Correct, if you want to test it you'd have to test on rolling. If the feature works for you, you could then request the feature get backported to 1.5. The commit was on the 1.5 board, so I'm not sure why it wasn't backported before the GA was released.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 4 2026
Aug 4 2026
L0crian added a comment to T9157: Support `fib daddr type` / `fib saddr type` matching in firewall rules (especially `prerouting raw`).
rherold added a comment to T9157: Support `fib daddr type` / `fib saddr type` matching in firewall rules (especially `prerouting raw`).
@L0crian the command :
Aug 3 2026
Aug 3 2026
rherold added a comment to T9157: Support `fib daddr type` / `fib saddr type` matching in firewall rules (especially `prerouting raw`).
@L0crian thx for this information, this could help with my current setup. I will try it in the lab. But I also see that my patched could be usefull
rherold added a comment to T9160: Config-path-derived group/prefix-list membership (analogous to Junos `apply-path`).
I can create a patch for this if wanted
L0crian added a comment to T9157: Support `fib daddr type` / `fib saddr type` matching in firewall rules (especially `prerouting raw`).
Your addition is still useful because it lets you match only on specific interfaces or traffic, but have you seen that you can already do this?:
Viacheslav changed the status of T9152: firewall: Move source-validation rules into a vmap to improve traffic processing speed. from Open to In progress.
Viacheslav changed the status of T9144: commit-confirm hangs forever when stdin is not a terminal from Open to In progress.
Viacheslav closed T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start as Resolved.
Viacheslav added a comment to T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start.
natali-rs1985 changed the status of T6304: Rewrite commit-archive to more structured CLI format from Open to In progress.
natali-rs1985 changed the status of T6304: Rewrite commit-archive to more structured CLI format, a subtask of T139: Commit archive backends, from Open to In progress.
Viacheslav reassigned T8247: firewall: Allow both protocol names and numbers consistently from Y-ANDOU to L0crian.
Aug 2 2026
Aug 2 2026
Aug 1 2026
Aug 1 2026
c-po renamed T9151: Update Linux Kernel to 6.18.41 | 6.6.147 from T9067: Update Linux Kernel to 6.18.41 | 6.6.147 to Update Linux Kernel to 6.18.41 | 6.6.147.
Jul 31 2026
Jul 31 2026
This includes but not limited to:
- Updating the CI workflows
- Troubleshooting the upstream provider changes
- Fixing failing tests
- Assisting contributors with their PRs, reviewing their PRs
- Updating branches
Jul 30 2026
Jul 30 2026
Viacheslav changed the status of T9147: Update accel-ppp-ng version to 9874ea3 from Open to In progress.
natali-rs1985 changed the status of T9146: support no-multi-seg in DPDK VPP from Open to In progress.
pratik.g added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
It was available in 1.4 but with different variable name WLB_SCRIPT_IFACE-
Viacheslav changed the status of T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3 from Open to Needs testing.
Viacheslav triaged T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD as Normal priority.
Viacheslav triaged T9081: map-based connection marking and policy routing to reduce repeated DNAT/PBR rules as Low priority.
The only requirement I have for this change is that the MTU versus performance conflict should be resolved completely on our side and be transparent to users. Maybe by tuning buffers data-size so they fit Jumbo frames when needed, if this solves the problem.
Viacheslav added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
Do you know the version where it worked at all?
I believe we didn't pass those info to the health check scripts. If so, it should be a feature request and not a bug report.
Companion PR for the CLI side: https://github.com/vyos/vyatta-cfg/pull/153
Viacheslav closed T9124: Fix smoketest build script interrupting on error within a unit test as Resolved.
Viacheslav changed the status of T9140: Include version and flavor information in the live image boot screen from Open to In progress.
Viacheslav triaged T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start as Normal priority.
Jul 29 2026
Jul 29 2026
lujiefsi added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.
i report them on github security advisor
Viacheslav triaged T9130: http-api: mid-life config session loss wedges /configure until process restart as Normal priority.
natali-rs1985 changed the status of T9134: QoS: 'ether protocol X' match crashes commit from Open to In progress.
a.apostoliuk added a comment to T9137: Unexpected behavior when disabling IPSec peer with connection-type trap.
About point 2.
I observe that traffic that matches peer policies is encrypted. BUT this peer is disabled.
If I execute sudo swanctl -L , it shows nothing. But if I execute sudo ip xfrm policy, it shows polices, that were disabled in the configuration.
I think the root cause is rtradv = conf.get_config_dict(base, key_mangling=('-', '_'), get_first_key=True) in service_router-advert.py ,not sure why need key_mangling .
Jul 28 2026
Jul 28 2026
Viacheslav changed the status of T9128: protocols nhrp: cannot commit a second tunnel with 'redirect' — duplicate nftables meter name breaks firewall rules from Open to In progress.
Viacheslav closed T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules, a subtask of T6720: FIPS140-2/3 Validation, as Resolved.
natali-rs1985 triaged T9139: VPP: Missing check of interface usage in features on interface removal as Normal priority.
natali-rs1985 changed the status of T9139: VPP: Missing check of interface usage in features on interface removal from Open to In progress.