PR: https://github.com/vyos/vyos-1x/pull/4687

PR: https://github.com/vyos/vyos-1x/pull/4686

Quick note on this. It'll maintain the existing AS-Path in the advertisements, but it COULD change the behavior of route rejection on received routes.

PR: https://github.com/vyos/vyos-1x/pull/4680

PR: https://github.com/vyos/vyos-1x/pull/4673

Has Podman 5.4 been evaluated at all? It seems like 5.4 introduced a new feature that would solve this in the cleanest way:

PR: https://github.com/vyos/vyos-1x/pull/4652

PR: https://github.com/vyos/vyos-1x/pull/4651

I just noticed this was mentioned as being added to 1.4.3 in the release notes:

Other resolved issues

PR: https://github.com/vyos/vyos-1x/pull/4645

PR: https://github.com/vyos/vyos-1x/pull/4644

An easy mitigation is to just update the command that is run to:

journalctl --no-hostname --boot -k | grep "ipv4-NAM-${6:0:15}"

The only issue with this as the only solution, is you could lose granularity in logging if you were to have names like:

test-test-test-1
test-test-test-2

Running show log firewall ipv4 name test-test-test-1 would return log entries for both names since the string would be ipv4-NAM-test-test-test-. That's where a warning could come into play, stating it is recommended to keep names to no more than 15 characters.

I created a task for this as well https://vyos.dev/T7469

PR: https://github.com/vyos/vyos-1x/pull/4496

@Viacheslav Can you assign me to this task?

@a.apostoliuk @sarthurdev I saw this a while back and was thinking about it today. I think it'd be useful to be able to disable conntrack per chain. It could be useful for people using VyOS in an ISP environment, where the firewall is more a mechanism to secure VyOS itself, rather than filter through traffic. It'd be pretty easy to implement.

PR https://github.com/vyos/vyos-1x/pull/4458

PR https://github.com/vyos/vyos-1x/pull/4459

PR: https://github.com/vyos/vyos-1x/pull/4457

Since there is already a task for this, do you want me to go ahead and close this one? Or keep it up as a reminder for work that still needs to be done?

PR: https://github.com/vyos/vyos-1x/pull/4456/

Added PR: https://github.com/vyos/vyos-1x/pull/4447

PR: https://github.com/vyos/vyos-1x/pull/4444

Added PR: https://github.com/vyos/vyos-1x/pull/4422

Will this be backported to 1.4 ahead of the 1.4.2 release?

I can't assign myself to this task for whatever reason, but here is a PR to correct this behavior:
https://github.com/vyos/vyos-1x/pull/4400

Approaching implementation of ZeroTier from a different angle in:
https://vyos.dev/T6455

Added PR: https://github.com/vyos/vyos-1x/pull/3623

Draft PR Added: https://github.com/vyos/vyos-1x/pull/3599