Page MenuHomeVyOS Platform
Feed All Stories

Mon, Sep 28

c-po added a comment to T5388: Something is fishy with commit and boot times when more than a few hundred static routes are being used.

There is a POC migrationg to overlayfs https://github.com/vyos/vyos-build/pull/1311 and see linked PRs

Mon, Sep 28, 7:08 PM · VyOS Rolling, Bugs
graybeard5x created T9366: FRR routes get out of sync with PPPoE server.
Mon, Sep 28, 6:49 PM · VyOS Rolling
c-po closed T6528: Move from fuse-overlayfs to native rootless overlay storage as Resolved.
Mon, Sep 28, 6:30 PM · VyOS Rolling
c-po added a comment to T6528: Move from fuse-overlayfs to native rootless overlay storage.

This has been implemented for quit some time

Mon, Sep 28, 6:30 PM · VyOS Rolling
jestabro created T9365: Expose path utils to get reference tree paths from config or partial path.
Mon, Sep 28, 2:35 PM · VyOS Rolling
ordex created T9364: openvpn: set MTU to a reasonable default when enabling DCO.
Mon, Sep 28, 1:51 PM · VyOS Rolling
ordex added a comment to T9363: openvpn: site2site failure-count is not rendered properly.

PR: https://github.com/vyos/vyos-1x/pull/5512

Mon, Sep 28, 12:38 PM · VyOS Rolling
ordex created T9363: openvpn: site2site failure-count is not rendered properly.
Mon, Sep 28, 11:45 AM · VyOS Rolling
ordex added a comment to T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel.

PR: https://github.com/vyos/vyos-1x/pull/5511

Mon, Sep 28, 9:35 AM · VyOS Rolling
MSonger added a comment to T9274: Add more telegraf configuration.

This PR has been merged

Mon, Sep 28, 9:00 AM · VyOS Rolling

Sun, Sep 27

c-po added a comment to T9361: Remove debug noise when running config load tests.

https://github.com/vyos/vyos-1x/pull/5508

Sun, Sep 27, 7:20 PM · VyOS Rolling
c-po added a comment to T9362: pim: prevent killing an already dead/non-existing PID.

https://github.com/vyos/vyos-1x/pull/5509

Sun, Sep 27, 7:20 PM · VyOS Rolling
c-po triaged T9362: pim: prevent killing an already dead/non-existing PID as Low priority.
Sun, Sep 27, 7:14 PM · VyOS Rolling
c-po claimed T9362: pim: prevent killing an already dead/non-existing PID.
Sun, Sep 27, 7:14 PM · VyOS Rolling
c-po created T9362: pim: prevent killing an already dead/non-existing PID.
Sun, Sep 27, 7:14 PM · VyOS Rolling
c-po changed the status of T9361: Remove debug noise when running config load tests from Open to In progress.
Sun, Sep 27, 7:08 PM · VyOS Rolling
c-po created T9361: Remove debug noise when running config load tests.
Sun, Sep 27, 7:08 PM · VyOS Rolling
c-po changed the status of T9360: BGP: ORF send + receive causes unnecessary session resets on unrelated policy commits from Open to In progress.
Sun, Sep 27, 6:03 PM · VyOS Rolling
t.shiroma added a comment to T9360: BGP: ORF send + receive causes unnecessary session resets on unrelated policy commits.

I made a pull-req on https://github.com/vyos/vyos-1x/pull/5507 .

Sun, Sep 27, 9:45 AM · VyOS Rolling
t.shiroma created T9360: BGP: ORF send + receive causes unnecessary session resets on unrelated policy commits.
Sun, Sep 27, 8:13 AM · VyOS Rolling
t.shiroma added a comment to T9345: BGP: Unsupported address families in named VRFs bypass configuration validation.

I've confirmed that the pull request has been merged, so I'll mark this ticket as Resolved. Thank you!

Sun, Sep 27, 6:31 AM · VyOS Rolling
xTITUS_MAXIMUSx added a comment to T9303: VPP IPsec algorithm-compatibility check ignored.

This has been fixed with this PR https://github.com/vyos/vyos-1x/pull/5495

Sun, Sep 27, 12:16 AM · VyOS Rolling

Sat, Sep 26

c-po added a comment to T8859: `verify_diffie_hellman_length()` does not protect `int(min_keysize)` and has unused `keysize` variable.

Coder merged and removed as there are no real world callers anymore.

Sat, Sep 26, 7:12 PM
c-po closed T8859: `verify_diffie_hellman_length()` does not protect `int(min_keysize)` and has unused `keysize` variable as Not Applicable.
Sat, Sep 26, 7:11 PM
rockenbah created T9359: VTI (xfrm) interfaces always report operstate UNKNOWN — Prometheus `node_network_up` is 0 for every VTI even when the tunnel is up.
Sat, Sep 26, 5:51 PM · VyOS Rolling
rockenbah created T9358: IPsec site-to-site (connection-type initiate): tunnel stays down after peer answers NO_PROPOSAL_CHOSEN — no automatic retry despite keyingtries = 0.
Sat, Sep 26, 5:45 PM · VyOS Rolling
c-po assigned T8859: `verify_diffie_hellman_length()` does not protect `int(min_keysize)` and has unused `keysize` variable to syncer.
Sat, Sep 26, 5:10 PM
c-po closed T9326: WWAN dual-stack (ipv4v6) connect fails with ip-version-mismatch on networks requiring a single combined PDN context as Resolved.
Sat, Sep 26, 7:42 AM · VyOS Rolling
c-po added a comment to T9356: PPPoE: traceback if IPv6 is unavailable on BRAS.

https://github.com/vyos/vyos-1x/pull/5504

Sat, Sep 26, 6:34 AM · VyOS Rolling
c-po added a comment to T9357: pppoe-server requires local username to be set even when any-login is in use.

https://github.com/vyos/vyos-1x/pull/5505

Sat, Sep 26, 6:33 AM · VyOS Rolling
c-po changed Is it a breaking change? from none to compatible on T9356: PPPoE: traceback if IPv6 is unavailable on BRAS.
Sat, Sep 26, 6:20 AM · VyOS Rolling
c-po claimed T9357: pppoe-server requires local username to be set even when any-login is in use.
Sat, Sep 26, 6:20 AM · VyOS Rolling
c-po created T9357: pppoe-server requires local username to be set even when any-login is in use.
Sat, Sep 26, 6:20 AM · VyOS Rolling
c-po changed Version from 2026.09.25-1909-integration to 2026.09.25-1909-integration, 1.5.1, 1.4.5 on T9356: PPPoE: traceback if IPv6 is unavailable on BRAS.
Sat, Sep 26, 6:11 AM · VyOS Rolling
c-po changed the status of T9356: PPPoE: traceback if IPv6 is unavailable on BRAS from Open to In progress.
Sat, Sep 26, 6:00 AM · VyOS Rolling
c-po created T9356: PPPoE: traceback if IPv6 is unavailable on BRAS.
Sat, Sep 26, 6:00 AM · VyOS Rolling
rockenbah created T9355: blackbox-exporter: ICMP probes always fail ("socket: operation not permitted") — service runs unprivileged without CAP_NET_RAW.
Sat, Sep 26, 2:17 AM · VyOS Rolling

Fri, Sep 25

c-po triaged T9327: Add native support for NAT64 session synchronization (joold) as Wishlist priority.
Fri, Sep 25, 7:19 PM · VyOS Rolling
c-po triaged T9352: HAproxy: Enable transparent proxing as Wishlist priority.
Fri, Sep 25, 7:19 PM · VyOS Rolling
c-po changed the status of T9354: op-mode: replace "reset connection" with "reconnect interface" from Open to In progress.
Fri, Sep 25, 7:19 PM · VyOS Rolling
c-po added a comment to T9354: op-mode: replace "reset connection" with "reconnect interface".

https://github.com/vyos/vyos-1x/pull/5503

Fri, Sep 25, 7:04 PM · VyOS Rolling
c-po created T9354: op-mode: replace "reset connection" with "reconnect interface".
Fri, Sep 25, 7:01 PM · VyOS Rolling
c-po triaged T9347: telegraf: add vyos_system_image metric for monitor image version as Wishlist priority.
Fri, Sep 25, 5:52 PM · VyOS Rolling
c-po triaged T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF as Normal priority.
Fri, Sep 25, 5:51 PM · VyOS Rolling
c-po changed the status of T9338: mpls inter-as - l3vpn-multi-domain-switching from Open to In progress.
Fri, Sep 25, 5:51 PM · VyOS Rolling
c-po changed the status of T9332: GeoIP source/destination nftables set collision from Open to In progress.
Fri, Sep 25, 5:50 PM · VyOS Rolling
c-po changed the status of T9345: BGP: Unsupported address families in named VRFs bypass configuration validation from Open to In progress.
Fri, Sep 25, 5:50 PM · VyOS Rolling
c-po closed T9344: frr: remove code path when vyos-configd is not running as Resolved.
Fri, Sep 25, 5:49 PM · VyOS Rolling
Apachez added a comment to T9353: Interface speed & duplex modes are hardcoded to anything BaseT.

Shouldnt the comment with examples at line 219 be updated aswell?

Fri, Sep 25, 5:14 PM · VyOS Rolling
c-po added a comment to T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD.

Interface nicely shows the one only link local address

Fri, Sep 25, 4:35 PM · VyOS Rolling
c-po closed T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD as Resolved.
Fri, Sep 25, 4:34 PM · VyOS Rolling
c-po closed T9349: dhcpv6-client: do not start dhcp6c in debug mode as Resolved.
Fri, Sep 25, 4:32 PM · VyOS Rolling
natali-rs1985 added a comment to T6304: Rewrite commit-archive to more structured CLI format.

https://github.com/vyos/vyos-1x/pull/5502

Fri, Sep 25, 2:00 PM · VyOS Rolling
_mrplow added a comment to T9353: Interface speed & duplex modes are hardcoded to anything BaseT.

PR 5501 created.

Fri, Sep 25, 12:34 PM · VyOS Rolling
_mrplow created T9353: Interface speed & duplex modes are hardcoded to anything BaseT.
Fri, Sep 25, 10:47 AM · VyOS Rolling
haakon.nore changed the status of T9319: VXLAN: expose the Group Policy extension through a gbp CLI node from Open to In progress.

VXLAN-GBP support has been merged into rolling via https://github.com/vyos/vyos-1x/pull/5484.
Documentation remains open and awaiting review: https://github.com/vyos/vyos-documentation/pull/2248. It covers configuration, limitations, and a firewall example.

Fri, Sep 25, 6:51 AM · VyOS Rolling
SrividyaA created T9352: HAproxy: Enable transparent proxing.
Fri, Sep 25, 6:19 AM · VyOS Rolling

Thu, Sep 24

c-po changed the status of T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD from Open to Needs testing.
Thu, Sep 24, 7:14 PM · VyOS Rolling
c-po added a comment to T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD.

https://github.com/vyos/vyos-1x/pull/5500

Thu, Sep 24, 7:14 PM · VyOS Rolling
RC created T9351: Accel-PPP: RADIUS: Add Message-Authenticator attribute support for Access packets (Blast-RADIUS mitigation).
Thu, Sep 24, 4:31 PM · VyOS Rolling
c-po added a comment to T9350: wwan: possible dead interface after boot, disconnect does not stick.

https://github.com/vyos/vyos-1x/pull/5499

Thu, Sep 24, 3:50 PM · VyOS Rolling
c-po updated the task description for T9350: wwan: possible dead interface after boot, disconnect does not stick.
Thu, Sep 24, 3:26 PM · VyOS Rolling
c-po updated the task description for T9350: wwan: possible dead interface after boot, disconnect does not stick.
Thu, Sep 24, 3:25 PM · VyOS Rolling
c-po claimed T9350: wwan: possible dead interface after boot, disconnect does not stick.
Thu, Sep 24, 3:25 PM · VyOS Rolling
c-po created T9350: wwan: possible dead interface after boot, disconnect does not stick.
Thu, Sep 24, 3:25 PM · VyOS Rolling
c-po added a comment to T9349: dhcpv6-client: do not start dhcp6c in debug mode.

https://github.com/vyos/vyos-1x/pull/5498

Thu, Sep 24, 3:11 PM · VyOS Rolling
c-po claimed T9349: dhcpv6-client: do not start dhcp6c in debug mode.
Thu, Sep 24, 3:03 PM · VyOS Rolling
c-po created T9349: dhcpv6-client: do not start dhcp6c in debug mode.
Thu, Sep 24, 3:03 PM · VyOS Rolling
SrividyaA created T9347: telegraf: add vyos_system_image metric for monitor image version.
Thu, Sep 24, 11:58 AM · VyOS Rolling
ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

Thanks for the report @mrpops2ko .
Please open a new task/bug report. This was only about the port and it's now closed.

Thu, Sep 24, 7:05 AM · VyOS Rolling
hedrok added a comment to T9338: mpls inter-as - l3vpn-multi-domain-switching.

I see no need in adding mpls enable - all FRR does is writing 1/0 to '/proc/sys/net/mpls/conf/eth1/input' (see https://github.com/FRRouting/frr/blob/1dd655dda3f38ab1227683ed78e51fc35e3c254b/zebra/netconf_netlink.c#L185), VyOS does the same for set protocols mpls interface eth1. If I'm missing something please write.

Thu, Sep 24, 6:36 AM · VyOS Rolling
mrpops2ko added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

not sure if this is the appropriate place for it, but the speeds are not good. here are some benchmark comparisons using the same VPN node which has wireguard enabled and DCO.

Thu, Sep 24, 5:19 AM · VyOS Rolling

Wed, Sep 23

SrividyaA created T9346: The migration from 1.3.5 to 1.4 or 1.5 fails if policy prefix-list name contains dot.
Wed, Sep 23, 7:18 AM · VyOS Rolling
t.shiroma added a comment to T9345: BGP: Unsupported address families in named VRFs bypass configuration validation.

I made a pull-req on https://github.com/vyos/vyos-1x/pull/5494

Wed, Sep 23, 4:25 AM · VyOS Rolling
t.shiroma created T9345: BGP: Unsupported address families in named VRFs bypass configuration validation.
Wed, Sep 23, 2:39 AM · VyOS Rolling

Tue, Sep 22

jestabro added a comment to T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache.

PRs:
https://github.com/vyos/vyos1x-config/pull/93
https://github.com/vyos/vyos-1x/pull/5493

Tue, Sep 22, 6:55 PM · VyOS Rolling
c-po added a comment to T9344: frr: remove code path when vyos-configd is not running.

https://github.com/vyos/vyos-1x/pull/5492

Tue, Sep 22, 6:06 PM · VyOS Rolling
c-po created T9344: frr: remove code path when vyos-configd is not running.
Tue, Sep 22, 6:03 PM · VyOS Rolling
fernando added a comment to T9338: mpls inter-as - l3vpn-multi-domain-switching.

here is the documenation on frr about mpls enable/disable : https://docs.frrouting.org/en/latest/zebra.html#clicmd-mpls-enable-disable

Tue, Sep 22, 3:57 PM · VyOS Rolling
jestabro created T9343: http-api: bump supporting package anyio to 4.14.2.
Tue, Sep 22, 2:40 PM · VyOS Rolling
DarkDreamSan created T9342: flowspec-netfilter: support traffic-rate and traffic-marking FlowSpec actions.
Tue, Sep 22, 11:20 AM · VyOS Rolling

Sep 22 2026

Apachez added a comment to T9123: Resolve regex escape sequences.

Possible workarounds/fixes:

Sep 22 2026, 7:44 AM · VyOS Rolling
jestabro created T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache.
Sep 22 2026, 12:58 AM · VyOS Rolling

Sep 21 2026

fernando added a comment to T9338: mpls inter-as - l3vpn-multi-domain-switching.

we need to expose as well the following command to interfaces level :mpls enable

Sep 21 2026, 4:50 PM · VyOS Rolling
o.kuchmystyi changed the status of T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF from Open to In progress.
Sep 21 2026, 12:13 PM · VyOS Rolling
SrividyaA merged T9333: Add mpls bgp l3vpn-multi-domain-switching option into T9338: mpls inter-as - l3vpn-multi-domain-switching.
Sep 21 2026, 5:34 AM · VyOS Rolling
SrividyaA merged task T9333: Add mpls bgp l3vpn-multi-domain-switching option into T9338: mpls inter-as - l3vpn-multi-domain-switching.
Sep 21 2026, 5:34 AM · VyOS Rolling

Sep 20 2026

sarthurdev closed T9340: Tab completion for first element broken as Resolved.

Resolved in https://github.com/vyos/vyos-build/pull/1308

Sep 20 2026, 3:45 PM · VyOS Rolling
L0crian created T9340: Tab completion for first element broken.
Sep 20 2026, 3:06 PM · VyOS Rolling
DarkDreamSan created T9339: ipsec: allow per-proposal dh-group in esp-group, mirroring ike-group.
Sep 20 2026, 12:56 PM · VyOS Rolling

Sep 19 2026

c-po closed T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7 as Resolved.
Sep 19 2026, 6:01 AM · VyOS Rolling

Sep 18 2026

evgmol closed T6828: [vyos_config] Remove statements not in config as Resolved.
Sep 18 2026, 8:51 PM · VyOS Ansible Collection
evgmol closed T6837: Add replace configuration for module vyos_config as Resolved.
Sep 18 2026, 8:50 PM · VyOS Ansible Collection
evgmol closed T8323: Add NAT support to VyOS Ansible Collection as Resolved.
Sep 18 2026, 8:50 PM · VyOS Ansible Collection
fernando created T9338: mpls inter-as - l3vpn-multi-domain-switching.
Sep 18 2026, 7:24 PM · VyOS Rolling
natali-rs1985 changed the status of T9320: VPN StrongSwan add IPsec IKEv1 deprecation warning from Open to In progress.

https://github.com/vyos/vyos-1x/pull/5485

Sep 18 2026, 1:17 PM · VyOS Rolling
DarkDreamSan added a comment to T7449: IS-IS Memory Leak in isisd Leading to OOM Crash.

The IS-IS daemon leaks memory during its shortest-path calculation. When a node in the topology has more than 64 equal-cost adjacencies, FRR trims the excess entries but does not release their memory.

Sep 18 2026, 12:26 PM · VyOS Rolling
b3r1k created T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel.
Sep 18 2026, 11:06 AM · VyOS Rolling
chris.blackburn added a comment to T8855: Refer to WWAN modems by unique identifier.

This is a duplicate of T7487 which has an open PR against is so I think this ticket should be closed.

Sep 18 2026, 10:24 AM · VyOS Rolling
b3r1k added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

Rather than rejecting "interval 0" in verify(), the change leaves the directive
out of the generated file: "keepalive" only stands for "ping" and "ping-restart",
and the server branch of the template sets neither on its own, so an absent
directive is the keepalive-off the interval asked for. Nothing needs a migration
and a saved configuration still commits.

Sep 18 2026, 10:23 AM · VyOS Rolling