Same bug, with a second cost beyond CPU/log noise, plus a tested workaround.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Wed, Oct 21
Wed, Oct 21
Nick added a comment to T6616: vyos-hostsd reloads pdns-recursor frequently, even when no config change.
Tue, Oct 20
Tue, Oct 20
evgmol renamed T9412: vyos_vrf: Removes an existing bind-to-all on apply. from T9412: vyos_vrf: Removes an existing bind-to-all on apply. to vyos_vrf: Removes an existing bind-to-all on apply..
evgmol renamed T9412: vyos_vrf: Removes an existing bind-to-all on apply. from vyos_vrf: Removes an existing bind-to-all on apply. to T9412: vyos_vrf: Removes an existing bind-to-all on apply..
Confirmed issue and resolution using option 1 on 2026.10.20-0026-rolling release (manually edited geoip.py).
saadinnocent909 added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
Tomorrow I will give it a try and update you.
PR https://github.com/vyos/vyos-build/pull/1331 but the fix for T9493 must be merged before. I can't create teh PR in the moment cause the PR number limit.
I reproduced this and tested Kea 3.2.1 on a rolling VM (2026.10.16-0024-rolling).
rherold added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
@saadinnocent909 there is no ISO or rolling image with the fix, the PR (https://github.com/accel-ppp/accel-ppp-ng/pull/42) is still in review. Here is a test build of the three changed files that you can put on an existing rolling system:
rherold added a comment to T9442: frrender: after a failed FRR apply, later commits do not reapply the FRR configuration.
I reproduced this on a rolling VM and have a fix. I can not open a pull request for it: GitHub limits me to 5 open pull requests in vyos/vyos-1x and all 5 are in use. The commit is on my fork, anyone can take it as it is or I open the PR as soon as a slot is free:
a.kudientsov changed Version from 1.5-rolling-20261018 to 1.5.1, 1.5-rolling-20261018 on T9491: interfaces: mirror/redirect targets lack reverse-dependency check, delete drops the source at boot.
saadinnocent909 added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
can you share me patched iso or lates rolling release includes the PR ?
rherold updated subscribers of T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
Two additions: how serious the open CVEs are, and a simpler way to get to 5.x through T7557.
rherold added a comment to T9492: DNS forwarding: render the pdns-recursor configuration as YAML (needed for 5.x and Debian trixie).
I prepared this as a draft PR so that someone else can continue if needed: https://github.com/vyos/vyos-1x/pull/5585
rherold added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
I implemented option one with PR https://github.com/vyos/vyos-build/pull/1329
rherold added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
Summary of what I found, and a question on the direction.
Viacheslav triaged T9491: interfaces: mirror/redirect targets lack reverse-dependency check, delete drops the source at boot as Normal priority.
rherold added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
@Viacheslaw I will take care. Can you assign it to me?
Viacheslav changed the status of T9460: config-mgmt: rollback-soft and the commit-confirm revert run one command per changed line and take minutes on large configs from Open to In progress.
Viacheslav triaged T9490: IPv6 link-local address is lost after an interface down/up outside a commit and is not restored as Normal priority.
Viacheslav changed the subtype of T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping from "Task" to "Bug".
Viacheslav added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
I think we are OK to use even pdns-recursor-5.4.6
Be sure that it fixes the issue, and feel free to add a PR with package build, you can find an example of build HAProxy
saadinnocent909 added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
I can test
rherold added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
@saadinnocent909 can you test my PR in your environment?
ch4nn0n closed T9097: haproxy: support TLS health checks without TLS to the backend (check-ssl) as Resolved.
Merged:
Mon, Oct 19
Mon, Oct 19
woodsb02 added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
Thanks for doing the work to replicate the issue.
saadinnocent909 added a comment to T9211: VPP PPPoE with RADIUS Idle-Timeout: sessions drop every 60 s, accounting reports 0 bytes used.
I was testing vyos as BNG for my network especially with vpp. But I faced same issue. I hope issue will be resolved soon
rherold added a comment to T9490: IPv6 link-local address is lost after an interface down/up outside a commit and is not restored.
Reproduced on a VM (rolling, kernel 6.18.55-vyos) with the steps from the description:
rherold added a comment to T9489: powerdns won't resolve both entries from system static-host-mapping and dhcp-server static-mapping.
I reproduced this on a VM with rolling (PowerDNS Recursor 4.8.8, pdns-recursor 4.8.8-1+deb12u1) and the cause is in the recursor, not in vyos-hostsd or the addNTA lines. The addNTA lines only set DNSSEC negative trust anchors, they do not take part in resolving names.
c-po closed T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references as Resolved.
Restricted Repository Identity closed T9476: smoketest: bgp: shorten test_protocols_bgp runtime by dropping a fixed sleep and redundant commits as Resolved by committing Restricted Diffusion Commit.
Viacheslav triaged T9488: vyos_facts: Wrong ansible_net_model / ansible_net_serialnum. as Normal priority.
Viacheslav triaged T9487: vyos_bgp_global: Commit fails: Configuration path … is not valid. as Normal priority.
Viacheslav triaged T9486: vyos_bgp_address_family: Sessions never come up: No BGP neighbors found as Normal priority.
Viacheslav triaged T9478: vyos.vyos: lint cleanup (flake8 F401, stale version references) as Normal priority.
Viacheslav changed the subtype of T9485: IS-IS: SRv6-only configuration also enables SR-MPLS from "Task" to "Bug".
We do not have the iso flavor
vyos_bld@fae3ff9bbe25:/vyos/work/tmp/vyos-build$ sudo make iso ./build-vyos-image iso I: Checking if packages required for VyOS image build are installed I: using build flavors directory data/build-flavors E: Build flavor "iso" does not exist! make: *** [Makefile:39: iso] Error 1
Viacheslav triaged T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each as Normal priority.
Viacheslav changed the subtype of T9328: Add prometheus input to telegraf from "Task" to "Feature Request".
I have created a PR for this
https://github.com/vyos/vyos-1x/pull/5561
a.kudientsov added a comment to T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down.
- Same result: no stuck VLAN in any test, including 15 full-table bond rebuilds each. The PR defers the sync, because that also handles other VPP-side changes made during a resync, not only the MTU.
rherold added a comment to T9481: VPP linux-cp: a VLAN that comes up during the netlink overflow resync is pushed back to admin-down.
@a.kudientsov thanks for the detailed report and the reproducer. You wrote that you have local patches for both parts (skipping the drain in lcp_nl_pair_add_cb when
there is no socket, and the state sync during the resync window) that remove the stuck state in your tests.
rherold added a comment to T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.
I checked this against current rolling and the description matches what I see in the sources:
rherold added a comment to T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each.
Because of that the fix belongs in FRR: batch a hard clear (BGP_CLEAR_SOFT_NONE) also when a family is given. Then clearing a group with a family filter is fast as well.
FRR issue: https://github.com/FRRouting/frr/issues/23771. I also opened a patch with a topotest: https://github.com/FRRouting/frr/pull/23779.
rherold added a comment to T9483: bgp: 'reset ip bgp peer-group' clears the members one by one, with a full table walk each.
I looked at this in the FRR source (stable/10.5 and master, same code), and the cause is a bit wider than the ip token.
Sun, Oct 18
Sun, Oct 18
c-po changed the status of T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references from Open to In progress.
c-po added a comment to T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.
Implementation superseeded by https://github.com/vyos/vyos-1x/pull/5579
a.kudientsov updated the task description for T9484: VPP netlink: receive buffer is silently capped at 4 MiB by 'net.core.rmem_max'; the configured 256 MiB is not applied.
a.kudientsov changed the status of T9451: frr: every 'router bgp <ASN>' re-runs VRF route leaking over the whole VPN table from Open to In progress.
a.kudientsov changed the status of T9450: bgp: commits re-send unchanged BGP settings to FRR from Open to In progress.
Removing bgpq3 from data/live-build-config/package-lists/vyos-utils.list.chroot resolves the error. I must have had dragged it with me in my own version of that file.
c-po renamed T9477: Remove no longer needed executable bit from conf_mode and migration helper scripts from Remove no longer needed executable bot from conf_mode scripts to Remove no longer needed executable bit from conf_mode and migration helper scripts.
c-po changed Version from - to rolling on T9477: Remove no longer needed executable bit from conf_mode and migration helper scripts.
Sat, Oct 17
Sat, Oct 17