$ sudo nft add element inet vrf_zones ct_somethingelse_map { "vni" : 100 } Error: syntax error, unexpected vni add element inet vrf_zones ct_somethingelse1_map { vni : 100 } ^^^
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 26 2025
Jun 26 2025
talmakion added a comment to T7544: Trying to create a VRF named "vni" leads to an unhandled exception.
GitHub <noreply@github.com> committed rVYOSONEX5c2f70ffd820: Merge pull request #4575 from abhisheksafui/t7567_load_balance_show_fix (authored by dmbaturin).
Jun 25 2025
Jun 25 2025
In T7432#227763, @yzguy wrote:@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itselfhttps://docs.frrouting.org/en/latest/bgp.html#configuring-rpki-rtr-cache-servers
RPKI/RTR can be configured independently, either in configure node, or in vrf sub context. If configured in configure node, the core bgp instance of default vrf is impacted by the configuration. Each RPKI/RTR context is mapped to a vrf and can be made up of a specific list of cache-servers, and specific settings.
@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itself
I have installed version:
curtdept added a comment to T7527: op mode commands failing with 'syntax error near then' in 2025.06.04-0020-rolling.
In T7527#227294, @namtech wrote:As this is unfixed in VyOS 2025.06.17-0020-rolling. Is there a workaround that allows i.e to update container images without removing/adding the complete image/config?
natali-rs1985 moved T7515: VPP NAT44 timeouts does not work from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 moved T7169: If cannot connect to VPP while committing interface disappears from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 moved T7506: Table 254 is a default table and must not be used for VRF from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Open to Finished on the VyOS 1.5 Circinus board.
natali-rs1985 closed T7169: If cannot connect to VPP while committing interface disappears, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 closed T7169: If cannot connect to VPP while committing interface disappears as Resolved.
natali-rs1985 closed T7515: VPP NAT44 timeouts does not work, a subtask of T7070: VPP related bugs the root task, as Resolved.
Viacheslav moved T7554: "show interfaces wireguard" fails when fwmark is set from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Sorry to necro this thread, but wanted to chime in with a real world use-case.
Jun 24 2025
Jun 24 2025
Confirmed fixed on 2025.06.24-0020-rolling
Unknown Object (User) lowered the priority of T7209: Configured conntrack on input affects on forward from Normal to Low.
Unknown Object (User) added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.
There is no reason to fix it in 1.4.4 because FRR10.2 will be implemented soon.
Unknown Object (User) closed T4399: nhrp - add or delete nhrp tunnel restart opennhrp process as Wontfix.
natali-rs1985 changed the status of T7424: Develop resource over-usage protection for VPP (CPU and Mem) from In progress to Needs testing.
I can confirm the issue exists in what will become VyOS 1.4.3 as this is a bug in the FRR codebase itself and not the VyOS CLI configuration.
jestabro closed T7561: Simplify op-mode-definitions XML cache generation and interface, a subtask of T6650: Add op-mode-definitions XML cache, as Resolved.
GitHub <noreply@github.com> committed rVYOSONEX195651aababa: Merge pull request #4562 from jestabro/op-mode-data (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXa5eff17fbc9d: Merge pull request #4570 from jestabro/commitd-configdep-err (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXa64de34aa9c3: Merge pull request #4573 from c-po/pki-T7574 (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX71ddbe4ceeeb: Merge pull request #4572 from c-po/pki-T7573 (authored by dmbaturin).
natali-rs1985 added a comment to T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.
NAT44:
Adding exclude rule can fix the problem
natali-rs1985 added a comment to T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.
CGNAT testing:
Unknown Object (User) edited projects for T7571: Inconsistent MAC address behaviour on bond interfaces, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.2).
Unknown Object (User) triaged T7571: Inconsistent MAC address behaviour on bond interfaces as Normal priority.
Viacheslav triaged T7572: Creating firewall zone without interface causes KeyError exception as Normal priority.
This is also available in FRR 9.1 used by VyOS 1.4 sagitta. We should add it there, too
c-po moved T7531: Add FRR no-ipv6-auto-ra option from Completed to Backport Candidates on the VyOS Rolling board.
c-po moved T7531: Add FRR no-ipv6-auto-ra option from Need Triage to Completed on the VyOS Rolling board.
GitHub <noreply@github.com> committed rVYOSONEX0752a2713694: Merge pull request #4568 from factor2431/current (authored by c-po).
Jun 23 2025
Jun 23 2025
c-po renamed T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use from pki: TypeError: argument of type 'NoneType' is not iterable when haprox is not in use to pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use.
c-po updated the task description for T7574: pki: add functionality to renew certbot-issued certificates using an optional force option.
c-po renamed T7574: pki: add functionality to renew certbot-issued certificates using an optional force option from pki: add forcefully renewal of certbot issued certificates to pki: add functionality to renew certbot-issued certificates using an optional force option.
GitHub <noreply@github.com> committed rVYOSONEXe2ee2a254e89: Merge pull request #4571 from c-po/T7355-cleanup (authored by c-po).
c-po updated the task description for T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use.
c-po changed the status of T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use from Open to In progress.
yun renamed T7572: Creating firewall zone without interface causes KeyError exception from Creating firewall zone without and interface causes KeyError exception to Creating firewall zone without interface causes KeyError exception.
Viacheslav changed the status of T7568: Docker: clean apt cache + clean some /tmp files from Open to In progress.