When having vrfs configured attempting to run "update webproxy blacklists" from op-mode fails:
vyos@vyos:~$ update webproxy blacklists % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: ftp.univ-tlse1.fr Unable to download [ftp://ftp.univ-tlse1.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz]!
Workaround is to first switch context into the vrf who can reach internet like so:
vyos@vyos:~$ force vrf INTERNET vyos@vyos:INTERNET:~$ update webproxy blacklists % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 27.2M 100 27.2M 0 0 1130k 0 0:00:24 0:00:24 --:--:-- 1150k Uncompressing blacklist...
Suggestion is that "update webproxy blacklists" should get the same syntax as "add system image" where one from op-mode can specify which vrf the command should run under like so:
vyos@vyos:~$ update webproxy blacklists vrf INTERNET