T3275 introduced a situation where an undesired default behaviour (all conntrack helper modules being enabled) was kept through the migration for backward compatibility reasons. Since the default configuration is versionless, all migration scripts run on it back-to-back, resulting in the perpetuation of this legacy behaviour. Until we can find a better solution, we should hardcode the latest component versions in the default config files to make sure this won't happen on clean installs.
Description
Description
Details
Details
- Difficulty level
- Unknown (require assessment)
- Version
- -
- Why the issue appeared?
- Will be filled on close
- Is it a breaking change?
- Unspecified (possibly destroys the router)
- Issue type
- Bug (incorrect behavior)
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Open | jestabro | T3275 Disable conntrack helpers by default | |||
On hold | erkin | T3821 Add latest versions to default config files | |||
Open | FEATURE REQUEST | jestabro | T6006 Configure system-specific capabilities independently of migration scripts |
Event Timeline
Comment Actions
Note the version string should be different in 1.3:
// vyos-config-version: "broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:dhcp-relay@2:dhcp-server@5:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@21:ipoe-server@1:ipsec@5:isis@1:l2tp@3:lldp@1:mdns@1:nat@5:ntp@1:pppoe-server@5:pptp@2:qos@1:quagga@8:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@21:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1"