It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.

Fri, Dec 5, 2:55 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4)

Thu, Dec 4

dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.

Thu, Dec 4, 9:47 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4)

dtoux updated the task description for T8071: AES-GCM algorithms in IPSEC do not need hash.

Thu, Dec 4, 9:42 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4)

dtoux created T8071: AES-GCM algorithms in IPSEC do not need hash.

Thu, Dec 4, 9:41 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4)

dmbaturin closed T8001: Commit fails removing VTI interface in IPsec config as Resolved.

Thu, Dec 4, 9:21 PM

dmbaturin renamed T8016: Incorrect validation of ports in VPP ACLs from Commit error using service name to specify port in vpp acl to Incorrect validation of ports in VPP ACLs.

Thu, Dec 4, 9:19 PM · VyOS Rolling

dmbaturin renamed T8036: Commit errors on removing VPP NAT44 rules from VPP: Commit fails removing nat44 static rule to Commit errors on removing VPP NAT44 rules.

Thu, Dec 4, 8:59 PM

dmbaturin closed T8027: Expose "send_cert always" swanctl configuration for ipsec vpn road warrior configuration as Resolved.

Thu, Dec 4, 8:56 PM

dmbaturin renamed T7913: DHCP server ping check option does not work from 1.5 Stream Q3 DHCP server issue (ping-check) to DHCP server ping check option does not work.

Thu, Dec 4, 8:53 PM

dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.

Thu, Dec 4, 8:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling

dmbaturin renamed T6775: Bridge option "isolated" disappears after reboot from Brifge option "isolated" disappears after reboot to Bridge option "isolated" disappears after reboot.

Thu, Dec 4, 8:29 PM

dmbaturin renamed T6775: Bridge option "isolated" disappears after reboot from Bridge: the isolation option disappears after reboot to Brifge option "isolated" disappears after reboot.

Thu, Dec 4, 8:28 PM

dmbaturin renamed T7872: VPP gets stuck when rx-queue-size is used with XDP from VPP XDP with rx-queue-size stuck to VPP gets stuck when rx-queue-size is used with XDP.

Thu, Dec 4, 8:25 PM

dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.

Thu, Dec 4, 8:21 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling

dmbaturin renamed T7112: Setting the default action of a firewall zone to drop causes a commit error from Firewall default action drop fails to Setting the default action of a firewall zone to drop causes a commit error.

Thu, Dec 4, 8:16 PM · VyOS 1.5 Circinus (2025.11)

dmbaturin renamed T7977: Load balancing fails when more than two interfaces are in the same rule from wlb: Load balancing fails when more than 2 interfaces are in a single rule: to Load balancing fails when more than two interfaces are in the same rule.

Thu, Dec 4, 8:15 PM

dmbaturin closed T7977: Load balancing fails when more than two interfaces are in the same rule as Resolved.

Thu, Dec 4, 8:14 PM

dmbaturin moved T6527: Deprecate vyatta-cfg-system and vyatta-op package from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.

Thu, Dec 4, 8:08 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2)

dmbaturin edited projects for T6527: Deprecate vyatta-cfg-system and vyatta-op package, added: VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.

Thu, Dec 4, 8:08 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2)

dmbaturin closed T4251: Add TLS functionality for rsyslog as Resolved.

Thu, Dec 4, 7:47 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4)

dmbaturin renamed T7305: Container network loses VRF on container restart from Container network looses VRF on container restart to Container network loses VRF on container restart.

Thu, Dec 4, 7:39 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

dmbaturin renamed T7949: Support children of bond interfaces in VPP NAT from VPP add the ability to configure bond subinterfaces for NAT to Support children of bond interfaces in VPP NAT.

Thu, Dec 4, 7:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

dmbaturin closed T7966: wlb: Route tables do not repopulate when an interface is disconnected as Resolved.

Thu, Dec 4, 7:27 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling

fernando updated subscribers of T8070: "Monitor protocols" commands broken.

I like the idea. Maybe we can extend this logic to other things, like WireGuard or VPNs. @a.apostoliuk @dmbaturin

Thu, Dec 4, 7:02 PM · VyOS Rolling

L0crian created T8070: "Monitor protocols" commands broken.

Thu, Dec 4, 6:45 PM · VyOS Rolling

GitHub <noreply@github.com> committed rVYOSONEX3c521b49572d: Merge pull request #4878 from alexandr-san4ez/T8001-current (authored by dmbaturin).

Thu, Dec 4, 4:18 PM

o.kuchmystyi committed rVYOSONEXe1fd60f8e469: ipsec: T8001: Commit fails removing VTI interface in IPsec config.

Thu, Dec 4, 4:18 PM

GitHub <noreply@github.com> committed rVYOSONEX02034e4fd77e: Merge pull request #4881 from alexandr-san4ez/T7594-current (authored by dmbaturin).

Thu, Dec 4, 3:40 PM

o.kuchmystyi committed rVYOSONEX2dc91c0a96c3: ipsec: T7594: Rename `respond` connection-type in IPSec peer settings to `trap`.

Thu, Dec 4, 3:40 PM

GitHub <noreply@github.com> committed rVYOSONEX0544895af02c: Merge pull request #4886 from dmbaturin/T8059-migrate-syslog-ports (authored by dmbaturin).

Thu, Dec 4, 3:34 PM

dmbaturin committed rVYOSONEX4b9a008b24ea: syslog: T8059: migrate host:port node names to the new syntax.

Thu, Dec 4, 3:34 PM

jestabro closed T7319: Add warning message for unsaved changes in the dialog before initiating an upgrade as Resolved.

Thu, Dec 4, 3:10 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling

jestabro closed T8032: Add analogue of cli-shell-api sessionUnsaved as Resolved.

Thu, Dec 4, 3:09 PM · VyOS Rolling

dmbaturin renamed T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from VyOS does not accept IPv6 all-zero interface addresses with prefix length of /64 to VyOS does not accept IPv6 interface addresses with an all-zero host part.

Thu, Dec 4, 2:45 PM

dmbaturin renamed T7901: Operational mode commands cannot be executed when the effective UID is already zero from Operational mode commands cannot be executed by the root user to Operational mode commands cannot be executed when the effective UID is already zero.

Thu, Dec 4, 2:34 PM

dmbaturin added a comment to T7808: 'monitor command' feature no longer works after T7745.

This is a different maniphestation of the same mistake I made in is_admin — not checking if the effective UID is already zero. User vyos is a red herring because it's the actual user name but what actually matters is the effective UID instead.

Thu, Dec 4, 2:33 PM · VyOS Rolling

jestabro reopened T8032: Add analogue of cli-shell-api sessionUnsaved as "Open".

Thu, Dec 4, 2:32 PM · VyOS Rolling

dmbaturin merged T7808: 'monitor command' feature no longer works after T7745 into T7901: Operational mode commands cannot be executed when the effective UID is already zero.

Thu, Dec 4, 2:31 PM

dmbaturin merged task T7808: 'monitor command' feature no longer works after T7745 into T7901: Operational mode commands cannot be executed when the effective UID is already zero.

Thu, Dec 4, 2:31 PM · VyOS Rolling

jestabro closed T8031: Use a smarter file comparison in boolean test unsaved_commits() as Resolved.

Thu, Dec 4, 2:31 PM · VyOS Rolling

dmbaturin changed Is it a breaking change? from none to compatible on T7901: Operational mode commands cannot be executed when the effective UID is already zero.

Thu, Dec 4, 2:31 PM

dmbaturin renamed T7901: Operational mode commands cannot be executed when the effective UID is already zero from "User vyos is not assigned to any operator group" when execute command after sudo su. to Operational mode commands cannot be executed by the root user.

Thu, Dec 4, 2:31 PM

jestabro closed T8032: Add analogue of cli-shell-api sessionUnsaved as Resolved.

Thu, Dec 4, 2:30 PM · VyOS Rolling

dmbaturin renamed T7810: Operational mode command 'reset connection' is broken from op command 'reset connection' error: --disconnect: not allowed with argument --connect to Operational mode command 'reset connection' is broken.

Thu, Dec 4, 1:58 PM

dmbaturin added a comment to T7810: Operational mode command 'reset connection' is broken.

PR: https://github.com/vyos/vyos-1x/pull/4888

Thu, Dec 4, 1:57 PM

dmbaturin removed a project from T7810: Operational mode command 'reset connection' is broken: VyOS Rolling.

Thu, Dec 4, 1:53 PM

o.kuchmystyi added a comment to T8022: IPSEC configuration issue.

PR: https://github.com/vyos/vyos-1x/pull/4887

Thu, Dec 4, 1:03 PM · VyOS 1.5 Circinus

natali-rs1985 closed T8030: VPP: Verify driver is not executed if vpp already enabled for this nic, a subtask of T7070: VPP related bugs the root task, as Resolved.

Thu, Dec 4, 12:57 PM · VyOS Rolling

natali-rs1985 closed T8030: VPP: Verify driver is not executed if vpp already enabled for this nic as Resolved.

Thu, Dec 4, 12:57 PM · VyOS Rolling

natali-rs1985 moved T8030: VPP: Verify driver is not executed if vpp already enabled for this nic from Need Triage to Completed on the VyOS Rolling board.

Thu, Dec 4, 12:57 PM · VyOS Rolling

Viacheslav triaged T8064: show vpp interfaces hardware not working as Normal priority.

Thu, Dec 4, 12:48 PM · VyOS Rolling

Viacheslav closed T8068: qemu-system-aarch64 is not included to the Dockerfile for arm64 arch as Resolved.

PR https://github.com/vyos/vyos-build/pull/1074

Thu, Dec 4, 12:47 PM · VyOS Rolling

Viacheslav closed T8067: Python3-pexpect is not inlcuded to the Dockerfile for arm arch as Resolved.

PR https://github.com/vyos/vyos-build/pull/1074

Thu, Dec 4, 12:47 PM · VyOS Rolling

GitHub <noreply@github.com> committed rVYOSONEXa6ab36aab78a: Merge pull request #4884 from c-po/openvpn-t7738-migration (authored by dmbaturin).

Thu, Dec 4, 11:59 AM

c-po committed rVYOSONEXb4299d7b9af8: smoketest: T7738: provide OpenVPN test certificates for migration tests.

Thu, Dec 4, 11:59 AM

c-po committed rVYOSONEX63cc76fa2367: openvpn: T7738: avoid duplicate certs during 1.3 -> 1.4 migration.

Thu, Dec 4, 11:59 AM

rherold added a comment to T8064: show vpp interfaces hardware not working.

Yes after reboot the command works. So to male it work it seems to be necessary to reboot the system after adding the interface.

Thu, Dec 4, 12:27 AM · VyOS Rolling

Wed, Dec 3

a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".

Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py

Wed, Dec 3, 5:41 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS 1.4 Sagitta (1.4.4)

dmbaturin closed T7267: Upgrade from 1.3.8 to 1.4.1 failed with migration error as Invalid.

I'm closing this task as invalid because the user's report combines unrelated problem that need to be tracked as separate tasks.

Wed, Dec 3, 4:17 PM

dmbaturin updated subscribers of T7267: Upgrade from 1.3.8 to 1.4.1 failed with migration error.

I split this task into three independent parts:

Wed, Dec 3, 4:15 PM

dmbaturin created T8069: Disallow custom sysctl parameters that have proper CLI commands for them or break system assumptions.

Wed, Dec 3, 4:15 PM · VyOS Rolling

dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.

PR: https://github.com/vyos/ipaddrcheck/pull/19

Wed, Dec 3, 3:49 PM

Viacheslav created T8068: qemu-system-aarch64 is not included to the Dockerfile for arm64 arch.

Wed, Dec 3, 2:45 PM · VyOS Rolling

Viacheslav created T8067: Python3-pexpect is not inlcuded to the Dockerfile for arm arch.

Wed, Dec 3, 2:41 PM · VyOS Rolling

dmbaturin created T8066: Remove the outdated and dangeroud exe_action utility.

Wed, Dec 3, 1:27 PM

natali-rs1985 added a comment to T7972: VPP: Improve `nat44 no-forwarding` feature name and description in CLI.

https://github.com/vyos/vyos-1x/pull/4880

Wed, Dec 3, 1:06 PM · VyOS Rolling

Viacheslav added a comment to T8065: Add the ability to start smoketests on arm64 platform.

PR https://github.com/vyos/vyos-build/pull/1073

Wed, Dec 3, 12:26 PM · VyOS Rolling

natali-rs1985 added a comment to T7972: VPP: Improve `nat44 no-forwarding` feature name and description in CLI.

It was decided to configure forwarding automatically to simplify CLI for the user

Wed, Dec 3, 11:24 AM · VyOS Rolling

Viacheslav added a subtask for T7070: VPP related bugs the root task: T8064: show vpp interfaces hardware not working.

Wed, Dec 3, 11:17 AM · VyOS Rolling

Viacheslav added a parent task for T8064: show vpp interfaces hardware not working: T7070: VPP related bugs the root task.

Wed, Dec 3, 11:17 AM · VyOS Rolling

Viacheslav added a comment to T8064: show vpp interfaces hardware not working.

Do interfaces exist in the config, or did you add them to the already loaded system but there is no interface ethernet ethX config?

Wed, Dec 3, 11:17 AM · VyOS Rolling

Viacheslav triaged T8065: Add the ability to start smoketests on arm64 platform as Normal priority.

Wed, Dec 3, 11:12 AM · VyOS Rolling

Viacheslav updated the task description for T8065: Add the ability to start smoketests on arm64 platform.

Wed, Dec 3, 11:10 AM · VyOS Rolling

Viacheslav updated the task description for T8065: Add the ability to start smoketests on arm64 platform.

Wed, Dec 3, 11:08 AM · VyOS Rolling

Viacheslav created T8065: Add the ability to start smoketests on arm64 platform.

Wed, Dec 3, 11:05 AM · VyOS Rolling

a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".

Wed, Dec 3, 10:14 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS 1.4 Sagitta (1.4.4)

rherold created T8064: show vpp interfaces hardware not working.

Wed, Dec 3, 9:09 AM · VyOS Rolling

a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".

Wed, Dec 3, 8:16 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS 1.4 Sagitta (1.4.4)

a.pidnebesny added a project to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system": VyOS 1.5 Circinus (1.5-stream-2025-Q4).

Wed, Dec 3, 8:05 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS 1.4 Sagitta (1.4.4)

a.pidnebesny created T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".

Wed, Dec 3, 6:49 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS 1.4 Sagitta (1.4.4)

jestabro committed rVYOSONEX9c850218b663: T8032: add protobuf files for analogue of sessionUnsaved.

Wed, Dec 3, 12:07 AM

GitHub <noreply@github.com> committed rVYOSONEX3dbbf5e97d98: Merge pull request #4867 from jestabro/vyconf-session-unsaved (authored by jestabro).