Page MenuHomeVyOS Platform
Feed All Stories

Apr 20 2024

Viacheslav renamed T6255: Static table description should not contain white-space from Static table description. should not contain white-space to Static table description should not contain white-space.
Apr 20 2024, 5:50 AM · VyOS 1.4 Sagitta (1.4.0-epa3), Restricted Project
Viacheslav created T6255: Static table description should not contain white-space.
Apr 20 2024, 5:48 AM · VyOS 1.4 Sagitta (1.4.0-epa3), Restricted Project
Viacheslav triaged T6254: Extend VRF table number as Wishlist priority.
Apr 20 2024, 5:24 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav created T6254: Extend VRF table number .
Apr 20 2024, 5:23 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav moved T6242: Add an option to disable certificate verification to reverse proxy from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Apr 20 2024, 2:54 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a project to T6242: Add an option to disable certificate verification to reverse proxy: VyOS 1.4 Sagitta (1.4.0-epa3).
Apr 20 2024, 2:54 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
tjh updated the task description for T6253: no-default-route not being honoured.
Apr 20 2024, 2:13 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
tjh updated the task description for T6253: no-default-route not being honoured.
Apr 20 2024, 2:05 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
tjh triaged T6253: no-default-route not being honoured as Normal priority.
Apr 20 2024, 2:05 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Apr 19 2024

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXe50eb3c942ce: T5996: add smoketest to check translation of backslash character (authored by jestabro).
Apr 19 2024, 11:49 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX37c1ac4f2ce6: T5996: selectively escape and restore single backslashes in config (authored by jestabro).
Apr 19 2024, 11:49 PM
fernando claimed T6252: GRE tunnels don't allow configuring MTU larger than 8024.
Apr 19 2024, 9:10 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
fernando created T6252: GRE tunnels don't allow configuring MTU larger than 8024.
Apr 19 2024, 9:10 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Embezzle closed T6242: Add an option to disable certificate verification to reverse proxy as Resolved.

Tested as working in: VyOS 1.5-rolling-202404190019

Apr 19 2024, 7:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po added a project to T6244: Improve formatting in "show system uptime": VyOS 1.5 Circinus.
Apr 19 2024, 2:45 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
dmbaturin changed Is it a breaking change? from none to compatible on T6246: Add support for server health checks to reverse proxy.
Apr 19 2024, 11:50 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
dmbaturin closed T6246: Add support for server health checks to reverse proxy as Resolved.
Apr 19 2024, 11:50 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5a8310147b85: T6246: adds basic haproxy http-check configuration (authored by nvollmar).
Apr 19 2024, 11:48 AM
nvollmar committed rVYOSONEX785616393557: T6246: adds basic haproxy http-check configuration.
Apr 19 2024, 11:48 AM
GitHub <noreply@github.com> committed rVYOSONEX89b56ef6da19: Merge pull request #3325 from nvollmar/haproxy-http-check (authored by dmbaturin).
Apr 19 2024, 11:48 AM
n.fort added a project to T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.3 Equuleus (1.3.7).
Apr 19 2024, 9:46 AM
n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.

And do you have similar setup and situation in newer version?

Apr 19 2024, 9:46 AM
Viacheslav triaged T6251: Extend table number limits for policy route-map set table as Wishlist priority.
Apr 19 2024, 7:53 AM · VyOS Rolling, Restricted Project
Viacheslav created T6251: Extend table number limits for policy route-map set table.
Apr 19 2024, 7:53 AM · VyOS Rolling, Restricted Project
Viacheslav triaged T6250: "policy route-map set table" cannot be deleted from the rule as Normal priority.
Apr 19 2024, 7:45 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav created T6250: "policy route-map set table" cannot be deleted from the rule.
Apr 19 2024, 7:45 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav moved T6035: random-detect QoS policies cause commit failures due to a missing tc parameter (avpkt) from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Apr 19 2024, 5:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav closed T6035: random-detect QoS policies cause commit failures due to a missing tc parameter (avpkt) as Resolved.
Apr 19 2024, 5:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav moved T6221: Enabling VRF breaks connectivity from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Apr 19 2024, 4:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav moved T6221: Enabling VRF breaks connectivity from Open to Finished on the VyOS 1.5 Circinus board.
Apr 19 2024, 4:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav edited projects for T6221: Enabling VRF breaks connectivity, added: VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.0-epa2).
Apr 19 2024, 4:38 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav closed T6221: Enabling VRF breaks connectivity as Resolved.
Apr 19 2024, 4:37 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6249: ISO builder fails because of changed buster-backport repository as High priority.
Apr 19 2024, 4:30 AM · VyOS 1.3 Equuleus (1.3.6)
MattK added a comment to T6249: ISO builder fails because of changed buster-backport repository.

This is the result of buster-backports being removed from the main repository server: https://backports.debian.org/news/Removal_of_buster-backports_from_the_debian_archive/

Apr 19 2024, 3:02 AM · VyOS 1.3 Equuleus (1.3.6)
PeppyH added a comment to T5153: OpenConnect route restriction via iptables is ignored.

Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?

Apr 19 2024, 1:17 AM

Apr 18 2024

jmn added a comment to T6249: ISO builder fails because of changed buster-backport repository.

Hi,
I was playing around with VyOS and thought i'd build myself an iso and hit this issue. Not sure if its the correct way to solve it, but this is what I did:

Apr 18 2024, 11:36 PM · VyOS 1.3 Equuleus (1.3.6)
syncer assigned T5907: cloud-init root task for 1.5 and 1.4 to zsdc.
Apr 18 2024, 10:21 PM · VyOS Rolling
syncer assigned T6117: Bug in cloud-init when MTU in network_data.json is set to 'null' to zsdc.
Apr 18 2024, 10:21 PM · VyOS Rolling, Bugs
syncer reassigned T5752: Check compatibility of new image tools with XCP-NG images from jestabro to Viacheslav.
Apr 18 2024, 10:04 PM · VyOS 1.4 Sagitta (1.4.0-GA)
jestabro claimed T6103: DHCP-server bootfile-name double slash syntax weird behaviour.
Apr 18 2024, 7:37 PM · VyOS 1.4 Sagitta (1.4.0-epa3), vyatta-cfg-dhcp-server
jestabro added a project to T6111: Minor revision to unicode support in configtree backend: VyOS 1.4 Sagitta (1.4.0-epa3).
Apr 18 2024, 6:08 PM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
jestabro claimed T5986: Container: Error on commit when environment variable value contains \n line break.

This will be resolved after backport of T5996.

Apr 18 2024, 5:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro closed T6245: Unhandled exception in "show openvpn server" as Resolved.
Apr 18 2024, 5:30 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro moved T6245: Unhandled exception in "show openvpn server" from Open to Finished on the VyOS 1.5 Circinus board.
Apr 18 2024, 5:30 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
GitHub <noreply@github.com> committed rVYOSONEX63eb47d62eff: Merge pull request #3331 from vyos/mergify/bp/sagitta/pr-3330 (authored by jestabro).
Apr 18 2024, 5:29 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3976eebd3d10: openvpn: T6245: return 'n/a' if client info not available (authored by jestabro).
Apr 18 2024, 5:25 PM
jestabro committed rVYOSONEXa43f1c00bdc5: openvpn: T6245: return 'n/a' if client info not available.
Apr 18 2024, 5:24 PM
GitHub <noreply@github.com> committed rVYOSONEX8bb55a50d08b: Merge pull request #3330 from jestabro/show-openvpn-fail (authored by dmbaturin).
Apr 18 2024, 5:24 PM
jestabro added a project to T5996: Incorrect behavior for backslash escapes in config save and compare commands: VyOS 1.4 Sagitta (1.4.0-epa3).
Apr 18 2024, 5:24 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.

Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?

Apr 18 2024, 5:21 PM
Viacheslav placed T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS up for grabs.
Apr 18 2024, 4:50 PM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.7)
Viacheslav edited projects for T4732: need an option for VRF name when you specify location for commit-archive, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Apr 18 2024, 4:46 PM · Restricted Project, VyOS Rolling
Viacheslav closed T4422: WAN load-balance status failed on all interfaces if one of them failed, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Wontfix.
Apr 18 2024, 4:39 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav closed T4422: WAN load-balance status failed on all interfaces if one of them failed as Wontfix.

Test addresses have to be different

Apr 18 2024, 4:39 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T4422: WAN load-balance status failed on all interfaces if one of them failed, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to Needs reporter action.
Apr 18 2024, 4:29 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav changed the status of T4422: WAN load-balance status failed on all interfaces if one of them failed from Open to Needs reporter action.
Apr 18 2024, 4:29 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T4422: WAN load-balance status failed on all interfaces if one of them failed.

Provide the set of the commands to reproduce

Apr 18 2024, 4:28 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav removed a project from T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.4 Sagitta.
Apr 18 2024, 4:25 PM
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
Apr 18 2024, 3:44 PM · VyOS 1.3 Equuleus (1.3.6)
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
Apr 18 2024, 3:44 PM · VyOS 1.3 Equuleus (1.3.6)
GitHub <noreply@github.com> committed rVYOSONEXcc2458dfc74a: Merge pull request #3329 from vyos/mergify/bp/sagitta/pr-3326 (authored by dmbaturin).
Apr 18 2024, 2:28 PM
Viacheslav changed the status of T6221: Enabling VRF breaks connectivity from Open to Needs testing.
Apr 18 2024, 2:25 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jestabro claimed T6245: Unhandled exception in "show openvpn server".

PR:
https://github.com/vyos/vyos-1x/pull/3330

Apr 18 2024, 2:24 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
rusnino created T6249: ISO builder fails because of changed buster-backport repository.
Apr 18 2024, 2:15 PM · VyOS 1.3 Equuleus (1.3.6)
dmbaturin added a project to T6245: Unhandled exception in "show openvpn server": VyOS 1.4 Sagitta (1.4.0-epa3).
Apr 18 2024, 2:14 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX6d15ae068e47: T6221: Return default ip rule values after deleting VRF (authored by Viacheslav).
Apr 18 2024, 2:13 PM
Viacheslav committed rVYOSONEXce0bc35f8b5f: T6221: Return default ip rule values after deleting VRF.
Apr 18 2024, 2:13 PM
GitHub <noreply@github.com> committed rVYOSONEX3a50e87584a8: Merge pull request #3326 from sever-sever/T6221 (authored by dmbaturin).
Apr 18 2024, 2:13 PM
dmbaturin edited projects for T5986: Container: Error on commit when environment variable value contains \n line break, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
Apr 18 2024, 2:10 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a project to T5471: Conntrack logging doesnt seem to be working: VyOS 1.5 Circinus.
Apr 18 2024, 1:44 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
Viacheslav added a comment to T5471: Conntrack logging doesnt seem to be working.

The old implementation used this script and https://github.com/vyos/vyatta-conntrack/blob/current/src/vyatta-conntrack-logging.c for the logging and it seems not impelemted for the current
At least there is not mention of the log

Apr 18 2024, 1:43 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEXe8f93864cf72: Merge pull request #3328 from vyos/mergify/bp/sagitta/pr-3327 (authored by jestabro).
Apr 18 2024, 12:51 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXbbe0821213b7: pki: T6241: do not call dependency before its initialization (authored by jestabro).
Apr 18 2024, 12:43 PM
sarthurdev committed rVYOSONEXa88b3bd344cc: pki: T6241: do not call dependency before its initialization (authored by jestabro).
Apr 18 2024, 12:42 PM
GitHub <noreply@github.com> committed rVYOSONEXfc3fd89a6fa4: Merge pull request #3327 from sarthurdev/T6241 (authored by jestabro).
Apr 18 2024, 12:42 PM
Viacheslav added a comment to T5549: Result of system audit by Lynis.

Without subtasks, it is going to be dead.
@Apachez It is not clear what you want to fix exactly. Fix all and do all working well could be related to any task.

Apr 18 2024, 12:11 PM · Invalid
Viacheslav edited projects for T5673: Enable `CONFIG_DEBUG_INFO_DWARF5` and `CONFIG_DEBUG_INFO_BTF` in the Linux kernel, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Apr 18 2024, 12:07 PM
Viacheslav removed a project from T5731: Add ability to call config dependencies by canonical function instead of whole script: VyOS 1.4 Sagitta.
Apr 18 2024, 12:00 PM · VyOS Rolling
Viacheslav edited projects for T5737: Eigrp #11301 - Configuration failed error type: validation, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Apr 18 2024, 11:59 AM · VyOS Rolling, Bugs
Viacheslav closed T5755: Running set pki ca NAME certificate with a name with spaces breaks the config as Not Applicable.

Not reproduced on VyOS 1.5-rolling-202404141045

vyos@r-left# set pki ca "my test ca name" certificate 'MIIDnTCCAoWgAwIBAgIUFvyB2rY0V1V6AaIpPWHCftGRwN8wDQYJKoZIhvcNAQELBQAwVzELMAkGA0IxEzARBgNVBAgMClNvbWUtU3RhdGUxEjAQBgNVBAcMCVNvbWUtQ2l0eTENMAsGA1UECgwEVnlPUzEQMA4GA1UEAwwHdnlvcy5pbzAeFw0yNDA0MTgxMTM3MzZaFw0yOTA0MzZaMFcxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApTb21lLVN0YXRlMRIwEAYDVQQHDAlTb21lLUNpdHkxDTALBgNVBAoMBFZ5T1MxEDAOBgNVBAMMB3Z5b3MuaW8wggEiMA0GCQEBAQUAA4IBDwAwggEKAoIBAQCKEVxs7gdzmnN4iMinvXN1vdGaT+v3TOnHSXbBkWHnt9YdWmo8UoqFpVqyVM3E8xmoT+3HOXJeWkKArEpMkGo93kWaGo0f25KGEFWbS2ttgNA9cqH9PGa42XTKyTY+5ZoIWaQQzNNiUSaIoslRrMSV4V2yQs90ECxR37ezlV2RAIHEhZ6mizUkMkuSmdjqRolh2tpF1MoisyhspFPXBC6lJ8d0jFZEi1tP3tlQjqVEWPjTvtddy34iOLFeUjBF5cOwfmpVLzWBVLbIxJr5ZHamGeQIabn36Jg1u0+/6p7hb8avqBW4dT0K8UykWVqgjQ4W4rM7AgMBAAGjYTBfMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUxEx+IVaoLb7M/SW9AkCVRaXCNTUwDQYJKoZIhvcNAQELBQADggEBAGjV6WiH4Z+hfdANG8oWgY0xsHmUZg8dCjwqO5GMwjBVIuu8GuoZu0JobtLa097behWcgCkwjvKBffuwCu542WbFkxdXzBLZjSAc+K3itegZIuy4jqRO5z6Q0IbPSaFUhR4HhfwejwlyXgjNCFzEMzwoDL2/3PXjWyilkqthYyFcx092tgwiXtnfO9z9Xm/YQHQmRG2VWzLEwucOhV698xnqFgRJk3uKqcDN9KjF+5v32OQ0eis7GHn1aJim5aUee1nnCRFdQO0llNJRwF6fIaICzKLwa7zzMjF7HhRehh5kpwY8omcQX7xYz7GJag4='
Apr 18 2024, 11:43 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5755: Running set pki ca NAME certificate with a name with spaces breaks the config: VyOS 1.5 Circinus.
Apr 18 2024, 11:32 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav edited projects for T5756: L2TP RADIUS backup and weight settings, added: Restricted Project; removed VyOS 1.4 Sagitta.
Apr 18 2024, 11:30 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav removed projects from T5761: Allow PPPoE interface to be assigned IPv6 address via DHCPv6: VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta.

@dotAndy Is it still relevant?
Can you create a PR?

Apr 18 2024, 11:28 AM · VyOS Rolling
Viacheslav edited projects for T5810: Add support for RPKI source IP, added: VyOS 1.5 Circinus, Restricted Project; removed VyOS 1.4 Sagitta.
Apr 18 2024, 11:23 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav removed a project from T5843: Rollback refactoring: VyOS 1.4 Sagitta.
Apr 18 2024, 11:19 AM · VyOS Rolling
Viacheslav placed T2003: BGP FQDN capability has improper hostname after new image install up for grabs.
Apr 18 2024, 11:12 AM · VyOS Rolling
Viacheslav changed the status of T1790: OSPF Exchanged Routes marked as invalid when run through a GRE PTMP/PTP OSPF between peers from Open to Needs reporter action.

@SquirePug re-check please with the latest rolling image.

Apr 18 2024, 11:12 AM
Viacheslav reopened T2003: BGP FQDN capability has improper hostname after new image install as "Needs reporter action".
Apr 18 2024, 11:10 AM · VyOS Rolling
Viacheslav closed T2003: BGP FQDN capability has improper hostname after new image install as Resolved.

@jmaslak can you check the latest rolling image?

Apr 18 2024, 11:09 AM · VyOS Rolling
Viacheslav changed the status of T2616: BFD Configuration causes flapping from Needs testing to Needs reporter action.
Apr 18 2024, 11:06 AM
Viacheslav added a comment to T2616: BFD Configuration causes flapping.

@kroy can you re-test this case?

Apr 18 2024, 11:06 AM
Viacheslav added a project to T3393: IPoE does not assign IPv6 PD or WAN address: VyOS 1.5 Circinus.
Apr 18 2024, 10:28 AM
tjh added a comment to T6248: <device> ip source-validation 'strict' - doesn't set /proc/sys/net/ipv4/conf/<device>/rp_filter.

Closed invalid - this is done with nftables now.

Apr 18 2024, 10:09 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
tjh closed T6248: <device> ip source-validation 'strict' - doesn't set /proc/sys/net/ipv4/conf/<device>/rp_filter as Invalid.
Apr 18 2024, 10:08 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a comment to T6247: Add CGN "full cone" EIF support per RFC6888 REQ-7.

Related topic https://github.com/Chion82/netfilter-full-cone-nat/issues/42

Apr 18 2024, 9:05 AM · VyOS Rolling
Apachez added a comment to T5572: Add capability for sending Gratuitous ARP (GARP) and the equal for IPv6.

It would be handy if the GARP announcement wouldnt be a separate list but rather picked up from any DNAT or SNAT rules.

Apr 18 2024, 7:58 AM · VyOS 1.5 Circinus
Viacheslav added a comment to T6221: Enabling VRF breaks connectivity.

PR https://github.com/vyos/vyos-1x/pull/3326

Apr 18 2024, 7:39 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav lowered the priority of T5169: Add CGNAT Carrier-Grade NAT based on nftables from High to Normal.
Apr 18 2024, 6:02 AM · VyOS Rolling, VyOS 1.5 Circinus
Apachez added a comment to T6248: <device> ip source-validation 'strict' - doesn't set /proc/sys/net/ipv4/conf/<device>/rp_filter.

Probably related:

Apr 18 2024, 4:35 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a comment to T6247: Add CGN "full cone" EIF support per RFC6888 REQ-7.

. We need the feature regardless of the state of the repository.

Apr 18 2024, 4:11 AM · VyOS Rolling