This includes but not limited to:
- Updating the CI workflows
- Troubleshooting the upstream provider changes
- Fixing failing tests
- Assisting contributors with their PRs, reviewing their PRs
- Updating branches
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 31 2026
Jul 31 2026
Jul 30 2026
Jul 30 2026
Viacheslav changed the status of T9147: Update accel-ppp-ng version to 9874ea3 from Open to In progress.
natali-rs1985 changed the status of T9146: support no-multi-seg in DPDK VPP from Open to In progress.
pratik.g added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
It was available in 1.4 but with different variable name WLB_SCRIPT_IFACE-
Viacheslav changed the status of T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3 from Open to Needs testing.
Viacheslav triaged T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD as Normal priority.
Viacheslav triaged T9081: map-based connection marking and policy routing to reduce repeated DNAT/PBR rules as Low priority.
The only requirement I have for this change is that the MTU versus performance conflict should be resolved completely on our side and be transparent to users. Maybe by tuning buffers data-size so they fit Jumbo frames when needed, if this solves the problem.
Viacheslav added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
Do you know the version where it worked at all?
I believe we didn't pass those info to the health check scripts. If so, it should be a feature request and not a bug report.
Companion PR for the CLI side: https://github.com/vyos/vyatta-cfg/pull/153
Viacheslav closed T9124: Fix smoketest build script interrupting on error within a unit test as Resolved.
Viacheslav changed the status of T9140: Include version and flavor information in the live image boot screen from Open to In progress.
Viacheslav triaged T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start as Normal priority.
Jul 29 2026
Jul 29 2026
lujiefsi added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.
i report them on github security advisor
Viacheslav triaged T9130: http-api: mid-life config session loss wedges /configure until process restart as Normal priority.
natali-rs1985 changed the status of T9134: QoS: 'ether protocol X' match crashes commit from Open to In progress.
a.apostoliuk added a comment to T9137: Unexpected behavior when disabling IPSec peer with connection-type trap.
About point 2.
I observe that traffic that matches peer policies is encrypted. BUT this peer is disabled.
If I execute sudo swanctl -L , it shows nothing. But if I execute sudo ip xfrm policy, it shows polices, that were disabled in the configuration.
I think the root cause is rtradv = conf.get_config_dict(base, key_mangling=('-', '_'), get_first_key=True) in service_router-advert.py ,not sure why need key_mangling .
Jul 28 2026
Jul 28 2026
Viacheslav changed the status of T9128: protocols nhrp: cannot commit a second tunnel with 'redirect' — duplicate nftables meter name breaks firewall rules from Open to In progress.
Viacheslav closed T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules, a subtask of T6720: FIPS140-2/3 Validation, as Resolved.
natali-rs1985 triaged T9139: VPP: Missing check of interface usage in features on interface removal as Normal priority.
natali-rs1985 changed the status of T9139: VPP: Missing check of interface usage in features on interface removal from Open to In progress.
Viacheslav changed the status of T9133: fstrim systemd timer/unit does effectively nothing from Open to In progress.
a.apostoliuk triaged T9137: Unexpected behavior when disabling IPSec peer with connection-type trap as Normal priority.
Viacheslav reassigned T8391: Bonding interface permission errors with custom ethernet MTU from o.kuchmystyi to RC.
a.apostoliuk triaged T9136: The feature disable-route-autoinstall does not take effect until IPSec is restarted as Normal priority.
o.kuchmystyi added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.
Jul 27 2026
Jul 27 2026
The real cause is in the PKI/ACME pipeline. When an ACME cert is issued, pki.py imports the intermediate as pki ca AUTOCHAIN_<cert> and triggers dependent services (HAProxy included) to regenerate within the same commit. But that regeneration reuses an in-memory config object whose cache was already populated before the import happened, so it never sees the new CA. HAProxy's chain logic then has nothing to find.
c-po closed T8926: Upgrade iproute2 package to match Kernel 6.18, a subtask of T8147: Update Linux Kernel to 6.18, as Resolved.
On Stream 2026.03 (runned virtualized in Proxmox, the virtual drive is configured with discard and ssd in VM-guest settings i Proxmox and the host drive is using ZFS) it do seem to be working when running with sudo but not without sudo:
Bug reproduced on image 2026.07.21-1151-rolling and proposed patch tested.
Forgot to mention that lacking proper FS trimming has a very negative impact when running VyOS virtualised and having the filesystem sitting on a thin provisioned volume, like for instance LVM thin. The absence of discard commands coming from the virtual node does not allow the cleaning of unused blocks.
natali-rs1985 added a comment to T8468: MAC address modifying on a VPP interface does not take effect.
Viacheslav changed the status of T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration) from Open to In progress.
jestabro claimed T9130: http-api: mid-life config session loss wedges /configure until process restart.
A PR was submitted:
https://github.com/vyos/vyos-1x/pull/5353/changes
Viacheslav changed the status of T9108: dhcp: dhclient unicast RENEW to a dead server can stick until lease end from Open to In progress.
evgmol changed the status of T7284: Delete firewall description not possible from In progress to Needs reporter action.
@RubenNL thanks for looking into this
I believe the module is misused, that is why the result is not as expected.
evgmol renamed T7496: Can't disable `ipv6-src-route` after enabling it from Can't disable `ipv6-src-route` after enabling it to Can't disable `ipv6-src-route` after enabling it.
Jul 26 2026
Jul 26 2026
Hi @syncer @sever and @dmbaturin !
Can we discuss the need in this feature.
JunOS has never implemented it (despite the PR above), yet vyos.vyos seems to use ActonNetworkModule from netcommon Galaxy collection - it is maintained, patched and works well.
Having own action plugin will mean we will need to build it separately and maintain to meet Ansible version.
Jul 25 2026
Jul 25 2026