Quick test done on a VM with 1 CPU and 1G RAM:
vyos@1.4.0-rc1# for I in {1..2542}; do set firewall ipv6 name Test rule $I action accept ; set firewall ipv6 name Test rule $I destination port $I; set firewall ipv6 name Test rule $I protocol tcp ; done
vyos@1.4.0-rc1# time commitI suggest changing order just as a cosmetic fix: feels more reasonable/readable to parse first "incoming", and then "outgoing"
Changes that seems to be needed only in migration script https://github.com/vyos/vyos-1x/blob/current/src/migration-scripts/firewall/10-to-11:
PR for Equuleus: https://github.com/vyos/vyos-1x/pull/2776
New PR for dynamic address groups: https://github.com/vyos/vyos-1x/pull/2756
I stil haven't tried nat64, but quick config example, for nat64 for single ipv6 address is not allowed by our cli:
Configuration shared seems to work correctly on latest version:
In the past any interface was supported, and it has been removed.
If you want to match any interface, you can complete remove interface matcher from the rule, since it's not mandatory (as it was in the past):
delete nat source rule 110 outbound-interface
The problem is that, comparing to command output on 1.3, it only show the leases granted by the router (and doesn't contain leases granted by the second router, regardless of states primary|secondary.
So user might think synchronization between routers defined in fail-over mode is broken.
But this is not the case. As explained in the description, all information about leases, granted by both routers, is present on lease files on both routers.
And going further, we may create an extra column, in order to print if the lease was granted by Local-Router or by fail-over router..
Example:
Changing this line: https://github.com/vyos/vyos-1x/blob/current/src/op_mode/dhcp.py#L117C9-L117C107
We'll discuss this internally, but for sure a fix should be applied.
Thanks for such a detailed bug-report.
PR for bridge: https://github.com/vyos/vyos-1x/pull/2528
Re-Opening. this need to be extended to bridge firewall
New patch for migration scripts in 1.5: https://github.com/vyos/vyos-1x/pull/2480
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/2478
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/2478
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/2478