VyOS 1.2.0-rc10 is available for download

VyOS 1.2.0-rc10 is available for download from https://downloads.vyos.io/?dir=testing/1.2.0-rc10 

Resolved issues

The following issues have been fixed:

  • If you save your configuration on a system booted from a livecd, you will be offered to copy it to the installed image (T1047).
  • EFI GRUB can now be installed in a removable location (T1023).
  • The "run show vpn ipsec sa" command now works correctly for SAs with non-zero traffic counters (T956).
  • IPsec SA in/out traffic counters are not displayed in human-readable units (T956).

Issues that need testing

We have a bunch of issues that need testing. Please tell us if the following features work for you, or help us figure out a reproducing procedure! We need to make sure they are resolved before we make a stable 1.2.0 release, but we are either unable to reproduce them because they are hardware-specific and we don't have required hardware anywhere; or we cannot reproduce them using the provided procedure, which may mean either that the procedure is incomplete, or that the bug is already fixed.

  • Kernel crashed under (network) load with gen5 Mellanox cards (T1014).
  • Broken 6rd tunnel implementation (T1000).
  • Problem with Intel XL710 NICs (T961).
  • L2TPv3 interfaces sometimes not loaded on boot (T942).
  • OSPF process crashing on peer reboot (T922).
  • BGP process doesn't start on boot (T904).

Additionally, we would like to know if DMVPN and SNMP integration with routing protocols are working well for you. If you've seen any of those issues, or, to the contrary, you can confirm that you've never seen them, please let us know.

11 responses
Hi, My first time attempting to contribute to this great product, so please bare a little with me. Just upgraded me running rc7 to rc10 as I saw the "show vpn ipsec sa" is supposed to be fixed in this release, this time instead not showing correct up/down status, I get a new error: Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_ipsec_sa.py", line 51, in raise e File "/usr/libexec/vyos/op_mode/show_ipsec_sa.py", line 45, in bytes_in = hurry.filesize.size(bytes_in) File "/usr/lib/python3/dist-packages/hurry/filesize/filesize.py", line 100, in size if bytes >= factor: TypeError: unorderable types: NoneType() >= int() Should I create a bug report or something like that, and if so is there an instruction to do so properly? Thanks
DMVPN is a very useful function, let us save the cost of purchasing CISCO router, because this function, the boss also gave me a bonus, our dozens of branch offices are connected with DMVPN and OSPF, which is simply too much to praise. SNMP is a necessary function of traffic monitoring, which is very suitable for us.
The new version of VRRP also adds unicast functionality. You are so good. Love you.
Does DMVPN support the device behind a NAT device
IPsec behind NAT is problematic as it is, but DMVPN behind NAT is impossible, not least because NHRP has to advertise routable addresses as GRE endpoints.
6 visitors upvoted this post.