PR:
https://github.com/vyos/vyos-1x/pull/3443

Maybe we should change firewall priority, and make sure all interfaces are defined in the system before loading firewall?

PR: https://github.com/vyos/vyos-1x/pull/3442

Sorry for the noise - see workaround

I'm re-opening until we make a final decision

See details and explanation in subtask T6327; notably, one can configure as system console, but setting at boot has limited use.

The service webproxy is deprecated and will be removed in 1.5

It can be handy to have the option to have it disabled (or you can just in bash-mode do "apt-get remove intel-microcode --purge" if you dont want it after install) but it should be enabled by default due to security reasons.

Please consider making the microcode updates optional, and possible to load a specified file downloaded separately from the CPU vendor, independent of VyOS updates.
Some possible edge cases:

• running VyOS in a VM (microcode update has no effect in the guest anyway, needs to be done in the hypervisor)
• microcode update released in a hurry breaks something, need to revert to an older one
• microcode update reduces performance, doesn't improve security of VyOS (because it's not a typical multi-user system with untrusted users who can run any programs)
• microcode update has important fixes, but it will take time before a new LTS is released, or VyOS can't be updated because the subscription has expired

I think this was resolved at some point, but I ended up removing it (the accept-protocol stuff) from my config since it didn't appear necessary and was causing issues, so I'm not certain.

set policy local-route doesn't make sense to me to have a geoip network group, however geoip in set policy route allows for greater flexibility while performing routing to ensure traffic traverse through specific destination for compliance and regulatory purposes.

@alainlamar can you check my PR https://github.com/vyos/vyos-1x/pull/3430 ?

Behavior change for this issue was fix some month ago in migration scripts, in order to remain action "return" when upgrading from older versions to new syntax.

Note that the work in the link above, but for the get_commit_schedule function itself, has already been added in subtasks T6319/T6146. As mentioned above, the get_commit_schedule function is not useful (and potentially misleading) until we replace the legacy commit algorithm in 1.5. Remove 1.4.0 tag.

speed test info:

looks like the problem doesn't reproduce on the newest VyOS version (1.5 and 1.4)

Should be fixed in https://github.com/vyos/vyos-build/pull/600

Please review and approve/merge https://github.com/vyos/vyos-github-actions/pull/2

Mostly impossible for policy local-route
I'm not expecting that it will be implemented at all.

with the fix n.fort put in this feature is greatly sort after, definitely a thump up from me.

Yes this is indeed resolved after switching to 1.5-rolling-202405070019, thank you so much @n.fort and @Viacheslav

https://github.com/vyos/vyos-1x/pull/3421 Merged

Further tests in lab shows that non-ehternet interfaces are needed in order to offload traffic as expected. An example is when using wireguard interface: in order to offload traffic, it's necessary to add interface wgX to the flowtable.
Otherwise, it won't work as expected

Shouldnt this be adjusted in more files and places?

PR: https://github.com/vyos/vyos-1x/pull/3424