Page MenuHomeVyOS Platform
Feed All Stories

Aug 11 2026

Viacheslav closed T8468: MAC address modifying on a VPP interface does not take effect as Resolved.
Aug 11 2026, 12:57 PM · VyOS Rolling
Viacheslav closed T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration) as Resolved.
Aug 11 2026, 12:50 PM · VyOS Rolling
Viacheslav closed T9134: QoS: 'ether protocol X' match crashes commit as Resolved.
Aug 11 2026, 12:33 PM · VyOS Rolling
Viacheslav added a comment to T9163: Typos in the completion help for the service conntrack-sync interface.

PR https://github.com/vyos/vyos-1x/pull/5378

Aug 11 2026, 12:08 PM · VyOS Rolling
drixter added a comment to T9178: ipv6 ospfv3 redistribute.

I'll compare on the evening how this looks llike with 1.4.x

Aug 11 2026, 11:10 AM · VyOS Rolling
drixter added a comment to T9178: ipv6 ospfv3 redistribute.

Hello, this is FRRouting (version 10.5.2).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

Aug 11 2026, 10:34 AM · VyOS Rolling
rherold added a comment to T9178: ipv6 ospfv3 redistribute.

Looking at your last output more closely - I think this might not be an FRR-side redistribution bug at all, but a route-selection conflict on your box.

Aug 11 2026, 10:30 AM · VyOS Rolling
Viacheslav triaged T9196: Conntrack helper modules fail to load in latest rolling build as High priority.
Aug 11 2026, 10:09 AM · VyOS Rolling
a.kudientsov created T9196: Conntrack helper modules fail to load in latest rolling build.
Aug 11 2026, 8:40 AM · VyOS Rolling
lclements0 added a comment to T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.

I dropped a PR for this change, here: https://github.com/vyos/vyos-1x/pull/5392

Aug 11 2026, 6:25 AM · VyOS Rolling
lclements0 created T9195: Rolling images 2026.08.04+ do not boot on Denverton / Ice Lake Xeon D / Snowridge (kernel 6.18.39-6.18.41 8250_mid NULL deref).
Aug 11 2026, 6:19 AM · VyOS Rolling

Aug 10 2026

evgmol added a comment to T6830: add support for file upload, management and templating.

https://github.com/vyos/vyos.vyos/pull/495

Aug 10 2026, 11:53 PM · VyOS Ansible Collection
L0crian created T9194: interface-definitions: Add `common-rule-all` XML include file for firewall rules.
Aug 10 2026, 9:28 PM · VyOS Rolling
drixter added a comment to T9178: ipv6 ospfv3 redistribute.

Some input, I can't test it with IPv4.

Aug 10 2026, 8:58 PM · VyOS Rolling
c-po added a comment to T7250: Auto completion for op command show file is broken.

https://github.com/vyos/vyos-1x/pull/5391

Aug 10 2026, 8:07 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po changed Version from 2025.10.07-0019-rolling to 2025.10.07-0019-rolling, 1.5.0, 1.5.1 on T7250: Auto completion for op command show file is broken.
Aug 10 2026, 6:59 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po claimed T7250: Auto completion for op command show file is broken.
Aug 10 2026, 6:21 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po closed T9181: Kernel: modernize packaging and remove redundant work as Resolved.
Aug 10 2026, 6:20 PM · VyOS Rolling
lclements0 created T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.
Aug 10 2026, 6:00 PM · VyOS Rolling
RC created T9192: Accel-PPP: VPP bond interface and PPPoE rebind failure.
Aug 10 2026, 5:05 PM · VyOS Rolling
Viacheslav changed the status of T9176: firewall: Implement nftables concatenation support for firewall groups from Open to In progress.
Aug 10 2026, 4:08 PM · VyOS Rolling
Viacheslav closed T9184: Support configuring chown capability for containers as Resolved.
Aug 10 2026, 3:42 PM · VyOS Rolling
Viacheslav assigned T8999: openvpn: misleading "no openvpn shared-secrets in PKI" error for a dangling auth-key/crypt-key reference to hybridops.
Aug 10 2026, 3:15 PM · VyOS Rolling
Viacheslav added a comment to T6941: cloud-init cannot clean up previously downloaded instance data.

Hi @hybridops could you add a PR and maintainers will take a look on proposed fix.
Thanks

Aug 10 2026, 3:13 PM · VyOS 1.5 Circinus, VyOS Rolling
Viacheslav triaged T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog as Normal priority.
Aug 10 2026, 3:07 PM · VyOS Rolling
Viacheslav changed the status of T9184: Support configuring chown capability for containers from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5387

Aug 10 2026, 2:36 PM · VyOS Rolling
Viacheslav assigned T9178: ipv6 ospfv3 redistribute to hedrok.
Aug 10 2026, 2:27 PM · VyOS Rolling
Viacheslav triaged T9191: Add selectable conntrackd synchronization modes, transports, and CPU-cost tuning as Normal priority.
Aug 10 2026, 1:50 PM · VyOS Rolling
lclements0 added a comment to T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot.

This is the same boot-time interface-naming race tracked by T3871, here triggered by a slow-initializing NIC (an empty-cage Intel ice E823-L, which delays bring-up with a DDP-package load plus a firmware "module not present" media check) rather than a multi-vendor probe-order difference. Related interface-ordering reports for cross-reference:

Aug 10 2026, 1:42 PM · VyOS Rolling
Viacheslav triaged T9190: VPP dataplane: no NAT64 support (nat64_plugin disabled, Jool is kernel-only) as Normal priority.

There are several places that may be affected by VPP
Though it mentioned in the VyOS documentation, it seems we should consider additonal option like warnings, needs to be discussed with maintainers

Data Path Limitations
Aug 10 2026, 1:39 PM · VyOS Rolling
rherold added a comment to T9190: VPP dataplane: no NAT64 support (nat64_plugin disabled, Jool is kernel-only).

Took a look at the current vpp-1.5 code to scope this out.

Aug 10 2026, 1:33 PM · VyOS Rolling
zsdc created T9191: Add selectable conntrackd synchronization modes, transports, and CPU-cost tuning.
Aug 10 2026, 1:04 PM · VyOS Rolling
Viacheslav triaged T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result as Normal priority.
Aug 10 2026, 1:03 PM · VyOS Rolling
Viacheslav changed the status of T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result from Open to In progress.
Aug 10 2026, 1:03 PM · VyOS Rolling
DarkDreamSan created T9190: VPP dataplane: no NAT64 support (nat64_plugin disabled, Jool is kernel-only).
Aug 10 2026, 12:44 PM · VyOS Rolling
Viacheslav raised the priority of T7736: Container: virtual-ethernet exception when attempting to modify container network created veth from Normal to High.
Aug 10 2026, 12:28 PM · VyOS Rolling
jestabro added a comment to T9186: mTLS authentication for the VyOS REST API and nginx 1.22.1 / TLSv1.2 stopper.

The intended upgrade to debian trixie will provide nginx version 1.26.3.

Aug 10 2026, 12:22 PM · VyOS Rolling
Viacheslav triaged T9187: accel-ppp: vlan-mon does not create dynamic VLAN interfaces on rolling as High priority.
Aug 10 2026, 12:14 PM · VyOS Rolling
Viacheslav triaged T9188: show nat source rules displays protocol/port match criteria that do not exist in the generated nftables ruleset as Normal priority.
Aug 10 2026, 12:08 PM · VyOS Rolling
Viacheslav triaged T9174: WWAN modem not up, counter 100 not long enough as Normal priority.
Aug 10 2026, 11:54 AM · VyOS Rolling
Viacheslav raised the priority of T9189: Title: Container commit fails for dual-stack (IPv4+IPv6) network, cascades through test_container.py smoketests from Normal to High.
Aug 10 2026, 11:51 AM · VyOS Rolling
Viacheslav triaged T9189: Title: Container commit fails for dual-stack (IPv4+IPv6) network, cascades through test_container.py smoketests as Normal priority.
Aug 10 2026, 11:48 AM · VyOS Rolling
Viacheslav changed the status of T8221: firewall: add `last` rule option from Open to In progress.
Aug 10 2026, 11:43 AM · VyOS Rolling
rherold created T9189: Title: Container commit fails for dual-stack (IPv4+IPv6) network, cascades through test_container.py smoketests.
Aug 10 2026, 11:13 AM · VyOS Rolling
jesper.beltman added a comment to T9174: WWAN modem not up, counter 100 not long enough.

Changing this counter value from 100 (25seconds) to 200 (50 seconds) works for me:
https://github.com/vyos/vyos-1x/blob/f6a1ff94f02282bd018b9b49ae1a9812619ec7ba/src/conf_mode/interfaces_wwan.py#L143

Aug 10 2026, 9:28 AM · VyOS Rolling
0lzi added a comment to T9046: Add EAB support to ACME/PKI.

Made a crack at a PR in my own fork. Not sure If its correct, but happy to get feedback 😀

Aug 10 2026, 9:27 AM · VyOS Rolling
Plus88 updated Plus88.
Aug 10 2026, 7:30 AM
Plus88 added a comment to T9188: show nat source rules displays protocol/port match criteria that do not exist in the generated nftables ruleset.

Adding the raw command outputs as a comment — the code blocks in the description lost their monospace formatting and I don't have edit rights to fix them inline. All addresses are anonymised (RFC 1918 / RFC 5737 documentation ranges).

Aug 10 2026, 7:26 AM · VyOS Rolling
Plus88 created T9188: show nat source rules displays protocol/port match criteria that do not exist in the generated nftables ruleset.
Aug 10 2026, 7:23 AM · VyOS Rolling
a.kudientsov created T9187: accel-ppp: vlan-mon does not create dynamic VLAN interfaces on rolling.
Aug 10 2026, 6:54 AM · VyOS Rolling
a.kudientsov added a comment to T7736: Container: virtual-ethernet exception when attempting to modify container network created veth.
In T7736#274164, @MattK wrote:

This change seems to have broken the container smoketests due to a dual-stack issue: https://github.com/vyos/vyos-1x/actions/runs/30939432127/job/92574815074

Aug 10 2026, 3:48 AM · VyOS Rolling
evgmol updated the task description for T9186: mTLS authentication for the VyOS REST API and nginx 1.22.1 / TLSv1.2 stopper.
Aug 10 2026, 1:41 AM · VyOS Rolling
evgmol created T9186: mTLS authentication for the VyOS REST API and nginx 1.22.1 / TLSv1.2 stopper.
Aug 10 2026, 1:37 AM · VyOS Rolling
MattK added a comment to T7736: Container: virtual-ethernet exception when attempting to modify container network created veth.

This change seems to have broken the container smoketests due to a dual-stack issue: https://github.com/vyos/vyos-1x/actions/runs/30939432127/job/92574815074

Aug 10 2026, 1:19 AM · VyOS Rolling

Aug 9 2026

rherold added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.

hi please try:

Aug 9 2026, 9:11 PM · VyOS Rolling
sageframe added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.

One thing not covered above — this isn't rolling-only. Same box migrated to Stream 2026.03 (circinus), reproduces identically:

Aug 9 2026, 8:58 PM · VyOS Rolling
rherold added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.

Root cause found: ask_yes_no() in python/vyos/utils/io.py:57 catches EOFError from input() but loops right back to the top of while True with no backoff or exit condition:

Aug 9 2026, 8:55 PM · VyOS Rolling
sageframe added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.

Also reproduces on VyOS Stream 2026.03 (circinus), not only rolling.

Aug 9 2026, 8:47 PM · VyOS Rolling
evgmol added a comment to T6837: Add replace configuration for module vyos_config.

Are you able to elaborate, @Apachez?

Aug 9 2026, 8:29 PM · VyOS Ansible Collection
rherold added a comment to T9178: ipv6 ospfv3 redistribute.

Thanks for the detailed follow-up, this is helpful.

Aug 9 2026, 8:23 PM · VyOS Rolling
rherold added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.

PR: https://github.com/vyos/vyos-1x/pull/5389
PR: https://github.com/vyos/vyos-documentation/pull/2193

Aug 9 2026, 8:12 PM · VyOS Rolling
rherold added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.

@Apachez default powerdns: https://doc.powerdns.com/recursor/security.html it seems it was taken over from the debiab powerdns package.

Aug 9 2026, 7:49 PM · VyOS Rolling
jestabro claimed T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
Aug 9 2026, 7:40 PM · VyOS Rolling
sageframe created T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
Aug 9 2026, 7:18 PM · VyOS Rolling
Apachez added a comment to T6837: Add replace configuration for module vyos_config.

Would be handy if a config replace would accept both show config and show config commands as inputs.

Aug 9 2026, 6:43 PM · VyOS Ansible Collection
Apachez added a comment to T9179: Completion and validation don't match for source interface name.

I think most implementations in VyOS regarding source-interface is referencing physical or logical interfaces and not VRF's even if VRF's is an "interface" in Linux (which can be seen if you do ip a in bash mode).

Aug 9 2026, 6:42 PM · VyOS Rolling
Apachez added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.

Why does it phone home like this?

Aug 9 2026, 6:35 PM · VyOS Rolling
nvollmar created T9184: Support configuring chown capability for containers.
Aug 9 2026, 12:13 PM · VyOS Rolling
arogers created T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.
Aug 9 2026, 8:52 AM · VyOS Rolling
drixter added a comment to T9178: ipv6 ospfv3 redistribute.

Ad.1/2 It's there

Aug 9 2026, 6:57 AM · VyOS Rolling
jestabro added a comment to T9182: Simplify vyos1x-config lexical-numeric compare function and fix corner case.

PR:
https://github.com/vyos/vyos1x-config/pull/91

Aug 9 2026, 3:24 AM · VyOS Rolling
jestabro created T9182: Simplify vyos1x-config lexical-numeric compare function and fix corner case.
Aug 9 2026, 2:50 AM · VyOS Rolling

Aug 8 2026

rherold added a comment to T9178: ipv6 ospfv3 redistribute.

Hi, thanks for the detailed report.

Aug 8 2026, 11:09 PM · VyOS Rolling
c-po added a comment to T9181: Kernel: modernize packaging and remove redundant work.

https://github.com/vyos/vyos-build/pull/1262

Aug 8 2026, 8:42 PM · VyOS Rolling
catalyys added a comment to T9180: default_action return is missing in vyos_firewall_rules.

I have added a Pull Request under https://github.com/vyos/vyos.vyos/pull/494

Aug 8 2026, 8:33 PM · VyOS Rolling
c-po created T9181: Kernel: modernize packaging and remove redundant work.
Aug 8 2026, 8:32 PM · VyOS Rolling
catalyys created T9180: default_action return is missing in vyos_firewall_rules.
Aug 8 2026, 7:56 PM · VyOS Rolling
hedrok closed T9036: ipt-NETFLOW: support VRF as Resolved.

Closed in https://vyos.dev/T9122

Aug 8 2026, 5:12 PM · VyOS Rolling
hedrok created T9179: Completion and validation don't match for source interface name.
Aug 8 2026, 5:02 PM · VyOS Rolling
Restricted Repository Identity closed T9107: Fix integration workflow after recent GitHub security updates as Resolved by committing Restricted Diffusion Commit.
Aug 8 2026, 4:37 PM · VyOS Rolling
drixter created T9178: ipv6 ospfv3 redistribute.
Aug 8 2026, 3:15 PM · VyOS Rolling
asklymenko closed T9125: Add new exception to the workflow that checks for typos as Resolved.
Aug 8 2026, 3:00 PM · VyOS Rolling
hybridops added a comment to T6941: cloud-init cannot clean up previously downloaded instance data.

I checked the current public vyos-cloud-init branches and the issue still appears to be present: cloudinit/stages.py calls util.del_file(self.paths.instance_link), while util.del_file() uses os.unlink(), so a stale real directory at that path still raises IsADirectoryError.

Aug 8 2026, 2:41 PM · VyOS 1.5 Circinus, VyOS Rolling
hybridops added a comment to T8999: openvpn: misleading "no openvpn shared-secrets in PKI" error for a dangling auth-key/crypt-key reference.

I would like to work on this task.

Aug 8 2026, 1:58 PM · VyOS Rolling
hybridops added a comment to T9172: cloud-init: add regression coverage for vyos_config_commands.

PR submitted and ready for review:
https://github.com/vyos/vyos-cloud-init/pull/116

Aug 8 2026, 11:24 AM · VyOS Rolling
hybridops added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).

I would like to work on this task.

Aug 8 2026, 11:20 AM · VyOS Rolling
evgmol claimed T6837: Add replace configuration for module vyos_config.
Aug 8 2026, 10:58 AM · VyOS Ansible Collection
evgmol claimed T6890: Consider using true/false for all booleans in docs.
Aug 8 2026, 10:57 AM · VyOS Ansible Collection
evgmol renamed T6830: add support for file upload, management and templating from add support for file upload, management and templating to add support for file upload, management and templating.
Aug 8 2026, 10:57 AM · VyOS Ansible Collection
evgmol closed T8920: map-based connection marking and policy routing to reduce repeated DNAT/PBR rules as Not Applicable.
Aug 8 2026, 10:55 AM · VyOS Ansible Collection
evgmol added a comment to T6837: Add replace configuration for module vyos_config.

https://github.com/vyos/vyos.vyos/pull/493 - yet another attempt

Aug 8 2026, 10:53 AM · VyOS Ansible Collection

Aug 7 2026

L0crian added a comment to T9176: firewall: Implement nftables concatenation support for firewall groups.

PR: https://github.com/vyos/vyos-1x/pull/5385

Aug 7 2026, 11:08 PM · VyOS Rolling
rherold added a comment to T9177: are_same_ip() in python/vyos/utils/network.py uses wrong address family for second argument.

PR: https://github.com/vyos/vyos-1x/pull/5383

Aug 7 2026, 9:01 PM · VyOS Rolling
rherold created T9177: are_same_ip() in python/vyos/utils/network.py uses wrong address family for second argument.
Aug 7 2026, 8:48 PM · VyOS Rolling
L0crian created T9176: firewall: Implement nftables concatenation support for firewall groups.
Aug 7 2026, 6:01 PM · VyOS Rolling
itspngu created T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.
Aug 7 2026, 5:53 PM · VyOS Rolling
jesper.beltman added a comment to T9174: WWAN modem not up, counter 100 not long enough.

Running Commit again after the modem 0 is exist does work.

Aug 7 2026, 3:13 PM · VyOS Rolling
jesper.beltman created T9174: WWAN modem not up, counter 100 not long enough.
Aug 7 2026, 3:13 PM · VyOS Rolling
Viacheslav changed the status of T9172: cloud-init: add regression coverage for vyos_config_commands from Open to In progress.
Aug 7 2026, 11:21 AM · VyOS Rolling
Viacheslav triaged T9173: Feature Request: Automate RFC 8195 Large-Community tagging from existing BGP config (Role, neighbor ASN) as Normal priority.
Aug 7 2026, 11:08 AM · VyOS Rolling