vyos@vyos:~$ show pki Certificate Authorities: Name Subject Issuer CN Issued Expiry Private Key Parent ---------------- ---------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------- ------------------- ------------------- ------------- ---------------- openvpn_vtun10_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No N/A openvpn_vtun11_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No openvpn_vtun10_1 openvpn_vtun12_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 1,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:44:58 2035-11-29 07:44:58 No openvpn_vtun10_1 openvpn_vtun20_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No N/A openvpn_vtun21_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No openvpn_vtun20_1 openvpn_vtun22_1 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev,CN=Easy-RSA CA,OU=VyOS Networks Test CA 2,O=VyOS Networks,L=Poway,ST=California,C=US 1.2.840.113549.1.9.1=test-ca.noreply@vyos.dev 2025-12-01 07:53:19 2035-11-29 07:53:19 No openvpn_vtun20_1
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 2 2025
Dec 2 2025
Viacheslav triaged T8053: DHCP Server configuration script performance degradation with multiple entries as High priority.
zarianu updated the task description for T8055: Wildcard interface name in firewall interface group problem.
Dec 1 2025
Dec 1 2025
Viacheslav changed the status of T8011: VPP logs are duplicating in systemd journal from Confirmed to In progress.
Viacheslav changed the status of T8011: VPP logs are duplicating in systemd journal, a subtask of T7070: VPP related bugs the root task, from Confirmed to In progress.
o.kuchmystyi added a comment to T7594: The "respond" connection-type in IPSec peer settings must be renamed to "trap".
Not sure if it is the correct fix but something with this logic https://github.com/vyos/vyos-utils/blob/dbecbd0c4f25f8b8d7055e5ed3ffc8e5be59b1f0/src/vyos_op_run.ml#L297
c-po added a project to T7738: Improper OpenVPN certificates migration from 1.3 to 1.4: VyOS 1.4 Sagitta (1.4.4).
c-po changed the status of T7738: Improper OpenVPN certificates migration from 1.3 to 1.4 from Open to In progress.
Nov 30 2025
Nov 30 2025
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5405: Add VRF support for "update geoip".
sarthurdev added a parent task for T5405: Add VRF support for "update geoip": T7926: Refactor and improve geoip handling.
sarthurdev changed the status of T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
sarthurdev added a parent task for T5746: Firewall extend GeoIP match ASN: T7926: Refactor and improve geoip handling.
sarthurdev added a subtask for T7926: Refactor and improve geoip handling: T5746: Firewall extend GeoIP match ASN.
sarthurdev changed the status of T5405: Add VRF support for "update geoip" from Open to In progress.
Nov 29 2025
Nov 29 2025
FRR case where there is a long explanation: https://github.com/FRRouting/frr/issues/15400
Nov 28 2025
Nov 28 2025
fernando changed the status of T8050: EVPN-MH Split Horizon Filters - not filter BUM traffic not DF from Open to Confirmed.
c-po moved T8039: snmp: trap target broken with SNMPv3 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
This comment in ipaddrcheck explains why I disallowed all-zero host part addresses: https://github.com/vyos/ipaddrcheck/blob/current/src/ipaddrcheck_functions.c#L337-L346
Viacheslav changed the status of T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from Confirmed to In progress.
natali-rs1985 changed the status of T7954: VPP add op-mode commands to show LACP, a subtask of T7221: VPP related features the root task, from Open to In progress.
natali-rs1985 changed the status of T7954: VPP add op-mode commands to show LACP from Open to In progress.
I think this should be handled in documentation and not alter the code behaviour.
sarthurdev changed the status of T6768: GeoIP database update fails without a clear error when a system name server is not configured from Open to In progress.
sarthurdev changed the status of T6768: GeoIP database update fails without a clear error when a system name server is not configured, a subtask of T7926: Refactor and improve geoip handling, from Open to In progress.
Viacheslav changed the status of T8001: Commit fails removing VTI interface in IPsec config from Open to In progress.
natali-rs1985 closed T8016: Incorrect validation of ports in VPP ACLs, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T8016: Incorrect validation of ports in VPP ACLs from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 closed T8036: Commit errors on removing VPP NAT44 rules, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T8036: Commit errors on removing VPP NAT44 rules from Need Triage to Completed on the VyOS Rolling board.
a.apostoliuk triaged T8048: Unable to delete BGP from default VRF if VRF BGP is configured as Normal priority.
Nov 27 2025
Nov 27 2025
c-po moved T8039: snmp: trap target broken with SNMPv3 from Need Triage to Completed on the VyOS Rolling board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po moved T8038: xml: cleanup double CLI properties in NAT from Need Triage to Completed on the VyOS Rolling board.
Viacheslav added a comment to T7766: add support to receive multiple labels in BGP-LU - FRR feature!.
@fernando it has be merged and will be available in the next rolling release, fill free to test/check this feature.
natali-rs1985 changed the status of T7972: VPP: Improve "nat44 no-forwarding" feature name and description in CLI, a subtask of T7221: VPP related features the root task, from Open to In progress.
natali-rs1985 changed the status of T7972: VPP: Improve "nat44 no-forwarding" feature name and description in CLI from Open to In progress.
natali-rs1985 added a comment to T7995: Add capability to start VPP dataplane during system deployment.
Nov 26 2025
Nov 26 2025
c-po moved T8035: Update Linux kernel to 6.6.117 from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po added a comment to T8047: DHCP/netplug: Memory overusage with configurations with many interfaces.
Example implementation of such a daemon:
https://github.com/vyos/vyos-1x/pull/4872
c-po moved T8034: vrf: deleting one out of two VRFs with static routes throw KeyError from Need Triage to Completed on the VyOS Rolling board.
Viacheslav added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
For dummy it works because it has the prefix /128 and it is allowed/validated https://github.com/vyos/ipaddrcheck/blob/c34294b7a18072c7bd4eaf8ec0f433bb374fad5c/src/ipaddrcheck.c#L577
zsdc changed the status of T8047: DHCP/netplug: Memory overusage with configurations with many interfaces from Open to Confirmed.
@o.kuchmystyi
reproduced in 2025.11.26-0020-rolling, it requires an active ipsec tunnel to be established with peer B during commit:
I tried to reproduce these errors for VyOS 2025.11.25-rolling but everything works fine. @a.kudientsov could you re-check it again?
Nov 25 2025
Nov 25 2025
Viacheslav triaged T8045: Add config entry `service dns forwarding dont-query` to the pdns-recursor config section as Normal priority.
Viacheslav closed T5811: static dhcp-interface routes not installed, a subtask of T3680: Static routes with dhcp-interface are flaky, as Resolved.
c-po moved T8023: bond: missing validation of member interface MTU from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
c-po changed the status of T8038: xml: cleanup double CLI properties in NAT from Open to In progress.
c-po moved T8035: Update Linux kernel to 6.6.117 from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 changed the status of T8036: Commit errors on removing VPP NAT44 rules, a subtask of T7070: VPP related bugs the root task, from Open to In progress.
natali-rs1985 changed the status of T8036: Commit errors on removing VPP NAT44 rules from Open to In progress.
a.kudientsov added a parent task for T8036: Commit errors on removing VPP NAT44 rules: T7070: VPP related bugs the root task.
Viacheslav changed the status of T7139: Changing VPN IPsec configuration kills Strongswan bug from Open to Needs testing.
Nov 24 2025
Nov 24 2025