Page MenuHomeVyOS Platform
Feed All Stories

May 15 2025

haakon.nore awarded T7343: VPN IPsec add the ability to exclude IPv6 traffic selectors for VTI interfaces a 100 token.
May 15 2025, 11:38 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
rherold added a comment to T7453: Make the raw image build more robust.

I have started playing around with it.

May 15 2025, 10:57 AM · VyOS 1.5 Circinus (2025.11)
adestis added a comment to T5460: Firewall - remove config-trap.

Sorry to respond to such an old ticket but we stumbled over it now with a migration from VyOS 1.3.8 to VyOS 1.4.2.
After rebooting the system seems to have lost the configuration completely because it was not possible to logon to the system on the console anymore.
In the boot screen just a System error was shown.

May 15 2025, 7:18 AM · VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEX1268ebb05e90: Merge pull request #4507 from jestabro/T7450-use-pcre2 (authored by c-po).
May 15 2025, 4:35 AM
jestabro committed rVYOSONEX03f34956e6ba: T7450: update commit hash for Use PCRE2 instead of PCRE.
May 15 2025, 4:35 AM

May 14 2025

ryanzuwala created T7456: MAC address as source for conntrack timeouts.
May 14 2025, 9:14 PM · VyOS Rolling
jestabro added a parent task for T7455: Update config_mgmt module and scripts for vyconf compatibility : T7365: vyconf: add locking and invocation of pre/post-commit hooks.
May 14 2025, 6:31 PM · VyOS Rolling
jestabro added a subtask for T7365: vyconf: add locking and invocation of pre/post-commit hooks: T7455: Update config_mgmt module and scripts for vyconf compatibility .
May 14 2025, 6:31 PM · VyOS Rolling
jestabro created T7455: Update config_mgmt module and scripts for vyconf compatibility .
May 14 2025, 6:30 PM · VyOS Rolling
jestabro removed a parent task for T7374: Integrate vyconf config session with CLI config session: T7363: Add vyconf aware initialization of Config.
May 14 2025, 6:25 PM · VyOS Rolling
jestabro removed a subtask for T7363: Add vyconf aware initialization of Config: T7374: Integrate vyconf config session with CLI config session.
May 14 2025, 6:25 PM · VyOS Rolling
jestabro added a subtask for T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance: T7374: Integrate vyconf config session with CLI config session.
May 14 2025, 6:25 PM · VyOS Rolling
jestabro added a parent task for T7374: Integrate vyconf config session with CLI config session: T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance.
May 14 2025, 6:25 PM · VyOS Rolling
jestabro removed a subtask for T7321: Replace legacy operations in configsession.py with vyconf client operations: T7352: Add remaining features to vyconf framework for smoketest success.
May 14 2025, 6:23 PM · VyOS Rolling
jestabro removed a parent task for T7352: Add remaining features to vyconf framework for smoketest success: T7321: Replace legacy operations in configsession.py with vyconf client operations.
May 14 2025, 6:23 PM · VyOS Rolling
Viacheslav triaged T7454: Add flavor for VMware vCloud director as Normal priority.
May 14 2025, 4:32 PM · VyOS 1.5 Circinus
Viacheslav created T7454: Add flavor for VMware vCloud director.
May 14 2025, 4:32 PM · VyOS 1.5 Circinus
rherold created T7453: Make the raw image build more robust.
May 14 2025, 3:20 PM · VyOS 1.5 Circinus (2025.11)
davi2367 updated davi2367.
May 14 2025, 12:41 PM
davi2367 claimed T7452: Zone-based firewall with VRF causes issues.
May 14 2025, 12:39 PM · VyOS 1.5 Circinus (2025.11)
davi2367 added a comment to T7452: Zone-based firewall with VRF causes issues.

Added a merge-request in github: https://github.com/vyos/vyos-1x/pull/4506

May 14 2025, 12:20 PM · VyOS 1.5 Circinus (2025.11)
davi2367 created T7452: Zone-based firewall with VRF causes issues.
May 14 2025, 11:40 AM · VyOS 1.5 Circinus (2025.11)
sarthurdev changed the status of T7350: Do not allow deleting interfaces referenced in flowtables from Open to In progress.
May 14 2025, 9:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
Viacheslav added a comment to T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel.

This way we will expect the set of commands from both sites to reproduce.
If there will be incorrect config settings as in example you provided, the task will be closed as invalid. We do not provide support via forge and will not say you what to change. There is a forum for these questions.

May 14 2025, 6:34 AM · VyOS Rolling

May 13 2025

jestabro added a comment to T7450: Use PCRE2 in validation utilities.

With the above merged, the following update will be needed for successful builds:
https://github.com/vyos/libvyosconfig/pull/37
Following that merge, the corresponding update of commit hash for vyos-1x will be required.

May 13 2025, 8:47 PM · VyOS 1.5 Circinus (2025.11)
Hanarion added a comment to T7451: BGPD Getting killed in nested route-map usage scenario.

A workaround may be to allow the user to set the watchfrr_options in /etc/frr/daemons to add a -T 500 for example for watchfrr to wait 500s before trying to restart bgpd

May 13 2025, 6:04 PM · VyOS Rolling
Hanarion added a comment to T7451: BGPD Getting killed in nested route-map usage scenario.

After waiting more than 1 hour, no config reload happened so i trigged one by removing a unused peer group, it triggered, and as i expected, after almost 3 minutes, it finished without flapping the sessions

May 13 2025, 6:00 PM · VyOS Rolling
Hanarion created T7451: BGPD Getting killed in nested route-map usage scenario.
May 13 2025, 4:34 PM · VyOS Rolling
jestabro claimed T7319: Add warning message for unsaved changes in the dialog before initiating an upgrade.
May 13 2025, 3:27 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling
c-po committed rVYOSONEX9cf35f964502: T7443: Un-restricting non-root logins after scheduled reboot/shutdown via….
May 13 2025, 2:27 PM
GitHub <noreply@github.com> committed rVYOSONEX572400156976: Merge pull request #4502 from c-po/pam-nologin (authored by jestabro).
May 13 2025, 2:27 PM
dmbaturin added a comment to T7411: FRRouting Configuration Loss on Abnormal Service Restart.

https://github.com/vyos/vyos-1x/pull/4500

May 13 2025, 12:44 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
dmbaturin updated the task description for T7450: Use PCRE2 in validation utilities.
May 13 2025, 12:41 PM · VyOS 1.5 Circinus (2025.11)
dmbaturin added a comment to T7450: Use PCRE2 in validation utilities.

PRs:

May 13 2025, 12:40 PM · VyOS 1.5 Circinus (2025.11)
dmbaturin added a project to T7450: Use PCRE2 in validation utilities: VyOS 1.5 Circinus.
May 13 2025, 12:31 PM · VyOS 1.5 Circinus (2025.11)
natali-rs1985 added a comment to T7419: VPP Firewall (ACL) implementation.

https://github.com/vyos/vyos-vpp/pull/31

May 13 2025, 12:06 PM · VyOS Rolling
natali-rs1985 changed the status of T7442: VPP add Access Control List (ACL) support from Duplicate to Resolved.
May 13 2025, 12:05 PM · VyOS Rolling
dmbaturin created T7450: Use PCRE2 in validation utilities.
May 13 2025, 12:02 PM · VyOS 1.5 Circinus (2025.11)
a.apostoliuk committed rVYOSONEXe35315a46dd8: T7157: bgp: Added verification of the route-map existence in vrf import.
May 13 2025, 11:26 AM
GitHub <noreply@github.com> committed rVYOSONEXcdffc31d8b71: Merge pull request #4503 from aapostoliuk/T7157-circinus-fix2 (authored by dmbaturin).
May 13 2025, 11:26 AM
joseph.oshaughnessy reopened T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel as "Open".

Hi Viacheslav

May 13 2025, 10:43 AM · VyOS Rolling
Viacheslav added a comment to T7448: FRR: Upgrade routing suite to 10.3.

I attached config tests and smoketests (the most of routing protocols fail)

May 13 2025, 5:44 AM · VyOS Rolling
n.sambajon changed Issue type from bug to unspecified on T7449: IS-IS Memory Leak in isisd Leading to OOM Crash.
May 13 2025, 12:11 AM · VyOS Rolling
n.sambajon created T7449: IS-IS Memory Leak in isisd Leading to OOM Crash.
May 13 2025, 12:06 AM · VyOS Rolling

May 12 2025

jestabro added a comment to T7365: vyconf: add locking and invocation of pre/post-commit hooks.

Locking added in PR
https://github.com/vyos/vyos-1x/pull/4505

May 12 2025, 11:54 PM · VyOS Rolling
jestabro added a comment to T7363: Add vyconf aware initialization of Config.

PRs:
https://github.com/vyos/vyconf/pull/21
https://github.com/vyos/vyos-1x/pull/4505
https://github.com/vyos/vyatta-cfg/pull/99
https://github.com/vyos/vyos-build/pull/963

May 12 2025, 11:51 PM · VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEX9e0b04bc690d: Merge pull request #4483 from markh0338/remote-group-v6 (authored by c-po).
May 12 2025, 6:49 PM
markh0338 committed rVYOSONEX02c63e7ded23: T7386: firewall: allow mix of IPv4 and IPv6 addresses/prefixes/ranges in remote….
May 12 2025, 6:49 PM
markh0338 committed rVYOSONEX2c30c8a504a1: T7386: firewall: use signal SIGPIPE/SIG_DFL to suppress brokenpipe errors on….
May 12 2025, 6:49 PM
c-po moved T7386: Remote-Groups for IPv6 CIDRs from Need Triage to Completed on the VyOS Rolling board.
May 12 2025, 6:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling
c-po changed the status of T7386: Remote-Groups for IPv6 CIDRs from Open to Needs testing.
May 12 2025, 6:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling
ServerForge added a comment to T7175: VPP add sflow plugin.

PR to build the plugin. Added it to the pre build hook, not sure if that's where you guys want it done but it works.
https://github.com/vyos/vyos-build/pull/962

May 12 2025, 5:22 PM · VyOS 1.5 Circinus (2025.11)
c-po added a comment to T7253: Image build fails due to missing linux-tools package.

https://github.com/vyos/vyos-build/pull/961

May 12 2025, 4:19 PM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus, VyOS Rolling
Viacheslav added a comment to T7448: FRR: Upgrade routing suite to 10.3.

At the moment (during internal tests), some config tests cannot pass:

May 12 2025, 4:02 PM · VyOS Rolling
Viacheslav triaged T7448: FRR: Upgrade routing suite to 10.3 as Normal priority.
May 12 2025, 4:00 PM · VyOS Rolling
Viacheslav created T7448: FRR: Upgrade routing suite to 10.3.
May 12 2025, 4:00 PM · VyOS Rolling
dmbaturin triaged T7438: Automatically Adjust Priority of generate tech-support archive Process to Optimize Resource Usage as Normal priority.
May 12 2025, 1:40 PM
dmbaturin triaged T7444: add authentication for firewall remote-groups as Normal priority.
May 12 2025, 1:40 PM
a.apostoliuk closed T7383: OSPF gets unexpected redistribute nhrp as Resolved.
May 12 2025, 11:47 AM · VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEX324bc83fc4ce: Merge pull request #4500 from dmbaturin/T7411-frr-restart-fix (authored by dmbaturin).
May 12 2025, 11:14 AM
dmbaturin committed rVYOSONEXc3ef3933dea9: frr: T7411: preserve FRR config on service restart if it exists.
May 12 2025, 11:14 AM
GitHub <noreply@github.com> committed rVYOSONEXfdd91c90dde0: Merge pull request #4494 from c-po/haproxy-logging (authored by dmbaturin).
May 12 2025, 10:54 AM
c-po committed rVYOSONEX876786654552: haproxy: T7429: remove unsupported logging facility and log level.
May 12 2025, 10:54 AM
Viacheslav closed T7447: When PPpoe server uses radius, the concurrent online quantity policy of the same user name is not issued to Vyos to take effect as Invalid.

It looks like a support request, ask on the forum.

May 12 2025, 9:29 AM

May 11 2025

sarthurdev renamed T7281: Update Kea to 3.0 from Update Kea to 2.6.1 and implement new features to Update Kea to 3.0 and implement new features.
May 11 2025, 5:31 PM · VyOS 1.5 Circinus (2025.11)
sarthurdev added a project to T7281: Update Kea to 3.0: VyOS 1.5 Circinus.
May 11 2025, 5:30 PM · VyOS 1.5 Circinus (2025.11)
sarthurdev added a comment to T7281: Update Kea to 3.0.

For backport, going to wait for Kea 3.0 at end of Q2. We then won't need to any manual patches.

May 11 2025, 5:29 PM · VyOS 1.5 Circinus (2025.11)
root0day8004 created T7447: When PPpoe server uses radius, the concurrent online quantity policy of the same user name is not issued to Vyos to take effect.
May 11 2025, 4:12 PM

May 10 2025

c-po added a comment to T1771: Recover from failed boots/upgrades automatically.

https://github.com/vyos/vyos-1x/pull/4501
https://github.com/vyos/vyos-build/pull/965

May 10 2025, 2:07 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav triaged T7446: Optimize nftables Set Generation for Performance as Normal priority.
May 10 2025, 12:13 PM · VyOS Rolling
zsdc created T7446: Optimize nftables Set Generation for Performance.
May 10 2025, 11:43 AM · VyOS Rolling
Vijayakumar created T7445: conflict labeling workflow - check and fix issues.
May 10 2025, 10:57 AM · GitHub Infrastructure
c-po added a project to T7428: Remove io_uring support from the kernel: VyOS 1.4 Sagitta (1.4.3).
May 10 2025, 6:29 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
c-po moved T7428: Remove io_uring support from the kernel from Open to Finished on the VyOS 1.5 Circinus board.
May 10 2025, 6:29 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
ruffy91 created T7444: add authentication for firewall remote-groups.
May 10 2025, 6:25 AM

May 9 2025

GitHub <noreply@github.com> committed rVYOSONEX4ed8419dc12e: Merge pull request #4491 from sever-sever/T7423 (authored by Viacheslav).
May 9 2025, 7:13 PM
Viacheslav committed rVYOSONEXc823a6908468: T7423: Add kernel boot options isolcpus, hugepages, numa_balancing.
May 9 2025, 7:13 PM
covalente added a comment to T7441: container: podman container static ip broken.

@Viacheslav,
default must have the same ipv4 subnet of "podman" default network, if changed, Podman doesn't detect it (via conf-mode commands).

May 9 2025, 4:42 PM · Bugs, VyOS Rolling
Viacheslav added a comment to T7441: container: podman container static ip broken.

@covalente, should we disable the name default? Or do you have another idea?

May 9 2025, 4:16 PM · Bugs, VyOS Rolling
c-po added a comment to T7443: reboot/shutdown: unable to log in prior 5 minutes to planned reboot/shutdown time.

https://github.com/vyos/vyos-1x/pull/4502

May 9 2025, 3:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
c-po added a parent task for T7443: reboot/shutdown: unable to log in prior 5 minutes to planned reboot/shutdown time: T1771: Recover from failed boots/upgrades automatically.
May 9 2025, 3:50 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
c-po added a subtask for T1771: Recover from failed boots/upgrades automatically: T7443: reboot/shutdown: unable to log in prior 5 minutes to planned reboot/shutdown time.
May 9 2025, 3:50 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po changed the status of T7443: reboot/shutdown: unable to log in prior 5 minutes to planned reboot/shutdown time from Open to In progress.
May 9 2025, 3:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
c-po created T7443: reboot/shutdown: unable to log in prior 5 minutes to planned reboot/shutdown time.
May 9 2025, 3:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
covalente added a comment to T7441: container: podman container static ip broken.

After further debugging, it's the network name that causes the issue with CNI creation (pod-*) and static ip.
Podman overlaps "podman" default network and the user-defined "default" network.
containers get assigned to "podman" default network and CNIs ignored, so causing this primary issue.

May 9 2025, 3:09 PM · Bugs, VyOS Rolling
natali-rs1985 merged T7442: VPP add Access Control List (ACL) support into T7419: VPP Firewall (ACL) implementation.
May 9 2025, 10:41 AM · VyOS Rolling
natali-rs1985 merged task T7442: VPP add Access Control List (ACL) support into T7419: VPP Firewall (ACL) implementation.
May 9 2025, 10:41 AM · VyOS Rolling
natali-rs1985 changed the status of T7442: VPP add Access Control List (ACL) support from Open to In progress.
May 9 2025, 10:38 AM · VyOS Rolling
natali-rs1985 created T7442: VPP add Access Control List (ACL) support.
May 9 2025, 10:38 AM · VyOS Rolling
Viacheslav triaged T7441: container: podman container static ip broken as Normal priority.

@covalente Add a simple set of commands to reproduce, thanks!

May 9 2025, 10:32 AM · Bugs, VyOS Rolling
Viacheslav changed the status of T7342: Add apply_patches option for the build packages script from Open to In progress.
May 9 2025, 10:29 AM · VyOS Rolling, VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)
covalente added a project to T7441: container: podman container static ip broken: Bugs.
May 9 2025, 9:04 AM · Bugs, VyOS Rolling
covalente created T7441: container: podman container static ip broken.
May 9 2025, 9:03 AM · Bugs, VyOS Rolling

May 8 2025

c-po added a comment to T1771: Recover from failed boots/upgrades automatically.
May 8 2025, 8:43 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav closed T7439: StrongSwan ESP reauthentication causes traffic to be unable to traverse through IPsec Tunnel as Invalid.

It looks more like a support request, ask on the forum.

May 8 2025, 5:37 PM · VyOS Rolling
c-po closed T6994: node_exporter textfile collector option as Resolved.
May 8 2025, 2:50 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T6994: node_exporter textfile collector option from Open to Finished on the VyOS 1.5 Circinus board.
May 8 2025, 2:50 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEXc8e468d4bf72: Merge pull request #4484 from ryanzuwala/T7051 (authored by dmbaturin).
May 8 2025, 2:41 PM
ryanzuwala committed rVYOSONEX43554efc27fc: nat66: T7051: add group config node.
May 8 2025, 2:41 PM
GitHub <noreply@github.com> committed rVYOSONEXf400eec4f40a: Merge branch 'current' into T7095_vrf-fix (authored by Robert <rgingras@mieweb.com>).
May 8 2025, 2:38 PM