The only requirement I have for this change is that the MTU versus performance conflict should be resolved completely on our side and be transparent to users. Maybe by tuning buffers data-size so they fit Jumbo frames when needed, if this solves the problem.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 30 2026
Jul 30 2026
Viacheslav added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
Do you know the version where it worked at all?
I believe we didn't pass those info to the health check scripts. If so, it should be a feature request and not a bug report.
Companion PR for the CLI side: https://github.com/vyos/vyatta-cfg/pull/153
Viacheslav closed T9124: Fix smoketest build script interrupting on error within a unit test as Resolved.
Viacheslav changed the status of T9140: Include version and flavor information in the live image boot screen from Open to In progress.
Viacheslav triaged T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start as Normal priority.
Jul 29 2026
Jul 29 2026
lujiefsi added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.
i report them on github security advisor
Viacheslav triaged T9130: http-api: mid-life config session loss wedges /configure until process restart as Normal priority.
natali-rs1985 changed the status of T9134: QoS: 'ether protocol X' match crashes commit from Open to In progress.
a.apostoliuk added a comment to T9137: Unexpected behavior when disabling IPSec peer with connection-type trap.
About point 2.
I observe that traffic that matches peer policies is encrypted. BUT this peer is disabled.
If I execute sudo swanctl -L , it shows nothing. But if I execute sudo ip xfrm policy, it shows polices, that were disabled in the configuration.
I think the root cause is rtradv = conf.get_config_dict(base, key_mangling=('-', '_'), get_first_key=True) in service_router-advert.py ,not sure why need key_mangling .
Jul 28 2026
Jul 28 2026
Viacheslav changed the status of T9128: protocols nhrp: cannot commit a second tunnel with 'redirect' — duplicate nftables meter name breaks firewall rules from Open to In progress.
Viacheslav closed T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules, a subtask of T6720: FIPS140-2/3 Validation, as Resolved.
natali-rs1985 triaged T9139: VPP: Missing check of interface usage in features on interface removal as Normal priority.
natali-rs1985 changed the status of T9139: VPP: Missing check of interface usage in features on interface removal from Open to In progress.
Viacheslav changed the status of T9133: fstrim systemd timer/unit does effectively nothing from Open to In progress.
a.apostoliuk triaged T9137: Unexpected behavior when disabling IPSec peer with connection-type trap as Normal priority.
Viacheslav reassigned T8391: Bonding interface permission errors with custom ethernet MTU from o.kuchmystyi to RC.
a.apostoliuk triaged T9136: The feature disable-route-autoinstall does not take effect until IPSec is restarted as Normal priority.
o.kuchmystyi added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.
Jul 27 2026
Jul 27 2026
The real cause is in the PKI/ACME pipeline. When an ACME cert is issued, pki.py imports the intermediate as pki ca AUTOCHAIN_<cert> and triggers dependent services (HAProxy included) to regenerate within the same commit. But that regeneration reuses an in-memory config object whose cache was already populated before the import happened, so it never sees the new CA. HAProxy's chain logic then has nothing to find.
c-po closed T8926: Upgrade iproute2 package to match Kernel 6.18, a subtask of T8147: Update Linux Kernel to 6.18, as Resolved.
On Stream 2026.03 (runned virtualized in Proxmox, the virtual drive is configured with discard and ssd in VM-guest settings i Proxmox and the host drive is using ZFS) it do seem to be working when running with sudo but not without sudo:
Bug reproduced on image 2026.07.21-1151-rolling and proposed patch tested.
Forgot to mention that lacking proper FS trimming has a very negative impact when running VyOS virtualised and having the filesystem sitting on a thin provisioned volume, like for instance LVM thin. The absence of discard commands coming from the virtual node does not allow the cleaning of unused blocks.
natali-rs1985 added a comment to T8468: MAC address modifying on a VPP interface does not take effect.
Viacheslav changed the status of T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration) from Open to In progress.
jestabro claimed T9130: http-api: mid-life config session loss wedges /configure until process restart.
A PR was submitted:
https://github.com/vyos/vyos-1x/pull/5353/changes
Viacheslav changed the status of T9108: dhcp: dhclient unicast RENEW to a dead server can stick until lease end from Open to In progress.
evgmol changed the status of T7284: Delete firewall description not possible from In progress to Needs reporter action.
@RubenNL thanks for looking into this
I believe the module is misused, that is why the result is not as expected.
evgmol renamed T7496: Can't disable `ipv6-src-route` after enabling it from Can't disable `ipv6-src-route` after enabling it to Can't disable `ipv6-src-route` after enabling it.
Jul 26 2026
Jul 26 2026
Hi @syncer @sever and @dmbaturin !
Can we discuss the need in this feature.
JunOS has never implemented it (despite the PR above), yet vyos.vyos seems to use ActonNetworkModule from netcommon Galaxy collection - it is maintained, patched and works well.
Having own action plugin will mean we will need to build it separately and maintain to meet Ansible version.
Jul 25 2026
Jul 25 2026
Jul 24 2026
Jul 24 2026
Viacheslav changed the status of T9109: dhcp: stop dhclient with -x (no RELEASE) so INIT-REBOOT and HA lease seeds work from Open to In progress.
Viacheslav triaged T9110: Containers with port-mappings doesnt seem to work when using VRFs as Normal priority.
Viacheslav triaged T9111: Increase max memory and shared-memory settings for containers as Normal priority.
c-po closed T9003: Introduce new vyos.utils.process.cmdl() helper for improved security as Resolved.
c-po closed T9070: Remove remaining cmd() occurances with cmdl(), a subtask of T9003: Introduce new vyos.utils.process.cmdl() helper for improved security, as Resolved.
@doctorpangloss any news?
Do you have steps to reproduce? If yes, provide the minimal set of commands and version.
Viacheslav closed T9040: Build FIPS-provider OpenSSL version, a subtask of T6720: FIPS140-2/3 Validation, as Resolved.
Yes, I can confirm that it works the same with multiple users in the system:
vyos@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history 600 vyos:users vyos@vyos1:~$ su - testuser testuser@vyos1:~$ pwd /home/testuser testuser@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history 600 testuser:users