I think we should go for option #2, since it's pretty flexible now. The old disable-uniqreqids option can be migrated to never on every connection.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jul 30 2025
Jul 30 2025
Viacheslav triaged T7667: Smoke test cli/test_vpn_ipsec.py typo makes DPD check always pass as Normal priority.
Viacheslav edited projects for T7667: Smoke test cli/test_vpn_ipsec.py typo makes DPD check always pass, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.5 Circinus, VyOS 1.4 Sagitta.
Jul 29 2025
Jul 29 2025
c-po edited projects for T7403: container: cannot remove image when used by more then one tag, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus.
Jul 28 2025
Jul 28 2025
Viacheslav added a comment to T7662: QAT support is not detected on Intel C62x virtual function devices.
In VyOS 1.3, this command was used to integrate with StrongSwan's uniqueids=no setting in ipsec.conf, facilitating environments requiring non-unique IKE_SAs. However, with StrongSwan's transition to swanctl.conf, such unique ID management should ideally be performed via the connections.<conn>.unique parameter. More details about the migration you can find here.
dmbaturin renamed T7662: QAT support is not detected on Intel C62x virtual function devices from Allow QAT on Intel C62x virtual function devices to QAT support is not detected on Intel C62x virtual function devices.
dmbaturin renamed T7662: QAT support is not detected on Intel C62x virtual function devices from Allow QAT on Intel C62x devices to Allow QAT on Intel C62x virtual function devices.
Viacheslav changed the status of T7581: IPsec service fails after upgrading from 1.3.8 to 1.4.2 if protocol all is configured from Open to In progress.
c-po moved T7648: Set up a linter check to check complete files for syntax errors and missing imports from Need Triage to Completed on the VyOS Rolling board.
Jul 27 2025
Jul 27 2025
Also I realized, that the insert_failed and drop counters of conntrack are increasing:
Jul 26 2025
Jul 26 2025
I forgot to mention, that deleting the vrf_zones table "fixes" the issue.
Hi! I think I am hitting a similar/the same bug with a very minimal configuration.
Jul 25 2025
Jul 25 2025
Jul 24 2025
Jul 24 2025
Jul 23 2025
Jul 23 2025
Jul 22 2025
Jul 22 2025
jestabro closed T6704: [vyos-1x] unlimited _noteworthy in vyos.airbag cause memory leak as Resolved.
jestabro moved T6704: [vyos-1x] unlimited _noteworthy in vyos.airbag cause memory leak from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
I understand what you're saying. And I'm not suggesting that 4461 be reverted - it does fix the earlier bug you mentioned where the default route from SLAAC wasn't being cleared.
This "error" is related to https://github.com/vyos/vyos-1x/pull/4461.
hedrok added a comment to T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels.
Tried to fix here: https://github.com/vyos/vyos-1x/pull/4616
Restricted Repository Identity closed T7648: Set up a linter check to check complete files for syntax errors and missing imports as Resolved by committing rVYOSONEX135c2d392090: Merge pull request #4615 from c-po/t7648-Makefile-fix.
Jul 21 2025
Jul 21 2025
jestabro edited projects for T7319: Add warning message for unsaved changes in the dialog before initiating an upgrade, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus.
@Viacheslav I just did some local testing with 3 VMs. A VM with today's rolling release to simulate a home router, a blank Debian VM for host testing, and a Sagitta VM simulating an ISP (running dhcpv6-server and router-advert services)
Unknown Object (User) added a comment to T6962: FRR zebra: Kernel routes are not updated properly.
Fixed in FRR master: https://github.com/FRRouting/frr/pull/17544
c-po changed the status of T7648: Set up a linter check to check complete files for syntax errors and missing imports from Open to In progress.
Unknown Object (User) changed the status of T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels from Open to In progress.
Unknown Object (User) assigned T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels to hedrok.
Could be related to T7379 changes
Jul 20 2025
Jul 20 2025
Viacheslav edited projects for T7646: IPv6 default route disappears after upgrade, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta.
Jul 19 2025
Jul 19 2025
c-po changed the status of T7642: certbot: when using acme certificate, error received "name 'add_cli_node' is not defined" from Open to Confirmed.
Jul 15 2025
Jul 15 2025
dmbaturin edited projects for T7544: Trying to create a VRF named "vni" leads to an unhandled exception, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
Viacheslav changed the status of T7545: Command 'show vpn debug peer <peer_name>' does not work correctly from In progress to Needs testing.
Jul 14 2025
Jul 14 2025
dmbaturin renamed T7526: Adjust-mss not working on VLAN-aware bridge from adjust-mss not working on vlan aware bridge to Adjust-mss not working on VLAN-aware bridge.
dmbaturin edited projects for T7521: Add AWS gateway load-balanceing tunnel handler gwlbtun for sagitta, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7545: Command 'show vpn debug peer <peer_name>' does not work correctly, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
Viacheslav added a project to T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels: Restricted Project.
dmbaturin edited projects for T7504: Add the option "timeout" for DPD in IKEv2, added: VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus.
dmbaturin edited projects for T7495: FRR does not redistribute BGP table x routes, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
We need a precise spec for it, what's required to support it. We also need a testing environment. I do think it would be nice to support it, but I wonder if it would bring many new customers.
dmbaturin edited projects for T7454: Add flavor for VMware vCloud director, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7410: The tech support script fails on machines without a USB controller, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7370: Add "show log conntrack" op command, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7271: PIMD crashes, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7234: Local User Commits Get Stuck When TACACS Servers Are Unavailable, added: VyOS Rolling, VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T6969: Issues with OSPF Route Redistribution, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T6516: ISIS - advertise-passive-only not install route in the RIB, added: VyOS 1.4 Sagitta (1.4.4), VyOS Rolling; removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7425: vyos.utils.io.is_interactive() is unsupported when running under vyos.configd.service, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7420: Pass credentials to download commands in environment variables, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7368: NAT log enable is not migrated after upgrading to 1.4.2, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T4627: Ability to set host part IPv6 address via interface IP token, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7319: Add warning message for unsaved changes in the dialog before initiating an upgrade, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7209: Configured conntrack on input affects on forward, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7134: Add hwloc package to get info and generate CPU NUMA topology, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7040: Losing configuration after a power failure/reset, added: VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T6962: FRR zebra: Kernel routes are not updated properly, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T6941: cloud-init cannot clean up previously downloaded instance data, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T6097: vrf_zones blocking ipv6 traffic, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T5811: static dhcp-interface routes not installed, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7562: Command 'set vpn ipsec disable-uniqreqids' does nothing, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
Jul 11 2025
Jul 11 2025
Jul 9 2025
Jul 9 2025
dmbaturin edited projects for T7268: Add op-mode command for all interfaces on host, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus (1.5-stream-2025-Q2).
Jul 6 2025
Jul 6 2025
c-po moved T7591: Remove copyright years from source files from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T7591: Remove copyright years from source files from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
c-po moved T7591: Remove copyright years from source files from Open to 1.5-stream-2025-Q2 on the VyOS 1.5 Circinus board.
c-po moved T7591: Remove copyright years from source files from Need Triage to Completed on the VyOS Rolling board.
Jul 1 2025
Jul 1 2025
c-po edited projects for T7403: container: cannot remove image when used by more then one tag, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.3).
Jun 28 2025
Jun 28 2025
Jun 26 2025
Jun 26 2025
Viacheslav triaged T7582: IPSec VPN: Add support for `port` to associate with protocol for policies as Normal priority.
Jun 25 2025
Jun 25 2025
Jun 24 2025
Jun 24 2025
Unknown Object (User) edited projects for T7571: Inconsistent MAC address behaviour on bond interfaces, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.2).
May 28 2025
May 28 2025
dmbaturin edited projects for T7268: Add op-mode command for all interfaces on host, added: VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.5 Circinus, VyOS 1.4 Sagitta.
May 8 2025
May 8 2025