@DuxOv8 feel free to test/check it. It will be available in the next rolling release (after the 15th of October)
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Thu, Oct 15
Thu, Oct 15
Viacheslav changed the status of T7150: Traffic marked invalid on bridge member interfaces from Open to In progress.
There's now a fix for this in https://github.com/vyos/vyos-1x/pull/5519
It would be great if a maintainer could take a look when there's time.
Wed, Oct 14
Wed, Oct 14
RBrunk added a comment to T9154: IPsec vti-up-down: DB keyed only by connection name causes admin-down of a VTI still carried by a live IKE_SA.
Another instance, VyOS Stream 2026.03 (vyos-1x 1.5dev0-3990-g9a296ec12), site-to-site to an Azure VPN Gateway (IKEv2, no reauth, DPD restart). On 2026-10-12 the vti was left admin-down while its CHILD_SA stayed INSTALLED: IKE and child SA reported up, BGP over the vti sat in Active, bytes out 0 for two days. /tmp/ipsec_vti_interfaces had lost the entry; reset vpn ipsec site-to-site peer re-ran up-client and recovered it. Confirms the DB key needs the SA identity (PLUTO_UNIQUEID), as proposed. Workaround in place: a cron job that re-raises any xfrm interface whose if_id matches an INSTALLED CHILD_SA (via vici) by re-running the updown hook's up path.
Viacheslav changed the status of T9462: PPTP silently ignores the configured MPPE encryption policy from Open to In progress.
This behaviour was observed on our current production version from January 2026.
I have tried it on the rolling version from the 7th October but i cannot get this version to work because it is affected by the interface renaming bug (T9291), so the WWAN interface will not come up at all.
I guess we have to wait until the bug is fixed before we can test if the bug we discovered is still applicable.
Viacheslav changed the status of T9463: Firewall migration can silently repoint a rule at the wrong group from Open to In progress.
Which version?
DarkDreamSan added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
Can this not be implemented directly with nftables, since it can match VRF members?
Wed, Oct 14, 12:53 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
arogers added a comment to T9463: Firewall migration can silently repoint a rule at the wrong group.
PR created: https://github.com/vyos/vyos-1x/pull/5559
PR created: https://github.com/vyos/vyos-1x/pull/5557
Tue, Oct 13
Tue, Oct 13
Will be available in the next rolling release.
Viacheslav triaged T9451: frr: every 'router bgp <ASN>' re-runs VRF route leaking over the whole VPN table as Normal priority.
Viacheslav triaged T9458: bgp: changing a peer-group's export route-map walks the whole table once per member as Normal priority.
Viacheslav triaged T9456: container: use in-kernel overlayfs instead of fuse-overlayfs on installed systems as Normal priority.
Viacheslav triaged T9459: bgp: an inbound policy change makes bgpd re-announce its table to every peer that refreshes as Normal priority.
Viacheslav triaged T9461: isis: FRR commit regenerates the router's LSPs and runs SPF on all IS-IS neighbors as Normal priority.
natali-rs1985 changed the status of T9300: VPP: GRE tunnel-type teb validation for a VPP bridge only checks the last member from Open to In progress.
natali-rs1985 changed the status of T9300: VPP: GRE tunnel-type teb validation for a VPP bridge only checks the last member, a subtask of T7070: VPP related bugs the root task, from Open to In progress.
Mon, Oct 12
Mon, Oct 12
Viacheslav added a comment to T8047: DHCP/netplug: Memory overusage with configurations with many interfaces.
Viacheslav closed T6304: Rewrite commit-archive to more structured CLI format, a subtask of T139: Commit archive backends, as Resolved.
Viacheslav changed the status of T7142: HAPROXY- update current version to 3.0 from Open to In progress.
Update HAProxy version to 3.0.29
PR https://github.com/vyos/vyos-build/pull/1324
Viacheslav triaged T9457: Add persistent IPv6 neighbor (NDP) binding logging for SLAAC address tracking as Low priority.
najieb_haswell added a comment to T8928: Backport Intel ice Out-Of-Tree driver (E825-C, E835-C support) to Stream and LTS, Related to T6847, T8147..
Another affected platform, confirming the need for this backport on 1.5 LTS.
Sun, Oct 11
Sun, Oct 11
cr0ntab added a comment to T9448: ospf: default-information originate and redistribute with metric-type 2 are flushed and re-originated on every FRR reload.
This was merged
6.1.0 is available on community Galaxy Colletion website, however, I need a bit of extra effort to make it pass RedHat certification for AAP, therefore I plan on 6.2.0
Sat, Oct 10
Sat, Oct 10
c-po changed Is it a breaking change? from none to compatible on T9454: frr: upgrade package to 10.7 series of FRRouting.
c-po changed the status of T9453: http-api: commit returns before the API server is back up after a reload - race from Open to In progress.
c-po updated the task description for T9452: GitHub: name pull request smoketest ISO after the PR number.
Thanks rherold 😊
I was still wondering, is there any take of the VyOS devs on the above?
Fri, Oct 9
Fri, Oct 9
Viacheslav moved T7542: Add support for "standalone" behavior of operational mode tag nodes from Need Triage to Completed on the VyOS Rolling board.
Viacheslav closed T7542: Add support for "standalone" behavior of operational mode tag nodes, a subtask of T7541: Make every operational command path unique, as Resolved.
Viacheslav closed T7542: Add support for "standalone" behavior of operational mode tag nodes as Resolved.
Viacheslav closed T6656: Fix minor typos uncovered by op-mode XML cache, a subtask of T7583: Implement a new operational command runner, as Resolved.
Viacheslav closed T6656: Fix minor typos uncovered by op-mode XML cache, a subtask of T6650: Add op-mode-definitions XML cache, as Resolved.
Viacheslav closed T7560: Add support for adding virtual tags to operational mode command nodes, a subtask of T7541: Make every operational command path unique, as Resolved.
Viacheslav closed T7578: Enforce operational mode command name uniqueness, a subtask of T7541: Make every operational command path unique, as Resolved.