yep hope this gets added. openvpn dco seems ready for primetime and various online benchmarks show it outperforming wireguard and using half the cpu or less in doing so, on x86 AM4 platforms using AES-NI ciphers.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sat, Aug 29
Sat, Aug 29
mrpops2ko added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.
evgmol added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
I will help formatting the PR if anything, dont woryy
evgmol added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
You are right - Public task first, then PR with the T task reference
mson added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
Ok, thank you! For some reason I thought this projected wanted an issue created before opening any PRs, but I see that isn't the case in the contributing docs. Should I reference this issue in my PR?
evgmol added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
Thanks,
yes, usually if you have a fix - you fork the vyos.vyos, branch it, implement the fix and raise a PR that VyOS Gurus review and make it merge at some point.
Alternatively, you submit a bug or feature request, and other collaborators can try and implement it.
mson added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
Sorry for the confusion, no PR opened for this. I figured I'd include relevant information for a potential fix. I can open a PR with the changes to plugins/modules/vyos_user.py if I'm not missing anything.
evgmol added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
@mson thanks for submitting this?
You mentioned a fix - is there a PR for this, or you want someone to look into this and fix, please?
c-po changed the status of T9262: motd: invalid documentation URL for circinus LTS release from Open to In progress.
c-po set Forum thread to https://forum.vyos.io/t/openvpn-has-no-dco/17640 on T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.
c-po updated the task description for T9261: Python interpreter startup makes the CLI sluggish on low-cache CPUs.
c-po changed the status of T9261: Python interpreter startup makes the CLI sluggish on low-cache CPUs from Open to In progress.
I am unable to edit the task (issues with edit policy permissions). However, the following line can be ignored:
Fri, Aug 28
Fri, Aug 28
Viacheslav changed the status of T9245: Podman health checks stay in starting from Open to In progress.
Aug 27 2026
Aug 27 2026
rockfish added a comment to T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD.
@Viacheslav
I used an AI assistant to draft the write-up. The bug, the diagnosis and the production validation are mine — I've been chasing this for two days on a live HA pair. Happy to answer anything about the code.
rockfish added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.
if that helps, I worked on a fix for defect 2 and created a draft PR
https://github.com/vyos/vyos-1x/pull/5430
bradkollmyer added a comment to T9232: boot: stock vyos-postconfig-bootup.script does not run /config/scripts/post-config.d.
vyos-1x#5421 closed by jestabro: post-config.d is unused Vyatta-era and will not be returned in this form. docs#2217 closed to match. We keep an operator vyos-postconfig-bootup.script runner out of tree.
bradkollmyer added a comment to T9109: dhcp: stop dhclient with -x (no RELEASE) so INIT-REBOOT and HA lease seeds work.
Addressed alexk37 2026-08-22 follow-up on https://github.com/vyos/vyos-1x/pull/5342 (a526ccdde; rebased onto current rolling):
bradkollmyer added a comment to T9085: dhcp: IPv4 default route not reinstalled on RENEW after kernel default was removed.
Addressed alexk37 2026-08-22 follow-up on https://github.com/vyos/vyos-1x/pull/5340 (6d2ee03b2; rebased onto current rolling):
rockfish claimed T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.
@Viacheslav which option would you choose for Defect 1 ? regex extension ?
I probably shoudn't have claimed this one, should I ?
Viacheslav triaged T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py as High priority.
rockfish claimed T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD.
Fix proposed in https://github.com/vyos/vyos-1x/pull/5429
jestabro closed T9247: Add a variation of set/call_dependents that is called only once, natively, a subtask of T9146: support no-multi-seg in DPDK VPP, as Resolved.
jestabro closed T9244: Regression in honoring console settings on install after T8868, a subtask of T8868: KDUMP support for VyOS, as Resolved.
rockfish added a comment to T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD.
@Viacheslav, sure
Viacheslav triaged T9255: IPv6 BGP next hop becomes IPv4-mapped after address/VRRP churn as Normal priority.
Viacheslav triaged T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD as High priority.
@rockfish do you want to claim the task and add a PR fix?
Viacheslav triaged T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts as Normal priority.
Viacheslav renamed T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts from vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts to Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
Viacheslav closed T9249: Multi-line asserts for integration testing in vyos_firewall_rules as Resolved.
mson added a comment to T9251: Ansible vyos.vyos.vyos_user: public key `type` choices reject the sk-* types VyOS accepts.
FYI, this is meant for VyOS Ansible Collection but the "Submit Bug Report" link from the home page populates the form with the VyOS Rolling tag, and I was not able to update it.
jestabro added a parent task for T9244: Regression in honoring console settings on install after T8868: T8868: KDUMP support for VyOS.
Aug 26 2026
Aug 26 2026
RainmakerRaw added a comment to T8610: Kernel: T8610: Update Linux Kernel to 6.6.137 (fix CVE-2026-31431) aka copy.fail.
Is there any update on this at all, please? Stream is still sitting vulnerable as far as I can see. Even a Stream 2006.03-1 with just an updated kernel would have been vastly preferable, versus no mitigation and no new Stream image for >3 months since the CVE disclosures (and five months since the last Stream release).
Viacheslav renamed T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected) from Cloud-init fails to configure haproxy to listen on VRRP floating address to Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
MPStudyly added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
Reminder for myself, update initial post as soon as that is possible to:
Viacheslav changed the status of T9243: VPP VLAN interface keeps A/D when it's not disabled from Open to In progress.
There are all dependencies that were used for podman build https://github.com/vyos/vyos-build/blob/14d959fbb5ce0d2bf051c236b9050be81e17c885/scripts/package-build/podman/package.toml#L189-L198
Podman upstream has an open PR related to exactly this case: https://github.com/podman-container-tools/podman/pull/27033 ("healthcheck for non-systemd podman"). The current non-systemd implementation doesn't schedule health checks automatically, and that PR adds a scheduler for it.
Aug 25 2026
Aug 25 2026
Viacheslav changed the status of T9241: DHCP classless static routes (RFC 3442) are removed by frr-reload from Open to In progress.
canoziia added a comment to T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot.
If you need to temporarily resolve this issue, you can try increasing the number of all ethX (for example, starting the interface naming from eth100). I have a server with 8x E823-L ports and named them from eth101-eth108.
@canoziia we've discussed with maintainers, could you add a PR for the vyos-vpp-patches repo?
We should try to find the root cause.
If you don't mind I can post a report from LLM. Although it's long, I think it did find the problem.
Viacheslav changed the subtype of T9241: DHCP classless static routes (RFC 3442) are removed by frr-reload from "Task" to "Bug".
Viacheslav raised the priority of T9241: DHCP classless static routes (RFC 3442) are removed by frr-reload from Low to High.
Viacheslav raised the priority of T9063: VPP commit fails at lcp_nl_resync() on kernel 6.18 from Normal to High.