Page MenuHomeVyOS Platform

Support UPNP protocol
In progress, NormalPublicFEATURE REQUEST

Description

UPNP protocol information:

Maybe we should consider supporting UPNP on Vyos

We can consider introducing miniupnpd_nftables

The implementation must rely on miniupnpd based on the nftables back end

There seems to be a miniupnpd_nftables available at the above Debian image address

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

jack9603301 triaged this task as Wishlist priority.Mar 22 2021, 8:33 AM
jack9603301 updated the task description. (Show Details)

There are genuine use cases, especially for small/home networks. But UPnP is a literal minefield of problems, and on top of that has had some serious security issues in the past due to fundamental design. If you were going to do this, I would want it off by default.

@Asteroza With Vyos, any service should be turned off by default unless it is explicitly configured by the user

jack9603301 changed the task status from Open to In progress.Mar 25 2021, 4:42 PM
jack9603301 raised the priority of this task from Wishlist to Normal.
jack9603301 moved this task from Need Triage to In Progress on the VyOS 1.4 Sagitta board.

UPnP is something I require (as a home user with multiple gaming systems), so I'm very happy to see this making progress in VyOS. I've been getting tired of the mess over in pfSense/OPNsense-land, wanting to try a Linux-based router, and I'm familiar with VyOS from past experience with "EdgeOS" on Ubiquiti hardware so it was on the top of my list, but held back by lack of UPnP in the past.

In short, thank you Jack (and anybody else who contributes to this)!

@ZPrime Although UPNP is not merged, you are welcome to test it if you wish, and if you have any questions, please let me know (you can also get in touch with me on Stack) so I can fix it before merging

@jack9603301 Unfortunately the only environment I have to test in is home, and my wife would probably kill me. ;) I also don't have a second "router PC" available right now which I would need before I can spin up VyOS and give it a try. I need to keep the other system untouched so I have something I can fall back on if I can't make VyOS work the way I want, and the hardware is old enough that if I virtualize my router OS, network performance suffers. I tried using ESXi with OPNsense and WAN throughput was down 200-300Mbps vs. what I can do on the bare metal.

I have a somewhat complicated home setup with dual-WAN and PBR that is forcing specific devices out certain WAN links, so the setup is a bit complicated to migrate from OPNsense to something new.

I've been looking at new router hardware though, so once I have that, I may have the ability to help test. I'll get in touch with you when/if I can help!

Thank you. If you have any questions, please keep in touch.

Unfortunately the only environment I have to test in is home, and my wife would probably kill me.

Oh, my God, please don't say that. I think it's a bit of an exaggeration.