Note the caveat mentioned here: https://www.jool.mx/en/config-atomic.html#nat64
Idempotency would have to be implemented manually here, which could be fun in yolopython.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 4 2025
Aug 4 2025
dmbaturin edited projects for T7684: Firewall global options do not apply to ZBF between VRF, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus (1.5-stream-2025-Q2).
dmbaturin triaged T7681: Settings multiple DNS resolvers for containers prevents container start as Normal priority.
dmbaturin triaged T7685: WAN load balancing rule fails when using comma-separated ports as High priority.
MattK updated the task description for T7685: WAN load balancing rule fails when using comma-separated ports.
Aug 3 2025
Aug 3 2025
c-po moved T7676: Smoketests for DHCP Server can falsely fail from Need Triage to Completed on the VyOS Rolling board.
Restricted Repository Identity closed T7676: Smoketests for DHCP Server can falsely fail as Resolved by committing rVYOSONEX5f8adb18f459: Merge pull request #4642 from cblackburn-igl/T7676-Dhcp-server-Smoketest-fix.
Aug 1 2025
Aug 1 2025
doctorpangloss added a comment to T7674: pdns-recursor failing many previously working DNS lookups, failure rate of 10% after system upgrade.
this issue persists, it's now manifesting itself in different ways. about 10% of DNS lookups from LAN clients still fail, now it's 10% of addresses looked up instead of 10% of queries total.
test and working:
Viacheslav updated the task description for T7680: VPP fails if we use only 1G hugepages and use main-heap-page-size 2048K.
Viacheslav triaged T7680: VPP fails if we use only 1G hugepages and use main-heap-page-size 2048K as Normal priority.
a.apostoliuk triaged T7679: Unable to set OSPF plaintext authentication on specific interface in one area as Normal priority.
natali-rs1985 changed the status of T7678: Move "vpp settings host-resources" to "system option host-resources" from Open to In progress.
natali-rs1985 updated the task description for T7678: Move "vpp settings host-resources" to "system option host-resources".
natali-rs1985 updated the task description for T7678: Move "vpp settings host-resources" to "system option host-resources".
natali-rs1985 updated the task description for T7678: Move "vpp settings host-resources" to "system option host-resources".
natali-rs1985 updated the task description for T7678: Move "vpp settings host-resources" to "system option host-resources".
Jul 31 2025
Jul 31 2025
Created PR here: https://github.com/vyos/vyos-1x/pull/4642
c-po moved T7484: ARM64 config fails to commit due to ttyS0 console from Need Triage to Completed on the VyOS Rolling board.
doctorpangloss added a comment to T6843: l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included.
VyOS 2025.07.28-0022-rolling has completely broken the remote access connectivity.
doctorpangloss added a comment to T7674: pdns-recursor failing many previously working DNS lookups, failure rate of 10% after system upgrade.
set service dns forwarding cache-size 10000 set service dns forwarding system
appears to resolve the issue, any insights?
doctorpangloss renamed T7674: pdns-recursor failing many previously working DNS lookups, failure rate of 10% after system upgrade from Too much time waiting for... pdns-recursor failing many previously working DNS lookups to pdns-recursor failing many previously working DNS lookups, failure rate of 10% after system upgrade.
doctorpangloss added a comment to T7674: pdns-recursor failing many previously working DNS lookups, failure rate of 10% after system upgrade.
# python3 <<'EOF'
> import socket
> import time
> import struct
> import random
> import sys
>
> # --- Configuration ---
> DNS_SERVER = "8.8.8.8"
> DNS_PORT = 53
> QUERY_DOMAIN = "google.com"
> TIMEOUT = 1.0 # 1 second timeout
>
> # --- Counters ---
> success_count = 0
> timeout_count = 0
> total_count = 0
>
> def build_dns_query(domain_name):
> # Standard DNS query header
> transaction_id = random.randint(0, 65535)
> flags = 0x0100 # Standard query
> questions = 1
> header = struct.pack('!HHHHHH', transaction_id, flags, questions, 0, 0, 0)
>
> # Question section
> qname = b''
> for part in domain_name.split('.'):
> qname += struct.pack('B', len(part)) + part.encode('utf-8')
> qname += b'\x00' # End of QNAME
>
> qtype = 1 # A record
> qclass = 1 # IN class
> question = struct.pack('!HH', qtype, qclass)
>
> return header + qname + question
>
> def print_stats():
> global success_count, timeout_count, total_count
> if total_count == 0:
> return
>
> timeout_rate = (timeout_count / total_count) * 100
> status_line = (
> f"\rSuccess: {success_count} | "
> f"Timeouts: {timeout_count} | "
> f"Total: {total_count} | "
> f"Timeout Rate: {timeout_rate:.2f}% "
> )
> sys.stdout.write(status_line)
> sys.stdout.flush()
>
> print(f"--- Starting DNS timeout test against {DNS_SERVER} (Ctrl+C to stop) ---")
>
> try:
> while True:
> total_count += 1
> query = build_dns_query(QUERY_DOMAIN)
>
> sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
> sock.settimeout(TIMEOUT)
>
> try:
> sock.sendto(query, (DNS_SERVER, DNS_PORT))
> data, addr = sock.recvfrom(512)
> success_count += 1
> except socket.timeout:
> timeout_count += 1
> except Exception as e:
> # Handle other potential errors, though timeout is the one we expect
> timeout_count += 1
> finally:
> sock.close()
>
> print_stats()
> time.sleep(1)
>
> except KeyboardInterrupt:
> print("\n--- Test stopped. Final Statistics ---")
> print_stats()
> print("\n")
>
> EOF
--- Starting DNS timeout test against 8.8.8.8 (Ctrl+C to stop) ---
Success: 68 | Timeouts: 0 | Total: 68 | Timeout Rate: 0.00% ^C
--- Test stopped. Final Statistics ---
Success: 68 | Timeouts: 0 | Total: 68 | Timeout Rate: 0.00%Viacheslav closed T7673: Update patches for VPP add build with fixes for multicast routes as Resolved.
Viacheslav added a comment to T7673: Update patches for VPP add build with fixes for multicast routes.
Viacheslav changed the status of T7673: Update patches for VPP add build with fixes for multicast routes from Open to In progress.
c-po moved T7403: container: cannot remove image when used by more then one tag from Need Triage to Completed on the VyOS Rolling board.
jestabro edited projects for T7651: If VPP crashes, the system loads without hugepages, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus.
jestabro added a project to T7651: If VPP crashes, the system loads without hugepages: VyOS 1.5 Circinus.
c-po changed the status of T7484: ARM64 config fails to commit due to ttyS0 console from Open to In progress.
sarthurdev changed the status of T7628: Configuration encryption doesn’t work with no TPM present from Open to Needs testing.
vyos-build test fix: https://github.com/vyos/vyos-build/pull/1003
Apachez added a comment to T6849: Be able to set FEC (Forward Error Correction) settings per interface.
Regarding "how others do this":
Viacheslav moved T7647: Bump keepalived version to 2.3.3 from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Viacheslav moved T5069: BGP large-community-list regex validation is incomplete from Need Triage to Completed on the VyOS Rolling board.
Viacheslav moved T5069: BGP large-community-list regex validation is incomplete from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Viacheslav moved T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels from Need Triage to Completed on the VyOS Rolling board.
dmbaturin edited projects for T7489: Fix the output command "show vpn ipsec connection" for passthrough tunnels, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus.
dmbaturin moved T5797: MSS Clamping Not Applied to VRF Interface from MPLS Cloud from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
dmbaturin moved T5797: MSS Clamping Not Applied to VRF Interface from MPLS Cloud from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin edited projects for T5797: MSS Clamping Not Applied to VRF Interface from MPLS Cloud, added: VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed Bugs.
dmbaturin moved T7628: Configuration encryption doesn’t work with no TPM present from Need Triage to Backport Candidates on the VyOS Rolling board.
dmbaturin edited projects for T7628: Configuration encryption doesn’t work with no TPM present, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling; removed VyOS 1.5 Circinus.
dmbaturin moved T7625: WAN load balancer always has nftables limit configured from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
dmbaturin moved T7595: Support listen PROXY protocol for haproxy from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
dmbaturin renamed T7623: Add a test for DHCP default route with VRF from Add test for DHCP default route with VRF to Add a test for DHCP default route with VRF.
dmbaturin moved T7622: "show wan-load-balance" command is broken from Need Triage to Completed on the VyOS Rolling board.
dmbaturin closed T7545: Command 'show vpn debug peer <peer_name>' does not work correctly as Resolved.
dmbaturin moved T7545: Command 'show vpn debug peer <peer_name>' does not work correctly from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a project to T7528: Service monitoring prometheus stops unconfigured services: VyOS 1.5 Circinus.
Jul 30 2025
Jul 30 2025
dmbaturin moved T7584: WAN Load Balancer Default SNAT Behaviour from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
dmbaturin edited projects for T7584: WAN Load Balancer Default SNAT Behaviour, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed VyOS 1.5 Circinus.