Page MenuHomeVyOS Platform
Feed Search

Oct 22 2023

Viacheslav added a comment to T5299: QoS shaper ceiling does not work.

PR https://github.com/vyos/vyos-1x/pull/2391

Oct 22 2023, 1:25 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5674: AWS add Simple Systems Manager (SSM) Agent .
Oct 22 2023, 11:34 AM · VyOS Rolling

Oct 21 2023

Viacheslav added a comment to T5018: Redirect to IFB removed after change in qos policy.

@rayzilt Could you re-check and close it if solved?

Oct 21 2023, 3:03 PM · VyOS 1.4 Sagitta
Viacheslav awarded T5671: vxlan: change port to IANA assigned default port a Like token.
Oct 21 2023, 1:48 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5541: Zone-Based Firewalling in VyOS Sagitta 1.4 from In progress to Needs testing.
Oct 21 2023, 1:48 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 19 2023

Viacheslav assigned T5669: VXLAN interface changing port does not work to c-po.
Oct 19 2023, 11:16 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav created T5669: VXLAN interface changing port does not work.
Oct 19 2023, 10:46 AM · VyOS 1.3 Equuleus (1.3.5)

Oct 17 2023

Viacheslav added a comment to T5664: 1.4 user has no permissions?.

It seems related https://vyos.dev/T5663

Oct 17 2023, 3:45 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5657: Add VRF support for zabbix-agent.

Yep looks fine @Viacheslav
I've been using it like this for a while now but figure it may be useful as part of making 'VRFs' complete...

$ sudo ip vrf exec RCS3 mtr 192.168.222.11

image.png (282×1 px, 120 KB)

Oct 17 2023, 6:43 AM · VyOS Rolling

Oct 16 2023

Viacheslav added projects to T5661: Add show show ssh dynamic-protection attacker and show log ssh dynamic-protection: VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus.
Oct 16 2023, 9:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.5)
Viacheslav changed the status of T5642: op cmd: generate tech-support archive: does not work from In progress to Needs testing.
Oct 16 2023, 8:23 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5232: Flow-accounting uacctd.service cannot restart correctly from In progress to Needs testing.
Oct 16 2023, 4:42 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXf197b07710c1: T5634: Smoketest add encryption ciphers.
Oct 16 2023, 3:08 PM
Viacheslav removed a project from T5554: Disable sudo for PAM RADIUS: VyOS 1.3 Equuleus (1.3.5).
Oct 16 2023, 9:02 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5137: show tech support command, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved.
Oct 16 2023, 9:00 AM · VyOS Rolling
Viacheslav closed T5137: show tech support command as Resolved.
Oct 16 2023, 9:00 AM
Viacheslav moved T5165: Policy local-route ability set protocol and port from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 16 2023, 8:41 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5165: Policy local-route ability set protocol and port as Resolved.
Oct 16 2023, 8:41 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5634: Remove support for Blowfish and DES from OpenVPN.

PR https://github.com/vyos/vyos-1x/pull/2366

Oct 16 2023, 6:54 AM · VyOS 1.4 Sagitta

Oct 14 2023

Viacheslav added a comment to T5657: Add VRF support for zabbix-agent.

Did you test it in vrf? Is it really works as expected?

Oct 14 2023, 5:23 PM · VyOS Rolling
Viacheslav closed T5629: Policy local-route bug after migration to destination node address, a subtask of T5165: Policy local-route ability set protocol and port, as Resolved.
Oct 14 2023, 7:34 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5629: Policy local-route bug after migration to destination node address as Resolved.

Fixed in https://github.com/vyos/vyos-1x/pull/2342

Oct 14 2023, 7:33 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5648: ldpd neighbour template errors from Open to Needs testing.
Oct 14 2023, 7:32 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Oct 13 2023

Viacheslav added a comment to T5634: Remove support for Blowfish and DES from OpenVPN.

OpenVPN cannot pass the smoketest

 DEBUG - ======================================================================
DEBUG - FAIL: test_openvpn_options (__main__.TestInterfacesOpenVPN.test_openvpn_options)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_interfaces_openvpn.py", line 525, in test_openvpn_options
DEBUG -     self.assertNotEqual(cur_pid, new_pid)
DEBUG - AssertionError: None == None
DEBUG - 
DEBUG - ======================================================================
DEBUG - FAIL: test_openvpn_site2site_interfaces_tun (__main__.TestInterfacesOpenVPN.test_openvpn_site2site_interfaces_tun)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_interfaces_openvpn.py", line 601, in test_openvpn_site2site_interfaces_tun
DEBUG -     self.assertTrue(process_named_running(PROCESS_NAME))
DEBUG - AssertionError: None is not true
Oct 13 2023, 2:46 PM · VyOS 1.4 Sagitta
Viacheslav created T5654: Migrate policy local-route.
Oct 13 2023, 7:47 AM · VyOS Rolling

Oct 12 2023

Viacheslav updated the task description for T5647: Extend failover route functionality to use dynamically assigned interface next hops.
Oct 12 2023, 10:54 AM · VyOS Rolling
Viacheslav removed a project from T1237: Static Route Path Monitoring, failover: VyOS 1.3 Equuleus (1.3.3).
Oct 12 2023, 6:31 AM · VyOS 1.4 Sagitta
Viacheslav moved T1237: Static Route Path Monitoring, failover from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 12 2023, 6:31 AM · VyOS 1.4 Sagitta

Oct 11 2023

Viacheslav awarded T5647: Extend failover route functionality to use dynamically assigned interface next hops a Like token.
Oct 11 2023, 6:12 PM · VyOS Rolling
Viacheslav created T5646: QoS policy limiter broken if class without match.
Oct 11 2023, 3:31 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
Viacheslav renamed T5645: Add template for PPPoE-server with custom RADIUS attributes for QoS policy and firewall from Add template for PPPoE server with custom RADIUS attributes for QoS policy and firewall to Add template for PPPoE-server with custom RADIUS attributes for QoS policy and firewall.
Oct 11 2023, 3:12 PM · VyOS Rolling
Viacheslav created T5645: Add template for PPPoE-server with custom RADIUS attributes for QoS policy and firewall.
Oct 11 2023, 3:09 PM · VyOS Rolling
Viacheslav changed the status of T5165: Policy local-route ability set protocol and port from Open to Needs testing.
Oct 11 2023, 6:37 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXff4373307467: T5165: Implement policy local-route source and destination port.
Oct 11 2023, 6:37 AM

Oct 10 2023

Viacheslav added a comment to T5471: Conntrack logging doesnt seem to be working.

show conntrack statistics shows only sudo conntrack -S command
This won't show any logs

Oct 10 2023, 10:49 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
Viacheslav added a comment to T5497: Add ability to resequence rule numbers for firewall.

I assume this will end up in config mode aswell before this task can be set to resolved?

Simply because this is a few more steps:

  • Use the command
  • Copy the output
  • Delete current firewall
  • Paste command output
  • Commit

than this:

  • Use the command
  • Commit
Oct 10 2023, 10:41 AM · VyOS 1.4 Sagitta (1.4.0-epa1)

Oct 8 2023

Viacheslav added a comment to T5635: Policy local-route ability with uid or gid.

I think it depends on nftables , https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation#Matching_by_socket_UID_.2F_GID , it is first handled by nftables and mark , then use rule .

Oct 8 2023, 6:07 PM · Restricted Project, VyOS Rolling
Viacheslav committed rVYOSONEX32dc990e1eed: T5213: Add accounting-interim-interval option for PPPoE-server.
Oct 8 2023, 4:16 PM

Oct 6 2023

Viacheslav added a comment to T5165: Policy local-route ability set protocol and port.

PR https://github.com/vyos/vyos-1x/pull/2342

set policy local-route rule 23 destination port '222'
set policy local-route rule 23 protocol 'tcp'
set policy local-route rule 23 set table '123'
set policy local-route rule 23 source port '8888'

Check:

vyos@r4# ip rule show prio 23
23:	from all ipproto tcp sport 8888 dport 222 lookup 123
[edit]
vyos@r4#
Oct 6 2023, 9:27 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5635: Policy local-route ability with uid or gid.

It supports uidrange https://man7.org/linux/man-pages/man8/ip-rule.8.html
is it what you want?

uidrange NUMBER-NUMBER
       select the uid value to match.

I don't see gid option there.

Oct 6 2023, 5:39 AM · Restricted Project, VyOS Rolling
Viacheslav added a comment to T5635: Policy local-route ability with uid or gid.
Oct 6 2023, 5:36 AM · Restricted Project, VyOS Rolling
Viacheslav closed T5576: Add bgp remove-private-as all option as Resolved.
Oct 6 2023, 5:23 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav claimed T5165: Policy local-route ability set protocol and port.
Oct 6 2023, 4:31 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 5 2023

Viacheslav added a comment to T2612: HTTPS API, changing API key fails but goes through.

The similar bug with load if we change something in service https api

curl -k --location 192.168.122.11 --request POST 'https://192.168.122.11/config-file' --form data='{"op": "load", "file": "config.boot"}' --form key='foo'
{"success": false, "error": "", "data": null}
Oct 5 2023, 5:16 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Oct 4 2023

Viacheslav added a comment to T3655: NAT doesn't work correctly with VRF.

@rherold Could you re-check it?

Oct 4 2023, 7:54 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav moved T5585: Fix file access mode for dynamic dns configuration from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 4 2023, 7:30 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T5585: Fix file access mode for dynamic dns configuration from Open to Finished on the VyOS 1.5 Circinus board.

@indrajitr Thanks!

Oct 4 2023, 7:30 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T3655: NAT doesn't work correctly with VRF.

Can we close it?

Oct 4 2023, 7:29 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T5585: Fix file access mode for dynamic dns configuration.

Can we close it?

Oct 4 2023, 7:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5612: Miscellaneous improvements and fixes for dynamic DNS configuration from Open to Needs testing.

@indrajitr, Could you re-check and close if it was solved?

Oct 4 2023, 7:24 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5615: Narrow down spurious name conflict with mdns from Open to Needs testing.
Oct 4 2023, 7:23 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav changed the status of T5573: Fix ddclient cache entries from Open to Needs testing.
Oct 4 2023, 7:22 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav updated the task description for T5631: Ability to export the current configuration in JSON format.
Oct 4 2023, 3:04 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav moved T5632: Add jq package to parse JSON files from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.5) board.
Oct 4 2023, 11:45 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav moved T5632: Add jq package to parse JSON files from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 4 2023, 11:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T5632: Add jq package to parse JSON files as Resolved.
Oct 4 2023, 11:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav updated the task description for T5631: Ability to export the current configuration in JSON format.
Oct 4 2023, 10:47 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a project to T3202: Enable wireguard debug messages by default: VyOS 1.5 Circinus.

Proposed CLI:

set system syslog global service wireguard

Expected command for debug

echo "module wireguard +p" | sudo tee /sys/kernel/debug/dynamic_debug/control

To disable

echo "module wireguard -p" | sudo tee /sys/kernel/debug/dynamic_debug/control
Oct 4 2023, 9:33 AM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Viacheslav added a comment to T5632: Add jq package to parse JSON files.

PR https://github.com/vyos/vyos-user-utils/pull/7

vyos@r4# echo '{"system": "VyOS", "rate": 100}' | jq '.system'
"VyOS"
[edit]
vyos@r4#
Oct 4 2023, 9:23 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5217: Add firewall SYNPROXY from Open to Needs testing.
Oct 4 2023, 8:55 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5632: Add jq package to parse JSON files from Open to In progress.
Oct 4 2023, 8:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav created T5632: Add jq package to parse JSON files.
Oct 4 2023, 8:38 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5080: Disable conntrack by default.

Try this

delete  system conntrack ignore
set system conntrack ignore ipv4 rule 10 source address 0.0.0.0/0
Oct 4 2023, 7:26 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav updated subscribers of T5631: Ability to export the current configuration in JSON format.
Oct 4 2023, 6:48 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added projects to T5631: Ability to export the current configuration in JSON format: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.5).
Oct 4 2023, 6:48 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav created T5631: Ability to export the current configuration in JSON format.
Oct 4 2023, 6:47 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Oct 3 2023

Viacheslav changed the subtype of T5629: Policy local-route bug after migration to destination node address from "Feature Request" to "Bug".
Oct 3 2023, 3:02 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5629: Policy local-route bug after migration to destination node address.
Oct 3 2023, 3:01 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5213: Accel-ppp sending accounting interim updates acct-interim-interval option: VyOS 1.3 Equuleus (1.3.5).

PR for 1.3.5 https://github.com/vyos/vyos-1x/pull/2333

Oct 3 2023, 1:54 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta

Oct 2 2023

Viacheslav added a comment to T5627: Multicast - PIM prune state timers expire with time longer to remove a mroute.

The easiest way is to add a Patch for FRR 7.5.1 if possible.
We can't migrate to FRR 9.1 for 1.3.x

Oct 2 2023, 5:24 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus, VyOS Rolling

Sep 30 2023

Viacheslav committed rVYOSONEX9f7a5f792007: T5165: Migrate policy local-route rule x destination to address.
Sep 30 2023, 6:34 AM

Sep 29 2023

Viacheslav added a comment to T5518: Add MLD protocol support.

Could be a cause of this bug https://forum.vyos.io/t/igmp-proxy-not-working-in-1-4-since-around-7-sept

Sep 29 2023, 4:21 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5621: Show uncommited "commands" (compare | commands) from Resolved to Invalid.
Sep 29 2023, 4:10 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5165: Policy local-route ability set protocol and port.

PR migration https://github.com/vyos/vyos-1x/pull/2325

Sep 29 2023, 4:05 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav updated the task description for T5623: Add tunnel over Socks5 proxy .
Sep 29 2023, 8:41 AM · VyOS Rolling
Viacheslav created T5623: Add tunnel over Socks5 proxy .
Sep 29 2023, 8:40 AM · VyOS Rolling
Viacheslav changed the status of T5261: Add AWS gateway load-balancing tunnel handler (gwlbtun) from In progress to Needs testing.
Sep 29 2023, 7:53 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q2)
Viacheslav changed the subtype of T5620: "Deactivate" certain config snippets from "Task" to "Feature Request".
Sep 29 2023, 7:26 AM · VyOS Rolling

Sep 28 2023

Viacheslav committed rVYOSONEXbdad4e046872: T5217: Add firewall synproxy.
Sep 28 2023, 3:02 PM
Viacheslav committed rVYOSONEX96b8b38a3c17: T5165: Add option protocol for policy local-route.
Sep 28 2023, 2:37 PM

Sep 27 2023

Viacheslav added a comment to T5165: Policy local-route ability set protocol and port.

Add option protocol, PR https://github.com/vyos/vyos-1x/pull/2313

set policy local-route rule 100 destination '192.0.2.12'
set policy local-route rule 100 protocol 'tcp'
set policy local-route rule 100 set table '100'
Sep 27 2023, 2:10 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav closed T5197: Conntrack-sync external cache commit error as Not Applicable.

Fixed

Sep 27 2023, 7:54 AM · VyOS 1.4 Sagitta
Viacheslav placed T5203: load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init up for grabs.
Sep 27 2023, 7:28 AM · VyOS 1.4 Sagitta

Sep 26 2023

Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/2310

Sep 26 2023, 3:00 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5497: Add ability to resequence rule numbers for firewall.

1.5-rolling-202309250022

Is there a reason why some global options and some address groups (not all) are included in the output? Seems unintentional to me.

Sep 26 2023, 2:41 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav closed T5480: Ability to disable SNMP for VRRP keepalived service as Resolved.
Sep 26 2023, 1:26 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5616: Firewall mark - Add capabilities for matching firewall mark.

We have fwmark for policy local-route
But it is only for match mark and routing decision

vyos@vyos-lns# set policy local-route rule 100 
Possible completions:
+  destination          Destination address or prefix
   fwmark               Match fwmark value
   inbound-interface    Inbound Interface
 > set                  Packet modifications
+  source               Source address or prefix
Sep 26 2023, 12:47 PM · VyOS 1.5 Circinus

Sep 23 2023

Viacheslav changed the edit policy for T5613: VyOS in container bugs.
Sep 23 2023, 5:56 PM · VyOS Rolling, Bugs
Viacheslav added a parent task for T2115: VyOS cannot load configs when running in a container: T5613: VyOS in container bugs.
Sep 23 2023, 5:53 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T5613: VyOS in container bugs: T2115: VyOS cannot load configs when running in a container.
Sep 23 2023, 5:53 PM · VyOS Rolling, Bugs
Viacheslav added a project to T2115: VyOS cannot load configs when running in a container: VyOS 1.5 Circinus.
Sep 23 2023, 5:53 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav committed rVYOSONEX7ad1e8c7d344: T5497: op-mode: Add generate firewall rule-resequence.
Sep 23 2023, 5:26 PM
Viacheslav updated the task description for T5613: VyOS in container bugs.
Sep 23 2023, 5:08 PM · VyOS Rolling, Bugs
Viacheslav created T5613: VyOS in container bugs.
Sep 23 2023, 5:07 PM · VyOS Rolling, Bugs
Viacheslav closed T5518: Add MLD protocol support as Resolved.
Sep 23 2023, 2:22 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3214: OpenVPN IPv6 fixes from Open to Needs testing.
Sep 23 2023, 1:55 PM · VyOS 1.5 Circinus
Viacheslav changed the status of T5604: List of debian archives is out of date (non-free-firmware is missing) from Open to Needs testing.
Sep 23 2023, 1:48 PM · VyOS 1.5 Circinus

Sep 22 2023

Viacheslav closed T5602: For reverse-proxy type of load-balancing feature, support "backup" option in backends configuration as Resolved.
Sep 22 2023, 4:16 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T4624: Move some op mode commands to "execute" and "produce" command families: VyOS 1.5 Circinus.
Sep 22 2023, 4:14 PM · VyOS Rolling
Viacheslav added a comment to T5497: Add ability to resequence rule numbers for firewall.

Op-mode command reduce
PR https://github.com/vyos/vyos-1x/pull/2302

vyos@r4:~$ show conf com | match firew
set firewall ipv4 input filter default-action 'accept'
set firewall ipv4 input filter rule 1 action 'accept'
set firewall ipv4 input filter rule 1 description 'Allow loopback'
set firewall ipv4 input filter rule 1 inbound-interface interface-name 'lo'
set firewall ipv4 input filter rule 1 source address '127.0.0.0/8'
set firewall ipv4 input filter rule 2 action 'accept'
set firewall ipv4 input filter rule 2 description 'Allow established/related'
set firewall ipv4 input filter rule 2 state established 'enable'
set firewall ipv4 input filter rule 2 state related 'enable'
set firewall ipv4 input filter rule 60 action 'accept'
set firewall ipv4 input filter rule 60 description 'Allow SSH from trusted networks'
set firewall ipv4 input filter rule 60 destination port '22'
set firewall ipv4 input filter rule 60 protocol 'tcp'
set firewall ipv4 input filter rule 10000 action 'drop'
set firewall ipv4 input filter rule 10000 description 'Drop everything else'
vyos@r4:~$ 
vyos@r4:~$ produce firewall rule-resequence start 10 step 10
Sep 22 2023, 3:58 PM · VyOS 1.4 Sagitta (1.4.0-epa1)