1.2.3
1.2.3 is a maintenance and feature backport release made in September 2019.
New features
HTTP API
T1524 “set service dns forwarding allow-from <IPv4 net|IPv6 net>” option for limiting queries to specific client networks
T1503 Functions for checking if a commit is in progress
T1543 “set system contig-mangement commit-archive source-address” option
T1554 Intel NIC drivers now support receive side scaling and multiqueue
Resolved issues
T1209 OSPF max-metric values over 100 no longer causes commit errors
T1333 Fixes issue with DNS forwarding not performing recursive lookups on domain specific forwarders
T1362 Special characters in VRRP passwords are handled correctly
T1377 BGP weight is applied properly
T1420 Fixed permission for log files
T1425 Wireguard interfaces now support /31 addresses
T1428 Wireguard correctly handles firewall marks
T1439 DHCPv6 static mappings now work correctly
T1450 Flood ping commands now works correctly
T1460 Op mode “show firewall” commands now support counters longer than 8 digits (T1460)
T1465 Fixed priority inversion in VTI commands
T1468 Fixed remote-as check in the BGP route-reflector-client option
T1472 It’s now possible to re-create VRRP groups with RFC compatibility mode enabled
T1527 Fixed a typo in DHCPv6 server help strings
T1529 Unnumbered BGP peers now support VLAN interfaces
T1530 Fixed “set system syslog global archive file” command
T1531 Multiple fixes in cluster configuration scripts
T1537 Fixed missing help text for “service dns”
T1541 Fixed input validation in DHCPv6 relay options
T1551 It’s now possible to create a QinQ interface and a firewall assigned to it in one commit
T1559 URL filtering now uses correct rule database path and works again
T1579 “show log vpn ipsec” command works again
T1576 “show arp interface <intf>” command works again
T1605 Fixed regression in L2TP/IPsec server
T1613 Netflow/sFlow captures IPv6 traffic correctly
T1616 “renew dhcpv6” command now works from op mode
T1642 BGP remove-private-as option iBGP vs eBGP check works correctly now
T1540, T1360, T1264, T1623 Multiple improvements in name servers and hosts configuration handling
Internals
/etc/resolv.conf
and /etc/hosts
files are now managed by the
vyos-hostsd service that listens on a ZMQ socket for update messages.