That change should be safe to merge because it just adds a command and doesn't change anything else. So no one will be using this at the moment and so it won't have any impact. So I'd be happy to see it in 1.2.0.

I really like the idea and thank you for the contribution.

Can we maybe rename the command from webproxy proxy-bypass-source to webproxy whitelist source-address instead? The word proxy is redundant and by introducing a whitelist node we can add other options here in the future, too.

Thank you for your positive feedback. I am open to all changes.
We can rename the command, of course. But let us think about this shortly:

1. My proposal webproxy proxy-bypass-source is "derived" from the existing webproxy proxy-bypass because it is very similar (BTW., in fact, I have no idea about vyatta/vyos programming and have just copied and changed the existing command.) Shouldn't we also move this existing command to the new node? (i.e. webproxy whitelist destination-address) What to do about backward compatibility then? Is there an easy way of auto-upgrading existing commands from webproxy proxy-bypass 1.2.3.4/24 to webproxy whitelist destination-address 1.2.3.4/24?

2. Second, in my eyes, the word "whitelist" is not as good as "bypass" in this context. But that is only my opinion and I am not fixed there.

@dsteinkopf I think almos every command is good when there is a discussion ongoing and we can agree on somehing. VyOS has so called migration scripts which are executed once we do CLI changes and thus migrate old configuration nodes to new ones. We already make use of this feature alot and it is transparent to the user.

Ok. Fine. Can you give me a hint about docu and an example of such a migration script? So I'll try to implement one for this case: Migrate from webproxy proxy-bypass 1.2.3.4/24 to webproxy whitelist destination-address 1.2.3.4/24

First you need to specify a new version of your subtree,
https://github.com/vyos/vyatta-cfg-system/commit/f68dda9d619ea74bed266122ac86604284e1a9e4

Then the migration script is at:
https://github.com/vyos/vyos-1x/blob/current/src/migration-scripts/l2tp/0-to-1

This one was done for altering the l2tp radius configurations

Or drop by our slack channel for help

A new description could be:

1. Add command webproxy whitelist source-address to bypass proxy based on source IP address.
2. Change the existing webproxy proxy-bypass to webproxy whitelist source-address to be consistent (and a bit more precise).

Bypassing the proxy by source address is useful for disabling the (e.g. transparent) proxy only for specific local devices. (I am using it to make Netflix work again by disabling the IP address of my Fire TV where Netflix runs on.)

@dmbaturin Did you forget to merge the other PRs (migration code) ?

Title should be something like "Add an option to exclude source IP addresses from transparent web proxying" because destination IP is a different option.