PR: https://github.com/vyos/vyos-1x/pull/1922

Re Opening this task, since same error is present again

PR: https://github.com/vyos/vyos-1x/pull/1905

I have certain doubts about it.
Netfilter documentation is not always perfect, and many times you may find out some different options.

PR: https://github.com/vyos/vyos-1x/pull/1890

I'll work on it on the next days.
I'll keep you posted!

PR: https://github.com/vyos/vyos-1x/pull/1889

PR: https://github.com/vyos/vyos-1x/pull/1871

Have you try getting same result using VRRP transitions scripts?

Yes @syncer . One option is for source and other for destination.

A 2nd proposal could be:

When internal hosts are behind NAT, this is working as expected, because of conntrack.

PR: https://github.com/vyos/vyos-1x/pull/1820

Thanks Keving: https://vyos.dev/T5009

Error still present in 1.4: https://vyos.dev/T5004

In Both version, restarting relay service solved the issue:

I can confirm this behavior, which occurs when changing IP address on listening interface (where dhcp-discover is captured).
Issue present in 1.3.2 .
It's also present in latest vyos-1.4-rolling-202302140317, regardless if old interface syntax is used, or if new upstream-interfces plus listen-interface commands are used.

Can you provide this configuration on both setups:

Then lets close it

I have prepared a configuration example using one of the latest 1.4 images, where more features were introduced.
Scenario and requirements:

• One vyos router
• 3 Uplinks to internet (eth0, eth1 and eth2). Static IP used on three links
• 2 VLANs
  • vif 2: + New Connections from vif-2 routed through WAN-2 + Server on vif 2 should accept ssh connections from internet, through dnat on 3 WAN interfaces (outside port 122)
  • vif 4: + NewConnections from vif-24routed through WAN-2 + Server on vif 4 should accept ssh connections from internet, through dnat on 3 WAN interfaces (outside port 222)

I would prefer a different syntax, in order to avoid the necessity attaching it to an interface. Maybe something like:

Error detected in forum: https://forum.vyos.io/t/unable-to-query-snmp-anymore-in-a-more-recent-1-4-version/10388/3
Fix for that bug: https://github.com/vyos/vyos-1x/pull/1805

PR for 1.4: https://github.com/vyos/vyos-1x/pull/1777

Error seems to be present only when bonding interface is configured.

PR: https://github.com/vyos/vyos-1x/pull/1718

@aserkin . Viacheslav commands are present in more recent nighly builds.
Try with one of the latests images.

Error also present in vyos-1.4-rolling-202212020318

PR Draft: https://github.com/vyos/vyos-1x/pull/1677

PR: https://github.com/vyos/vyos-1x/pull/1666

From my point of fiew, looks interesting.
The proposed structure and behaviour doesn't look that different than what is currently in geoip filtering: external URLs with data, and sync from time to time.

Maybe a simplified and interactive cli, as when adding new image? So user can decide what to do with other images and containers.

PR: https://github.com/vyos/vyos-1x/pull/1626

PR: https://github.com/vyos/vyos-1x/pull/1603

+1 for @Viacheslav proposal.