Page MenuHomeVyOS Platform
Feed All Stories

Mar 29 2024

haakon.nore added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.

Not sure if it is meaningful to create a new operational vyos command "initiate" or re-write the reset to be consistent with older VyOS.

Mar 29 2024, 7:57 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
fernando added a comment to T6151: BGP VRF route-leaking does not work when the next-hop is a recursive route.

PR:https://github.com/vyos/vyos-1x/pull/3212

Mar 29 2024, 6:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav changed the status of T6033: hsflowd fails to start when using a tunnel interface from In progress to Needs testing.
Mar 29 2024, 3:07 PM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
fernando claimed T6151: BGP VRF route-leaking does not work when the next-hop is a recursive route.
Mar 29 2024, 12:57 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav changed the status of T6033: hsflowd fails to start when using a tunnel interface from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/544

Mar 29 2024, 11:53 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
Viacheslav added a comment to T6033: hsflowd fails to start when using a tunnel interface.

@ServerForge, it seems to be working with the v2.0.55-1 version. Could you build a package and re-check?

git clone -b v2.0.55-1 --single-branch  https://github.com/sflow/host-sflow.git
sudo apt-get install -y libpcap0.8-dev
make deb FEATURES="PCAP DROPMON DBUS"
Mar 29 2024, 11:22 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
Viacheslav changed the subtype of T6033: hsflowd fails to start when using a tunnel interface from "Task" to "Bug".
Mar 29 2024, 11:08 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
Viacheslav added a project to T6033: hsflowd fails to start when using a tunnel interface: VyOS 1.5 Circinus.
Mar 29 2024, 10:37 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
Viacheslav added a comment to T6033: hsflowd fails to start when using a tunnel interface.

Only ethernet interfaces or bridges are allowed; from their docs https://sflow.net/host-sflow-linux-config.php

PCAP Packet Sampling
Mar 29 2024, 10:24 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
Viacheslav closed T6126: Unable to add image as Invalid.

It seems a broken local build; close the task.
Reopen if necessary.

Mar 29 2024, 9:32 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.

"reset vpn ipsec " command and does not reset SAs that are dow

Mar 29 2024, 9:31 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
HollyGurza closed T6159: "show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection as Resolved.
Mar 29 2024, 5:02 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a comment to T6180: Add application of mask to configtree.

PRs:
https://github.com/vyos/vyos1x-config/pull/25
https://github.com/vyos/libvyosconfig/pull/13

Mar 29 2024, 3:41 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a comment to T6185: Simplify marshalling of section and config data for config-sync.

PR:
https://github.com/vyos/vyos-1x/pull/3211

Mar 29 2024, 3:41 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a parent task for T6180: Add application of mask to configtree: T6185: Simplify marshalling of section and config data for config-sync.
Mar 29 2024, 3:13 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a subtask for T6185: Simplify marshalling of section and config data for config-sync: T6180: Add application of mask to configtree.
Mar 29 2024, 3:13 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a subtask for T6121: Extend service config-sync for sections vpn, policy, vrf: T6185: Simplify marshalling of section and config data for config-sync.
Mar 29 2024, 3:12 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a parent task for T6185: Simplify marshalling of section and config data for config-sync: T6121: Extend service config-sync for sections vpn, policy, vrf.
Mar 29 2024, 3:12 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro created T6185: Simplify marshalling of section and config data for config-sync.
Mar 29 2024, 3:09 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 28 2024

sarthurdev changed the status of T6174: can't view dhcp server leases if logged in as a tacacs account from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/3210

Mar 28 2024, 8:24 PM · VyOS 1.5 Circinus
c-po added a comment to T2590: DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c.

We need to implement https://manpages.debian.org/testing/wide-dhcpv6-client/dhcp6c.conf.5.en.html#script like in ipv4 dhcp client

Mar 28 2024, 7:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.3 Equuleus (1.3.7)
c-po closed T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface as Resolved.
Mar 28 2024, 7:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po moved T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Mar 28 2024, 7:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
lucasec closed T5872: ipsec remote access VPN: support dhcp-interface as Resolved.
Mar 28 2024, 6:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev changed the status of T6174: can't view dhcp server leases if logged in as a tacacs account from Open to In progress.
Mar 28 2024, 3:03 PM · VyOS 1.5 Circinus
sarthurdev closed T6102: Clear dhcp-server lease throws python exception on 1.5-rolling as Resolved.
Mar 28 2024, 3:02 PM · VyOS 1.5 Circinus
sarthurdev moved T6147: Conntrack not working as expected with global state-policy from In Progress to Finished on the VyOS 1.5 Circinus board.
Mar 28 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T6147: Conntrack not working as expected with global state-policy as Resolved.
Mar 28 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro triaged T6176: image-tools: rationalize setting of console type as Normal priority.
Mar 28 2024, 2:59 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev moved T5606: IPSec VPN: Allow multiple CAs certificates from In Progress to Finished on the VyOS 1.5 Circinus board.

Updated PR to use multi nodes: https://github.com/vyos/vyos-1x/pull/3202

Mar 28 2024, 2:21 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a subtask for T6176: image-tools: rationalize setting of console type: T6184: image-tools: add op-mode command to set default boot console type.
Mar 28 2024, 2:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a parent task for T6184: image-tools: add op-mode command to set default boot console type: T6176: image-tools: rationalize setting of console type.
Mar 28 2024, 2:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro triaged T6184: image-tools: add op-mode command to set default boot console type as Normal priority.
Mar 28 2024, 2:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav claimed T5832: Allow setting the interface for excluded address in VRRP.

PR https://github.com/vyos/vyos-1x/pull/3200

Mar 28 2024, 12:29 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6159: "show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection as High priority.
Mar 28 2024, 11:07 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6183: OpenVPN IPv6 server: Unable to establish connection without local-host parameter as Normal priority.
Mar 28 2024, 11:07 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T6159: "show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection from Open to In progress.
Mar 28 2024, 11:05 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
HollyGurza added a comment to T6159: "show openvpn server" prints a superfluous "OpenVPN status on vtunx" message for every client connection.

https://github.com/vyos/vyos-1x/pull/3198

Mar 28 2024, 11:00 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
SrividyaA created T6183: OpenVPN IPv6 server: Unable to establish connection without local-host parameter.
Mar 28 2024, 10:20 AM · VyOS 1.5 Circinus
Viacheslav triaged T6182: Telegramm integration as Wishlist priority.
Mar 28 2024, 9:31 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav edited projects for T4718: DHCP server listen-address doesn't take effect if the interface is in a VRF, added: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
Mar 28 2024, 9:27 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
HollyGurza added a comment to T4718: DHCP server listen-address doesn't take effect if the interface is in a VRF.

current - https://github.com/vyos/vyos-1x/pull/3195
sagitta - https://github.com/vyos/vyos-1x/pull/3196

Mar 28 2024, 9:19 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po moved T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface from Need Triage to Finished on the VyOS 1.5 Circinus board.
Mar 28 2024, 6:42 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po added a comment to T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface.

https://github.com/vyos/vyos-1x/pull/3194

Mar 28 2024, 6:41 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po merged T4453: dhclient fails to renew DHCP lease with VRF into T5428: dhcp: client renewal fails when running inside VRF.
Mar 28 2024, 6:36 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
c-po merged task T4453: dhclient fails to renew DHCP lease with VRF into T5428: dhcp: client renewal fails when running inside VRF.
Mar 28 2024, 6:36 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po claimed T4453: dhclient fails to renew DHCP lease with VRF.
Mar 28 2024, 6:35 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Unknown Object (User) created T6182: Telegramm integration.
Mar 28 2024, 2:43 AM · Restricted Project, VyOS 1.5 Circinus
Unknown Object (User) updated subscribers of T6181: A feature for checking popular ports..

@sever what do you think about it?

Mar 28 2024, 2:26 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
Unknown Object (User) created T6181: A feature for checking popular ports..
Mar 28 2024, 2:24 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
Unknown Object (User) added a comment to T6120: integration speedtest cli.

I agree, this tool is not suitable for diagnosing connections between hosts. But it can be used in general as a check of the Internet service provider.

Mar 28 2024, 2:15 AM · VyOS 1.5 Circinus
jestabro updated the task description for T6180: Add application of mask to configtree.
Mar 28 2024, 1:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro triaged T6180: Add application of mask to configtree as Normal priority.
Mar 28 2024, 1:25 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 27 2024

Viacheslav triaged T6179: Incorrect HAProxy config generated for reverse-proxy rules with url-path as Normal priority.
Mar 27 2024, 9:48 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav created T6179: Incorrect HAProxy config generated for reverse-proxy rules with url-path.
Mar 27 2024, 9:48 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6178: reverse-proxy doesn't check that a certificate exists at set time as Normal priority.
Mar 27 2024, 9:30 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav created T6178: reverse-proxy doesn't check that a certificate exists at set time.
Mar 27 2024, 9:30 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6177: Intel QAT causes CPU runaway/stall with ipsec VPN as Normal priority.
Mar 27 2024, 5:05 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
lucasec created T6177: Intel QAT causes CPU runaway/stall with ipsec VPN.
Mar 27 2024, 4:45 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
jestabro added a parent task for T6168: "add system image" does not set the default boot image to the current console type in compatibility mode: T6176: image-tools: rationalize setting of console type.
Mar 27 2024, 3:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a subtask for T6176: image-tools: rationalize setting of console type: T6168: "add system image" does not set the default boot image to the current console type in compatibility mode.
Mar 27 2024, 3:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro changed Issue type from unspecified to improvement on T6176: image-tools: rationalize setting of console type.
Mar 27 2024, 3:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro created T6176: image-tools: rationalize setting of console type.
Mar 27 2024, 3:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T6121: Extend service config-sync for sections vpn, policy, vrf.

PR https://github.com/vyos/vyos-1x/pull/3193
Extend config-sync for sections qos and system

vyos@r4# set service config-sync section system 
Possible completions:
   conntrack            Connection Tracking
   flow-accounting      Flow accounting
   option               System Options
   sflow                sFlow
   static-host-mapping  Map host names to addresses
   sysctl               Configure kernel parameters at runtime
Mar 27 2024, 1:29 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Ironeagle added a comment to T6137: dhcp files and directory permission not correct after image uprgading .

Thanks @opswill

Mar 27 2024, 9:16 AM · VyOS 1.5 Circinus
HollyGurza changed the status of T4718: DHCP server listen-address doesn't take effect if the interface is in a VRF from Open to In progress.
Mar 27 2024, 9:01 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
opswill added a comment to T6137: dhcp files and directory permission not correct after image uprgading .

@Ironeagle My solution is adding this command:

Mar 27 2024, 4:26 AM · VyOS 1.5 Circinus
Ironeagle added a comment to T6137: dhcp files and directory permission not correct after image uprgading .

@opswill what is the permanent solution for this? I am also facing the same issue. Thanks in advance

Mar 27 2024, 4:00 AM · VyOS 1.5 Circinus

Mar 26 2024

c-po claimed T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface.
Mar 26 2024, 11:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po created T6175: op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface.
Mar 26 2024, 11:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6174: can't view dhcp server leases if logged in as a tacacs account as Normal priority.
Mar 26 2024, 8:14 PM · VyOS 1.5 Circinus
jestabro renamed T6168: "add system image" does not set the default boot image to the current console type in compatibility mode from add system image does not set console type in compatibility mode to add system image does not set default boot to current console type in compatibility mode.
Mar 26 2024, 7:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a comment to T6168: "add system image" does not set the default boot image to the current console type in compatibility mode.

PR:
https://github.com/vyos/vyos-1x/pull/3192

Mar 26 2024, 7:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Thunderstorm added a comment to T6174: can't view dhcp server leases if logged in as a tacacs account.

I don't have a RADIUS server handy for testing right now, but radius_user and radius_priv_user are both missing membership to the _kea group as well.

Mar 26 2024, 5:48 PM · VyOS 1.5 Circinus
Thunderstorm created T6174: can't view dhcp server leases if logged in as a tacacs account.
Mar 26 2024, 5:30 PM · VyOS 1.5 Circinus
Giggum added a comment to T6123: Limit NTP allow-client config to internal addresses by default.

Have installed 1.5-rolling-202403200018 in a VM as a clean install (no prior configs) to dig at this but have hit a block.

Mar 26 2024, 5:08 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
syncer assigned T5868: Use Debian snapshot repository in vyos-build Docker image to dmbaturin.

@dmbaturin was this completed already?

Mar 26 2024, 5:00 PM · VyOS 1.5 Circinus
andrin added a comment to T6172: Static routes not working with PPPoE and VyOS 1.4.0-epa2.

Yes, as described in the issue, using dynamically added routes works fine. But I want to add the routes manually as I did before with the 1.3.x release.
Using both automatically added routes from PPPoE and setting them statically does not sound like a "sane" config to me.

Mar 26 2024, 12:14 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
c-po placed T5566: Disable 802.3az/EEE (energy efficient ethernet) up for grabs.
Mar 26 2024, 6:15 AM · VyOS 1.5 Circinus
c-po closed T6066: Unhandled exception when setting same network in a different OSPF area as Resolved.
Mar 26 2024, 6:15 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
rts-kotori added a comment to T6173: Build Causes Errors When "--version" Contains Slashes ("/").

I have also created a pull request that fixes this issue: https://github.com/vyos/vyos-build/pull/543

Mar 26 2024, 3:08 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
rts-kotori created T6173: Build Causes Errors When "--version" Contains Slashes ("/").
Mar 26 2024, 3:07 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus

Mar 25 2024

dongjunbo added a comment to T6172: Static routes not working with PPPoE and VyOS 1.4.0-epa2.

Delete set interfaces pppoe pppoe0 no-default-route will let it works. it is the same issue.

Mar 25 2024, 9:35 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Apachez added a comment to T5566: Disable 802.3az/EEE (energy efficient ethernet).

Sure but if the function "port auto-power-down" is mapped to the ethtool function of disabling EEE then it should be safe?

Mar 25 2024, 7:10 PM · VyOS 1.5 Circinus
n.fort added a comment to T6171: Rename the DHCP server "failover" command to "high-availability mode".

PR for current: https://github.com/vyos/vyos-1x/pull/3188

Mar 25 2024, 6:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro added a comment to T6170: Comments via API.

Comments can be set via the API with the following request format:

Mar 25 2024, 6:19 PM · VyOS 1.5 Circinus
L0crian added a comment to T5991: 1.4.0-RC3 deleting portions of config in error (migration script).

@jestabro Thanks, a solution definitely seems close.

Mar 25 2024, 5:12 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
jestabro added a comment to T5991: 1.4.0-RC3 deleting portions of config in error (migration script).

@L0crian thanks for the details: c-po's PR is part of the solution, but there is more to the story, as you point out.

Mar 25 2024, 4:55 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Viacheslav triaged T6172: Static routes not working with PPPoE and VyOS 1.4.0-epa2 as High priority.
Mar 25 2024, 4:09 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
andrin created T6172: Static routes not working with PPPoE and VyOS 1.4.0-epa2.
Mar 25 2024, 4:07 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
L0crian added a comment to T5991: 1.4.0-RC3 deleting portions of config in error (migration script).

It is not an actual ethernet interface, but you name it as an ethernet interface.
You can check the output sudo ip link show type wireguard or sudo ip link show type tun

Mar 25 2024, 3:54 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Viacheslav triaged T6171: Rename the DHCP server "failover" command to "high-availability mode" as Normal priority.
Mar 25 2024, 3:24 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T5991: 1.4.0-RC3 deleting portions of config in error (migration script).

It is not an actual ethernet interface, but you name it as an ethernet interface.
You can check the output sudo ip link show type wireguard or sudo ip link show type tun

Mar 25 2024, 2:42 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
n.fort changed the status of T6171: Rename the DHCP server "failover" command to "high-availability mode" from Open to In progress.
Mar 25 2024, 2:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort created T6171: Rename the DHCP server "failover" command to "high-availability mode".
Mar 25 2024, 2:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro claimed T6170: Comments via API.
Mar 25 2024, 1:38 PM · VyOS 1.5 Circinus
L0crian updated subscribers of T5991: 1.4.0-RC3 deleting portions of config in error (migration script).

I tested https://github.com/vyos/vyos-1x/pull/3173 today, and it definitely helps the original use-case of this task. Configuration calling interfaces that come up post-boot, like those installed from a container, persist. The one problem is the interface level config is still deleted on-boot from some check that is performed.

Mar 25 2024, 1:30 PM · Restricted Project, VyOS 1.4 Sagitta (1.4.1)
Viacheslav triaged T6170: Comments via API as Wishlist priority.
Mar 25 2024, 9:55 AM · VyOS 1.5 Circinus
penetal created T6170: Comments via API.
Mar 25 2024, 9:49 AM · VyOS 1.5 Circinus
Viacheslav triaged T6167: VNI not set on VRF after reboot as Normal priority.
Mar 25 2024, 8:52 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0-epa3)