Page MenuHomeVyOS Platform
Feed All Stories

Jun 27 2025

hedrok added a comment to T7545: Command 'show vpn debug peer <peer_name>' does not work correctly.

https://github.com/vyos/vyos-1x/pull/4582

Jun 27 2025, 7:50 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
Unknown Object (User) added a comment to T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore.

The case is very rare

Jun 27 2025, 7:21 AM · VyOS Rolling
Unknown Object (User) lowered the priority of T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore from High to Low.
Jun 27 2025, 7:21 AM · VyOS Rolling

Jun 26 2025

talmakion added a comment to T7337: Documentation for as-path-list regular expressions.

@991jo As far as I can tell, the documentation for both VyOS and FRR are simply correct - both bgp as-path access-list and show bgp ipvX regex render AS paths as text and run a POSIX regular expression against them. There's no range expansion or other fanciness beyond special handling of the '_' match - just a space-separated text string of ASNs vs a regexec()'d pattern.

Jun 26 2025, 10:47 PM · VyOS 1.5 Circinus
egoistdream added a comment to T7274: EVPN ESI requires arbitrary change to VxLAN interface to update fdb from EVPN.

I managed to recreate the lab in GNS3 with the exact same EVPN 1-to-1 configuration as I had on the physical setup, and it seems the same bug appears. As shown in the screenshot, one router keeps sending ARP requests while the other keeps receiving ARP replies in a loop.

image.png (532×736 px, 174 KB)

Jun 26 2025, 9:54 PM · VyOS Rolling
abhishek6590 created T7584: WAN Load Balancer Default SNAT Behaviour.
Jun 26 2025, 6:31 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav triaged T7582: IPSec VPN: Add support for `port` to associate with protocol for policies as Normal priority.
Jun 26 2025, 5:06 PM
jestabro added a subtask for T7084: Reorganize the operational mode command cache format for ease of searching: T7561: Simplify op-mode-definitions XML cache generation and interface.
Jun 26 2025, 5:00 PM · VyOS Rolling
jestabro added a parent task for T7561: Simplify op-mode-definitions XML cache generation and interface: T7084: Reorganize the operational mode command cache format for ease of searching.
Jun 26 2025, 5:00 PM · VyOS Rolling
dmbaturin added a subtask for T7583: Implement a new operational command runner: T7580: Add support for standalone behavior and virtual tag nodes to the op mode cache generator.
Jun 26 2025, 4:43 PM · VyOS Rolling
dmbaturin added a parent task for T7580: Add support for standalone behavior and virtual tag nodes to the op mode cache generator: T7583: Implement a new operational command runner.
Jun 26 2025, 4:43 PM · VyOS Rolling
dmbaturin added a subtask for T7583: Implement a new operational command runner: T7541: Make every operational command path unique.
Jun 26 2025, 4:42 PM · VyOS Rolling
dmbaturin added a parent task for T7541: Make every operational command path unique: T7583: Implement a new operational command runner.
Jun 26 2025, 4:42 PM · VyOS 1.5 Circinus, VyOS Rolling
dmbaturin added a subtask for T7583: Implement a new operational command runner: T7084: Reorganize the operational mode command cache format for ease of searching.
Jun 26 2025, 4:42 PM · VyOS Rolling
dmbaturin added a parent task for T7084: Reorganize the operational mode command cache format for ease of searching: T7583: Implement a new operational command runner.
Jun 26 2025, 4:42 PM · VyOS Rolling
dmbaturin created T7583: Implement a new operational command runner.
Jun 26 2025, 4:41 PM · VyOS Rolling
SrividyaA created T7582: IPSec VPN: Add support for `port` to associate with protocol for policies.
Jun 26 2025, 3:13 PM
SrividyaA updated the task description for T7581: IPsec service fails after upgrading from 1.3.8 to 1.4.2 if protocol all is configured.
Jun 26 2025, 2:54 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
Viacheslav raised the priority of T7581: IPsec service fails after upgrading from 1.3.8 to 1.4.2 if protocol all is configured from Normal to High.
Jun 26 2025, 2:51 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
SrividyaA triaged T7581: IPsec service fails after upgrading from 1.3.8 to 1.4.2 if protocol all is configured as Normal priority.
Jun 26 2025, 2:43 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
SrividyaA created T7581: IPsec service fails after upgrading from 1.3.8 to 1.4.2 if protocol all is configured.
Jun 26 2025, 2:42 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
GitHub <noreply@github.com> committed rVYOSONEX22c6a817faee: Merge pull request #4578 from dmbaturin/T7578-enforce-op-mode-path-uniqueness (authored by dmbaturin).
Jun 26 2025, 2:30 PM
dmbaturin committed rVYOSONEX8f2eac38f1b7: build: T7578: fail the package build if there are non-unique op mode nodes.
Jun 26 2025, 2:30 PM
GitHub <noreply@github.com> committed rVYOSONEX062f7f4e7cd7: Merge pull request #4565 from dmbaturin/T7560-op-virtual-tag-nodes (authored by dmbaturin).
Jun 26 2025, 2:29 PM
dmbaturin committed rVYOSONEXedc64e7fb637: op-mode: T7560: add support for virtual tag nodes.
Jun 26 2025, 2:29 PM
dmbaturin assigned T7084: Reorganize the operational mode command cache format for ease of searching to jestabro.
Jun 26 2025, 1:49 PM · VyOS Rolling
dmbaturin created T7580: Add support for standalone behavior and virtual tag nodes to the op mode cache generator.
Jun 26 2025, 1:31 PM · VyOS Rolling
evgbondarenko created T7579: Implement a workflow for CLA.
Jun 26 2025, 12:01 PM · VyOS Rolling
talmakion added a comment to T7544: Trying to create a VRF named "vni" leads to an unhandled exception.
$ sudo nft add element inet vrf_zones ct_somethingelse_map { "vni" : 100 }
Error: syntax error, unexpected vni
add element inet vrf_zones ct_somethingelse1_map { vni : 100 }
                                                   ^^^
Jun 26 2025, 10:55 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEX5c2f70ffd820: Merge pull request #4575 from abhisheksafui/t7567_load_balance_show_fix (authored by dmbaturin).
Jun 26 2025, 9:01 AM
abhishek6590 committed rVYOSONEX5ef422734a5c: wan-load-balancing: T7567: Write health-status on first run.
Jun 26 2025, 9:01 AM

Jun 25 2025

dmbaturin added a comment to T7578: Enforce operational mode command name uniqueness.

PR: https://github.com/vyos/vyos-1x/pull/4578

Jun 25 2025, 5:19 PM · VyOS Rolling
aalmenar added a comment to T7432: RPKI VRF Support.
In T7432#227763, @yzguy wrote:

@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itself

https://docs.frrouting.org/en/latest/bgp.html#configuring-rpki-rtr-cache-servers

RPKI/RTR can be configured independently, either in configure node, or in vrf sub context. If configured in configure node, the core bgp instance of default vrf is impacted by the configuration.

Each RPKI/RTR context is mapped to a vrf and can be made up of a specific list of cache-servers, and specific settings.
Jun 25 2025, 5:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
dmbaturin created T7578: Enforce operational mode command name uniqueness.
Jun 25 2025, 5:14 PM · VyOS Rolling
yzguy added a comment to T7432: RPKI VRF Support.

@aalmenar I believe you would need to configure RPKI in the default VRF + your management VRF. They validate prefixes for their respective VRFs
I believe this is a limitation/intention of FRRouting not VyOS itself

Jun 25 2025, 5:10 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
aalmenar added a comment to T7432: RPKI VRF Support.

I have installed version:

Jun 25 2025, 5:05 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
dmbaturin added a comment to T7560: Add support for adding virtual tags to operational mode command nodes.

PR: https://github.com/vyos/vyos-1x/pull/4565

Jun 25 2025, 4:47 PM · VyOS Rolling
curtdept added a comment to T7527: op mode commands failing with 'syntax error near then' in 2025.06.04-0020-rolling.

As this is unfixed in VyOS 2025.06.17-0020-rolling. Is there a workaround that allows i.e to update container images without removing/adding the complete image/config?

Jun 25 2025, 3:42 PM · VyOS Rolling
natali-rs1985 moved T7515: VPP NAT44 timeouts does not work from Need Triage to Completed on the VyOS Rolling board.
Jun 25 2025, 12:58 PM · VyOS Rolling
natali-rs1985 moved T7169: If cannot connect to VPP while committing interface disappears from Need Triage to Completed on the VyOS Rolling board.
Jun 25 2025, 12:58 PM · VyOS Rolling
natali-rs1985 moved T7506: Table 254 is a default table and must not be used for VRF from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
Jun 25 2025, 12:56 PM · VyOS Rolling, VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 closed T5743: HTTPS API ability to import PKI certificates as Resolved.
Jun 25 2025, 12:48 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
natali-rs1985 closed T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used as Resolved.
Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Backport Candidates to Completed on the VyOS Rolling board.
Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Open to Finished on the VyOS 1.5 Circinus board.
Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 moved T6997: Allow configuring IPoE servers without a client IP pool if DHCP relay is used from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
Jun 25 2025, 12:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 closed T7506: Table 254 is a default table and must not be used for VRF as Resolved.
Jun 25 2025, 12:42 PM · VyOS Rolling, VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 closed T6951: Add a configuration command for ethertypes that bridge firewalls should always accept as Resolved.
Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling
natali-rs1985 closed T6101: IPsec some proposal combinations could be invalid and the service strongswan stops as Resolved.
Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus, VyOS Rolling
natali-rs1985 moved T6101: IPsec some proposal combinations could be invalid and the service strongswan stops from Backport Candidates to Completed on the VyOS Rolling board.
Jun 25 2025, 12:38 PM · VyOS 1.5 Circinus, VyOS Rolling
natali-rs1985 moved T6951: Add a configuration command for ethertypes that bridge firewalls should always accept from Open to Finished on the VyOS 1.5 Circinus board.
Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling
natali-rs1985 moved T6951: Add a configuration command for ethertypes that bridge firewalls should always accept from Need Triage to Completed on the VyOS Rolling board.
Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling
natali-rs1985 removed a project from T6951: Add a configuration command for ethertypes that bridge firewalls should always accept: VyOS 1.4 Sagitta (1.4.3).
Jun 25 2025, 12:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), Restricted Project, VyOS Rolling
natali-rs1985 closed T7488: Make VPP restartable as Resolved.

https://github.com/vyos/vyos-vpp/pull/34
https://github.com/vyos/vyos-1x/pull/4552
https://github.com/vyos/vyatta-cfg/pull/102

Jun 25 2025, 12:33 PM · VyOS Rolling
natali-rs1985 closed T7169: If cannot connect to VPP while committing interface disappears, a subtask of T7070: VPP related bugs the root task, as Resolved.
Jun 25 2025, 12:30 PM · VyOS Rolling
natali-rs1985 closed T7169: If cannot connect to VPP while committing interface disappears as Resolved.
Jun 25 2025, 12:30 PM · VyOS Rolling
natali-rs1985 closed T7515: VPP NAT44 timeouts does not work as Resolved.
Jun 25 2025, 12:30 PM · VyOS Rolling
natali-rs1985 closed T7515: VPP NAT44 timeouts does not work, a subtask of T7070: VPP related bugs the root task, as Resolved.
Jun 25 2025, 12:30 PM · VyOS Rolling
natali-rs1985 changed the status of T7577: VRRP plugin on VPP from Open to In progress.
Jun 25 2025, 11:31 AM · VyOS 1.5 Circinus (2025.11)
natali-rs1985 created T7577: VRRP plugin on VPP.
Jun 25 2025, 11:31 AM · VyOS 1.5 Circinus (2025.11)
dmbaturin created T7576: Do not include "dirty" in build commit IDs.
Jun 25 2025, 10:35 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav moved T7554: "show interfaces wireguard" fails when fwmark is set from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Jun 25 2025, 3:53 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav closed T7554: "show interfaces wireguard" fails when fwmark is set as Resolved.
Jun 25 2025, 3:53 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Solideco added a comment to T5835: UPnP port mapping / rule installation fails.

Sorry to necro this thread, but wanted to chime in with a real world use-case.

Jun 25 2025, 3:20 AM

Jun 24 2025

sarthurdev added a comment to T7575: Update vyatta-bash to bash 5.2.

https://github.com/vyos/vyatta-bash/pull/15
https://github.com/vyos/vyatta-cfg/pull/105
https://github.com/vyos/vyos-1x/pull/4577

Jun 24 2025, 8:54 PM · VyOS Rolling
sarthurdev created T7575: Update vyatta-bash to bash 5.2.
Jun 24 2025, 8:45 PM · VyOS Rolling
factor2431 added a comment to T7554: "show interfaces wireguard" fails when fwmark is set.

Confirmed fixed on 2025.06.24-0020-rolling

Jun 24 2025, 4:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Unknown Object (User) lowered the priority of T7209: Configured conntrack on input affects on forward from Normal to Low.
Jun 24 2025, 3:19 PM · VyOS Rolling
Unknown Object (User) added a comment to T4399: nhrp - add or delete nhrp tunnel restart opennhrp process.

There is no reason to fix it in 1.4.4 because FRR10.2 will be implemented soon.

Jun 24 2025, 3:08 PM · VyOS 1.4 Sagitta (1.4.3)
Unknown Object (User) closed T4399: nhrp - add or delete nhrp tunnel restart opennhrp process as Wontfix.
Jun 24 2025, 3:06 PM · VyOS 1.4 Sagitta (1.4.3)
natali-rs1985 changed the status of T7424: Develop resource over-usage protection for VPP (CPU and Mem) from In progress to Needs testing.
Jun 24 2025, 2:39 PM · VyOS Rolling
c-po removed a project from T7495: FRR does not redistribute BGP table x routes: VyOS Rolling.
Jun 24 2025, 2:36 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
c-po added a comment to T7495: FRR does not redistribute BGP table x routes.

I can confirm the issue exists in what will become VyOS 1.4.3 as this is a bug in the FRR codebase itself and not the VyOS CLI configuration.

Jun 24 2025, 2:36 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
jestabro closed T7561: Simplify op-mode-definitions XML cache generation and interface, a subtask of T6650: Add op-mode-definitions XML cache, as Resolved.
Jun 24 2025, 2:34 PM · VyOS 1.5 Circinus, VyOS Rolling
jestabro closed T7561: Simplify op-mode-definitions XML cache generation and interface as Resolved.
Jun 24 2025, 2:34 PM · VyOS Rolling
c-po closed T7574: pki: add functionality to renew certbot-issued certificates using an optional force option as Resolved.
Jun 24 2025, 2:33 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
c-po closed T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use as Resolved.
Jun 24 2025, 2:33 PM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T7574: pki: add functionality to renew certbot-issued certificates using an optional force option from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
Jun 24 2025, 2:33 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
c-po moved T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
Jun 24 2025, 2:33 PM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T7574: pki: add functionality to renew certbot-issued certificates using an optional force option from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Jun 24 2025, 2:33 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
c-po moved T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Jun 24 2025, 2:33 PM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEX195651aababa: Merge pull request #4562 from jestabro/op-mode-data (authored by dmbaturin).
Jun 24 2025, 2:26 PM
jestabro committed rVYOSONEX3472a92cc130: T7561: generate json if no ambiguous paths in (a subset of) XML files.
Jun 24 2025, 2:26 PM
jestabro committed rVYOSONEX4f29a02c84d8: T7561: refine xml consistency report to ignore children and file fields.
Jun 24 2025, 2:26 PM
jestabro committed rVYOSONEXecc08e778492: T7561: add option --check-path-ambiguity to show duplicate paths.
Jun 24 2025, 2:26 PM
jestabro committed rVYOSONEX5d24019a6464: T7561: minimize risk of collision with possible node names.
Jun 24 2025, 2:26 PM
jestabro committed rVYOSONEXe5f3f1b2bb6c: T7561: simplify op-mode-definitions XML cache and add interface methods.
Jun 24 2025, 2:26 PM
c-po moved T7574: pki: add functionality to renew certbot-issued certificates using an optional force option from Need Triage to Completed on the VyOS Rolling board.
Jun 24 2025, 2:13 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
c-po moved T7573: pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use from Need Triage to Completed on the VyOS Rolling board.
Jun 24 2025, 2:13 PM · VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
GitHub <noreply@github.com> committed rVYOSONEXa5eff17fbc9d: Merge pull request #4570 from jestabro/commitd-configdep-err (authored by dmbaturin).
Jun 24 2025, 1:44 PM
jestabro committed rVYOSONEX6a4b313839c6: T7570: add missing list of scripts to be committed, needed for configdep.
Jun 24 2025, 1:44 PM
GitHub <noreply@github.com> committed rVYOSONEXa64de34aa9c3: Merge pull request #4573 from c-po/pki-T7574 (authored by dmbaturin).
Jun 24 2025, 1:32 PM
c-po committed rVYOSONEX74941af39dc5: pki: T7574: add optional force argument to renew certbot-issued certificates.
Jun 24 2025, 1:32 PM
GitHub <noreply@github.com> committed rVYOSONEX71ddbe4ceeeb: Merge pull request #4572 from c-po/pki-T7573 (authored by dmbaturin).
Jun 24 2025, 1:31 PM
c-po committed rVYOSONEX02e9eb07a872: pki: T7573: fix TypeError when HAProxy is not in use.
Jun 24 2025, 1:31 PM
natali-rs1985 added a comment to T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.

NAT44:
Adding exclude rule can fix the problem

Jun 24 2025, 12:35 PM · VyOS Rolling
natali-rs1985 added a comment to T7513: VPP after configuring CGNAT the host does not respond on SSH and cannot initiate DNS request.

CGNAT testing:

Jun 24 2025, 12:25 PM · VyOS Rolling
Unknown Object (User) triaged T7569: Add ability to create raw nftables rule as Normal priority.
Jun 24 2025, 9:55 AM · VyOS 1.5 Circinus
Unknown Object (User) edited projects for T7571: Inconsistent MAC address behaviour on bond interfaces, added: VyOS 1.4 Sagitta (1.4.4); removed VyOS 1.4 Sagitta (1.4.2).
Jun 24 2025, 9:54 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
Unknown Object (User) triaged T7571: Inconsistent MAC address behaviour on bond interfaces as Normal priority.
Jun 24 2025, 9:53 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)