This can be solved with the already existing source-address option. When it's set, advertisments are sent from a unicast IPv6 address, if it's assigned. If it's not assigned, they are not sent.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Jan 16 2026
Jan 15 2026
PR was not accepted
We already show the full private key in our configuration as we only have admin mode.
You cannot just restart vpp; it is not expected to work.
Configuration scripts should re-establish interfaces during the VPP reconfiguration process, so a restart process like this will not work.
It is already fixed in T8100.
@AnNK6 thank you for the report and details. The fact is that until privilege separation is implemented (https://vyos.dev/T7583), authentication allows privileges implicitly (via the config system) if not explicitly. In that sense the issue is mooted until that work is complete, but be assured that alongside the work in T7583 and related, a general audit of shell escape mechanisms is ongoing in preparation; your report is useful for that current work. That being said, my quick test of the above against a local KVM system gives a standard result, ignoring the metacharacter, so I will need to take a closer look to reproduce.
Jan 14 2026
Jan 13 2026
Rebuild vyos-1x
And missed backport https://github.com/vyos/vyos-build/pull/1081
Problem reproduces in latest circinus build as well:
Jan 12 2026
Duplicate of https://vyos.dev/T8141
PR https://github.com/vyos/vyos-1x/pull/4941
vyos@r14:~$ show vpp ipfix interfaces "vpp ipfix interface" is not configured vyos@r14:~$ vyos@r14:~$ show vpp ipfix collectors "vpp ipfix collector" is not configured vyos@r14:~$ vyos@r14:~$ show vpp ipfix table "vpp ipfix" is not configured vyos@r14:~$
Jan 11 2026
Jan 10 2026
Jan 9 2026
Technically, this will be a security issue.
Only users with admin/root rights should be able to view and check all certificates/private keys, etc.
Jan 8 2026
Jan 7 2026
I am also affected by this issue, I think the use case to cache the root zone should be the most used one of the zone-to-cache feature.