The console screen
Feed Search
Apr 29 2026
Apr 29 2026
Viacheslav raised the priority of T8597: Use specific version of kea-packaging repo in build scripts from Low to High.
asklymenko changed the edit policy for T8597: Use specific version of kea-packaging repo in build scripts.
Viacheslav changed the status of T8589: bgp: Add ead, es and [1-5] to route-map match evpn route-type from In progress to Needs testing.
Viacheslav added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.
natali-rs1985 changed the status of T7880: NTP hardware timestamping fails when the interface doesn't support it from Open to In progress.
isaac.french changed the edit policy for T8596: Port in use errors with IPv6 and IPv4 listen addresses in the https service.
josephillips85 added a comment to T8539: Unable to traceroute using hostname and ipv6 source address.
is needed something else to merge this?
Apr 28 2026
Apr 28 2026
Viacheslav edited projects for T8586: dhcp-server: Config migration issue from ISC to KEA, added: VyOS 1.5 Circinus (Circinus-Next); removed VyOS 1.5 Circinus.
c-po closed T8541: Lately the TPM smoketests have been failing, a subtask of T8375: arm64: missing support for ttyAMA0 console interfaces, as Resolved.
c-po added a comment to T861: add secure boot support.
Viacheslav added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.
The bug still exists
vyos@r14# set interfaces ethernet eth3 mtu 9000 [edit] vyos@r14# set interfaces bonding bond1 member interface eth3 [edit] vyos@r14# commit [ interfaces ethernet eth3 ]
sarthurdev added a comment to T8586: dhcp-server: Config migration issue from ISC to KEA.
sarthurdev changed the status of T8586: dhcp-server: Config migration issue from ISC to KEA from Open to In progress.
natali-rs1985 added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.
Is it still reproducible? From my testing — no:
vyos@r10# set interfaces ethernet eth3 mtu 9000 [edit] vyos@r10# set interfaces bonding bond1 member interface eth3 [edit] vyos@r10# commit [ interfaces ethernet eth3 ]
natali-rs1985 added a comment to T8289: Load-balancer Haproxy should enable SNI configuration option for TLS backends.
Would it be worth considering additional SNI types beyond req.hdr(Host) to cover other common scenarios:
req.ssl_sni / ssl_fc_sni / str(<hostname>)
Viacheslav triaged T8593: FIPS disable all StrongSwan IPsec default plugins enable only fips compatible as Normal priority.
Viacheslav changed the edit policy for T8593: FIPS disable all StrongSwan IPsec default plugins enable only fips compatible.
Viacheslav triaged T8592: StrongSwan enable fips_mode if the system option fips is configured as Normal priority.
Viacheslav changed the edit policy for T8592: StrongSwan enable fips_mode if the system option fips is configured.
Viacheslav added a comment to T8591: Strongswan IPsec with FIPS option must use keyexchange=ikev2.
Rely on T8529
Viacheslav triaged T8591: Strongswan IPsec with FIPS option must use keyexchange=ikev2 as Normal priority.
Viacheslav added a parent task for T8591: Strongswan IPsec with FIPS option must use keyexchange=ikev2: T6720: FIPS140-2/3 Validation.
Viacheslav changed the edit policy for T8591: Strongswan IPsec with FIPS option must use keyexchange=ikev2.
o.kuchmystyi changed the status of T8540: Add CLI command that adds a local FDB entry to prevent anycast MAC from going over overlay from Open to In progress.
Viacheslav changed the status of T8588: bgp: Add match src-peer to policy route-map from Open to In progress.
Apr 27 2026
Apr 27 2026
matthew changed the edit policy for T8590: geoip not updating as expected.
rchrist added a comment to T8588: bgp: Add match src-peer to policy route-map.
c-po moved T8532: Git merge unrelated histories of vyos-utils and vyos-1x repo from Need Triage to Completed on the VyOS Rolling board.
Viacheslav reopened T8496: Add kernel config needed for pwru as "Needs testing".
natali-rs1985 changed the status of T8391: Bonding interface permission errors with custom ethernet MTU from Open to In progress.
natali-rs1985 added a comment to T8293: Add ability to set timeout for high-availability health-check.
Viacheslav changed the status of T8589: bgp: Add ead, es and [1-5] to route-map match evpn route-type from Open to In progress.
Viacheslav triaged T8589: bgp: Add ead, es and [1-5] to route-map match evpn route-type as Normal priority.
Viacheslav changed the status of T8506: Kernel build process / conventions, consider using merge_config.sh from Open to In progress.
rchrist changed the edit policy for T8589: bgp: Add ead, es and [1-5] to route-map match evpn route-type.
rchrist changed the edit policy for T8588: bgp: Add match src-peer to policy route-map.
Viacheslav changed the status of T8587: XML definitions use u32 type for ranges exceeding uint32 max value from Open to In progress.
yahyacivelek changed the edit policy for T8587: XML definitions use u32 type for ranges exceeding uint32 max value.
Apr 26 2026
Apr 26 2026
danielcshn added a comment to T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.
Hi Fransking, For some reason, Kea is just not playing nice with VIFs. Related: T8547. It’s quite striking that such a fundamental service as a DHCP server is not working correctly in this branch. The integration between the Kea engine and VyOS’s interface abstraction layer seems to have serious gaps, especially for unicast traffic.
cpcowart added a comment to T7807: Replace dhcp6c with modern and maintained dhcpv6 client.
I was working on something and got frustrated enough that you can't get info out of WIDE about its lease state, nor run custom hooks for anything beyond the DNS configurations, so I took a stab at replacing WIDE with dhcpcd:
c-po updated subscribers of T8586: dhcp-server: Config migration issue from ISC to KEA.
c-po added a comment to T8541: Lately the TPM smoketests have been failing.
a.kudientsov changed the edit policy for T8583: arm64: review and update the LSM kernel options.
Apr 25 2026
Apr 25 2026
rherold added a comment to T7767: Firewall: Add icmp-group and icmpv6-groups.
I would also see this feature cause I do strict icmp filtering and this would make the config much better
hedrok added a comment to T8535: BGP-LS: option nexthop-self cause commit error.
FRR behaviour seems weird, but it is result of:
- vtysh has code that on failed command retries the command on each level of configuration from down-to-top, if on any level there is success, it jumps to that level.
- on 'router bgp 65001` level there are a lot of hidden alias commands, including neighbor 3.3.3.3 next-hop-self that work with ipv4 unicast address family - probably backward compatibility.
- next-hop-self is unsupported for link-state address family
Apr 24 2026
Apr 24 2026
Boris added a comment to T8430: Cannot match a non-existent prefix-list in route-map.
FRRouting allows the use of non-existent prefix-list and as-path objects, just as Cisco permits this behavior.
Viacheslav added a comment to T6501: Add an op mode command for retrieving kernel module information.
PR https://github.com/vyos/vyos-1x/pull/3683
@dmbaturin, consider backporting it.
PR https://github.com/vyos/vyos-1x/pull/3737
>>> from vyos.utils.process import ip_cmd
>>>
>>> ip_cmd("link list")
[{'ifindex': 1, 'ifname': 'lo', 'flags': ['LOOPBACK', 'UP', 'LOWER_UP'], 'mtu': 65536, 'qdisc': 'noqueue', 'operstate': 'UNKNOWN', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'loopback', 'address': '00:00:00:00:00:00', 'broadcast': '00:00:00:00:00:00'}, {'ifindex': 2, 'ifname': 'eth0', 'flags': ['BROADCAST', 'MULTICAST', 'UP', 'LOWER_UP'], 'mtu': 1500, 'qdisc': 'fq_codel', 'operstate': 'UP', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'ether', 'address': '52:54:00:e9:94:ab', 'broadcast': 'ff:ff:ff:ff:ff:ff', 'altnames': ['enp1s0']}, {'ifindex': 4, 'ifname': 'eth2', 'flags': ['BROADCAST', 'MULTICAST', 'UP', 'LOWER_UP'], 'mtu': 1500, 'qdisc': 'fq_codel', 'operstate': 'UP', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'ether', 'address': '52:54:00:4a:f4:73', 'broadcast': 'ff:ff:ff:ff:ff:ff', 'altnames': ['enp3s0']}, {'ifindex': 5, 'ifname': 'eth3', 'flags': ['BROADCAST', 'MULTICAST', 'UP', 'LOWER_UP'], 'mtu': 1500, 'qdisc': 'fq_codel', 'operstate': 'UP', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'ether', 'address': '52:54:00:71:73:ea', 'broadcast': 'ff:ff:ff:ff:ff:ff', 'altnames': ['enp9s0']}, {'ifindex': 6, 'link': None, 'ifname': 'pim6reg', 'flags': ['NOARP', 'UP', 'LOWER_UP'], 'mtu': 1452, 'qdisc': 'noqueue', 'operstate': 'UNKNOWN', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'pimreg'}, {'ifindex': 7, 'ifname': 'eth1', 'flags': ['BROADCAST', 'MULTICAST', 'UP', 'LOWER_UP'], 'mtu': 1500, 'qdisc': 'mq', 'operstate': 'UP', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'ether', 'address': '52:54:00:21:1e:3f', 'broadcast': 'ff:ff:ff:ff:ff:ff'}, {'ifindex': 10, 'ifname': 'dum0', 'flags': ['BROADCAST', 'NOARP', 'UP', 'LOWER_UP'], 'mtu': 1500, 'qdisc': 'noqueue', 'operstate': 'UNKNOWN', 'linkmode': 'DEFAULT', 'group': 'default', 'txqlen': 1000, 'link_type': 'ether', 'address': 'ae:cd:79:9b:32:35', 'broadcast': 'ff:ff:ff:ff:ff:ff'}]
>>>Implemented
vyos@r16# set service monitoring zabbix-agent authentication mode Possible completions: pre-shared-secret Use a pre-shared secret key
Viacheslav changed the status of T2003: BGP FQDN capability has improper hostname after new image install from Needs reporter action to Needs testing.
Viacheslav closed T7047: DHCP relay does not forward DHCP OFFER with Option 42(NTP Servers) with more than one NTP server in ipoe as Resolved.
Fixed for the accel-ppp-ng as well https://github.com/accel-ppp/accel-ppp-ng/blob/e28003d4ee679221a407f7d9492a7f5989dbd42c/accel-pppd/ctrl/ipoe/dhcpv4_options.c#L49
Viacheslav added a comment to T7654: OpenConnect Script Execution.
@giga1699 any progress?
Viacheslav added a comment to T7826: Update net-snmp to 5.9.4+dfsg2.
Pay attention, for the 5.9.5.2 we had several issues with building other packages, so we reverted it https://vyos.dev/T8121
Implemented in the T8457
Viacheslav edited projects for T8211: Multi-port USB serial adapters create symlink collisions in console-server, added: VyOS 1.5 Circinus (Circinus-Next); removed VyOS 1.5 Circinus.
Viacheslav added a comment to T8236: Add openfabric route redistribution config options.
Proposed CLI
set protocols openfabric redistribute ipv4 < connected|ospf|isis|static > | metric | route-map xxx
It shouldn't be in the router
Info about IP addresses/ Geo / ASN should be obtained from appropriate sources such as RIPE/ARIN/etc.
Viacheslav placed T7650: Accel-ppp and VPP sync client, IPv4 up for grabs.
Viacheslav placed T3159: L2TP MTU mismatch between client and server up for grabs.