UpNP was removed
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Sep 25 2025
Still bug
vyos@r14# set firewall zone BUG
[edit]
vyos@r14# commit
[ firewall ]
Traceback (most recent call last):
File "/usr/libexec/vyos/services/vyos-configd", line 144, in run_script
c = script.get_config(config)
^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/libexec/vyos/conf_mode/firewall.py", line 149, in get_config
if 'vrf' in local_zone_conf['member']:
~~~~~~~~~~~~~~~^^^^^^^^^^
KeyError: 'member'Sep 24 2025
Added option:
Tested https://github.com/vyos/vyos-build/pull/1040. Now it works as expected.
Sep 23 2025
Sep 22 2025
Resolve issues with initial PRs.
Sep 20 2025
Sep 19 2025
FRR PR: https://github.com/FRRouting/frr/pull/19593
VyOS PR with patch: https://github.com/vyos/vyos-build/pull/1040
Additional PR for tpmtest:
https://github.com/vyos/vyos-build/pull/1039
Sep 18 2025
Sep 17 2025
Sorry, please consult about dates of releases with support.
When is 1.4.4 planned for release?
Sep 15 2025
Yes, it will be fixed in release 1.4.4.
Ergo: Upgrading to 1.4.4 fixes this?
It is fixed.
@hedrok could you re-check and mark as solved if all work as expected?
Any updates on this? We're running 1.4 and this is holding back required changes in our configuration.
The issue is still reproducible in FRR's master.
I've prepared my own fix in FRR: https://github.com/FRRouting/frr/pull/19564
As patch in VyOS: https://github.com/vyos/vyos-build/pull/1029
Sep 14 2025
I've created: https://github.com/vyos/vyos-1x/pull/4720
Sep 13 2025
Sep 11 2025
Sep 10 2025
Sep 9 2025
Fix:
https://github.com/vyos/vyos-build/pull/1026 - cherry-pick of FRR commit that adds 'table-direct' support for OSPF.
https://github.com/vyos/vyos-1x/pull/4704 - replaces table with table-direct in FRR config for command set protocols ospf redistribute table 10.
Sep 8 2025
With nightly 2025.09.01-0023-rolling it is working (maybe the last kernel bump fixed it ?) :
Sep 5 2025
Sep 4 2025
Sep 3 2025
I found a companion issue to this and created a task for it:
https://vyos.dev/T7781
Sep 2 2025
In T7761#234119, @Fabse wrote:aggregation — ipt-netflow allows rewriting IP prefixes and ports. Do we want that?
This feature is crucial for our use case. We are using a custom build for ipt_NETFLOW since 2024 in order to --enable-aggregation for being able to account all flows (sampling rate 1) while keeping flow cardinality manageable. --enable-direction would be great as well.
Sep 1 2025
aggregation — ipt-netflow allows rewriting IP prefixes and ports. Do we want that?
Aug 28 2025
I suggest just removing buffer-size option - in data/templates/pmacct/uacctd.conf.j2 it is translated to pmacct option plugin_pipe_size - specific to pmacct option about pipe size between processes of pmacct.
ipt_NETFLOW's sndbuf is size of output socket buffer in bytes with system default as default - no relation to plugin_pipe_size pmacct option, I don't think there is need to publish it via vyos CLI.
Aug 26 2025
I think the entire idea was missguided and misslead by the fact that tokens are not supported on every interface type - only interfaces supporting "ARP" in the iproute2/Kernel source code but thats wrong in a different story.
Aug 25 2025
Aug 22 2025
Will be fixed after migration to the accel-ppp-ng T7744