I've tested with replacing deb source from http://archive.repo.saltstack.com to https://archive.repo.saltproject.io in vyos-build/data/defaults.json

In T1838#50692, @syncer wrote:

@Dmitry and i talked that it will be wise to move ipt-netflow for better performance

Thanks @Viacheslav, I've build a custom vyos 1.2.4 with nftables package because I want to add custom rules in nftables mode.

Same behaviour with compiled uacctd version from pmacct git 1.7.5-git (20191224-00):
packets are arriving correctly to nflog group (tcpdump shows them) but they aren't processed by uacct

tested with minimum aggregate options (no MAC, VLAN, interface, ...):

That seems to be a uacct problem (test inVyOS 1.3-rolling-201912201452 with new flow-accounting python/xml conf).

Added PR
https://github.com/vyos/vyos-1x/pull/190

Wow, you did it!!!
I’ll do some tests
But I don’t know to test on a current vyos build so I’ll have to wait until the PR are accepted.
I hope it will accepted asap.

Hello @zsdc
I didn't tested it.

I did some work porting vyatta-netflow to new vyos model

Hello @zsdc
I was also porting old style vyatta to a new one.
I've ported interface xml definition and almost finished the conf python script:

Resolved in commit fa85664ba050dab99d18d5d05018eea6a0fb0879

Yes, I know that the best way to do is a python rewriting from perl, I love perl :-(

wow christian, to move from iptables to nftables is not a small project.
As far I remember vyos has a quite complex iptables chains.
Bu in fact, I'm quite disconnected from vyos.

Well, I think that if someone has a system with only telnet as a remote access method, it could be anoying to update and realize that you have lost any chance to remote access.
I vote to maintain or add a script that convert telnet to ssh configuration.