Support#
The tiers#
| Tier | Who | Channel | Response |
|---|---|---|---|
| Unlicensed | anyone, forever | none | — |
| Pro | subscribers | 1 business day | |
| Business | subscribers | email and scheduled check-ins | 4 business hours |
Unlicensed is a real tier, not a trial that expires into a brick. A router with no licence signs you in, shows every page, counter, log and audit entry, and refuses only to change configuration. It comes with no support channel.
Before you write in#
There is no support-bundle command. Collect these by hand. Everything except
/health needs authentication; use an API token with the viewer role rather than a
copied session cookie, which is the habit that will bite you the first time you need a
command that changes something.
R=https://<router>:8443
T=wh_... # an API token with the viewer role
curl -sk $R/health # liveness, no auth
curl -sk -H "Authorization: Bearer $T" "$R/api/audit?limit=300" # who changed what, when
curl -sk -H "Authorization: Bearer $T" "$R/api/history" # commit revisionsThe agent's log is the journal on an appliance:
sudo journalctl -u wheelhouse-agent --since '1 hour ago'What to include#
- Both versions. The console banner's first line has them:
Wheelhouse <version> on VyOS <version>. - What you did and what happened. For a configuration problem, the exact
setordeletepath the editor showed you, and the router's own error text if it refused. - How to reproduce it.
wheelhouse-agent --demoreproduces most interface and API behaviour with no router at all, which makes a report something anyone can run. - The audit entries and the journal lines around the timestamp.
A security flaw does not go to support#
It goes through the disclosure process, which has its own windows. Please do not open an ordinary support thread describing a vulnerability.
Known gaps that generate tickets#
Listed here so nobody spends an afternoon proving them.
- A failed upgrade is not self-service. There is a documented recovery order and no rescue boot entry.
- No administrator can reset another account's second factor, and there are no recovery codes. A lost phone means console access and a hand-edited state file.
- App images are floating tags. If an install worked last month and fails today, the upstream image changed under you.
- Packet capture is not implemented. Diagnostics hands you the
monitor trafficcommand rather than pretending to run one.
The whole list is on the status page.
Read on#
- Pricing — what each tier costs, when a price exists.
- Beta.
- The wiki: support and troubleshooting.