- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 24 2026
Jun 24 2026
o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.
@ssasso you can verify it by deleting 'address-family l2vpn-evpn vni <id>':
o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.
I have found the root cause of this issue:
- VyOS generates a vni <id> block inside router bgp <asn> vrf <name> / address-family l2vpn evpn for each VRF:
natali-rs1985 added a comment to T9013: bgp: bmp: Add update-source / source-interface support for BMP targets.
FRR has a bug where no bmp connect HOSTNAME port PORT min-retry MSEC max-retry MSEC source-interface WORD always fails with "No such active connection found" even when the parameters match the active connection. Deletion only works when source-interface is omitted from the command.
Viacheslav changed the status of T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down from In progress to Needs testing.
Som added a comment to T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3.
Update -- confirmed to be a bug, since rolling release works perfectly.
ssasso added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.
Here you go:
Jun 23 2026
Jun 23 2026
WanWizard added a comment to T8942: Strongswan 5.x can not create a route when using a point-to-point tunnel (policy routing).
I'll have to think about how to test this now, we migrated the last Sophos UTM over the weekend, after which we migrated all tunnels from IPSec to wireguard.
hedrok added a comment to T8942: Strongswan 5.x can not create a route when using a point-to-point tunnel (policy routing).
Hopefully resolved by upgrading to Strongswan 6.0.6.
Could you please check latest rolling release?
Thank you.
natali-rs1985 changed the status of T9013: bgp: bmp: Add update-source / source-interface support for BMP targets from Open to In progress.
Viacheslav closed T8913: VPP Bond Subinterface Reconfiguration Causes Bond Connectivity Loss as Resolved.
I don't know if the default value of 1 is a good idea, but per feature, it could be.
For example, we use it in the OpenVPN https://github.com/vyos/vyos-1x/blob/3edf114bed538733388252da0d23b49002273558/src/conf_mode/interfaces_openvpn.py#L844
Viacheslav closed T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit as Resolved.
Viacheslav triaged T9012: Incorrect zabbix-agent2 package version in latest sagitta as High priority.
Viacheslav triaged T9013: bgp: bmp: Add update-source / source-interface support for BMP targets as Normal priority.
o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.
@ssasso, I would be grateful if you provide the output of the following command:
- sudo /usr/lib/frr/frr-reload.py --reload --debug --stdout /run/frr/config/vyos.frr.conf
Jun 22 2026
Jun 22 2026
Lucas added a comment to T9013: bgp: bmp: Add update-source / source-interface support for BMP targets.
Ran into this on a rolling build (FRR 10.5.2). Without any source binding, the session stays stuck in Connecting with (unspec) as local address:
c-po updated the task description for T9010: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions.
natali-rs1985 changed the status of T8996: QoS: set-dscp option has no effect from Open to In progress.
natali-rs1985 added a comment to T9011: neighbor-proxy: nd (IPv6) doesn't work - proxy_ndp not enabled.
natali-rs1985 changed the status of T9011: neighbor-proxy: nd (IPv6) doesn't work - proxy_ndp not enabled from Open to In progress.
Viacheslav closed T8603: VPP: Expand ACL support to logical interfaces, a subtask of T7221: VPP related features the root task, as Resolved.
Jun 21 2026
Jun 21 2026
c-po renamed T9010: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions from T8147: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions to Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions.
c-po renamed T9010: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions from T8147: Update Linux Kernel to 6.18.36 to T8147: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions.
Jun 20 2026
Jun 20 2026
Boris added a comment to T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit.
a.kudientsov changed the status of T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit from Open to In progress.
c-po added a comment to T9008: Refactor vyos.ifconfig module to use new cmdl() process execution helper.
c-po added a comment to T9003: Introduce new vyos.utils.process.cmdl() helper for improved security.
c-po changed the status of T9008: Refactor vyos.ifconfig module to use new cmdl() process execution helper, a subtask of T9003: Introduce new vyos.utils.process.cmdl() helper for improved security, from Open to In progress.
c-po changed the status of T9008: Refactor vyos.ifconfig module to use new cmdl() process execution helper from Open to In progress.
c-po raised the priority of T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit from Normal to High.
PR: https://github.com/vyos/vyos-1x/pull/5284
Suggested CLI and details in PR.
Jun 19 2026
Jun 19 2026
Apachez added a comment to T9000: Add VRF or source-interface capability to set container registry feature.
A workaround to using a custom private registry is to manually preload the images.
Viacheslav triaged T9003: Introduce new vyos.utils.process.cmdl() helper for improved security as Normal priority.
natali-rs1985 changed the status of T8998: openvpn: enabling reject-unconfigured-clients without defining any clients breaks server startup from Open to In progress.
Cannot reproduce on version 2026.06.16-1247-rolling
Jun 19 10:10:41 vyos dhclient[1840]: DHCPDISCOVER on eth3 to 255.255.255.255 port 67 interval 12
Jun 19 10:10:50 vyos vyos-configd[738]: Received message: {"type": "init"}
Jun 19 10:10:50 vyos vyos-configd[738]: config session pid is 2765
Jun 19 10:10:50 vyos vyos-configd[738]: config session sudo_user is vyos
Jun 19 10:10:50 vyos vyos-configd[738]: commit_scripts: ['vpn_ipsec']
Jun 19 10:10:50 vyos vyos-configd[738]: Received message: {"type": "node", "last": true, "data": "/usr/libexec/vyos/conf_mode/vpn_ipsec.py"}
Jun 19 10:10:50 vyos systemd[1]: Reloading strongSwan IPsec IKEv1/IKEv2 daemon using swanctl...
Jun 19 10:10:50 vyos charon-systemd[3326]: loaded 0 entries for attr plugin configuration
Jun 19 10:10:50 vyos charon-systemd[3326]: loaded 0 RADIUS server configurations
Jun 19 10:10:50 vyos charon-systemd[3326]: loaded IKE shared key with id 'ike-VPP' for: '192.0.2.1', '192.0.2.2'
Jun 19 10:10:50 vyos charon-systemd[3326]: updated vici connection: VPP
Jun 19 10:10:50 vyos swanctl[3857]: loaded ike secret 'ike-VPP'
Jun 19 10:10:50 vyos swanctl[3857]: no authorities found, 0 unloaded
Jun 19 10:10:50 vyos swanctl[3857]: no pools found, 0 unloaded
Jun 19 10:10:50 vyos swanctl[3857]: loaded connection 'VPP'
Jun 19 10:10:50 vyos swanctl[3857]: successfully loaded 1 connections, 0 unloaded
Jun 19 10:10:50 vyos systemd[1]: Reloaded strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
Jun 19 10:10:50 vyos vyos-configd[738]: [vpn_ipsec]
Jun 19 10:10:50 vyos vyos-configd[738]: scripts_called: ['vpn_ipsec']
Jun 19 10:10:50 vyos vyos-configd[738]: Sending reply: SUCCESS with output
Jun 19 10:10:50 vyos systemd[1]: opt-vyatta-config-tmp-new_config_2765.mount: Deactivated successfully.
Jun 19 10:10:52 vyos commit[3904]: Successful change to active configuration by user vyos on /dev/ttyS0Jun 18 2026
Jun 18 2026
I was able to achieve the PCP set with different CoS value with subsystem tc of linux. Re-using the available options of QoS, it is possible to identify CoS values (L2 traffic) for ingress and egress. Let me explain how Linux performs the PCP values.
sarthurdev changed the status of T8987: geoip: add support for (manual) updates via given source interface from Open to In progress.
c-po updated the task description for T9003: Introduce new vyos.utils.process.cmdl() helper for improved security.
c-po reassigned T8987: geoip: add support for (manual) updates via given source interface from c-po to sarthurdev.
c-po closed T8994: certbot: dependent services might stop on certificate renewal issues as Resolved.
Viacheslav closed T8979: VPP: Defunct interface contains IP addresses after crash, a subtask of T7070: VPP related bugs the root task, as Resolved.
Viacheslav triaged T8998: openvpn: enabling reject-unconfigured-clients without defining any clients breaks server startup as Normal priority.
natali-rs1985 changed the status of T8979: VPP: Defunct interface contains IP addresses after crash, a subtask of T7070: VPP related bugs the root task, from Open to In progress.
natali-rs1985 changed the status of T8979: VPP: Defunct interface contains IP addresses after crash from Open to In progress.
Jun 17 2026
Jun 17 2026
Jun 16 2026
Jun 16 2026