Let's check if nftables improved that. Either we can do it easily now, or we'll close this as wontfix, if Linux just doesn't implement feasible RPF as per the RFC.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 12 2025
Aug 12 2025
GitHub <noreply@github.com> committed rVYOSONEX71875bead2fc: Merge pull request #6 from natali-rs1985/T7076 (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX3703c5452020: smoketest: temporary skip bonding tests (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX31e52fca0dbe: smoketest: fix delete bonding before checking bond delete iface (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX2d5462f4a024: Use lcp_nl_resync instead of lcp_resync for control_vpp.py (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX5c9d6dfdccfc: Create CODEOWNERS (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXa50a34fe815f: Merge pull request #1 from vyos/sever-sever-lcp (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX485a78461a68: Merge pull request #3 from vyos/sever-sever-if-state (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX912128ab9a6d: Merge pull request #2 from vyos/sever-sever-gre (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX1b6e491537c9: vpp: add example of adding vxlan kernel_add (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX242de9b8d83e: Delete patches/vyos-1x/0001-Add-vpp-component-version.patch (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXd16e2f51b504: Initial commit (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX33b13061b55a: Merge pull request #4656 from c-po/bonding-T7571 (authored by dmbaturin).
natali-rs1985 added a comment to T7695: VPP add verifications to not allow user to configure low values for main-heap-size.
Decided to set:
minimum value for main-heap-size -1G
default for main-heap-page-size - 2M
minimum and default value for statseg size - 128M
Viacheslav triaged T7708: BGP config fails when route-reflector-client is configured and peer-group is not used as High priority.
Aug 11 2025
Aug 11 2025
GitHub <noreply@github.com> committed rVYOSONEX7b42041ec703: Merge pull request #4645 from l0crian1/add-vni-map-description (authored by c-po).
The issue is also present in Stream Q2 image and rolling.
c-po changed the status of T7571: Inconsistent MAC address behaviour on bond interfaces from Open to In progress.
dmbaturin edited projects for T5494: Add SSSD IPA and Kerberos support, added: VyOS Rolling; removed VyOS 1.5 Circinus.
dmbaturin edited projects for T4712: Collaborative Protection Profile cPP for Network Devices root task, added: VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling; removed VyOS 1.5 Circinus.
dmbaturin edited projects for T4462: FRR operational-data pagination, added: VyOS Rolling; removed VyOS 1.5 Circinus.
dmbaturin edited projects for T4180: Support for QoS Policy Propagation via BGP (QPPB), added: VyOS Rolling; removed VyOS 1.5 Circinus.
Apachez added a comment to T7704: Add operational mode for VPP with recommended configuration options and calculations.
Since its a generate command, could the output also include the maths behind selected values?
Viacheslav updated the task description for T7704: Add operational mode for VPP with recommended configuration options and calculations.
Viacheslav added a project to T7692: VPP bump version to the stable 2506: VyOS 1.5 Circinus (1.5-stream-2025-Q3).
Viacheslav added a parent task for T7707: VPP add the vpp-crypto-engines dependency for IPSec: T7070: VPP related bugs the root task.
Viacheslav changed the subtype of T7707: VPP add the vpp-crypto-engines dependency for IPSec from "Feature Request" to "Bug".
Viacheslav changed the status of T7707: VPP add the vpp-crypto-engines dependency for IPSec, a subtask of T7692: VPP bump version to the stable 2506, from Open to In progress.
Viacheslav changed the status of T7707: VPP add the vpp-crypto-engines dependency for IPSec from Open to In progress.
Viacheslav renamed T7707: VPP add the vpp-crypto-engines dependency for IPSec from Add VPP dependency for IPSec vpp-crypto-engines to VPP add the vpp-crypto-engines dependency for IPSec .
@nicolasberens Raising PR https://github.com/vyos/vyos.vyos/pull/430 to make vyos_config and cliconf less greedy
Viacheslav triaged T7704: Add operational mode for VPP with recommended configuration options and calculations as Normal priority.
Viacheslav changed the status of T7704: Add operational mode for VPP with recommended configuration options and calculations from Open to In progress.
Viacheslav triaged T7703: DHCP default route lost in VRF when no static route defined as High priority.
Viacheslav changed the status of T3936: [Feature] - DHCP Option 82 Support from Open to In progress.
Aug 10 2025
Aug 10 2025
I have implemented this and created the following pull requests:-
Hi @nicolasberens
That is interesting - when I use rule 5 for example - there is also no change
Aug 9 2025
Aug 9 2025
My €0.05 in this topic is if the "ipv6 address autoconf" should instead be named "ipv6 address slaac" since after all the feature is named "stateless address autoconfiguration" aka slaac and not necessary "autoconf". But I think its a matter of taste if it should be called "autconf" or "slaac".
@c-po if I understand you correctly, for 1.4.4, you are going to make a migration file that looks for interfaces that have only:
@ryanzuwala I think of a change in 1.4.4 which requires config migration. So if one has a working config in 1.4.2 that is "invalid" as it lacks the "ipv6 address autoconf" node - the migrator will add it to restore previous behavior AND have all CLI nodes in place to be a good internet citizen.
Re-opened for 1.4.4 backport
c-po reopened T7322: Addition and deletion of allowed-vlans on a bridge member is slow as "Needs testing".
Aug 8 2025
Aug 8 2025
In T7646#231848, @ryanzuwala wrote:@josha I agree with you. Perhaps it should be like this?
- ipv6 address autoconf - accept RAs and do whatever M and O flags tell it to do
- ipv6 address dhcpv6 - DCHPv6 without RAs, determine default route from neighbor discovery (possibly using the functionality in @josha script above)
- ipv6 address dhcpv6 no-default-gateway - DHCPv6 without RAs, must configure default route separately if needed
- ipv6 address xx:xx:xx.... - Static IP
Viacheslav awarded T7664: Upgrade FRR to 10.5 a Like token.
GitHub <noreply@github.com> committed rVYOSONEX6fa4978e8bd5: Merge pull request #4653 from jestabro/op-cache-field-update (authored by jestabro).