The following commands will enable nftables flowtable offload on interfaces eth0 eth1:

```
set ...

container: T5563 Fix environment replaced by label

FRR supports a new way of configuring VLAN-to-VNI mappings for EVPN-VXLAN, when
working with the...

T4072: add firewall bridge filtering.

T5554: Disable sudo for PAM RADIUS

Revert Sonar "Create build.yml"

login: T4754: show configured 2FA OTP key

Disable sudo for PAM RADIUS template that slows down the CLI commands
To fix it add:

session [d...

This reverts commit 7a99a59b338fecd73d34819a0a95646c054a0f12.
SonarCloud is not configured for n...

Currently VyOS has `protocol igmp` option to enable IGMP querier and reports through FRR's pimd....

smoketest: T5558: Extend configtest to allow checking of migration script results

T5412: Add support for extending config-mode dependencies in add-on packages

system: T5555: Fix time-zone migrator changing valid time-zones to UTC

Add support for defining config-mode dependencies in add-on packages.

conntrack: T4309: T4903: Refactor `system conntrack ignore`, add IPv6 support and firewall groups

T5489: Add sysctl TCP congestion control by default to BBR

T5423: Fix for op-mode show vpn ike secrets

interface: T5550: Interface source-validation priority over global value

config-mgmt: T5353: normalize archive updates and commit log entries

The legacy config-mgmt/save-config tools had an abiding bug that would
raise an error if compari...

T5480: Ability to disable SNMP for keepalived service VRRP

When using `virtual-server` alongside Keepalived, there can be
situations where the `vrrp` key i...

- Migrate IPv4 source-validation to nftables
- Interface source-validation value takes priority,...

T5548: Fix load-balancing reverse-proxy timeouts

T2958: Fix path for leases to config directory

* netns:
smoketest: T5241: re-work netns assertions and provide common utility helper
netns:...

We don't use ipsec.secrets anymore
Fix op-mode for "show vpn ike secrets".
Ability to get "RAW" ...

Add by default sysctl TCP congestion control to BBR.
Default value `cubic` is not optimal.

net....

By default we enable `--snmp` for keepalived unit service
Add ability to disable it

set high-av...

The leases path should be in `/config` directory to save leases
between reboots.
The typo was in...

By default haproxy uses timeouts in millisecond but we set timeouts
in seconds from CLI
Fix temp...

T2958: Refactor DHCP-server systemd unit and lease

T5496: multiple fixes for op-mode command <show firewall>

T671: call dmidecode directly in "show hardware dmi"

The old script isn't doing much, in fact, it's much less informative
than actual dmidecode

Render isc-dhcp-server systemd unit from configuration

T5533: Fix VRRP IPv6 group enters in FAULT state

Checks if an IPv6 address on a specific network interface is
in the tentative state. IPv6 tentat...

feat(T5544): Allow CAP_SYS_MODULE to be set on containers

Signed-off-by: Anthony Rabbito <[email protected]>

Signed-off-by: Anthony Rabbito <[email protected]>

* 'T5241-control-edition' of https://github.com/sever-sever/vyos-1x:
T5241: Support netns for ...

The following command expects to join source-specific multicast group 239.1.2.3
on interface et...

Commit 6896aabb6 ("wireless: T5540: fix VHT capability settings for 802.11ac"
changed how the VH...

Add AWS load-balancing tunnel handler
https://aws.amazon.com/blogs/networking-and-content-delive...

T5536: Fix show dhcp client leases

Fix helpers was moved to vyos.utils package
Fix empty new address from the lease file causes
OSE...

T5531: Containers add label option

eapol: T4782: Support multiple CA chains

Ability to set labels for container

set container name c1 allow-host-networks
set container nam...

T5496: firewall: fix op-mode command show firewall

T5519: Fix `vyos.utils.process.call` hangs

See https://vyos.dev/T5519 for more information.

firewall: T5080: Disable conntrack unless required by rules

github: Labeler needs to run on `pull_request_target`

Ref: https://github.com/actions/labeler#permissions

github: Set permissions for label workflow

qos: T5018: Fix dependents only being set for QoS interfaces

firewall: T3509: Add support for IPv6 reverse path filtering

T5502: firewall: add validator for interface matcher