Need to check with the latest rolling release, as we have more flexibility in the bridge firewall. But command set interfaces bridge br0 ip adjust-mss '1377', with no extra config, most probably won't have desired effect.

Thu, Jun 5, 8:15 PM · VyOS 1.4 Sagitta (1.4.3)

n.fort created T7526: adjust-mss not working on vlan aware bridge.

Thu, Jun 5, 8:12 PM · VyOS 1.4 Sagitta (1.4.3)

sarthurdev changed the status of T7056: OpenVPN error : Unable to bind the tunnel interface to bridge if misconfigured first from Open to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/4546

Thu, Jun 5, 3:06 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus

Viacheslav committed rVYOSONEXb5e120a2b4d1: T7524: Fix binary path for gwlbtun.

Thu, Jun 5, 2:44 PM

GitHub <noreply@github.com> committed rVYOSONEXb3ebf8f81afc: Merge pull request #4545 from sever-sever/T7524 (authored by dmbaturin).

Thu, Jun 5, 2:44 PM

Harliff updated the task description for T7525: 'show log firewall ipv4 name <name>' incorrectly handles long ruleset names.

Thu, Jun 5, 2:36 PM · VyOS 1.4 Sagitta

Harliff renamed T7525: 'show log firewall ipv4 name <name>' incorrectly handles long ruleset names from 'show firewall ipv4 name <name>' incorrectly handles long ruleset names to 'show log firewall ipv4 name <name>' incorrectly handles long ruleset names.

Thu, Jun 5, 2:33 PM · VyOS 1.4 Sagitta

Harliff updated the task description for T7525: 'show log firewall ipv4 name <name>' incorrectly handles long ruleset names.

Thu, Jun 5, 2:33 PM · VyOS 1.4 Sagitta

Harliff created T7525: 'show log firewall ipv4 name <name>' incorrectly handles long ruleset names.

Thu, Jun 5, 2:31 PM · VyOS 1.4 Sagitta

c-po claimed T7154: VyOS SSH TrustedUserCAKeys Limitation with X.509-only PKI .

Thu, Jun 5, 1:43 PM · VyOS Rolling

Viacheslav closed T1386: Different serial console speeds appear in default boot configuration, a subtask of T2452: Serial console related issues, as Resolved.

Thu, Jun 5, 1:01 PM · VyOS 1.3 Equuleus (1.3.6)

Viacheslav closed T1386: Different serial console speeds appear in default boot configuration as Resolved.

Could be closed

vyos@r14# grep speed /opt/vyatta/etc/config/config.boot
            speed "115200"
[edit]
vyos@r14#

Thu, Jun 5, 1:01 PM · VyOS Rolling, Bugs

Viacheslav closed T6761: OSPF smoketest fail as Resolved.

Thu, Jun 5, 12:59 PM · Bugs, VyOS 1.5 Circinus

Viacheslav closed T7174: Bump host-sflow version to v2.1.11-5 to build with VPP feature as Resolved.

Thu, Jun 5, 12:59 PM · VyOS Rolling

Viacheslav closed T7173: Bump keepalived version to 2.3.2, a subtask of T840: VRRP V3 backup router sending ND RA, as Resolved.

Thu, Jun 5, 12:58 PM · VyOS Rolling

Viacheslav closed T7173: Bump keepalived version to 2.3.2 as Resolved.

Thu, Jun 5, 12:58 PM · VyOS Rolling

Viacheslav moved T7342: Add apply_patches option for the build packages script from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Thu, Jun 5, 12:56 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)

Viacheslav closed T7342: Add apply_patches option for the build packages script as Resolved.

Thu, Jun 5, 12:56 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)

Viacheslav moved T7414: Conntrack Rule Fails When Using Comma-Separated Ports from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Thu, Jun 5, 12:55 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

Viacheslav edited projects for T7414: Conntrack Rule Fails When Using Comma-Separated Ports, added: VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.

Thu, Jun 5, 12:55 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

Viacheslav closed T7414: Conntrack Rule Fails When Using Comma-Separated Ports as Resolved.

Thu, Jun 5, 12:54 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

Viacheslav closed T7503: Add smoketest and config test for VPP NAT as Resolved.

Thu, Jun 5, 12:54 PM · VyOS Rolling

Viacheslav added a comment to T7524: The aws-gwlbtun service cannot start.

PR https://github.com/vyos/vyos-1x/pull/4545

Thu, Jun 5, 10:57 AM · VyOS Rolling

Viacheslav changed the status of T7524: The aws-gwlbtun service cannot start from Open to In progress.

Thu, Jun 5, 10:27 AM · VyOS Rolling

Viacheslav triaged T7524: The aws-gwlbtun service cannot start as Normal priority.

Thu, Jun 5, 10:25 AM · VyOS Rolling

Viacheslav created T7524: The aws-gwlbtun service cannot start.

Thu, Jun 5, 10:25 AM · VyOS Rolling

a.apostoliuk moved T7349: Add FRR ip import-table x feature to import routes from non-main kernel table from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Thu, Jun 5, 9:44 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

a.apostoliuk moved T7349: Add FRR ip import-table x feature to import routes from non-main kernel table from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Thu, Jun 5, 9:44 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

a.apostoliuk closed T7349: Add FRR ip import-table x feature to import routes from non-main kernel table as Resolved.

Thu, Jun 5, 9:44 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

a.apostoliuk added projects to T7349: Add FRR ip import-table x feature to import routes from non-main kernel table: VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3).

Thu, Jun 5, 9:44 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

a.apostoliuk changed the status of T7349: Add FRR ip import-table x feature to import routes from non-main kernel table from In progress to Needs testing.

Thu, Jun 5, 9:15 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

a.apostoliuk closed T7157: Route leaking using route-map as Resolved.

Thu, Jun 5, 9:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

a.apostoliuk moved T7157: Route leaking using route-map from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Thu, Jun 5, 9:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

a.apostoliuk moved T7157: Route leaking using route-map from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Thu, Jun 5, 9:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

a.apostoliuk moved T7157: Route leaking using route-map from Need Triage to Completed on the VyOS Rolling board.

Thu, Jun 5, 9:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

natali-rs1985 added a comment to T7515: VPP NAT44 timeouts does not work.

https://github.com/vyos/vyos-vpp/pull/36

Thu, Jun 5, 8:36 AM · VyOS Rolling

a.apostoliuk moved T7471: Change the completion helper for CoA port configuration from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Thu, Jun 5, 8:19 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus, VyOS Rolling

a.apostoliuk moved T7471: Change the completion helper for CoA port configuration from Open to Finished on the VyOS 1.5 Circinus board.

Thu, Jun 5, 8:19 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus, VyOS Rolling

a.apostoliuk closed T7471: Change the completion helper for CoA port configuration as Resolved.

Thu, Jun 5, 8:18 AM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus, VyOS Rolling

Viacheslav changed the status of T7523: PPPoE Discovery and Wake-on-LAN Traffic marked invalid on bridge interfaces from Open to In progress.

Thu, Jun 5, 8:00 AM · VyOS Rolling

opswill added a comment to T7523: PPPoE Discovery and Wake-on-LAN Traffic marked invalid on bridge interfaces.

PR: https://github.com/vyos/vyos-1x/pull/4544

Thu, Jun 5, 4:28 AM · VyOS Rolling

opswill created T7523: PPPoE Discovery and Wake-on-LAN Traffic marked invalid on bridge interfaces.

Thu, Jun 5, 4:02 AM · VyOS Rolling

Wed, Jun 4

natali-rs1985 changed the status of T7515: VPP NAT44 timeouts does not work, a subtask of T7070: VPP related bugs the root task, from Open to In progress.

Wed, Jun 4, 6:49 PM · VyOS Rolling

natali-rs1985 changed the status of T7515: VPP NAT44 timeouts does not work from Open to In progress.

Wed, Jun 4, 6:49 PM · VyOS Rolling

Viacheslav closed T7520: Implement HAproxy X-Forwarded-For http header as Invalid.

Wed, Jun 4, 2:40 PM · VyOS Rolling

rherold added a comment to T7209: Configured conntrack on input affects on forward.

I stumbled over it today on my 1.4 boxes. It would be nice to have the possibilty to exclude forwarding traffic from conntrack

Wed, Jun 4, 2:17 PM · VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

cmarbach added a comment to T7520: Implement HAproxy X-Forwarded-For http header.

Sorry, my bad, capturing traffic send from the haproxy to the backend actually contains the X-Forwarded-For header. Simply close my request and thanks for the quick answer / interaction.

Wed, Jun 4, 2:04 PM · VyOS Rolling

mykolaba triaged T7522: Firewall commit errors should identify which rule caused the failure as Normal priority.

Wed, Jun 4, 1:51 PM · VyOS 1.4 Sagitta

Harliff created T7522: Firewall commit errors should identify which rule caused the failure.

Wed, Jun 4, 1:47 PM · VyOS 1.4 Sagitta

Viacheslav added a comment to T7520: Implement HAproxy X-Forwarded-For http header.

Would you like to create a PR?

Wed, Jun 4, 1:43 PM · VyOS Rolling

cmarbach added a comment to T7520: Implement HAproxy X-Forwarded-For http header.

You're right, headers for port and protocol are being added but not the host.

Wed, Jun 4, 1:26 PM · VyOS Rolling

GitHub <noreply@github.com> committed rVYOSONEX5b4a665a81a0: Merge pull request #4533 from jestabro/api-commit-confirm (authored by Viacheslav).

Wed, Jun 4, 1:12 PM

jestabro committed rVYOSONEXb73fc84c4ab5: http-api: T3955: add commit-confirm to endpoints /configure /config-file.

Wed, Jun 4, 1:12 PM

Viacheslav added a comment to T7520: Implement HAproxy X-Forwarded-For http header.

It already should work if the backend mode http https://github.com/vyos/vyos-1x/blob/a711ceb80158a1dcdeecd1570ca705684d636327/data/templates/load-balancing/haproxy.cfg.j2#L199-L203
Can you re-check?

Wed, Jun 4, 1:00 PM · VyOS Rolling

mykolaba closed T7480: Cannot post bug report as Wontfix.

Wed, Jun 4, 12:59 PM

cmarbach added a comment to T7520: Implement HAproxy X-Forwarded-For http header.

Well, it could be an option in the load-balancing haproxy service definition, something like "option forwardedfor" that would enable the http header and feed it with real client IP.

Wed, Jun 4, 12:50 PM · VyOS Rolling

Viacheslav changed the status of T7521: Add AWS gateway load-balanceing tunnel handler gwlbtun for sagitta from Open to In progress.

Wed, Jun 4, 12:42 PM · VyOS 1.4 Sagitta (1.4.3)

Viacheslav triaged T7521: Add AWS gateway load-balanceing tunnel handler gwlbtun for sagitta as Normal priority.

Wed, Jun 4, 12:41 PM · VyOS 1.4 Sagitta (1.4.3)

Viacheslav created T7521: Add AWS gateway load-balanceing tunnel handler gwlbtun for sagitta.

Wed, Jun 4, 12:41 PM · VyOS 1.4 Sagitta (1.4.3)

ryanzuwala added a comment to T7480: Cannot post bug report.

If it helps with the investigation, the bug report in question is T7482. I had to trim the text down quite a bit for the Task Tracker to allow me to create it.

Wed, Jun 4, 12:38 PM

Viacheslav triaged T7520: Implement HAproxy X-Forwarded-For http header as Wishlist priority.

Any idea for CLI?

Wed, Jun 4, 12:11 PM · VyOS Rolling

cmarbach created T7520: Implement HAproxy X-Forwarded-For http header.

Wed, Jun 4, 11:14 AM · VyOS Rolling

evgbondarenko updated subscribers of T7480: Cannot post bug report.

@mykolaba unfortunately, it's impossible because, according to our current Cloudflare plan, events are only available within the last 72 hours.

Wed, Jun 4, 10:27 AM

Viacheslav moved T7514: Smoketest QoS limiter fails from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Wed, Jun 4, 10:07 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Viacheslav closed T7514: Smoketest QoS limiter fails as Resolved.