Problem reproduces when switching from xdp to dpdk:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Oct 19 2025
Oct 18 2025
Oct 17 2025
Oct 16 2025
In PR changed interface to
It was investigated - the bug is indeed in the kernel.
Currently, the patch is proposed. But it probably would be refactored in the near future to a patch ver3:
Confirmed fixed in v2025.10.12-0019-rolling
Oct 15 2025
There are several errors.
- listen_address instead of address
- `listen-address could has multiple values
vyos@r14# run show conf com | match haproxy
set load-balancing haproxy backend bk01 server 192.0.2.5 address '192.0.2.5'
set load-balancing haproxy backend bk01 server 192.0.2.5 port '993'
set load-balancing haproxy service wan-993 listen-address 192.0.2.2
set load-balancing haproxy service wan-993 port '993'
[edit]
vyos@r14#
[edit]
vyos@r14# set load-balancing haproxy service wan-993 listen-address 192.168.122.14
[edit]
vyos@r14# commit
[ load-balancing haproxy ]
{'backend': {'bk01': {'balance': 'round-robin',
'mode': 'http',
'server': {'192.0.2.5': {'address': '192.0.2.5',
'port': '993'}}}},
'global_parameters': {'ssl_bind_ciphers': ['ecdhe-ecdsa-aes128-gcm-sha256',
'ecdhe-rsa-aes128-gcm-sha256',
'ecdhe-ecdsa-aes256-gcm-sha384',
'ecdhe-rsa-aes256-gcm-sha384',
'ecdhe-ecdsa-chacha20-poly1305',
'ecdhe-rsa-chacha20-poly1305',
'dhe-rsa-aes128-gcm-sha256',
'dhe-rsa-aes256-gcm-sha384'],
'tls_version_min': '1.3'},
'pki': {},
'service': {'wan-993': {'listen_address': {'192.0.2.2': {},
'192.168.122.14': {}},
'mode': 'http',
'port': '993'}},
'timeout': {'check': '5', 'client': '50', 'connect': '10', 'server': '50'}}tmp_address = front_config.get('address', None)shouldn't this be listen_address instead of address on line 75?
Something is wrong with this check
After my workaround described above:
vyos@vyos# sudo netstat -tulpn | grep 993 tcp 0 0 192.0.2.1:993 0.0.0.0:* LISTEN 513 01/haproxy tcp6 0 0 2001:0db8::25:993 :::* LISTEN 784 61/conmon
and then when configuring the other way around:
edit] vyos@vyos# set load-balancing haproxy service wan-993 port 994 [edit] vyos@vyos# commit [edit] vyos@vyos# set load-balancing haproxy service wan-993 port 993 [edit] vyos@vyos# commit [ load-balancing haproxy ] TCP port "993" is used by another service [[load-balancing haproxy]] failed Commit failed [edit] vyos@vyos# sudo netstat -tulpn | grep 993 tcp6 0 0 2001:0db8::25:993 :::* LISTEN 784 61/conmon
sudo netstat -tulpn | grep 993
vyos@r14# run show haproxy Proxy name Role Status Req rate Resp time Last change -------------------- --------- -------- ---------- ----------- ------------- web FRONTEND OPEN 4 buildin_acme_certbot BACKEND UP 0 ms 3m24s bk01 BACKEND UP 1 ms 1m8s buildin_acme_certbot localhost no check 0 ms 3m24s bk01 srv01 UP 1 ms 1m8s bk01 srv02 UP 1 ms 1m3s [edit] vyos@r14# run show ver Version: VyOS 2025.10.10-0733-integration Release train: current Release flavor: generic
Links from @zsdc where the problem could be
With the 1.4.7 gve driver the behaviour is the same
vyos@VyOS-for-Smoke-Tests# delete vpp
[edit]
vyos@VyOS-for-Smoke-Tests# commit
[ vpp ]
Traceback (most recent call last):
File "/usr/libexec/vyos/services/vyos-configd", line 156, in run_script
script.apply(c)
File "/usr/libexec/vyos/conf_mode/vpp.py", line 660, in apply
initialize_interface(
File "/usr/libexec/vyos/conf_mode/vpp.py", line 594, in initialize_interface
iface_new_name: str = control_host.get_eth_name(iface_config['dev_id'])
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/vyos/vpp/control_host.py", line 227, in get_eth_name
raise FileNotFoundError(
FileNotFoundError: A device with ID 0000:00:05.0 not found in ethernet interfacesI have found another implementation if someone wants to play with it https://git.ipng.ch/ipng/govpp-snmp-agentx
Oct 14 2025
@pr0ton11, do you see the same log? Can you try the latest rolling?
The current patch level of cURL package already contains almost all fixes (security patched: 7.88.1-10+deb12u14). We can leave the current version of cURL package.
The Suricata package has been updated to 7.0.10.
The HostAP package has been updated to 2.11.