Page MenuHomeVyOS Platform
Feed All Stories

Mon, Oct 5

Viacheslav changed the visibility for T8526: Accel-PPP: Missing RADIUS Response Authenticator Verification.
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8543: Accel-PPP: parse_framed_route stack buffer overflow via RADIUS Framed-Route in Access-Accept message.
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8545: Accel-PPP: Unexpected validation failure for correct Response Authenticator (RADIUS Accounting-Response message).
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8549: Accel-PPP: DHCPv6 Status Code option causes accel-pppd crash via OOB read in print_status().
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8550: Accel-PPP: SSTP zero-length packet causes infinite CPU loop (pre-auth remote DoS).
Mon, Oct 5, 8:59 AM · VyOS Rolling
Viacheslav changed the visibility for T8611: Accel-PPP: stack buffer overflow via oversized RADIUS Accel-VRF-Name.
Mon, Oct 5, 8:58 AM · VyOS Rolling
Viacheslav changed the visibility for T8825: Accel-PPP: Crash via oversized Host-Uniq tag leading to buffer overflow.
Mon, Oct 5, 8:58 AM · VyOS Rolling
Viacheslav changed the visibility for T8830: Accel-PPP: Unvalidated PPP header length in control protocol response handlers causes heap information disclosure.
Mon, Oct 5, 8:57 AM · VyOS Rolling
insertjokehere created T9398: service ssh trusted-user-ca only supports RSA CAs.
Mon, Oct 5, 8:48 AM · VyOS Rolling
c-po added a comment to T9385: Update Linux Kernel to 6.18.55 | 6.6.158.

https://github.com/vyos/vyos-build/pull/1317

Mon, Oct 5, 5:24 AM · VyOS Rolling
c-po updated the task description for T9385: Update Linux Kernel to 6.18.55 | 6.6.158.
Mon, Oct 5, 5:14 AM · VyOS Rolling
c-po renamed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 from Update Linux Kernel to 6.18.54 to Update Linux Kernel to 6.18.55 | 6.6.158.
Mon, Oct 5, 5:14 AM · VyOS Rolling

Sun, Oct 4

evgmol added a comment to T6887: Document how to create new modules.

https://internal.confluence.vyos.com/wiki/x/HIDeSw # for rest.vyos

Sun, Oct 4, 8:38 PM · VyOS Ansible Collection
a.kudientsov created T9397: vyos1x-config: parsing a multi-value leaf is quadratic in its number of values.
Sun, Oct 4, 9:24 AM · VyOS Rolling
syncer created T9396: config-sync: CLI options to verify the secondary's TLS certificate (PKI CA reference + peer fingerprint).
Sun, Oct 4, 9:11 AM
t.shiroma added a comment to T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.

pull-req: github.com/vyos/vyos-1x/pull/5531

Sun, Oct 4, 6:42 AM · VyOS Rolling
c-po added a comment to T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration.

https://github.com/vyos/vyos-1x/pull/5532

Sun, Oct 4, 6:40 AM · VyOS Rolling
Viacheslav closed T9378: `load` silently drops unknown/invalid configuration nodes (no error, service keeps running) as Wontfix.

It is on user to set correct configuration and format. It is not recommended but possible to edit the file.

Sun, Oct 4, 6:30 AM · VyOS Rolling
c-po created T9395: pppoe: client commit fails with "could not lock candidate DS" and IPv6 default route missing from FRR configuration.
Sun, Oct 4, 6:24 AM · VyOS Rolling
t.shiroma created T9394: policy: Route-map deletion check misses nested BGP VPN/VRF references.
Sun, Oct 4, 5:50 AM · VyOS Rolling
evgmol created T9393: "Ansible-Ready" Roles.
Sun, Oct 4, 1:04 AM · VyOS Ansible Collection

Sat, Oct 3

sarthurdev added a comment to T9392: Enable '-k' behaviour for keeping objects of kernel builds by default.

PR: https://github.com/vyos/vyos-build/pull/1316

Sat, Oct 3, 5:21 PM · VyOS Rolling
sarthurdev renamed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default from Enable '-k' keep objects argument for kernel builds by default to Enable '-k' behaviour for keeping objects of kernel builds by default.
Sat, Oct 3, 5:15 PM · VyOS Rolling
sarthurdev renamed T9392: Enable '-k' behaviour for keeping objects of kernel builds by default from Enable '-k' keep objects argument for kernel builds to Enable '-k' keep objects argument for kernel builds by default.
Sat, Oct 3, 4:50 PM · VyOS Rolling
sarthurdev created T9392: Enable '-k' behaviour for keeping objects of kernel builds by default.
Sat, Oct 3, 4:50 PM · VyOS Rolling

Fri, Oct 2

jestabro added a comment to T9390: http-api: bump supporting package pyjwt to 2.15.0.

PR:
https://github.com/vyos/vyos-http-api-tools/pull/69

Fri, Oct 2, 2:27 PM · VyOS Rolling
jestabro created T9390: http-api: bump supporting package pyjwt to 2.15.0.
Fri, Oct 2, 2:05 PM · VyOS Rolling
o.kuchmystyi added a comment to T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF.

PR: https://github.com/vyos/vyos-1x/pull/5528

Fri, Oct 2, 1:30 PM · VyOS Rolling
natali-rs1985 closed T9274: Add more telegraf configuration as Resolved.
Fri, Oct 2, 10:11 AM · VyOS Rolling
natali-rs1985 closed T9303: VPP IPsec algorithm-compatibility check ignored as Resolved.
Fri, Oct 2, 9:39 AM · VyOS Rolling
Artolink created T9389: dhcp-interface static routes (VRF and default) not restored after FRR daemons restart (watchfrr/crash).
Fri, Oct 2, 9:14 AM · VyOS Rolling
balin added a comment to T6528: Move from fuse-overlayfs to native rootless overlay storage.

Thanks for closing this out. Could you point to the commit or release that implemented it? I can't find it in the source on rolling:

Fri, Oct 2, 8:59 AM · VyOS Rolling
_mrplow closed T9353: Interface speed & duplex modes are hardcoded to anything BaseT as Resolved.

My PR was merged after requested changes by c-po were adressed.

Fri, Oct 2, 4:58 AM · VyOS Rolling
yzguy added a comment to T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer.

Similar https://vyos.dev/T6049

Fri, Oct 2, 1:43 AM · VyOS Rolling
yzguy created T9388: wwan: address dhcp/dhcpv6/autoconf never get an address from a static QMI bearer.
Fri, Oct 2, 1:40 AM · VyOS Rolling

Thu, Oct 1

hybridops created T9387: cloud-init: add strict mode for vyos_config_commands.
Thu, Oct 1, 8:10 PM · VyOS Rolling
c-po closed T9354: op-mode: replace "reset connection" with "reconnect interface" as Resolved.
Thu, Oct 1, 7:41 PM · VyOS Rolling
c-po closed T9361: Remove debug noise when running config load tests as Resolved.
Thu, Oct 1, 7:30 PM · VyOS Rolling
c-po closed T9357: pppoe-server requires local username to be set even when any-login is in use as Resolved.
Thu, Oct 1, 7:29 PM · VyOS Rolling
ordex created T9386: openvpn: reject AEAD data-ciphers-fallback with shared-secret-key.
Thu, Oct 1, 7:18 PM · VyOS Rolling
c-po closed T9356: PPPoE: traceback if IPv6 is unavailable on BRAS as Resolved.
Thu, Oct 1, 7:11 PM · VyOS Rolling
c-po closed T9362: pim: prevent killing an already dead/non-existing PID as Resolved.
Thu, Oct 1, 7:01 PM · VyOS Rolling
c-po added a comment to T9385: Update Linux Kernel to 6.18.55 | 6.6.158.

https://github.com/vyos/vyos-build/pull/1315

Thu, Oct 1, 7:01 PM · VyOS Rolling
c-po closed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 as Resolved.
Thu, Oct 1, 7:00 PM · VyOS Rolling
jestabro closed T9343: http-api: bump supporting package anyio to 4.14.2 as Resolved.
Thu, Oct 1, 5:40 PM · VyOS Rolling
jestabro closed T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache as Resolved.
Thu, Oct 1, 5:39 PM · VyOS Rolling
c-po renamed T9385: Update Linux Kernel to 6.18.55 | 6.6.158 from T9287: Update Linux Kernel to 6.18.54 to Update Linux Kernel to 6.18.54.
Thu, Oct 1, 4:21 PM · VyOS Rolling
c-po created T9385: Update Linux Kernel to 6.18.55 | 6.6.158.
Thu, Oct 1, 4:21 PM · VyOS Rolling
a.kudientsov added a comment to T9379: policy: prefix-list duplicate check is quadratic.

https://github.com/vyos/vyos-1x/pull/5525

Thu, Oct 1, 4:15 PM · VyOS Rolling
a.kudientsov added a comment to T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs.

https://github.com/vyos/vyos-1x/pull/5524

Thu, Oct 1, 4:01 PM · VyOS Rolling
a.kudientsov added a comment to T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node.

https://github.com/vyos/vyatta-cfg/pull/156

Thu, Oct 1, 3:44 PM · VyOS Rolling
a.kudientsov added a comment to T9375: vyos1x-config: duplicate-children check re-sorts the list on every step.

https://github.com/vyos/vyos1x-config/pull/96

Thu, Oct 1, 3:27 PM · VyOS Rolling
jestabro reassigned T9374: vyos1x-config: config parsing is cubic in the number of entries in one list from jestabro to a.kudientsov.
Thu, Oct 1, 3:21 PM · VyOS Rolling
jestabro added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.

Thanks, @a.kudientsov feel free to re-assign this task to yourself: I hadn't realized you already had a fix. Thanks ! and I will review under Jira task when created.

Thu, Oct 1, 3:17 PM · VyOS Rolling
a.kudientsov added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.

@jestabro added a pr - https://github.com/vyos/vyos1x-config/pull/95

Thu, Oct 1, 3:12 PM · VyOS Rolling
a.kudientsov added a comment to T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.
Thu, Oct 1, 3:11 PM · VyOS Rolling
cv0759 created T9384: `show pppoe-server sessions` uptime format is ambiguous (`1.06:16:20` vs `15:42:11`).
Thu, Oct 1, 2:35 PM · VyOS Rolling
cv0759 created T9383: Default `/var/log/messages` rotation keeps only ~24h, making intermittent faults undiagnosable.
Thu, Oct 1, 2:34 PM · VyOS Rolling
cv0759 created T9382: PPPoE server default LCP echo settings (10s interval x 3 failures = 30s) cause spurious session teardown.
Thu, Oct 1, 2:34 PM · VyOS Rolling
cv0759 created T9381: Suricata on pre-SSE4.2 CPUs dies with SIGILL and enters a restart loop.
Thu, Oct 1, 2:33 PM · VyOS Rolling
cv0759 created T9380: `qos policy cake` without `bandwidth` is silently applied as `unlimited` and causes packet loss.
Thu, Oct 1, 2:33 PM · VyOS Rolling
a.kudientsov created T9379: policy: prefix-list duplicate check is quadratic.
Thu, Oct 1, 2:33 PM · VyOS Rolling
cv0759 created T9378: `load` silently drops unknown/invalid configuration nodes (no error, service keeps running).
Thu, Oct 1, 2:32 PM · VyOS Rolling
a.kudientsov created T9377: frr: policy commits wait for bgpd's route-map walk on large FRR configs.
Thu, Oct 1, 2:30 PM · VyOS Rolling
ordex added a comment to T9370: openvpn: add support for cipher 'chacha-poly' in the CLI.

PR: https://github.com/vyos/vyos-1x/pull/5523
doc PR: https://github.com/vyos/vyos-documentation/pull/2324

Thu, Oct 1, 2:25 PM · VyOS Rolling
a.kudientsov created T9376: vyatta-cfg: boot and load are quadratic in the number of values of a tag node.
Thu, Oct 1, 2:22 PM · VyOS Rolling
a.kudientsov created T9375: vyos1x-config: duplicate-children check re-sorts the list on every step.
Thu, Oct 1, 2:19 PM · VyOS Rolling
jestabro claimed T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.
Thu, Oct 1, 2:16 PM · VyOS Rolling
a.kudientsov created T9374: vyos1x-config: config parsing is cubic in the number of entries in one list.
Thu, Oct 1, 2:15 PM · VyOS Rolling
evgmol created T9373: Ansible repositories maintenance, October, 2026.
Thu, Oct 1, 12:03 PM · VyOS Ansible Collection
rherold created T9372: webproxy: several url-filtering options are accepted by the CLI but never used.
Thu, Oct 1, 9:31 AM · VyOS Rolling
rherold claimed T9371: webproxy: typo "!ocal-block-url-" in squidGuard.conf.j2.

PR https://github.com/vyos/vyos-1x/pull/5522

Thu, Oct 1, 9:30 AM · VyOS Rolling
rherold created T9371: webproxy: typo "!ocal-block-url-" in squidGuard.conf.j2.
Thu, Oct 1, 9:19 AM · VyOS Rolling
ordex created T9370: openvpn: add support for cipher 'chacha-poly' in the CLI.
Thu, Oct 1, 12:35 AM · VyOS Rolling

Wed, Sep 30

ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

@mrpops2ko FYI the MTU problem I described was addressed in https://vyos.dev/T9364 . Can you give the latest rolling another try, if have a chance to?
In any case, please report any faulty findings in a new task, so we can take it from there.

Wed, Sep 30, 11:56 PM · VyOS Rolling
eli-sterling added a comment to T7337: Documentation for as-path-list regular expressions.

We reviewed this issue and are planning to submit a documentation pull request for it this afternoon.

Wed, Sep 30, 6:16 PM · VyOS 1.5 Circinus
eli-sterling added a comment to T7371: VyOS DHCP Server shared-network concept and behaviour is not properly documented.

We reviewed this issue and are planning to submit a documentation pull request for it this afternoon.

Wed, Sep 30, 6:16 PM · VyOS Rolling
c-po closed T9364: openvpn: set MTU to a reasonable default when enabling DCO as Resolved.
Wed, Sep 30, 6:13 PM · VyOS Rolling
c-po closed T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel as Resolved.
Wed, Sep 30, 6:01 PM · VyOS Rolling
eli-sterling added a comment to T9089: vyos-api docs: document /retrieve showConfig behavior on empty or missing subtrees (HTTP 400).

Verification update: the current rolling API guide documents that showConfig returns HTTP 400 when a schema-valid path has no configuration, gives the "Configuration under specified path is empty" response, and recommends checking exists first or treating that exact error as empty configuration: https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#retrieve. This guidance appears in commit https://github.com/vyos/vyos-documentation/commit/3a952350bf5b5b38a7db1208ed3c910ded7b4b24. This appears to address T9089. Suggested status: Resolved if the task author or a maintainer confirms the documentation meets scope.

Wed, Sep 30, 5:48 PM · VyOS Rolling
eli-sterling added a comment to T9088: vyos-api docs: document /show with path ["configuration","commands"] (set-command export).

Verification update: the current rolling API guide documents /show with path ["configuration", "commands"] as exporting the running configuration to flat set commands, and includes an example response: https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#show. This guidance appears in commit https://github.com/vyos/vyos-documentation/commit/ca902d4eebd49697f476d538eadfcaeb8ebb2232. This appears to address T9088. Suggested status: Resolved if the task author or a maintainer confirms the documentation meets scope.

Wed, Sep 30, 5:48 PM · VyOS Rolling
eli-sterling added a comment to T9087: vyos-api docs: document commit atomicity — multi-field nodes must be set in one /configure request.

Verification update: the current rolling API guide states that each /configure request is committed immediately and that fields of a single configuration node must be included in the same request. It gives task-scheduler, NAT, and firewall examples plus related validation errors: https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#configure. This guidance appears in commit https://github.com/vyos/vyos-documentation/commit/0b88b491d043e5f281d8e3ae499c4d045da28f28. This appears to address T9087. Suggested status: Resolved if the task author or a maintainer confirms the documentation meets scope.

Wed, Sep 30, 5:48 PM · VyOS Rolling
eli-sterling added a comment to T9092: vyos-api docs: add operational guidance for large configuration applies (batch sizes, geoip cost, body-size limit).

Review update: T9092 appears partially completed in the current rolling API guide. Its Bulk configuration section covers moderate-sized batches, reconciling state after request timeouts, applying geoip/remote-group operations one per request, the default 1 MB request-body limit, and commit-confirm as a safeguard: https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#bulk-configuration. This guidance was added in commit https://github.com/vyos/vyos-documentation/commit/af04731c74b0383bc36c66addd6cc22ba41c55e0. The task also asks to direct bulk-apply users to the REST API background configure operations; I could not find that guidance in the current API guide. Suggest keeping T9092 open until that point is documented or the reporter confirms it is unnecessary.

Wed, Sep 30, 5:43 PM · VyOS Rolling
eli-sterling added a comment to T9091: vyos-api docs: document error semantics of batched /configure arrays (failing op not identified).

Verification update: the current rolling API guide documents the batched /configure failure semantics: failed operations do not commit changes for that component, cross-component partial commits are possible, and errors identify the component and missing information or conflict. See https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#configure. The documentation was added in https://github.com/vyos/vyos-documentation/commit/f002549a5fe3ae782be8fe02160fa2796e7e0471 and its atomicity/error wording was refined in https://github.com/vyos/vyos-documentation/commit/4631db6a1578550dd4c1410a8416575899f36936. This appears to address the task's core documentation gap. The current guide does not promise an exact failing-operation index/path or recommend bisecting a failed batch; if that remains part of the requested scope, T9091 may need to stay open or that API behavior could be tracked separately. Suggested status: Resolved if the reporter/maintainer agrees the documentation meets scope; otherwise keep open for the remaining error-location guidance.

Wed, Sep 30, 5:39 PM · VyOS Rolling
eli-sterling added a comment to T9090: vyos-api docs: clarify that save works on /config-file, not /configure.

Verification update: the current rolling API guide now warns in the /configure section that this endpoint does not accept {"op":"save"} and directs users to /config-file: https://github.com/vyos/vyos-documentation/blob/rolling/docs/automation/vyos-api.md#configure. This guidance is present in commit f002549a5fe3ae782be8fe02160fa2796e7e0471 (https://github.com/vyos/vyos-documentation/commit/f002549a5fe3ae782be8fe02160fa2796e7e0471), dated July 14, 2026, titled "vyos-api: T9090: T9091: batched /configure semantics; save via /config-file". This appears to address T9090. Suggested status: move from Open / Need Triage to Resolved, if the reporter or maintainer confirms.

Wed, Sep 30, 5:35 PM · VyOS Rolling
Apachez created T9369: Add timezone as variable for containers (podman).
Wed, Sep 30, 9:24 AM · VyOS Rolling
c-po added a comment to T9368: frr: commit silently skips the FRR reload when a DHCP lease event collides with it.

https://github.com/vyos/vyos-1x/pull/5520

Wed, Sep 30, 4:56 AM · VyOS Rolling
c-po claimed T9368: frr: commit silently skips the FRR reload when a DHCP lease event collides with it.
Wed, Sep 30, 4:52 AM · VyOS Rolling
c-po created T9368: frr: commit silently skips the FRR reload when a DHCP lease event collides with it.
Wed, Sep 30, 4:52 AM · VyOS Rolling

Tue, Sep 29

c-po added a comment to T9367: smoketest: vrf: only assert on the leaked flows in the VRF conntrack zone.

https://github.com/vyos/vyos-1x/pull/5518

Tue, Sep 29, 6:46 PM · VyOS Rolling
c-po added a subtask for T6097: vrf_zones blocking ipv6 traffic: T9367: smoketest: vrf: only assert on the leaked flows in the VRF conntrack zone.
Tue, Sep 29, 6:15 PM · VyOS Rolling, VyOS 1.5 Circinus
c-po added a parent task for T9367: smoketest: vrf: only assert on the leaked flows in the VRF conntrack zone: T6097: vrf_zones blocking ipv6 traffic.
Tue, Sep 29, 6:15 PM · VyOS Rolling
c-po changed the status of T9367: smoketest: vrf: only assert on the leaked flows in the VRF conntrack zone from Open to In progress.
Tue, Sep 29, 6:15 PM · VyOS Rolling
c-po created T9367: smoketest: vrf: only assert on the leaked flows in the VRF conntrack zone.
Tue, Sep 29, 6:15 PM · VyOS Rolling
RC added a comment to T9351: Accel-PPP: RADIUS: Add Message-Authenticator attribute support for Access packets (Blast-RADIUS mitigation).

Accel-ppp-ng : https://github.com/accel-ppp/accel-ppp-ng/pull/39
vyos-1x CLI: https://github.com/vyos/vyos-1x/pull/5442

Tue, Sep 29, 5:07 PM · VyOS Rolling
ordex added a comment to T9364: openvpn: set MTU to a reasonable default when enabling DCO.

documentation PR: https://github.com/vyos/vyos-documentation/pull/2260

Tue, Sep 29, 11:38 AM · VyOS Rolling
xTITUS_MAXIMUSx added a comment to T9284: dhcp6c integer overflow / garbage value in pltime causes vyos-netlinkd loop and loss of connectivity.

I tried to reproduce this on 2026.09.23-0027-rolling (wide-dhcpv6-client 20080615-23). On a test link, Kea handed out an IA_NA address and a /48 IA_PD with pltime 3000 / vltime 4000 and T1=20, and radvd sent RAs on the same link.

Tue, Sep 29, 12:50 AM · VyOS Rolling

Mon, Sep 28

xTITUS_MAXIMUSx added a comment to T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.

Reproduced this on rolling with Kea 3.0.3-vyos.

Mon, Sep 28, 11:04 PM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
xTITUS_MAXIMUSx added a comment to T9299: FRR stale route issue following Accel-PPP L2TP session reconnection.
Mon, Sep 28, 10:21 PM · VyOS Rolling
ordex added a comment to T9364: openvpn: set MTU to a reasonable default when enabling DCO.

PR: https://github.com/vyos/vyos-1x/pull/5515

Mon, Sep 28, 7:54 PM · VyOS Rolling