@991jo As far as I can tell, the documentation for both VyOS and FRR are simply correct - both bgp as-path access-list and show bgp ipvX regex render AS paths as text and run a POSIX regular expression against them. There's no range expansion or other fanciness beyond special handling of the '_' match - just a space-separated text string of ASNs vs a regexec()'d pattern.

Jun 26 2025, 10:47 PM · VyOS 1.5 Circinus

Viacheslav triaged T7582: IPSec VPN: Add support for `port` to associate with protocol for policies as Normal priority.

Jun 26 2025, 5:06 PM · VyOS 1.5 Circinus, VyOS Rolling

SrividyaA created T7582: IPSec VPN: Add support for `port` to associate with protocol for policies.

Jun 26 2025, 3:13 PM · VyOS 1.5 Circinus, VyOS Rolling

talmakion added a comment to T7544: Trying to create a VRF named "vni" leads to an unhandled exception.

$ sudo nft add element inet vrf_zones ct_somethingelse_map { "vni" : 100 }
Error: syntax error, unexpected vni
add element inet vrf_zones ct_somethingelse1_map { vni : 100 }
                                                   ^^^

Jun 26 2025, 10:55 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Jun 25 2025

aalmenar added a comment to T7432: RPKI VRF Support.

In T7432#227763, @yzguy wrote:
@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itself

https://docs.frrouting.org/en/latest/bgp.html#configuring-rpki-rtr-cache-servers
RPKI/RTR can be configured independently, either in configure node, or in vrf sub context. If configured in configure node, the core bgp instance of default vrf is impacted by the configuration.

Each RPKI/RTR context is mapped to a vrf and can be made up of a specific list of cache-servers, and specific settings.

Jun 25 2025, 5:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

yzguy added a comment to T7432: RPKI VRF Support.

@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itself

Jun 25 2025, 5:10 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

aalmenar added a comment to T7432: RPKI VRF Support.

I have installed version:

Jun 25 2025, 5:05 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

natali-rs1985 closed T5743: HTTPS API ability to import PKI certificates as Resolved.

Jun 25 2025, 12:48 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

natali-rs1985 closed T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used as Resolved.

Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Backport Candidates to Completed on the VyOS Rolling board.

Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Open to Finished on the VyOS 1.5 Circinus board.

Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)

natali-rs1985 closed T6951: Add a configuration command for ethertypes that bridge firewalls should always accept as Resolved.

Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling

natali-rs1985 closed T6101: IPsec some proposal combinations could be invalid and the service strongswan stops as Resolved.

Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus, VyOS Rolling

natali-rs1985 moved T6101: IPsec some proposal combinations could be invalid and the service strongswan stops from Backport Candidates to Completed on the VyOS Rolling board.

Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus, VyOS Rolling

natali-rs1985 moved T6951: Add a configuration command for ethertypes that bridge firewalls should always accept from Open to Finished on the VyOS 1.5 Circinus board.

Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling

natali-rs1985 moved T6951: Add a configuration command for ethertypes that bridge firewalls should always accept from Need Triage to Completed on the VyOS Rolling board.

Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling

natali-rs1985 removed a project from T6951: Add a configuration command for ethertypes that bridge firewalls should always accept: VyOS 1.4 Sagitta (1.4.3).

Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling

dmbaturin created T7576: Do not include "dirty" in build commit IDs.

Jun 25 2025, 10:35 AM · VyOS 1.5 Circinus (2025.11)

Jun 24 2025

c-po removed a project from T7495: FRR does not redistribute BGP table x routes: VyOS Rolling.

Jun 24 2025, 2:36 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

c-po added a comment to T7495: FRR does not redistribute BGP table x routes.

I can confirm the issue exists in what will become VyOS 1.4.3 as this is a bug in the FRR codebase itself and not the VyOS CLI configuration.

Jun 24 2025, 2:36 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

jestabro closed T7561: Simplify op-mode-definitions XML cache generation and interface, a subtask of T6650: Add op-mode-definitions XML cache, as Resolved.

Jun 24 2025, 2:34 PM · VyOS 1.5 Circinus, VyOS Rolling

Unknown Object (User) triaged T7569: Add ability to create raw nftables rule as Normal priority.

Jun 24 2025, 9:55 AM · VyOS 1.5 Circinus

Viacheslav triaged T7572: Creating firewall zone without interface causes KeyError exception as Normal priority.

Jun 24 2025, 5:33 AM · VyOS Rolling, VyOS 1.5 Circinus

c-po added a comment to T7531: Add FRR no-ipv6-auto-ra option.

This is also available in FRR 9.1 used by VyOS 1.4 sagitta. We should add it there, too

Jun 24 2025, 4:15 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po moved T7531: Add FRR no-ipv6-auto-ra option from Completed to Backport Candidates on the VyOS Rolling board.

Jun 24 2025, 4:14 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Jun 23 2025

yun renamed T7572: Creating firewall zone without interface causes KeyError exception from Creating firewall zone without and interface causes KeyError exception to Creating firewall zone without interface causes KeyError exception.

Jun 23 2025, 3:49 PM · VyOS Rolling, VyOS 1.5 Circinus

yun created T7572: Creating firewall zone without interface causes KeyError exception.

Jun 23 2025, 2:53 PM · VyOS Rolling, VyOS 1.5 Circinus

L0crian created T7569: Add ability to create raw nftables rule.

Jun 23 2025, 4:30 AM · VyOS 1.5 Circinus