This way we will expect the set of commands from both sites to reproduce.
If there will be incorrect config settings as in example you provided, the task will be closed as invalid. We do not provide support via forge and will not say you what to change. There is a forum for these questions.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 15 2025
May 15 2025
Viacheslav changed the status of T7458: VPN IPsec unexpected passthrough logic bug from Open to In progress.
May 14 2025
May 14 2025
Viacheslav added a comment to T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel.
May 13 2025
May 13 2025
I attached config tests and smoketests (the most of routing protocols fail)
smoketest_make_testc.log119 KBDownload
May 12 2025
May 12 2025
At the moment (during internal tests), some config tests cannot pass:
Viacheslav closed T7447: When PPpoe server uses radius, the concurrent online quantity policy of the same user name is not issued to Vyos to take effect as Invalid.
It looks like a support request, ask on the forum.
May 10 2025
May 10 2025
May 9 2025
May 9 2025
@covalente, should we disable the name default? Or do you have another idea?
@covalente Add a simple set of commands to reproduce, thanks!
Viacheslav changed the status of T7342: Add apply_patches option for the build packages script from Open to In progress.
May 8 2025
May 8 2025
Viacheslav closed T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel as Invalid.
It looks more like a support request, ask on the forum.
Viacheslav triaged T7440: command tech-support archive upload - Not working under certain conditions as High priority.
Viacheslav updated the task description for T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel.
Viacheslav changed the status of T7348: Add an option to limit the number of threads for accel-ppp services from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/4499
set service pppoe-server thread-count '2'
May 7 2025
May 7 2025
Viacheslav moved T7437: Add the missing kernel option CONFIG_PSAMPLE from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
Viacheslav edited projects for T7437: Add the missing kernel option CONFIG_PSAMPLE, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta.
Viacheslav changed the status of T7437: Add the missing kernel option CONFIG_PSAMPLE from Open to In progress.
I retriggered build
Both packages in the repo
https://packages.vyos.net/repositories/current/pool/main/r/radvd/
May 6 2025
May 6 2025
The maintainers do not like the idea of the raw options, so raw options were disabled/removed where possible.
The only exception is openvpn-option
I do not see easy solution for this
Viacheslav closed T7377: IPv6 addresses in static-host-mapping don't resolve via local DNS, a subtask of T2464: DNS bugs (parent task), as Wontfix.
Viacheslav changed the status of T7429: HAProxy: remove unsupported syslog facilities and log levels from Open to In progress.
Viacheslav changed the status of T7431: frr: missing logging options after rewrite to frrender class, a subtask of T6747: frr: upgrade routing suite to 10.2, from Open to In progress.
Viacheslav changed the status of T7431: frr: missing logging options after rewrite to frrender class from Open to In progress.
Viacheslav changed the status of T7430: Add root-guard and bpdu-guard option to bridge interfaces from Open to In progress.
Good practice to link PR to the forge task
PR https://github.com/vyos/vyos-1x/pull/4497
Viacheslav changed the subtype of T7433: Remote syslog configuration is not effective from "Task" to "Bug".
May 5 2025
May 5 2025
Has anyone tested this?
May 2 2025
May 2 2025
Viacheslav changed the status of T7423: Add kernel options isolcpus, nohz_full, rcu_nocbs, hugepages, numa_balancing from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/4491
set system option kernel cpu disable-nmi-watchdog set system option kernel cpu isolate-cpus '1,2,4-5' set system option kernel cpu nohz-full '1,2,4-5' set system option kernel cpu rcu-no-cbs '1,2,4-5' set system option kernel disable-hpet set system option kernel disable-mce set system option kernel disable-softlockup set system option kernel memory default-hugepage-size '2M' set system option kernel memory disable-numa-balancing set system option kernel memory hugepage-count '256' set system option kernel memory hugepage-size '2M'
Viacheslav changed the status of T7424: Develop resource over-usage protection for VPP (CPU and Mem) from Open to In progress.
Viacheslav moved T7343: VPN IPsec add the ability to exclude IPv6 traffic selectors for VTI interfaces from Open to Finished on the VyOS 1.5 Circinus board.
May 1 2025
May 1 2025
Viacheslav renamed T7423: Add kernel options isolcpus, nohz_full, rcu_nocbs, hugepages, numa_balancing from Add kernel option isolcpus to Add kernel options isolcpus, nohz_full, rcu_nocbs, hugepages, numa_balancing.
Viacheslav updated the task description for T7423: Add kernel options isolcpus, nohz_full, rcu_nocbs, hugepages, numa_balancing.
All FRR daemons started even if not configured. You can check it with:
vyos@r1# ps ax | grep frr 1383 ? S<s 0:01 /usr/lib/frr/watchfrr -d -F traditional zebra mgmtd bgpd ripd ripngd ospfd ospf6d isisd babeld pim6d ldpd nhrpd staticd bfdd fabricd 1404 ? S<sl 0:00 /usr/lib/frr/zebra -d -F traditional --daemon -A 127.0.0.1 -s 90000000 1409 ? S<s 0:00 /usr/lib/frr/mgmtd -d -F traditional --daemon -A 127.0.0.1 1411 ? S<sl 0:00 /usr/lib/frr/bgpd -d -F traditional --daemon -A 127.0.0.1 -M rpki 1418 ? S<s 0:00 /usr/lib/frr/ripd -d -F traditional --daemon -A 127.0.0.1 1421 ? S<s 0:00 /usr/lib/frr/ripngd -d -F traditional --daemon -A ::1 1425 ? S<s 0:00 /usr/lib/frr/ospfd -d -F traditional --daemon -A 127.0.0.1 1428 ? S<s 0:00 /usr/lib/frr/ospf6d -d -F traditional --daemon -A ::1 1431 ? S<s 0:00 /usr/lib/frr/isisd -d -F traditional --daemon -A 127.0.0.1 1434 ? S<s 0:00 /usr/lib/frr/babeld -d -F traditional --daemon -A 127.0.0.1 1437 ? S<s 0:00 /usr/lib/frr/pim6d -d -F traditional --daemon -A ::1 1443 ? S< 0:00 /usr/lib/frr/ldpd -L -u frr -g frr 1444 ? S< 0:00 /usr/lib/frr/ldpd -E -u frr -g frr 1446 ? S<s 0:00 /usr/lib/frr/ldpd -d -F traditional --daemon -A 127.0.0.1 1451 ? S<s 0:00 /usr/lib/frr/nhrpd -d -F traditional --daemon -A 127.0.0.1 1455 ? S<s 0:00 /usr/lib/frr/staticd -d -F traditional --daemon -A 127.0.0.1 1460 ? S<s 0:00 /usr/lib/frr/bfdd -d -F traditional --daemon -A 127.0.0.1 1463 ? S<s 0:00 /usr/lib/frr/fabricd -d -F traditional --daemon -A 127.0.0.1 3486 pts/0 S+ 0:00 grep frr [edit] vyos@r1#
Viacheslav triaged T7423: Add kernel options isolcpus, nohz_full, rcu_nocbs, hugepages, numa_balancing as Normal priority.
Apr 30 2025
Apr 30 2025
Deploy a new VM with 1.4.2 copy configuration to the /config/config.boot (remove HW-id's), and reboot the router or execute load
Viacheslav changed the status of T7416: Incorrect trailing backslash in node_exporter.service template when collectors.textfile is defined from Open to In progress.
Viacheslav changed the status of T7051: Add support for source groups in NAT66 from Open to In progress.
Viacheslav changed the status of T6773: Finalise RFC-2136 DDNS updates for Kea DHCP server. from Open to Needs testing.
Generated rules:
vyos@r14# cat /run/nftables-ct.conf #!/usr/sbin/nft -f
Apr 28 2025
Apr 28 2025
Viacheslav added a comment to T7410: The tech support script fails on machines without a USB controller.
Viacheslav added a comment to T7384: T7384 accel-ppp: Radius patch for Dns-Server-IPv6-Address attribute.
@AlexFT Could you recheck the latest rolling to confirm that all works as expected?
Viacheslav closed T7384: T7384 accel-ppp: Radius patch for Dns-Server-IPv6-Address attribute as Resolved.
Viacheslav triaged T7406: ARM64 Kernel config with virtio-gpu and pl011 console support as Normal priority.
Apr 27 2025
Apr 27 2025
@canoziia Yes you can close, I marked as resolved this time, thanks!
Viacheslav closed T7220: Add the option to disable enforce-first-as at peer level, a subtask of T6747: frr: upgrade routing suite to 10.2, as Resolved.
Apr 25 2025
Apr 25 2025
Viacheslav added a parent task for T7402: VPP failire with DPDK/XDP on supported hardware: T7070: VPP related bugs the root task.
Viacheslav triaged T7396: Return the old scripts to generate tech-support archive as Normal priority.
Viacheslav changed the status of T7394: Image upgrade fails when the "system option kernel" subtree is empty from Open to In progress.
Apr 24 2025
Apr 24 2025
Viacheslav triaged T7392: Podman networks don't have a working IPv6 DNS resolver as Normal priority.
Viacheslav triaged T7393: HTTPS API listens on all addresses after changing its listen-address as Normal priority.
Apr 23 2025
Apr 23 2025
Apr 22 2025
Apr 22 2025
Apr 19 2025
Apr 19 2025
Viacheslav triaged T7377: IPv6 addresses in static-host-mapping don't resolve via local DNS as Normal priority.
Hi @ryanzuwala, would you like to create a PR? Are there any bugs or features that need updating?
Apr 18 2025
Apr 18 2025
Viacheslav changed the status of T7372: Arguments of lb_config are not properly quoted from Open to In progress.
Apr 17 2025
Apr 17 2025
Viacheslav added a comment to T5874: ipsec site-to-site: Support binding multiple tunnels to one VTI, customizing local and remote traffic selectors.
Allow the local and remote traffic selectors to be configured when VTI is in use
Viacheslav changed the status of T7358: firewall: Allow offload in global options. from Open to In progress.
Viacheslav changed the status of T7370: Add "show log conntrack" op command from Open to In progress.
Viacheslav changed the status of T7369: Show firewall does not include logged global state policy entries from Open to In progress.
Apr 16 2025
Apr 16 2025
Viacheslav added a comment to T7367: syslog: ensure rsyslog is registered as default systemd syslog service.
The simple way to reproduce:
logger -t accel-pppoe "hello journal"
And check logs, expected entry:
Apr 16 08:33:39 vyos accel-pppoe[8427]: hello journal