sajiby3k renamed T7293: virtual-ethernet interface vif MTU does not work from Virtual-Interface vif mtu does not work to Virtual-ethernet Interface vif mtu does not work.

Mar 28 2025, 7:02 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

sajiby3k added projects to T7293: virtual-ethernet interface vif MTU does not work: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0).

Mar 28 2025, 7:01 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

sajiby3k created T7293: virtual-ethernet interface vif MTU does not work.

Mar 28 2025, 7:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po closed T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update as Resolved.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po closed T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update, a subtask of T7122: PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option, as Resolved.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Open to Finished on the VyOS 1.5 Circinus board.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

jestabro added a subtask for T7272: Vyconf: update in memory config tree on response from vyos-commitd: T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance.

Mar 28 2025, 4:23 PM · VyOS Rolling

jestabro added a parent task for T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance: T7272: Vyconf: update in memory config tree on response from vyos-commitd.

Mar 28 2025, 4:23 PM · VyOS Rolling

jestabro created T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance.

Mar 28 2025, 4:22 PM · VyOS Rolling

jestabro closed T6946: Add initial commit algorithm to vyconf, a subtask of T6718: Use vyconf daemon for validation of set commands, as Resolved.

Mar 28 2025, 4:17 PM · VyOS Rolling

jestabro closed T6946: Add initial commit algorithm to vyconf as Resolved.

Mar 28 2025, 4:17 PM · VyOS Rolling

jestabro added a parent task for T7272: Vyconf: update in memory config tree on response from vyos-commitd: T7121: Set up communication vyconfd <-> vyos-configd.

Mar 28 2025, 4:16 PM · VyOS Rolling

jestabro added a subtask for T7121: Set up communication vyconfd <-> vyos-configd: T7272: Vyconf: update in memory config tree on response from vyos-commitd.

Mar 28 2025, 4:16 PM · VyOS Rolling

jestabro added a parent task for T7121: Set up communication vyconfd <-> vyos-configd: T6946: Add initial commit algorithm to vyconf.

Mar 28 2025, 4:14 PM · VyOS Rolling

jestabro added a subtask for T6946: Add initial commit algorithm to vyconf: T7121: Set up communication vyconfd <-> vyos-configd.

Mar 28 2025, 4:14 PM · VyOS Rolling

sskaje added a comment to T5636: Add GeoIP matching support for policy route.

PR: https://github.com/vyos/vyos-1x/pull/4419

Mar 28 2025, 7:51 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Viacheslav moved T7278: Cracklib data is missing from the image which makes it impossible to run password complexity checks from Need Triage to Completed on the VyOS Rolling board.

Mar 28 2025, 6:26 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Viacheslav closed T7278: Cracklib data is missing from the image which makes it impossible to run password complexity checks as Resolved.

Mar 28 2025, 6:26 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Mar 27 2025

chenxiaolong added a comment to T7276: Nightly builds since 2025.03.05-0017 are not signed by the documented key.

Thanks for the quick fix!

Mar 27 2025, 9:36 PM · VyOS Rolling

dmbaturin closed T7276: Nightly builds since 2025.03.05-0017 are not signed by the documented key as Resolved.

The correct signing key is back now.

Mar 27 2025, 7:30 PM · VyOS Rolling

Viacheslav triaged T7290: VPN IPsec log level does not work as Normal priority.

Mar 27 2025, 12:01 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav created T7290: VPN IPsec log level does not work.

Mar 27 2025, 12:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 26 2025

jestabro added a parent task for T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds: T5400: Move libvyosconfig build out of the Docker image.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

jestabro added a subtask for T5400: Move libvyosconfig build out of the Docker image: T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

jestabro created T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

tjh added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..

Thank you very much @Embezzle - This is a feature I've been hoping for for a long time (at the moment I have a script that runs via VyOS cron and updates a firewall filter and commits it) - really appreciate you taking the time to do this piece of work.
Much Love.

Mar 26 2025, 9:11 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

andrin added a comment to T7150: Traffic marked invalid on bridge member interfaces.

Just to add a little more information:
This does not happen on vyos-1.5-stream-2025-Q1 (although this release also has issues regarding the state policy: https://forum.vyos.io/t/have-to-delete-firewall-global-options-state-policy-invalid-after-upgrading-to-1-5-stream-2025-q1/16131/7)

Mar 26 2025, 7:23 PM · VyOS Rolling

Embezzle closed T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc. as Resolved.

Tested as working in: VyOS 2025.03.26-0018-rolling

Mar 26 2025, 6:56 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

dmbaturin renamed T7217: Private SSH key reuse in the console server service from Key reuse in VyOS Dropbear deployment to Private SSH key reuse in the console server service.

Mar 26 2025, 6:21 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

natali-rs1985 closed T7066: VPP CPU workers should be calculated and verified, a subtask of T7070: VPP related bugs the root task, as Resolved.

Mar 26 2025, 2:42 PM · VyOS Rolling

natali-rs1985 closed T7066: VPP CPU workers should be calculated and verified as Resolved.

Mar 26 2025, 2:42 PM · VyOS 1.5 Circinus (2025.11)

natali-rs1985 closed T7075: VPP xdp-options should check the driver before applying, a subtask of T7070: VPP related bugs the root task, as Resolved.

Mar 26 2025, 2:41 PM · VyOS Rolling

natali-rs1985 closed T7075: VPP xdp-options should check the driver before applying as Resolved.

Mar 26 2025, 2:41 PM · VyOS 1.5 Circinus (2025.11)

Viacheslav triaged T7288: OpenVPN should have option bind-dev if we use VRFs as Low priority.

Mar 26 2025, 1:56 PM · VyOS Rolling

Viacheslav created T7288: OpenVPN should have option bind-dev if we use VRFs.

Mar 26 2025, 1:56 PM · VyOS Rolling

Viacheslav added projects to T7287: VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).

Mar 26 2025, 1:37 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav triaged T7287: VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS as Normal priority.

Mar 26 2025, 1:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav created T7287: VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS.

Mar 26 2025, 1:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav added a comment to T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency.

New VyOS CLI option disable-establish-hello should be implemented in https://vyos.dev/T7286 (for the current)

Mar 26 2025, 10:27 AM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus

Viacheslav changed the status of T7286: Add CLI to disable LDP establish hello packets from Open to In progress.

Mar 26 2025, 10:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav added a comment to T7286: Add CLI to disable LDP establish hello packets.

PR https://github.com/vyos/vyos-1x/pull/4416

Mar 26 2025, 10:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav updated the task description for T7286: Add CLI to disable LDP establish hello packets.

Mar 26 2025, 8:46 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav claimed T7286: Add CLI to disable LDP establish hello packets.

Mar 26 2025, 8:44 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav created T7286: Add CLI to disable LDP establish hello packets.

Mar 26 2025, 8:44 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav changed the status of T7219: VXLAN needs to make remote and group options mutually exclusive from Open to In progress.

Mar 26 2025, 8:03 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav closed T7242: Add a check for unsupported encryption algorithms to VPP IPsec as Resolved.

Mar 26 2025, 8:02 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Viacheslav raised the priority of T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius from Normal to High.

Mar 26 2025, 7:45 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 25 2025

dmbaturin renamed T7242: Add a check for unsupported encryption algorithms to VPP IPsec from Check use cases for IPsec that do not work with VPP to Add a check for unsupported encryption algorithms to VPP IPsec.

Mar 25 2025, 10:34 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Open to Finished on the VyOS 1.5 Circinus board.

Mar 25 2025, 10:30 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

dmbaturin renamed T7219: VXLAN needs to make remote and group options mutually exclusive from VXLAN does not verify if remote and group added together bug to VXLAN needs to make remote and group options mutually exclusive.

Mar 25 2025, 10:29 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

dmbaturin moved T7092: Add support for configuring container registry mirrors from Open to Finished on the VyOS 1.5 Circinus board.

Mar 25 2025, 10:18 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin added projects to T7092: Add support for configuring container registry mirrors: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).

Mar 25 2025, 10:18 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin added projects to T7227: Add Filtering Option for ‘show bgp ipv4/ipv6 vpn’ by RD and Prefix: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).

Mar 25 2025, 10:13 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin added projects to T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius: VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus.

Mar 25 2025, 10:04 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin added a project to T6948: DHCP records out of sync with vyos hostd state after system restart: VyOS Rolling.

Mar 25 2025, 9:54 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

dmbaturin added a project to T7118: Add redistribution of NHRP to other routing protocols: VyOS 1.5 Circinus.

Mar 25 2025, 9:46 PM · VyOS 1.5 Circinus, VyOS Rolling

xeluior added a comment to T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius.

I have drafted https://github.com/vyos/libpam-radius-auth/pull/9 with the relevant commits cherry-picked from the upstream FreeRADIUS repo. I haven't been able to test the build yet due to some (probably) unrelated issues with apt in a Debian container.

Mar 25 2025, 8:12 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav added a comment to T4797: External address/network lists for firewall (Local and remote).

T5493 is merged

Mar 25 2025, 7:10 PM · VyOS Rolling

xeluior created T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius.

Mar 25 2025, 6:53 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Embezzle changed the status of T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc. from In progress to Needs testing.

Mar 25 2025, 6:21 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

dmbaturin added a project to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc.: VyOS 1.5 Circinus.

Mar 25 2025, 3:21 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

natali-rs1985 added a comment to T7283: VPP add static NAT support.

https://github.com/vyos/vyos-vpp/pull/24

Mar 25 2025, 1:57 PM · VyOS Rolling

markh0338 added a comment to T7144: Firewall Cannot Load Podman Network Interfaces at Boot.

Yes - this has been included in the nightly builds for a few weeks now.

Mar 25 2025, 1:54 PM · VyOS Rolling

natali-rs1985 changed the status of T7283: VPP add static NAT support, a subtask of T7221: VPP related features the root task, from Open to In progress.

Mar 25 2025, 1:51 PM · VyOS Rolling

natali-rs1985 changed the status of T7283: VPP add static NAT support from Open to In progress.

Mar 25 2025, 1:51 PM · VyOS Rolling

woodsb02 updated subscribers of T7270: syslog: typos in rsyslog.conf.

Mar 25 2025, 11:24 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

woodsb02 added a comment to T7144: Firewall Cannot Load Podman Network Interfaces at Boot.

Is this resolved on the latest nightly, now that T7177 has been resolved?

Mar 25 2025, 10:35 AM · VyOS Rolling

woodsb02 added a project to T7270: syslog: typos in rsyslog.conf: Bugs.

Mar 25 2025, 10:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Viacheslav triaged T7283: VPP add static NAT support as High priority.

Mar 25 2025, 10:15 AM · VyOS Rolling

natali-rs1985 added a parent task for T7283: VPP add static NAT support: T7221: VPP related features the root task.

Mar 25 2025, 9:43 AM · VyOS Rolling

natali-rs1985 added a subtask for T7221: VPP related features the root task: T7283: VPP add static NAT support.

Mar 25 2025, 9:43 AM · VyOS Rolling

natali-rs1985 updated the task description for T7283: VPP add static NAT support.

Mar 25 2025, 9:36 AM · VyOS Rolling

natali-rs1985 created T7283: VPP add static NAT support.

Mar 25 2025, 9:29 AM · VyOS Rolling

Viacheslav edited projects for T7138: "show qos shaper" doesn't work with VRFs, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta.

Mar 25 2025, 8:43 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

woodsb02 added a comment to T6939: Add DNS-01 challenge for ACME.

The version of lego in the Debian repositories is very old, and this will likely mean it is broken for various DNS providers since things change rapidly out there on the Internet. As an example, Porkbun DNS provider has recently changed the URL for their DNS API, which has been updated in the newest LEGO, but the old version in the debian repos no longer works for Porkbun. I believe updating LEGO in the debian repos is hard due to needing to bring each go dependency into the repos also - which means the LEGO version is even old in the debian unstable repos.

Mar 25 2025, 8:35 AM · VyOS Rolling

Viacheslav changed the status of T7282: op-mode: not all groups are displayed correctly with `show firewall groups` from Open to In progress.

Mar 25 2025, 8:02 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

woodsb02 updated subscribers of T6939: Add DNS-01 challenge for ACME.

A key decision in implementing this dns-01 acme authentication feature is whether or not to change the upstream tool used to obtain let's encrypt certificates (currently certbot).

Mar 25 2025, 7:07 AM · VyOS Rolling

L0crian added a comment to T7138: "show qos shaper" doesn't work with VRFs.

Will this be backported to 1.4 ahead of the 1.4.2 release?

Mar 25 2025, 5:46 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

franklin373 added a comment to T4074: Add NETCONF server with YANG data modeling .

I am tired of Network Management complacation, I am tired to change different management cli command if switch diffrent brand router, I need automation, so I switch to netconf to config, I ask chatgpt, what router support, It said VyOS, But VyOS not support NetConf infact, I hope someday it could.

Mar 25 2025, 2:48 AM · VyOS Rolling

markh0338 added a comment to T7282: op-mode: not all groups are displayed correctly with `show firewall groups`.

Related PR from GitHub: PR #4414

Mar 25 2025, 1:22 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

markh0338 created T7282: op-mode: not all groups are displayed correctly with `show firewall groups`.

Mar 25 2025, 1:14 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 24 2025

dmbaturin added a comment to T7276: Nightly builds since 2025.03.05-0017 are not signed by the documented key.

Thanks for reporting this! At least we know people actually use the signatures. ;)

Mar 24 2025, 8:04 PM · VyOS Rolling

dmbaturin merged task T7279: VyOS nightly build signed with wrong key into T7276: Nightly builds since 2025.03.05-0017 are not signed by the documented key.

Mar 24 2025, 8:02 PM · VyOS Rolling

dmbaturin merged T7279: VyOS nightly build signed with wrong key into T7276: Nightly builds since 2025.03.05-0017 are not signed by the documented key.

Mar 24 2025, 8:02 PM · VyOS Rolling

dmbaturin closed T7280: Update Procedure Blocked Between `flavor` and `flavor-update` Types as Wontfix.

*-update flavors are no longer used in LTS releases — there is no need to, and it's much simpler for users when they can just use openstack or whatever ISO flavor for upgrade.

Mar 24 2025, 8:01 PM · VyOS Rolling

sarthurdev created T7281: Update Kea to 3.0.

Mar 24 2025, 1:09 PM · VyOS 1.5 Circinus (2025.11)

zsdc changed the status of T7280: Update Procedure Blocked Between `flavor` and `flavor-update` Types from Open to Confirmed.

Mar 24 2025, 12:18 PM · VyOS Rolling

zsdc created T7280: Update Procedure Blocked Between `flavor` and `flavor-update` Types.

Mar 24 2025, 12:18 PM · VyOS Rolling

Viacheslav changed the status of T7278: Cracklib data is missing from the image which makes it impossible to run password complexity checks from Open to In progress.

Mar 24 2025, 11:45 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling