Page MenuHomeVyOS Platform
Create Task
Maniphest T6841

Separate interface and VRF options in firewall zone configuration
In progress, NormalPublicBUG
Actions

Description

The logic for Zone Based firewall has remained unchanged, although VRF was introduced.
We need to improve ZBF for better config parsing when using VRFs.

Details

Version
1.5-rolling-202410280007
Is it a breaking change?
Config syntax change (migratable)
Issue type
Feature (new functionality)

Related Objects

Event Timeline

n.fort created this task.Oct 29 2024, 7:04 PM
n.fort changed the task status from Open to In progress.
n.fort claimed this task.
n.fort added a comment.Oct 29 2024, 7:18 PM

PR: https://github.com/vyos/vyos-1x/pull/4180

pasik subscribed.Oct 29 2024, 9:16 PM
Viacheslav triaged this task as Normal priority.Oct 30 2024, 10:04 AM
syncer added a subscriber: Global Notifications.Nov 1 2024, 9:16 PM
dmbaturin renamed this task from Firewall - Improve zone-based firewall to Separate interface and VRF options in firewall zone configuration.Nov 7 2024, 5:07 PM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Config syntax change (migratable).
dmbaturin changed Issue type from improvement to behavior-change.
dmbaturin changed Issue type from behavior-change to Feature (new functionality).Nov 27 2024, 6:50 PM
c-po mentioned this in rVYOSONEXdf176d9b9b4c: T6841: firewall: improve config parsing for ZBF when using VRFs and interfaces….Jan 6 2025, 11:13 AM
c-po mentioned this in rVYOSONEX4a194b32509f: T6841: firewall: Fixed issues in ZBF when using VRFs.
c-po mentioned this in rVYOSONEX3b04cc29f0ba: T6841: firewall: re-use existing generic-interface-multi.xml.i XML building….
c-po mentioned this in rVYOSONEXdda428fc42c4: T6841: firewall: migrate existing VRF in zone based firewall.
Restricted Repository Identity mentioned this in rVYOSONEX5ae3f05d50f3: Merge pull request #4180 from nicolas-fort/zbf-vrfaware.Jan 6 2025, 11:13 AM
c-po added a project: VyOS 1.5 Circinus.Jan 6 2025, 11:14 AM
c-po moved this task from Need Triage to Completed on the VyOS Rolling board.
c-po mentioned this in rVYOSONEX3a57c0393952: smoketest: T6841: fix config tests which validate migration scripts.Jan 8 2025, 8:51 AM
Restricted Repository Identity mentioned this in rVYOSONEXdb5703cb5349: smoketest: T6841: fix config tests which validate migration scripts (#4287).Jan 8 2025, 8:51 AM