Page MenuHomeVyOS Platform
Create Task
Maniphest T8533

Bug: rpki cache source-address only works with ipv4
Not ApplicablePublic
Actions

Description

In T5810 you added support for the source address parameter for an rpki cache. Thank you for that, this is very helpful to me.

I finally had time to update my router to version 1.5.0 and use the feature. This works well for IPv4. For IPv6, however, only a v4 source IP is allowed, which doesn't make much sense. Neither in shell completion or when entering it manually.

(User names, hostnames, and internal IP addresses have been replaced)

IPv4 works:

user@r2.domain# set protocols rpki cache AA.AA.AA.AA source-address BB.BB.BB.BB
[edit]
user@r2.domain# compare
[protocols rpki cache AA.AA.AA.AA]
+ source-address "BB.BB.BB.BB"

IPv6 fails:

user@r2.domain# set protocols rpki cache AAAA::AAAA source-address 
Possible completions:
   <x.x.x.x>            IPv4 source address
   127.0.0.1            
   AA.AA.AA.A         
   AA.AA.AA.B        
   AA.AA.AA.C        
   AA.AA.AA.D        
   AA.AA.AA.E         
   AA.AA.AA.F         
   AA.AA.AA.G        

      
[edit]
user@r2.domain# set protocols rpki cache AAAA::AAAA source-address BBBB::BBBB

  Error: BBBB::BBBB is not a valid IPv4 address
  
  
  
  Invalid value
  Value validation failed
  Set failed

[edit]

Details

Version
1.5.0
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

Loremo created this task.Apr 19 2026, 8:17 PM
Loremo created this object in space S1 VyOS Public.
Loremo changed the edit policy from "Custom Policy" to "Maintainers (Project)".Apr 19 2026, 8:17 PM
pasik subscribed.Apr 20 2026, 6:23 AM
natali-rs1985 subscribed.Apr 21 2026, 2:03 PM

@Loremo have you tried to configure this directly via vtysh?
From my testing, IPv6 source addresses are not accepted. The CLI only allows A.B.C.D, and attempting to use an IPv6 address results in an unknown command:

vyos@vyos# vtysh

Hello, this is FRRouting (version 10.5.2).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

vyos# config
vyos(config)# rpki
vyos(config-rpki)# rpki cache tcp 2001:db8::10 9090 source 
  A.B.C.D  Define a Source IP Address
vyos(config-rpki)# rpki cache tcp 2001:db8::10 9090 source 2001:db8::1 preference 1
% Unknown command: rpki cache tcp 2001:db8::10 9090 source 2001:db8::1 preference 1

So this looks like an upstream limitation rather than a VyOS-specific issue.

Loremo added a comment.Apr 24 2026, 12:15 PM

Yes you are correct. :-(

Viacheslav closed this task as Not Applicable.Apr 24 2026, 12:37 PM
Viacheslav subscribed.

@Loremo open please an issue/feature for the FRR https://github.com/FRRouting/frr/issues
We are happy to integrate it once it is available in the upstream.

The task can be closed for now.