Page MenuHomeVyOS Platform
Feed Search

Jul 1 2026

Viacheslav changed the status of T9040: Build FIPS-provider OpenSSL version from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/1233

Jul 1 2026, 5:05 PM · VyOS Rolling
Viacheslav renamed T9040: Build FIPS-provider OpenSSL version from FIPS-compliant OpenSSL version to Build FIPS-compliant OpenSSL version.
Jul 1 2026, 4:47 PM · VyOS Rolling
Viacheslav created T9040: Build FIPS-provider OpenSSL version.
Jul 1 2026, 4:47 PM · VyOS Rolling
Viacheslav closed T9039: Bump accel-ppp-ng version to 69c867c as Resolved.
Jul 1 2026, 4:23 PM · VyOS Rolling
Viacheslav triaged T9039: Bump accel-ppp-ng version to 69c867c as High priority.
Jul 1 2026, 3:55 PM · VyOS Rolling
Viacheslav created T9039: Bump accel-ppp-ng version to 69c867c.
Jul 1 2026, 3:55 PM · VyOS Rolling

Jun 30 2026

Viacheslav closed T9031: Change in pppoe-server authentication protocols is not applied as Resolved.
Jun 30 2026, 5:02 PM · VyOS Rolling
Viacheslav triaged T9009: op-mode: extend "monitor log" with filter level as Normal priority.
Jun 30 2026, 4:51 PM · VyOS Rolling
Viacheslav closed T9029: Switch default branch for CI workflows as Resolved.

PR https://github.com/vyos/vyos-build/pull/1231

Jun 30 2026, 4:27 PM · VyOS Rolling
Viacheslav closed T8963: Fix policy route domain-group handling so vyos-domain-resolver is triggered after PBR nftables sets are recreated. as Resolved.
Jun 30 2026, 3:44 PM · VyOS Rolling
Viacheslav closed T8981: op-mode: "show system commit diff N" prints nothing - catch_broken_pipe decorator discards return values (regression from T8362) as Resolved.
Jun 30 2026, 3:36 PM · VyOS Rolling
Viacheslav closed T9033: Modify OpenNHRP scripts to apply patches as Resolved.
Jun 30 2026, 2:07 PM · VyOS Rolling
Viacheslav reassigned T9016: accel-ppp-ng: MS-CHAPv1/v2 auth fails on OpenSSL 3.x for all protocols - legacy provider (MD4/DES) not loaded from dmbaturin to hedrok.
Jun 30 2026, 12:38 PM · VyOS Rolling
Viacheslav triaged T9031: Change in pppoe-server authentication protocols is not applied as Normal priority.
Jun 30 2026, 11:21 AM · VyOS Rolling
Viacheslav closed T9022: service https: server certificate chain is incomplete — intermediate CA certificates are not served as Resolved.
Jun 30 2026, 11:15 AM · VyOS Rolling
Viacheslav closed T6573: Add CLI for FRR BGP Input/Output Queue limits as Resolved.
Jun 30 2026, 11:05 AM · VyOS Rolling
Viacheslav closed T7931: FRR restarted on any configuration change when there is static route in VRF as Resolved.
Jun 30 2026, 10:20 AM · VyOS Rolling
Viacheslav closed T8426: EVPN Route Type 2 does not contain IP when Anycast IP/MAC GW is set on MACVLAN interface as Resolved.
Jun 30 2026, 10:19 AM · VyOS Rolling

Jun 29 2026

Viacheslav closed T8987: geoip: add support for (manual) updates via given source interface as Resolved.
Jun 29 2026, 12:26 PM · VyOS Rolling
Viacheslav changed the status of T8605: L2TPv3: tunnel creation fails if the route to remote is added in the same commit from In progress to Needs testing.
Jun 29 2026, 10:42 AM · VyOS 1.5 Circinus (Circinus-Next)

Jun 26 2026

Viacheslav closed T9013: bgp: bmp: Add update-source / source-interface support for BMP targets as Resolved.
Jun 26 2026, 2:25 PM · VyOS Rolling
Viacheslav changed the status of T9022: service https: server certificate chain is incomplete — intermediate CA certificates are not served from Open to In progress.
Jun 26 2026, 12:01 PM · VyOS Rolling

Jun 25 2026

Viacheslav closed T8097: Add ESN support for IPSec as Resolved.
Jun 25 2026, 3:04 PM · VyOS Rolling
Viacheslav assigned T9016: accel-ppp-ng: MS-CHAPv1/v2 auth fails on OpenSSL 3.x for all protocols - legacy provider (MD4/DES) not loaded to dmbaturin.
Jun 25 2026, 2:23 PM · VyOS Rolling
Viacheslav triaged T9020: Support nexthop-vrf static routes in the VyOS CLI as Wishlist priority.
Jun 25 2026, 1:43 PM · VyOS Rolling
Viacheslav changed the status of T8942: Strongswan 5.x can not create a route when using a point-to-point tunnel (policy routing), a subtask of T8099: Upgrade strongSwan to 6.0, from Open to Needs testing.
Jun 25 2026, 1:08 PM · VyOS Rolling
Viacheslav changed the status of T8942: Strongswan 5.x can not create a route when using a point-to-point tunnel (policy routing) from Open to Needs testing.
Jun 25 2026, 1:08 PM · VyOS Rolling
Viacheslav closed T5746: Firewall extend GeoIP match ASN, a subtask of T4299: Firewall - GeoIP filtering, as Resolved.
Jun 25 2026, 12:17 PM · VyOS 1.4 Sagitta
Viacheslav closed T5746: Firewall extend GeoIP match ASN, a subtask of T7926: Refactor and improve geoip handling, as Resolved.
Jun 25 2026, 12:17 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
Viacheslav closed T5746: Firewall extend GeoIP match ASN as Resolved.
Jun 25 2026, 12:17 PM · VyOS Rolling

Jun 24 2026

Viacheslav changed the status of T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down from In progress to Needs testing.
Jun 24 2026, 11:53 AM · VyOS Rolling
Viacheslav triaged T9016: accel-ppp-ng: MS-CHAPv1/v2 auth fails on OpenSSL 3.x for all protocols - legacy provider (MD4/DES) not loaded as High priority.
Jun 24 2026, 6:42 AM · VyOS Rolling

Jun 23 2026

Viacheslav added a comment to T9010: Update Linux Kernel to 6.18.36 and re-fresh Intel OOT driver versions.

PR https://github.com/vyos/vyos-build/pull/1224

Jun 23 2026, 4:11 PM · VyOS Rolling
Viacheslav closed T8998: openvpn: enabling reject-unconfigured-clients without defining any clients breaks server startup as Resolved.
Jun 23 2026, 3:51 PM · VyOS Rolling
Viacheslav closed T8931: Improve WebSocket support for HAProxy as Resolved.
Jun 23 2026, 3:45 PM · VyOS Rolling
Viacheslav closed T8913: VPP Bond Subinterface Reconfiguration Causes Bond Connectivity Loss as Resolved.
Jun 23 2026, 1:46 PM · VyOS Rolling
Viacheslav added a comment to T9005: Make net.*.ip_nonlocal_bind being default.

I don't know if the default value of 1 is a good idea, but per feature, it could be.
For example, we use it in the OpenVPN https://github.com/vyos/vyos-1x/blob/3edf114bed538733388252da0d23b49002273558/src/conf_mode/interfaces_openvpn.py#L844

Jun 23 2026, 11:52 AM · VyOS Rolling
Viacheslav changed the status of T8097: Add ESN support for IPSec from Open to In progress.
Jun 23 2026, 11:46 AM · VyOS Rolling
Viacheslav closed T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit as Resolved.
Jun 23 2026, 11:35 AM · VyOS Rolling
Viacheslav triaged T9012: Incorrect zabbix-agent2 package version in latest sagitta as High priority.
Jun 23 2026, 11:31 AM · VyOS Rolling
Viacheslav triaged T9013: bgp: bmp: Add update-source / source-interface support for BMP targets as Normal priority.
Jun 23 2026, 11:24 AM · VyOS Rolling
Viacheslav closed T8540: Add CLI command that adds a local FDB entry to prevent anycast MAC from going over overlay as Resolved.
Jun 23 2026, 10:37 AM · VyOS Rolling

Jun 22 2026

Viacheslav closed T8603: VPP: Expand ACL support to logical interfaces as Resolved.

PR https://github.com/vyos/vyos-1x/pull/5280

Jun 22 2026, 11:28 AM · VyOS Rolling
Viacheslav closed T8603: VPP: Expand ACL support to logical interfaces, a subtask of T7221: VPP related features the root task, as Resolved.
Jun 22 2026, 11:28 AM · VyOS Rolling

Jun 19 2026

Viacheslav added a comment to T8546: Conntrack VRF zone mapping not applied when only global state-policy is configured.

'Resolved for the rolling

Jun 19 2026, 11:30 AM · VyOS 1.4 Sagitta (1.4.0)
Viacheslav closed T8546: Conntrack VRF zone mapping not applied when only global state-policy is configured as Resolved.
Jun 19 2026, 11:29 AM · VyOS 1.4 Sagitta (1.4.0)
Viacheslav closed T8881: PowerDNS refresh-on-ttl-perc, nothing-below-nxdomain, minimum-ttl-override, response policy zones (malware / adblocking) as Resolved.
Jun 19 2026, 11:26 AM · VyOS Rolling
Viacheslav closed T7139: Changing VPN IPsec configuration kills Strongswan bug as Not Applicable.
Jun 19 2026, 11:18 AM · VyOS Rolling
Viacheslav triaged T9003: Introduce new vyos.utils.process.cmdl() helper for improved security as Normal priority.
Jun 19 2026, 11:16 AM · VyOS Rolling

Jun 18 2026

Viacheslav closed T8524: insufficient validation for dhcp-server dynamic-dns-update key-name as Resolved.
Jun 18 2026, 2:25 PM · VyOS 1.5 Circinus
Viacheslav closed T8979: VPP: Defunct interface contains IP addresses after crash, a subtask of T7070: VPP related bugs the root task, as Resolved.
Jun 18 2026, 2:13 PM · VyOS Rolling
Viacheslav closed T8979: VPP: Defunct interface contains IP addresses after crash as Resolved.
Jun 18 2026, 2:13 PM · VyOS Rolling
Viacheslav triaged T8998: openvpn: enabling reject-unconfigured-clients without defining any clients breaks server startup as Normal priority.
Jun 18 2026, 11:49 AM · VyOS Rolling
Viacheslav triaged T8999: openvpn: misleading "no openvpn shared-secrets in PKI" error for a dangling auth-key/crypt-key reference as Normal priority.
Jun 18 2026, 11:46 AM · VyOS Rolling
Viacheslav triaged T9002: blackbox-exporter ICMP probes fail silently in default configuration due to missing net.ipv4.ping_group_range permission as Normal priority.
Jun 18 2026, 11:39 AM · VyOS Rolling

Jun 17 2026

Viacheslav closed T8950: vyos-netlinkd: DHCP restart on every RTM_NEWLINK(UP) without tracking previous state as Resolved.
Jun 17 2026, 2:03 PM · VyOS Rolling
Viacheslav moved T8223: EVPN-VXLAN L3VPN / VRF config validation is broken, "Please unconfigure EVPN in VRF default" from Backport Candidates to Completed on the VyOS Rolling board.
Jun 17 2026, 12:38 PM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav closed T8223: EVPN-VXLAN L3VPN / VRF config validation is broken, "Please unconfigure EVPN in VRF default" as Resolved.
Jun 17 2026, 12:37 PM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav closed T8492: CRL generated by VyOS PKI lacks X.509 extensions required for strongSwan validation as Resolved.
Jun 17 2026, 11:24 AM · VyOS 1.4 Sagitta (1.4.0)
Viacheslav closed T8923: General XML definition cleanup and typo fixes as Resolved.
Jun 17 2026, 11:22 AM · VyOS Rolling

Jun 16 2026

Viacheslav closed T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces., a subtask of T7221: VPP related features the root task, as Resolved.
Jun 16 2026, 3:35 PM · VyOS Rolling
Viacheslav closed T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces. as Resolved.
Jun 16 2026, 3:35 PM · VyOS Rolling
Viacheslav triaged T8981: op-mode: "show system commit diff N" prints nothing - catch_broken_pipe decorator discards return values (regression from T8362) as Normal priority.
Jun 16 2026, 12:19 PM · VyOS Rolling
Viacheslav changed the status of T8829: firewall remote-group downloader errors if HEAD method is not supported from Open to In progress.
Jun 16 2026, 11:35 AM · VyOS Rolling
evgbondarenko empowered Viacheslav as an administrator.
Jun 16 2026, 11:10 AM

Jun 15 2026

Viacheslav triaged T8985: password-reset: unbounded sed ranges in standalone_root_pw_reset spill into the next user's block, corrupting other accounts as Normal priority.
Jun 15 2026, 1:04 PM · VyOS Rolling
Viacheslav triaged T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit as Normal priority.
Jun 15 2026, 1:03 PM · VyOS Rolling
Viacheslav added a comment to T8990: VPNv4 imported routes are withdrawn and reinstalled on every commit.

FRR reloads the whole configuration per commit, not only one protocol
So policy-route-map is related to FRR config and prefix-lists are the same between all FRR routing daemons.
https://github.com/vyos/vyos-1x/blob/c2f87f243a1f813fbdd319b1004fd3a26397ab3e/python/vyos/frrender.py#L850

Jun 15 2026, 1:03 PM · VyOS Rolling
Viacheslav triaged T8980: config-sync: phantom drift on converged pair - sync diff op-mode does not apply the exclusion mask as Normal priority.
Jun 15 2026, 11:42 AM · VyOS Rolling

Jun 11 2026

Viacheslav moved T8346: password recovery doesn't work if user plaintext-password set via cloud-init from Need Triage to Completed on the VyOS Rolling board.
Jun 11 2026, 2:54 PM · VyOS Rolling
Viacheslav closed T8346: password recovery doesn't work if user plaintext-password set via cloud-init as Resolved.
Jun 11 2026, 2:54 PM · VyOS Rolling
Viacheslav placed T7829: VPP - ARP processing fails: No ARP responses sent, leading to incomplete entries and packet loss on external IP and internal IP up for grabs.
Jun 11 2026, 1:17 AM · VyOS Rolling
Viacheslav added a subtask for T7070: VPP related bugs the root task: T8979: VPP: Defunct interface contains IP addresses after crash.
Jun 11 2026, 1:16 AM · VyOS Rolling
Viacheslav added a parent task for T8979: VPP: Defunct interface contains IP addresses after crash: T7070: VPP related bugs the root task.
Jun 11 2026, 1:16 AM · VyOS Rolling
Viacheslav renamed T8979: VPP: Defunct interface contains IP addresses after crash from Defunct interface contains IP addresses after crash to VPP: Defunct interface contains IP addresses after crash.
Jun 11 2026, 1:16 AM · VyOS Rolling

Jun 10 2026

Viacheslav changed the status of T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected) from Open to In progress.
Jun 10 2026, 3:45 PM · VyOS Rolling
Viacheslav closed T8964: ethtool: crash configuring ring-buffer on NICs without ring-buffer support (XCP-ng vif) as Resolved.
Jun 10 2026, 3:44 PM · VyOS Rolling
Viacheslav changed the status of T8968: bash: fix unbounded brace expansion DoS (V-004) from Open to In progress.

PR https://github.com/vyos/vyatta-bash/pull/37

Jun 10 2026, 3:30 PM · VyOS Rolling
Viacheslav closed T8973: Remove salt from rolling release, a subtask of T8056: Mark Salt minion deprecated, as Resolved.
Jun 10 2026, 12:21 PM · VyOS 1.5 Circinus (2026.02), VyOS 1.4 Sagitta (1.4.4)
Viacheslav closed T8973: Remove salt from rolling release as Resolved.
Jun 10 2026, 12:21 PM · VyOS Rolling
Viacheslav triaged T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected) as Normal priority.
Jun 10 2026, 12:11 PM · VyOS Rolling
Viacheslav closed T8930: vpp: unhandled exception enabling vpp on XCP-NG, a subtask of T7070: VPP related bugs the root task, as Resolved.
Jun 10 2026, 12:11 PM · VyOS Rolling
Viacheslav closed T8930: vpp: unhandled exception enabling vpp on XCP-NG as Resolved.
Jun 10 2026, 12:11 PM · VyOS Rolling
Viacheslav triaged T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down as Normal priority.
Jun 10 2026, 11:51 AM · VyOS Rolling
Viacheslav changed the status of T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down from Open to In progress.
Jun 10 2026, 11:37 AM · VyOS Rolling
Viacheslav changed the status of T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces., a subtask of T7221: VPP related features the root task, from Open to In progress.
Jun 10 2026, 11:07 AM · VyOS Rolling
Viacheslav changed the status of T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces. from Open to In progress.
Jun 10 2026, 11:07 AM · VyOS Rolling
Viacheslav closed T8974: serial: invalid check during migration system 31 -> 32 as Resolved.
Jun 10 2026, 10:49 AM · VyOS Rolling

Jun 9 2026

Viacheslav added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..

VPP/LCP VRF Table Synchronization Manual Test

Manual testing was performed in a GNS3 VyOS lab with VPP enabled on eth1.

Source repo

VyOS has been built from https://github.com/inetman28/vyos-1x/tree/fix-vpp-lcp-vrf-table

Jun 9 2026, 4:03 PM · VyOS Rolling
Viacheslav added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..

I also noticed another issue with vpploX interfaces: currently, they cannot be assigned to any VRF.

Should we fix this in the same branch, or would it be better to handle it separately?

Branch: https://github.com/inetman28/vyos-1x/tree/fix-vpp-lcp-vrf-table

Jun 9 2026, 3:44 PM · VyOS Rolling
Viacheslav added a parent task for T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces.: T7221: VPP related features the root task.
Jun 9 2026, 12:00 PM · VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
Jun 9 2026, 12:00 PM · VyOS Rolling
Viacheslav closed T8969: vyos-build failing to build, missing dependencies as Resolved.
Jun 9 2026, 10:45 AM · VyOS Rolling

Jun 8 2026

Viacheslav closed T8967: [DOCS] Fix update-check URL for rolling as Resolved.
Jun 8 2026, 10:50 AM · VyOS Rolling
Viacheslav triaged T8969: vyos-build failing to build, missing dependencies as High priority.
Jun 8 2026, 10:25 AM · VyOS Rolling

Jun 5 2026

Viacheslav closed T8933: System timezone is not honored in DHCP v4/v6 server lease op-mode commands as Resolved.
Jun 5 2026, 11:03 AM · VyOS Rolling
Viacheslav changed the status of T8346: password recovery doesn't work if user plaintext-password set via cloud-init from In progress to Needs testing.
Jun 5 2026, 10:51 AM · VyOS Rolling

Jun 4 2026

Viacheslav closed T8542: Add functionality to generate SBOM file from ISO image as Resolved.
Jun 4 2026, 4:18 PM · VyOS Rolling
Viacheslav closed T8961: Smoketest fails due to missing kernel modules as Resolved.
Jun 4 2026, 2:13 PM · VyOS Rolling
Viacheslav triaged T8963: Fix policy route domain-group handling so vyos-domain-resolver is triggered after PBR nftables sets are recreated. as Normal priority.
Jun 4 2026, 10:41 AM · VyOS Rolling