The IS-IS daemon leaks memory during its shortest-path calculation. When a node in the topology has more than 64 equal-cost adjacencies, FRR trims the excess entries but does not release their memory.

Fri, Sep 18, 12:26 PM · VyOS Rolling

b3r1k created T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel.

Fri, Sep 18, 11:06 AM · VyOS Rolling

chris.blackburn added a comment to T8855: Refer to WWAN modems by unique identifier.

This is a duplicate of T7487 which has an open PR against is so I think this ticket should be closed.

Fri, Sep 18, 10:24 AM · VyOS Rolling

b3r1k added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

Rather than rejecting "interval 0" in verify(), the change leaves the directive
out of the generated file: "keepalive" only stands for "ping" and "ping-restart",
and the server branch of the template sets neither on its own, so an absent
directive is the keepalive-off the interval asked for. Nothing needs a migration
and a saved configuration still commits.

Fri, Sep 18, 10:23 AM · VyOS Rolling

ordex added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

This is a regression caused by the version bump we just merged (from 2.7.5 to 2.7.7).
The following commit

Fri, Sep 18, 9:54 AM · VyOS Rolling

SrividyaA created T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF.

Fri, Sep 18, 9:44 AM · VyOS Rolling

a.kudientsov created T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

Fri, Sep 18, 8:09 AM · VyOS Rolling

SrividyaA created T9333: Add mpls bgp l3vpn-multi-domain-switching option.

Fri, Sep 18, 6:00 AM · VyOS Rolling

Thu, Sep 17

arogers added a comment to T9332: GeoIP source/destination nftables set collision.

Created PR - https://github.com/vyos/vyos-1x/pull/5487

Thu, Sep 17, 11:20 PM · VyOS Rolling

arogers created T9332: GeoIP source/destination nftables set collision.

Thu, Sep 17, 11:03 PM · VyOS Rolling

cr0ntab added a comment to T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.

Update: the fix moved to vyos-1x, https://github.com/vyos/vyos-1x/pull/5486

Thu, Sep 17, 9:10 PM · VyOS Rolling

sarthurdev added a comment to T7575: Update vyatta-bash to bash 5.2.

Completion fix: https://github.com/vyos/vyos-build/pull/1308

Thu, Sep 17, 4:26 PM · VyOS Rolling

Viacheslav closed T9316: smoketest: do not race the DHCP client when checking VRF membership as Resolved.

Thu, Sep 17, 2:54 PM · VyOS Rolling

natali-rs1985 changed the status of T9312: VPP sFlow: bonding interface produces no flow samples while physical bond members are rejected by configuration validation from Open to In progress.

Thu, Sep 17, 12:50 PM · VyOS Rolling

evgmol created T9331: Prepare Ansible Galaxy Collection vyos.vyos 6.1.0 Release.

Thu, Sep 17, 10:54 AM · VyOS Ansible Collection

Viacheslav reassigned T9330: bump OpenVPN to 2.7.7 from Viacheslav to ordex.

Thu, Sep 17, 10:22 AM · VyOS Rolling

Viacheslav closed T9330: bump OpenVPN to 2.7.7 as Resolved.

Thu, Sep 17, 10:22 AM · VyOS Rolling

ordex added a comment to T9330: bump OpenVPN to 2.7.7.

PR: https://github.com/vyos/vyos-build/pull/1307

Thu, Sep 17, 10:14 AM · VyOS Rolling

Viacheslav changed the status of T7487: wwan interface numbers do not always match the modem numbers from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5483

Thu, Sep 17, 10:07 AM · VyOS Rolling

ordex created T9330: bump OpenVPN to 2.7.7.

Thu, Sep 17, 9:57 AM · VyOS Rolling

Viacheslav closed T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module as Resolved.

Thu, Sep 17, 9:56 AM · VyOS Rolling

Viacheslav closed T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes as Resolved.

Thu, Sep 17, 9:38 AM · VyOS Rolling

Viacheslav triaged T9329: internal PKI cannot be linked to the Telegraf configuration as Normal priority.

Thu, Sep 17, 9:35 AM · VyOS Rolling

Viacheslav closed T8599: vyos-build: Fail package build if patch cannot be applied as Resolved.

Thu, Sep 17, 9:11 AM · VyOS Rolling

DarkDreamSan created T9329: internal PKI cannot be linked to the Telegraf configuration.

Thu, Sep 17, 8:50 AM · VyOS Rolling

MSonger created T9328: Add prometheus input to telegraf.

Thu, Sep 17, 8:23 AM · VyOS Rolling

Viacheslav triaged T9326: WWAN dual-stack (ipv4v6) connect fails with ip-version-mismatch on networks requiring a single combined PDN context as Low priority.

Thu, Sep 17, 8:19 AM · VyOS Rolling

RC added a comment to T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes.

https://github.com/accel-ppp/accel-ppp-ng/pull/43

Thu, Sep 17, 6:32 AM · VyOS Rolling

SrividyaA created T9327: Add native support for NAT64 session synchronization (joold).

Thu, Sep 17, 5:19 AM · VyOS Rolling

yzguy created T9326: WWAN dual-stack (ipv4v6) connect fails with ip-version-mismatch on networks requiring a single combined PDN context.

Thu, Sep 17, 1:51 AM · VyOS Rolling

yzguy added a comment to T5965: WWAN modems using raw-ip do not work with dhclient/dhcp6c.

Just some new learnings

Thu, Sep 17, 1:45 AM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus

Wed, Sep 16

c-po closed T9228: Prevent user nagging for fixed-ethernet settings, a subtask of T9158: Add option to disable/enable rx offload, as Resolved.

Wed, Sep 16, 6:54 PM · VyOS Rolling

c-po closed T9228: Prevent user nagging for fixed-ethernet settings as Resolved.

Wed, Sep 16, 6:54 PM · VyOS Rolling

c-po closed T9308: Fix OpenVPN DCO issues after Kernel upgrade as Invalid.

Wed, Sep 16, 6:53 PM · VyOS Rolling

c-po closed T9308: Fix OpenVPN DCO issues after Kernel upgrade, a subtask of T8147: Update Linux Kernel to 6.18, as Invalid.

Wed, Sep 16, 6:53 PM · VyOS Rolling

c-po added a comment to T9308: Fix OpenVPN DCO issues after Kernel upgrade.

Rejected - Superseeded by

Wed, Sep 16, 6:53 PM · VyOS Rolling

rherold added a comment to T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string.

PR https://github.com/vyos/vyos-1x/pull/5477

Wed, Sep 16, 2:02 PM · VyOS Rolling

Viacheslav closed T8952: ipsec: expose per-peer unique setting for site-to-site connections as Resolved.

Wed, Sep 16, 12:48 PM · VyOS Rolling

Viacheslav changed the status of T9323: Fix spurious CI errors from Open to In progress.

Wed, Sep 16, 11:59 AM · VyOS Rolling

Viacheslav added a comment to T9323: Fix spurious CI errors.

PR https://github.com/vyos/vyos-1x/pull/5480

Wed, Sep 16, 11:59 AM · VyOS Rolling

Viacheslav closed T9281: Bridge fails to transmit locally-generated ARP replies on member interfaces after upgrade to rolling 2026.09.01 (regression from 1.5-rolling-202405140019) as Invalid.

Looks like a firewall misconfiguration, not a real bug.
Re-open it with the minimal steps to reproduce or the configuration that maintainers can use to confirm.
Or open a topic at the forum if you need help with firewall settings.
Closing the task

Wed, Sep 16, 9:14 AM · VyOS Rolling

Viacheslav triaged T9324: Five plugins import to_text from ansible.module_utils._text, removed in ansible-core 2.24 as Normal priority.

Wed, Sep 16, 9:02 AM · VyOS Ansible Collection

Viacheslav changed the status of T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py from Open to In progress.

Wed, Sep 16, 9:01 AM · VyOS Rolling

Viacheslav added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

PR https://github.com/vyos/vyos-1x/pull/5468

Wed, Sep 16, 9:01 AM · VyOS Rolling

rockfish added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

Update on #5468 (defect 1 fix).

Wed, Sep 16, 8:24 AM · VyOS Rolling

Viacheslav changed the status of T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog from Open to In progress.

Wed, Sep 16, 7:52 AM · VyOS Rolling

cr0ntab added a comment to T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.

I hit this on my own fleet and put up a PR for fix (a): https://github.com/vyos/vyos-build/pull/1304. It sets ForwardToSyslog=no in data/live-build-config/includes.chroot/etc/systemd/journald.conf, which is where the image gets its journald.conf. That line came in with vyos-build bc0406ce3 (T552, 2018), back when the rsyslog config only loaded imuxsock and imklog. imjournal showed up later, in vyos-1x e143e496e (T6989, 2025-01-13).

Wed, Sep 16, 3:38 AM · VyOS Rolling

Tue, Sep 15

RC changed the status of T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes from Open to In progress.

Tue, Sep 15, 11:31 PM · VyOS Rolling

RC created T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes.

Tue, Sep 15, 11:30 PM · VyOS Rolling

evgmol created T9324: Five plugins import to_text from ansible.module_utils._text, removed in ansible-core 2.24.

Tue, Sep 15, 11:00 PM · VyOS Ansible Collection

jestabro added a comment to T7886: Create unified check for interface dependencies-.

Draft PR here https://github.com/vyos/vyos-1x/pull/5478 implementing a method as discussed in https://github.com/vyos/vyos-1x/pull/4765. Draft until addition of remaining XML annotations, but the simple method is complete.

Tue, Sep 15, 7:35 PM · VyOS Rolling

Viacheslav closed T9315: smoketest: give up once the system under test stops answering as Resolved.

Tue, Sep 15, 4:25 PM · VyOS Rolling

Viacheslav closed T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes as Resolved.

Tue, Sep 15, 3:59 PM · VyOS Rolling

Viacheslav closed T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD as Resolved.

Tue, Sep 15, 3:55 PM · VyOS Rolling

Viacheslav closed T9318: VXLAN: GPE validation checks external mode at the wrong configuration level as Resolved.

Tue, Sep 15, 3:53 PM · VyOS Rolling

Viacheslav closed T9155: Integrate FRR security fixes from PRs 19983, 21098, 21074, 21054 as Resolved.

Tue, Sep 15, 3:31 PM · VyOS Rolling

je added a comment to T9284: dhcp6c integer overflow / garbage value in pltime causes vyos-netlinkd loop and loss of connectivity.

Update: Unfortunately, the system went offline again today (September 15) with a complete freeze/loss of connectivity, requiring a manual reboot.

Tue, Sep 15, 3:30 PM · VyOS Rolling

Viacheslav closed T7575: Update vyatta-bash to bash 5.2 as Resolved.

Tue, Sep 15, 1:05 PM · VyOS Rolling

ordex added a comment to T9323: Fix spurious CI errors.

PR created: https://github.com/vyos/vyos-1x/pull/5476

Tue, Sep 15, 12:13 PM · VyOS Rolling

Viacheslav added a comment to T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes.

PR https://github.com/vyos/vyos-build/pull/1303

Tue, Sep 15, 12:12 PM · VyOS Rolling

natali-rs1985 changed the status of T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches from Open to In progress.

https://github.com/vyos/vyos-1x/pull/5463

Tue, Sep 15, 12:03 PM · VyOS Rolling

ordex created T9323: Fix spurious CI errors.

Tue, Sep 15, 12:00 PM · VyOS Rolling

rherold created T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string.

Tue, Sep 15, 11:57 AM · VyOS Rolling

Viacheslav changed the status of T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes from Open to In progress.

Tue, Sep 15, 11:35 AM · VyOS Rolling

Viacheslav closed T9238: Port security/stability/memory fixes from accel-ppp to accel-ppp-ng repo as Resolved.

Tue, Sep 15, 11:31 AM · VyOS Rolling

Viacheslav created T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes.

Tue, Sep 15, 11:30 AM · VyOS Rolling

Viacheslav created T9320: VPN StrongSwan add IPsec IKEv1 deprecation warning.

Tue, Sep 15, 10:55 AM · VyOS Rolling

Viacheslav closed T9317: smoketest: restore the adapter offload state before every config test as Resolved.

Tue, Sep 15, 10:41 AM · VyOS Rolling

Viacheslav triaged T9319: VXLAN: expose the Group Policy extension through a gbp CLI node as Normal priority.

Tue, Sep 15, 10:39 AM · VyOS Rolling

Viacheslav changed the status of T9318: VXLAN: GPE validation checks external mode at the wrong configuration level from Open to In progress.

Tue, Sep 15, 9:46 AM · VyOS Rolling

o.kuchmystyi added a comment to T8952: ipsec: expose per-peer unique setting for site-to-site connections.

PR: https://github.com/vyos/vyos-1x/pull/5475

Tue, Sep 15, 9:40 AM · VyOS Rolling

haakon.nore added a comment to T9318: VXLAN: GPE validation checks external mode at the wrong configuration level.

Let me know what I am missing:
https://github.com/vyos/vyos-1x/pull/5473

Tue, Sep 15, 5:29 AM · VyOS Rolling

haakon.nore created T9319: VXLAN: expose the Group Policy extension through a gbp CLI node.

Tue, Sep 15, 1:15 AM · VyOS Rolling

haakon.nore created T9318: VXLAN: GPE validation checks external mode at the wrong configuration level.

Tue, Sep 15, 12:05 AM · VyOS Rolling

Mon, Sep 14

c-po added a comment to T9317: smoketest: restore the adapter offload state before every config test.

https://github.com/vyos/vyos-1x/pull/5472

Mon, Sep 14, 9:20 PM · VyOS Rolling

c-po renamed T9317: smoketest: restore the adapter offload state before every config test from smoketest: Txxxx: restore the adapter offload state before every config test to smoketest: restore the adapter offload state before every config test.

Mon, Sep 14, 9:18 PM · VyOS Rolling

c-po claimed T9317: smoketest: restore the adapter offload state before every config test.

Mon, Sep 14, 9:18 PM · VyOS Rolling

c-po created T9317: smoketest: restore the adapter offload state before every config test.

Mon, Sep 14, 9:18 PM · VyOS Rolling

c-po added a comment to T9316: smoketest: do not race the DHCP client when checking VRF membership.

https://github.com/vyos/vyos-1x/pull/5471

Mon, Sep 14, 9:15 PM · VyOS Rolling

c-po added a comment to T9315: smoketest: give up once the system under test stops answering.

https://github.com/vyos/vyos-1x/pull/5470

Mon, Sep 14, 9:11 PM · VyOS Rolling

c-po changed the status of T9316: smoketest: do not race the DHCP client when checking VRF membership from Open to In progress.