Proposed CLI
set protocols openfabric redistribute ipv4 < connected|ospf|isis|static > | metric | route-map xxx
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Apr 24 2026
Apr 24 2026
It shouldn't be in the router
Info about IP addresses/ Geo / ASN should be obtained from appropriate sources such as RIPE/ARIN/etc.
It is safe to use only configured/preconfigured prefix lists, and the commit message explains why the commit fails.
@Loremo open please an issue/feature for the FRR https://github.com/FRRouting/frr/issues
We are happy to integrate it once it is available in the upstream.
Viacheslav closed T8484: Implement typos check workflow, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, as Resolved.
Viacheslav closed T8495: VPP ACL cannot be applied to Ethernet subinterfaces (ethX.<vlan>) from VyOS config, a subtask of T7070: VPP related bugs the root task, as Resolved.
Viacheslav triaged T8544: Wireguard disable or remove configuration options for FIPS enabled configurations as Normal priority.
Will be available in the next release.
Viacheslav triaged T8498: The "preserve-fqdn" option stuck the hostname displayed in the Logs as Normal priority.
Viacheslav triaged T8506: Kernel build process / conventions, consider using merge_config.sh as Normal priority.
Viacheslav added a comment to T8546: Conntrack VRF zone mapping not applied when only global state-policy is configured.
In my opinion, the global state-policy should also trigger conntrack VRF zone mapping. Until we have other restrictions, I'd say it's a bug.
Apr 23 2026
Apr 23 2026
Viacheslav added a comment to T8498: The "preserve-fqdn" option stuck the hostname displayed in the Logs.
@j.vela, are you sure that it is not working for 1.5?
Apr 22 2026
Apr 22 2026
Viacheslav changed the edit policy for T8544: Wireguard disable or remove configuration options for FIPS enabled configurations.
Viacheslav triaged T8524: insufficient validation for dhcp-server dynamic-dns-update key-name as Normal priority.
Viacheslav triaged T8528: WiFi: Frequency band configuration for Mediatek MT7916AN-based cards as Normal priority.
Viacheslav updated the task description for T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules.
Apr 21 2026
Apr 21 2026
Viacheslav removed a project from T8222: Set vxlan ttl parameter to 64 by default: VyOS 1.4 Sagitta.
We are not going to change it for Sagitta.
Changed for the current/circinus
Viacheslav changed the status of T8539: Unable to traceroute using hostname and ipv6 source address from Open to In progress.
Viacheslav renamed T8541: Lately the TPM smoketests have been failing from Lately the TPM smoktests have been failing to Lately the TPM smoketests have been failing.
Apr 20 2026
Apr 20 2026
Viacheslav changed the status of T8508: Update FIPS-140-3 compatible Openssl 3.1.2 from Open to In progress.
Viacheslav changed the status of T8508: Update FIPS-140-3 compatible Openssl 3.1.2, a subtask of T6720: FIPS140-2/3 Validation, from Open to In progress.
Viacheslav changed the status of T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules, a subtask of T6720: FIPS140-2/3 Validation, from Open to In progress.
Viacheslav changed the status of T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules from Open to In progress.
Viacheslav added a comment to T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules.
PR https://github.com/vyos/vyos-1x/pull/5139
set system option fips commit
check:
vyos@r14# openssl list -providers
Providers:
fips
name: OpenSSL FIPS Provider
version: 3.1.2
status: active
[edit]
vyos@r14#Apr 17 2026
Apr 17 2026
Viacheslav updated the task description for T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules.
Viacheslav triaged T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules as Normal priority.
Viacheslav updated the task description for T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules.
Viacheslav changed the edit policy for T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules.
Viacheslav closed T8527: WAN load balancer only activates first interface, ignoring additional WAN interfaces as Invalid.
In failover mode, only one interface is active at a time.
Apr 16 2026
Apr 16 2026
Viacheslav moved T8448: Enable traps for snmp on VRRP from Need Triage to Completed on the VyOS Rolling board.
Viacheslav closed T8273: The router does not send correct LSA in OSPFv3 when DR is down as Resolved.
Viacheslav triaged T8509: VRF creation no longer generates fwmark ip rules (regression from 1.4.x) as High priority.
Apr 15 2026
Apr 15 2026
Viacheslav renamed T8508: Update FIPS-140-3 compatible Openssl 3.1.2 from Update and use FIPS-140-3 compatible Openssl 3.1.2 to Update FIPS-140-3 compatible Openssl 3.1.2.
Viacheslav added a subtask for T6720: FIPS140-2/3 Validation: T8508: Update FIPS-140-3 compatible Openssl 3.1.2.
Viacheslav added a parent task for T8508: Update FIPS-140-3 compatible Openssl 3.1.2: T6720: FIPS140-2/3 Validation.
I have found validated OpenSSL FIPS https://openssl-library.org/source/
Version Certificate Security Policy FIPS Version 3.1.2 certificate security policy FIPS 140-3 3.0.9 certificate security policy FIPS 140-2 3.0.8 certificate security policy FIPS 140-2 3.0.0 certificate security policy FIPS 140-2
We are interested in 140-3
Viacheslav added a subtask for T6720: FIPS140-2/3 Validation: T8507: Add kernel command line option "fips=1".
Viacheslav added a parent task for T8507: Add kernel command line option "fips=1": T6720: FIPS140-2/3 Validation.
Viacheslav added a project to T8472: Kea DHCPv4 - failed to a select a subnet for incoming packet: VyOS Rolling.
Viacheslav changed the status of T8499: add ndp-proxy route-sync for dynamic /128 host routes from Open to In progress.
@0lzi It exists in 1.5.0, and we are not planning to backport it to 1.4.x
Reopen the task if something does not work or create a new one.
Thanks
@rchrist do you want to claim the task and add a PR?
I can test in a POC
Yes, that will be enough.