytask:`T1212` (bug): IPSec Tunnel to Cisco ASA drops reliably after 4.2GB transferred
* :vytask:`T1704` (feature): OpenVPN - Add support for ncp-ciphers


2019-12-03
==========

* :vytask:`T1782` (bug): pppoe0: showing as "Coming up"
* :vytask:`T1801` (bug): Unescaped backslashes in config values cause configuration failure


2019-12-02
==========

* :vytask:`T1840` (bug): PPPoE doesn't not rename pppX to pppoeX


2019-11-25
==========

* :vytask:`T1824` (bug): Permission denied: '/opt/vyatta/etc/config/vyos-migrate.log'


2019-11-24
==========

* :vytask:`T1673` (bug): vif bridge-group not migrated to bridge member interface
* :vytask:`T1799` (feature): Add support for GENEVE (Generic Network Virtualization Encapsulation)


2019-11-23
==========

* :vytask:`T1627` (feature): Rewrite wireless interface in new style XML syntax


2019-11-21
==========

* :vytask:`T1818` (default): Print name of migration script on failure
* :vytask:`T1814` (default): Add log of migration scripts run during config migration


2019-11-14
==========

* :vytask:`T1710` (default): [equuleus] buster: add patch to fix live-build missing key error
* :vytask:`T1804` (default): Add python3-psutil to docker image
* :vytask:`T1736` (default): Decide on best practice for patching live-team packages for VyOS build system
* :vytask:`T1424` (default): Rewrite the config load script


2019-11-11
==========

* :vytask:`T1793` (feature): Editing description on an interface causes BGP sessions to reset on commit


2019-11-10
==========

* :vytask:`T1791` (feature): Update Linux Kernel to 4.19.82


2019-11-08
==========

* :vytask:`T1789` (bug): ddclient not working with generated RFC2136 / nsupdate config


2019-11-03
==========

* :vytask:`T1777` (bug): Bonding interface MAC address mismatch after reboot
* :vytask:`T1752` (bug): PPPoE does not automatically start on boot


2019-11-02
==========

* :vytask:`T1783` (bug): Interface can't unpin from bridge


2019-10-22
==========

* :vytask:`T1756` (feature): Modify output to be more useful - Wireguard


2019-10-21
==========

* :vytask:`T1741` (feature): Add system wide proxy setting


2019-10-19
==========

* :vytask:`T1746` (bug): 201910180117 fails startup with 'Permission Denied' errors
* :vytask:`T1743` (default): equuleus: remove references to SSH key type "rsa1" deprecated in Debian Buster


2019-10-18
==========

* :vytask:`T1712` (default): DHCP client sometimes doesn't start
* :vytask:`T1604` (enhancment): equuleus: buster: vbash: tab completion breaks


2019-10-11
==========

* :vytask:`T1723` (bug): wireguard - Interface wg01 could not be brought up in time 


2019-10-09
==========

* :vytask:`T1719` (feature): ssh deprecated options
* :vytask:`T1718` (bug): ISO check in /opt/vyatta/sbin/install-image faulty
* :vytask:`T1682` (feature): Migrate to new Jenkins Pipeline script


2019-10-08
==========

* :vytask:`T1717` (bug): disable multiple daemons to autostart at boot


2019-10-06
==========

* :vytask:`T1713` (feature): Remove deprecated packages no longer required after migration to Accel-PPP


2019-10-03
==========

* :vytask:`T1689` (feature): "reset openvpn" op-mode command should terminate and restart OpenVPN process


2019-10-01
==========

* :vytask:`T1706` (bug): wireguard broken in latest rolling


2019-09-30
==========

* :vytask:`T1688` (feature): OpenVPN - Add new cipher aes-(128|192|256)-gcm


2019-09-28
==========

* :vytask:`T1696` (bug): NTP - Tests fail when building vyos-1x
* :vytask:`T1512` (bug): vyos 1.2 openvpn client names with spaces created incorrectly


2019-09-27
==========

* :vytask:`T1681` (feature): cleanup wireguard code since tagnodes are now visible
* :vytask:`T1695` (bug): Syntax error in interface-dummy.py


2019-09-26
==========

* :vytask:`T1692` (bug): ipoe-server verify function error
* :vytask:`T1691` (bug): OpenVPN - Commiting config when OpenVPN peer/server not available makes commit hang
* :vytask:`T1690` (feature): restart op-mode commands for 'service (pppoe|ipoe)-server'


2019-09-25
==========

* :vytask:`T1672` (bug): Wireguard keys not automatically moved


2019-09-23
==========

* :vytask:`T1679` (bug): during bootup: invalid literal for int() with base 10
* :vytask:`T1680` (feature): DHCP client does not release IP address on exit/deletion


2019-09-21
==========

* :vytask:`T1676` (default):  [equuleus] buster: update GRUB boot parameters during upgrade
* :vytask:`T1637` (feature): Rewrite ethernet interface in new style XML syntax
* :vytask:`T1675` (feature): OpenVPN - Specify minimum TLS version


2019-09-20
==========

* :vytask:`T1602` (default): equuleus: buster: add live build apt options for choosing vyos packages


2019-09-19
==========

* :vytask:`T1666` (feature): Deleting a bond will place member interfaces into A/D state


2019-09-17
==========

* :vytask:`T239` (bug): Improve documentation for the firewall all-ping setting


2019-09-16
==========

* :vytask:`T1040` (default): rc.local is executed too early


2019-09-15
==========

* :vytask:`T1662` (default): openvpn: 'show openvpn client' error
* :vytask:`T1661` (default): openvpn: wrong checking for existence cert files
* :vytask:`T1630` (bug): OpenVPN after changing it from root to nobody (unprivileged user) cant add routes


2019-09-13
==========

* :vytask:`T1660` (bug): Bonding dont’t work on VyOS 1.2-rolling-201909120338
* :vytask:`T1655` (enhancment): equuleus: buster: arm: vyos-accel-ppp build failes because of filename hardcoded as x86_64 in debian/rules


2019-09-12
==========

* :vytask:`T1572` (feature): Wireguard keyPair per interface
* :vytask:`T1545` (bug): IPSEC vti issue


2019-09-10
==========

* :vytask:`T1650` (feature): implement wireguard default key removal
* :vytask:`T1649` (feature): feature documentation different keypairs per interface 
* :vytask:`T1648` (feature): add cli command 'delete wireguard named-key <key>'


2019-09-09
==========

* :vytask:`T1639` (bug): wireguard pubkey change error 


2019-09-07
==========

* :vytask:`T1640` (feature): Update Linux Kernel to v4.19.70


2019-09-06
==========

* :vytask:`T1624` (bug): Failed to set up config session
* :vytask:`T1636` (feature): Rewrite VXLAN in new style XML/Python
* :vytask:`T1479` (bug): libvyosconfig error reporting doesn't include line numbers
* :vytask:`T808` (feature): replace lighthttpd with nginx
* :vytask:`T1478` (bug): libvyosconfig parser does not support escaped quotes inside single-quoted strings


2019-09-04
==========

* :vytask:`T1632` (bug): OpenVPN 'push' options with quotes
* :vytask:`T1631` (bug): Multiple push-route options cause error generating openvpn configuration
* :vytask:`T1557` (feature): Create generic abstraction for configuring interfaces e.g. IP address
* :vytask:`T1628` (feature): Adopt WireGuard configuration script to new vyos.ifconfig class
* :vytask:`T1614` (feature): Rewrite bonding interface in new style XML syntax


2019-09-02
==========

* :vytask:`T1621` (default): Rewrite the rest of trivial vyatta-op commands to new syntax


2019-08-31
==========

* :vytask:`T1456` (bug): Port group cannot be configured if the same port is configured as standalone and inside a range


2019-08-28
==========

* :vytask:`T1615` (feature): After migration to pyroute2 the address DHCP statement is no longer covered


2019-08-27
==========

* :vytask:`T1617` (default): OpenVPN push route failure
* :vytask:`T1250` (bug): FRR not setting default gateway from DHCP


2019-08-26
==========

* :vytask:`T1591` (bug): OpenVPN "run show openvpn client status" does not work
* :vytask:`T1608` (feature): bridge: Bridge adding non existing interfaces is allowed but does not work
* :vytask:`T1548` (feature): Rewrite OpenVPN interface/op-commands in new style XML/Python
* :vytask:`T1607` (default): Convert 'reset conntrack' and 'reset ip[v6] cache' operations from vyatta-op to new syntax


2019-08-25
==========

* :vytask:`T1611` (default): Migration to latest rolling fails with vyos.configtree.ConfigTreeError: Path [b'interfaces bridge br0 igmp-snooping querier'] doesn't exist


2019-08-23
==========

* :vytask:`T1606` (bug): Rolling release no longer boots after adding hostname daemon


2019-08-21
==========

* :vytask:`T1601` (feature): Rewrite loopback interface type with new style XML/Python interface
* :vytask:`T1596` (default): Convert 'telnet' and 'traceroute' vyatta-op commands to new syntax


2019-08-20
==========

* :vytask:`T1595` (feature): Migrate deprecated "service dns forwarding listen-on" to listen-address


2019-08-19
==========

* :vytask:`T1580` (feature): Rewrite dummy interface type with new style XML/Python interface
* :vytask:`T1590` (default): Convert 'show system' operations from vyatta-op to python/xml syntax


2019-08-17
==========

* :vytask:`T1592` (feature): Update Linux Kernel to v4.19.67


2019-08-15
==========

* :vytask:`T1584` (default): equuleus: buster: add consistent grub options for predictable interface names


2019-08-13
==========

* :vytask:`T1556` (feature): Rewrite Bridge in new style XML syntax


2019-08-09
==========

* :vytask:`T1569` (feature): interfaceconfig class documetation


2019-08-05
==========

* :vytask:`T1562` (feature): Change version scheme on current branch used for rolling releases


2019-08-04
==========

* :vytask:`T1561` (bug): VyOS rolling ISO cluttered with vyatta-ravpn Git Repo


2019-08-02
==========

* :vytask:`T853` (feature): Add SSTP server support
* :vytask:`T742` (feature): Replace poptop and xl2tpd with accel-ppp


2019-08-01
==========

* :vytask:`T1544` (feature): L2TP documentation


2019-07-31
==========

* :vytask:`T1552` (feature): accel-ppp: SSTP documentation
* :vytask:`T1553` (default): equuleus: buster: add 'noautologin' to boot parameters


2019-07-29
==========

* :vytask:`T1532` (default): [equuleus] buster: GPG error on vyos package repository


2019-07-28
==========

* :vytask:`T1547` (feature): accel-ppp/L2TP restructure CLI
* :vytask:`T1546` (bug): accel-ppp/L2TP radius-source address is not honored


2019-07-23
==========

* :vytask:`T1533` (bug): Rolling builds broken!
* :vytask:`T1489` (feature): Add vlan_mon usage at Accel


2019-07-22
==========

* :vytask:`T1435` (enhancment): Make ip-address [OPTIONAL] (in dhcp-server -> static-mapping) to cope with "unfriendly" client-hostnames of IoT-Devices


2019-07-21
==========

* :vytask:`T823` (feature): Rewrite DHCP op mode in the new style


2019-07-18
==========

* :vytask:`T1497` (bug): "set system name-server" generates invalid/incorrect resolv.conf
* :vytask:`T533` (feature): Support for PPPoE MTU greater than 1492


2019-07-08
==========

* :vytask:`T1510` (feature): [IPoE] vlan-mon option implementation
* :vytask:`T1508` (feature): [pppoe] migration script for service pppoe-server interface
* :vytask:`T1494` (feature): accel-ppp: IPoE update documentation
* :vytask:`T989` (feature): Add support for IPoE server


2019-07-03
==========

* :vytask:`T1502` (feature): Add build sanity checking tools to the dev builds


2019-07-02
==========

* :vytask:`T1099` (default): Openvpn: use config files instead of one long command.
* :vytask:`T1495` (feature): accel-ppp: IPoE implement IPv6 PD


2019-07-01
==========

* :vytask:`T1498` (bug): Nameservers are not propagated into resolv.conf


2019-06-24
==========

* :vytask:`T1482` (feature): Add OpenVPN SHA384 hashing algorithm


2019-06-23
==========

* :vytask:`T1476` (bug): Update PowerDNS recursor to 4.2 series


2019-06-22
==========

* :vytask:`T1313` (feature): Add support for reusable build flavours
* :vytask:`T1202` (bug): Add `hvinfo` to the packages directory


2019-06-20
==========

* :vytask:`T1413` (enhancment):  equuleus: buster: vyos-xe-guest-utilities is not installable and breaks live-build
* :vytask:`T1412` (enhancment):  equuleus: buster: vyos-netplug is not installable and breaks live-build


2019-06-19
==========

* :vytask:`T1334` (feature): Migration script runner rewrite
* :vytask:`T1327` (bug): Set the serial console speed to 115200 by default


2019-06-18
==========

* :vytask:`T1451` (bug): Intel e1000e driver missing in lates rolling release


2019-06-17
==========

* :vytask:`T1408` (feature): pppoe-server - implement local-ipv6 for pure IPv6 based deployments


2019-06-12
==========

* :vytask:`T1397` (default): Rewrite the config merge script


2019-06-05
==========

* :vytask:`T1426` (default): Update the script that checks conntrack hash-size on reboot


2019-06-03
==========

* :vytask:`T1423` (default): When merging remote config files, create known_hosts file if not present.


2019-05-28
==========

* :vytask:`T1410` (feature): Upgrade Linux Kernel to 4.19.46


2019-05-26
==========

* :vytask:`T1404` (feature): Update iproute2 package to 4.19


2019-05-24
==========

* :vytask:`T1407` (bug): pppoe IPv6 PD documention by practical example


2019-05-23
==========

* :vytask:`T1402` (feature): Update Linux Kernel to 4.19.45


2019-05-22
==========

* :vytask:`T1399` (bug): accel-ppp kernel modules missing in rolling build 20190522
* :vytask:`T1393` (bug): pppoe IPv6 pool doesn't work


2019-05-21
==========

* :vytask:`T592` (bug): lldpcli: unknown command from argument 1: `#`


2019-05-16
==========

* :vytask:`T1267` (feature): FRR: Add interface name for static routes
* :vytask:`T1148` (bug): epa2 BGP peers initiate before config is fully loaded, routes leak.


2019-05-06
==========

* :vytask:`T1368` (feature): Enable MPLS support in Linux Kernel


2019-05-04
==========

* :vytask:`T1365` (bug): Cannot configure syslog on 1.2.0-rolling+201904260337


2019-04-29
==========

* :vytask:`T1352` (feature): vyos-documentaion: accel-pppoe adding CIDR based IP pool option


2019-04-21
==========

* :vytask:`T1348` (feature): Upgrade WireGuard to 0.0.20190406-1
* :vytask:`T1347` (feature): Upgrade Linux Kernel to 4.19.36


2019-04-20
==========

* :vytask:`T1344` (feature): Unclutter "system login radius" configuration nodes


2019-04-19
==========

* :vytask:`T1325` (default): GRE tunnel to Cisco router fails in 1.2.0 - works in 1.1.8


2019-04-16
==========

* :vytask:`T1184` (feature): wireguard - extend documentation with the show interface wireguard commands


2019-04-15
==========

* :vytask:`T1260` (feature): VICI-based implementation of "run show vpn ipsec sa"
* :vytask:`T1248` (default): Add a function for copying nodes to the vyos.configtree library


2019-04-05
==========

* :vytask:`T1324` (feature): update documtation for 'set system login user level'


2019-04-04
==========

* :vytask:`T1323` (feature): migrate operator accounts to admin accounts and remove the option to setup an operator account


2019-03-20
==========

* :vytask:`T405` (feature): Add binaries for lcdproc


2019-03-12
==========

* :vytask:`T1284` (feature): accel-ppp: pptp implementation documention
* :vytask:`T833` (feature): New PPTP server implementation based on accel-ppp


2019-02-22
==========

* :vytask:`T1257` (bug): implement 'set system static-host-mapping' in host_name.py and remove old function calls


2019-02-21
==========

* :vytask:`T1214` (bug): Add `ipaddrcheck` to the packages directory


2019-02-10
==========

* :vytask:`T1154` (default): use of local cache to build iso


2019-02-09
==========

* :vytask:`T1236` (feature): Update Linux Kernel