Page MenuHomeVyOS Platform
Feed All Stories

Sep 2 2025

Vijayakumar closed T7768: Message text (minor) issue in unused import workflow as Resolved.
Sep 2 2025, 5:29 PM · GitHub Infrastructure
a.kudientsov created T7776: Commit fails when removing a firewall local zone.
Sep 2 2025, 4:02 PM · VyOS Rolling
zsdc created T7775: Not all crypto and integrity algorithms work in VPP IPsec.
Sep 2 2025, 3:23 PM · VyOS Rolling
rherold created T7774: Routed IPsec not working dual stack.
Sep 2 2025, 2:53 PM · VyOS 1.4 Sagitta
zsdc added a subtask for T7070: VPP related bugs the root task: T7773: VPP crypto engines configuration should be changed in the template.
Sep 2 2025, 2:33 PM · VyOS Rolling
zsdc added a parent task for T7773: VPP crypto engines configuration should be changed in the template: T7070: VPP related bugs the root task.
Sep 2 2025, 2:33 PM · VyOS 1.5 Circinus (2025.11)
zsdc created T7773: VPP crypto engines configuration should be changed in the template.
Sep 2 2025, 2:32 PM · VyOS 1.5 Circinus (2025.11)
zsdc updated the task description for T7770: Incorrect configuration logic for IPsec in VPP.
Sep 2 2025, 2:18 PM · VyOS 1.5 Circinus (2025.11)
zsdc updated the task description for T7770: Incorrect configuration logic for IPsec in VPP.
Sep 2 2025, 2:17 PM · VyOS 1.5 Circinus (2025.11)
nvdx added a comment to T7485: DHCPv6 does not work on PPPoE interfaces.

Changing the base template controlling dhcp6c config generation seems to do the trick.
Folowing basic pppoe example provided on Vyos main website :

// config
interfaces {
    ...
    pppoe pppoe0 {
        ...
        dhcpv6-options {
            pd 0 {
                interface eth0 {
                    address "1"
                    sla-id "0"
                }
                length "56"
            }
            rapid-commit
        }
        ipv6 {
            address {
                autoconf
            }
        }
    }
}
Sep 2 2025, 2:03 PM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (1.5-stream-2025-Q4)
marvin added a comment to T6563: Expose Jool's stateless NAT46 feature (SIIT-DC).

FWIW, it looks like Jool's official documentation site is now https://nicmx.github.io/Jool/en/index.html (not jool.mx anymore).

Sep 2 2025, 1:40 PM · VyOS Rolling
jestabro closed T7759: Saving the system configuration does not always update the bind mount and may destroy the config file as Resolved.
Sep 2 2025, 1:05 PM · VyOS 1.5 Circinus (2025.11)
L0crian added a comment to T6673: Unexpected error when restart container via native Podman command.

PR: https://github.com/vyos/vyos-1x/pull/4691

Sep 2 2025, 12:40 PM · VyOS 1.5 Circinus (2025.11)
L0crian added a comment to T6857: Ruleset information for ipv6 firewall "prerouting raw" shows wrong default action.

PR: https://github.com/vyos/vyos-1x/pull/4692

Sep 2 2025, 12:40 PM · VyOS 1.5 Circinus (2025.11)
SrividyaA closed T3477: inconsistent documentation show ipv6 bgp as Resolved.
Sep 2 2025, 12:24 PM · Restricted Project
SrividyaA added a comment to T3477: inconsistent documentation show ipv6 bgp.

https://github.com/vyos/vyos-documentation/pull/1677

Sep 2 2025, 12:24 PM · Restricted Project
zsdc added a comment to T7750: VPP CGNAT commit failure and runtime errors with DPDK (driver ice) on custom build.

@guerralucasdaniel7 Could you please share the topology map with all interfaces and networks included?

Sep 2 2025, 12:14 PM · VyOS 1.5 Circinus (2025.11)
asklymenko created T7772: Fix amazon-cloudwatch-agent build.
Sep 2 2025, 8:13 AM · VyOS 1.5 Circinus (2025.11)
hedrok added a comment to T7761: New NetFlow implementation based on ipt-netflow.
In T7761#234119, @Fabse wrote:

aggregation — ipt-netflow allows rewriting IP prefixes and ports. Do we want that?

This feature is crucial for our use case. We are using a custom build for ipt_NETFLOW since 2024 in order to --enable-aggregation for being able to account all flows (sampling rate 1) while keeping flow cardinality manageable. --enable-direction would be great as well.

Sep 2 2025, 7:57 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
factor2431 closed T7589: Add no-split-gso and ack-filter for CAKE as Resolved.
Sep 2 2025, 7:34 AM · VyOS Rolling

Sep 1 2025

Viacheslav triaged T7766: add support to receive multiple labels in BGP-LU - FRR feature! as Normal priority.

Looks like a feature

Sep 1 2025, 11:12 PM · VyOS Rolling
Viacheslav triaged T7771: OSPFv3 doesn't come up as High priority.
Sep 1 2025, 11:08 PM
L0crian added a comment to T7769: Containers: Add 'Requires' and 'After' as container opttions.

What about option priority?

set container name c1 priority 1
set container name c2 priority 2

Do you mean to manipulate the start order of the containers? If so, I don’t think it’d solve the issue. On a suitably fast system, all of the containers would start within a fraction of a second of each other. So it’d be a race condition that would almost always fail.

Sep 1 2025, 8:56 PM · VyOS Rolling
drixter added a comment to T7771: OSPFv3 doesn't come up.

ip -6 r s ff00::/8
ff00::/8 nhid 19 proto static metric 20 pref medium

nexthop dev tun3 weight 1
nexthop dev tun2 weight 1
Sep 1 2025, 7:53 PM
drixter added a comment to T7771: OSPFv3 doesn't come up.

Finally VyOS-style static route help:

Sep 1 2025, 7:52 PM
drixter added a comment to T7771: OSPFv3 doesn't come up.

Both tunnel have multicast enabled:

Sep 1 2025, 7:24 PM
drixter added a comment to T7771: OSPFv3 doesn't come up.

Manually adding route:
ip -6 r a ff00::/8 dev tun2

Sep 1 2025, 7:03 PM
drixter updated the task description for T7771: OSPFv3 doesn't come up.
Sep 1 2025, 4:49 PM
drixter renamed T7771: OSPFv3 doesn't come up from OPFv3 doesn't come up to OSPFv3 doesn't come up.
Sep 1 2025, 4:48 PM
drixter created T7771: OSPFv3 doesn't come up.
Sep 1 2025, 4:47 PM
Viacheslav added a comment to T6230: Implement kernel-mode flow collection and/or dataplane offload collection for high volume systems.

PR https://github.com/vyos/vyos-1x/pull/4688

Sep 1 2025, 4:25 PM · VyOS Rolling
Viacheslav added a comment to T75: pmacct-based NetFlow implementation's performance is insufficient for modern networks.

PR https://github.com/vyos/vyos-1x/pull/4688

Sep 1 2025, 4:25 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav changed the status of T7761: New NetFlow implementation based on ipt-netflow, a subtask of T75: pmacct-based NetFlow implementation's performance is insufficient for modern networks, from Open to In progress.
Sep 1 2025, 4:24 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav changed the status of T7761: New NetFlow implementation based on ipt-netflow from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/4688

Sep 1 2025, 4:24 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav triaged T7765: SR-TE - Include LSP object in PCReq message as Normal priority.
Sep 1 2025, 4:22 PM · VyOS Rolling
Viacheslav triaged T7740: Development: dict_search_arg function that returns user defined default as Wishlist priority.
Sep 1 2025, 4:09 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav triaged T7746: op-mode: 'show interfaces' description wrapping is broken as Normal priority.
Sep 1 2025, 4:09 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
Viacheslav triaged T7767: Firewall: Add icmp-group and icmpv6-groups as Normal priority.
Sep 1 2025, 4:08 PM · VyOS Rolling
Viacheslav triaged T7770: Incorrect configuration logic for IPsec in VPP as High priority.
Sep 1 2025, 4:08 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav triaged T7769: Containers: Add 'Requires' and 'After' as container opttions as Normal priority.
Sep 1 2025, 4:06 PM · VyOS Rolling
Viacheslav added a comment to T7769: Containers: Add 'Requires' and 'After' as container opttions.

What about option priority?

set container name c1 priority 1
set container name c2 priority 2
Sep 1 2025, 4:06 PM · VyOS Rolling
zsdc created T7770: Incorrect configuration logic for IPsec in VPP.
Sep 1 2025, 3:25 PM · VyOS 1.5 Circinus (2025.11)
Fabse added a comment to T7761: New NetFlow implementation based on ipt-netflow.

aggregation — ipt-netflow allows rewriting IP prefixes and ports. Do we want that?

Sep 1 2025, 10:02 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
davi2367 added a comment to T6211: VRF support for Kea-based DHCP server.

Began working on a fix for the op_mode commands

Sep 1 2025, 8:39 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
astr0n8t added a comment to T7144: Firewall Cannot Load Podman Network Interfaces at Boot.

Everything seems to be working as it should on both 1.4.3 and 1.5Q2 for stream, I recently started running tailscale in a container which creates tailscale0 and while I was expecting to run into issues with this, I did not, but it got me thinking, does the interface even need to exist to be able to add it to the nftables ruleset?

Sep 1 2025, 3:58 AM · VyOS Rolling
L0crian renamed T7769: Containers: Add 'Requires' and 'After' as container opttions from Containers: Add 'Requires' and 'After' to Containers: Add 'Requires' and 'After' as container opttions.
Sep 1 2025, 1:38 AM · VyOS Rolling
L0crian created T7769: Containers: Add 'Requires' and 'After' as container opttions.
Sep 1 2025, 1:37 AM · VyOS Rolling

Aug 31 2025

goofball222 added a comment to T6211: VRF support for Kea-based DHCP server.

Looks like something in this change may be breaking clearing non-VRF DHCP server leases on a config from an upgraded rolling release.

Aug 31 2025, 11:59 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Vijayakumar created T7768: Message text (minor) issue in unused import workflow.
Aug 31 2025, 7:08 PM · GitHub Infrastructure
L0crian created T7767: Firewall: Add icmp-group and icmpv6-groups.
Aug 31 2025, 10:39 AM · VyOS Rolling

Aug 30 2025

c-po closed T7762: Debian: adjust vyos-1x package version to not mention 1.5 in any way as Resolved.
Aug 30 2025, 7:36 PM · VyOS Rolling
c-po moved T7762: Debian: adjust vyos-1x package version to not mention 1.5 in any way from Need Triage to Completed on the VyOS Rolling board.
Aug 30 2025, 7:36 PM · VyOS Rolling
c-po added a comment to T7762: Debian: adjust vyos-1x package version to not mention 1.5 in any way.

https://github.com/vyos/vyos-1x/pull/4685

Aug 30 2025, 7:36 PM · VyOS Rolling
Viacheslav triaged T7764: Add 'vlan-to-vni statistics' op-mode command as Normal priority.
Aug 30 2025, 12:02 PM · VyOS 1.5 Circinus (2025.11)
Viacheslav added a comment to T6563: Expose Jool's stateless NAT46 feature (SIIT-DC).

@marvin, I think you can claim it

Aug 30 2025, 12:00 PM · VyOS Rolling

Aug 29 2025

fernando added a comment to T7765: SR-TE - Include LSP object in PCReq message.

other task related to integrate this new feature: https://vyos.dev/T7766

Aug 29 2025, 6:43 PM · VyOS Rolling
fernando updated subscribers of T7766: add support to receive multiple labels in BGP-LU - FRR feature!.
Aug 29 2025, 6:42 PM · VyOS Rolling
fernando renamed T7766: add support to receive multiple labels in BGP-LU - FRR feature! from Don't suppor, add support to receive multiple labels in BGP-LU to add support to receive multiple labels in BGP-LU - FRR bug.
Aug 29 2025, 6:42 PM · VyOS Rolling
fernando created T7766: add support to receive multiple labels in BGP-LU - FRR feature!.
Aug 29 2025, 6:41 PM · VyOS Rolling
fernando added a comment to T7765: SR-TE - Include LSP object in PCReq message.

more bug related to this task :

Aug 29 2025, 6:25 PM · VyOS Rolling
fernando updated subscribers of T7765: SR-TE - Include LSP object in PCReq message.
Aug 29 2025, 6:23 PM · VyOS Rolling
fernando added a comment to T7765: SR-TE - Include LSP object in PCReq message.

https://vyos.dev/T6750

Aug 29 2025, 6:19 PM · VyOS Rolling
fernando created T7765: SR-TE - Include LSP object in PCReq message.
Aug 29 2025, 6:14 PM · VyOS Rolling
marvin added a comment to T6563: Expose Jool's stateless NAT46 feature (SIIT-DC).

Hi everyone, does anyone know of active work on this Feature Request to expose Jool's SIIT-DC functionality in the VyOS CLI?

Aug 29 2025, 5:33 PM · VyOS Rolling
L0crian added a comment to T7764: Add 'vlan-to-vni statistics' op-mode command.

PR: https://github.com/vyos/vyos-1x/pull/4687

Aug 29 2025, 3:36 PM · VyOS 1.5 Circinus (2025.11)
L0crian claimed T7764: Add 'vlan-to-vni statistics' op-mode command.
Aug 29 2025, 3:19 PM · VyOS 1.5 Circinus (2025.11)
L0crian created T7764: Add 'vlan-to-vni statistics' op-mode command.
Aug 29 2025, 3:18 PM · VyOS 1.5 Circinus (2025.11)
GitHub <noreply@github.com> committed rVYOSONEXb1b4545cb798: Merge pull request #4680 from l0crian1/show-kernel-stats (authored by jestabro).
Aug 29 2025, 1:42 PM
L0crian committed rVYOSONEX13a37b831d61: T7742: Add 'show interfaces kernel statistics' command.
Aug 29 2025, 1:42 PM
GitHub <noreply@github.com> committed rVYOSONEX8dc61c3e113a: Merge pull request #4685 from c-po/debian-pkg-version (authored by jestabro).
Aug 29 2025, 1:00 PM
c-po committed rVYOSONEX53d8ed6cc01e: Debian: T7762: adjust vyos-1x package version to not mention 1.5 in any way.
Aug 29 2025, 1:00 PM
Viacheslav closed T7754: Backport list_loaded_modules to 1.5 as Resolved.
Aug 29 2025, 10:32 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav moved T7744: Migrate from accel-ppp to accel-ppp-ng from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 10:31 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav closed T7744: Migrate from accel-ppp to accel-ppp-ng as Resolved.
Aug 29 2025, 10:31 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav moved T7666: Add build script for accel-ppp-ng repo from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 10:30 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav moved T7743: Add a configurable VPP-CP listen interface option to accel-ppp-ng from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 10:30 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav closed T7743: Add a configurable VPP-CP listen interface option to accel-ppp-ng as Resolved.

PR https://github.com/vyos/vyos-1x/pull/4676

Aug 29 2025, 10:30 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav closed T7743: Add a configurable VPP-CP listen interface option to accel-ppp-ng, a subtask of T7221: VPP related features the root task, as Resolved.
Aug 29 2025, 10:30 AM · VyOS Rolling
Viacheslav assigned T7708: BGP config fails when route-reflector-client is configured and peer-group is not used to canoziia.
Aug 29 2025, 10:26 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)
Viacheslav moved T7660: VPP fails to commit on AWS unless vfio module is manually loaded from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 10:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav closed T7660: VPP fails to commit on AWS unless vfio module is manually loaded, a subtask of T7070: VPP related bugs the root task, as Resolved.
Aug 29 2025, 10:25 AM · VyOS Rolling
Viacheslav closed T7660: VPP fails to commit on AWS unless vfio module is manually loaded as Resolved.
Aug 29 2025, 10:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
a.apostoliuk added a comment to T7271: PIMD crashes.

The same issue using the VTI interface. Tested in 1.4.3

Aug 29 2025, 10:23 AM
Viacheslav changed the status of T7186: Macvlan support for podman containers from Open to In progress.
Aug 29 2025, 9:45 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav moved T7689: VPP IPsec traffic stops working after the reboot from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 8:54 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav added a project to T7689: VPP IPsec traffic stops working after the reboot: VyOS 1.5 Circinus (1.5-stream-2025-Q3).
Aug 29 2025, 8:54 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav closed T7689: VPP IPsec traffic stops working after the reboot, a subtask of T7070: VPP related bugs the root task, as Resolved.
Aug 29 2025, 8:53 AM · VyOS Rolling
Viacheslav closed T7689: VPP IPsec traffic stops working after the reboot as Resolved.
Aug 29 2025, 8:53 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav moved T7732: VPP load vfio modules before starting VPP from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 8:41 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav added a project to T7732: VPP load vfio modules before starting VPP: VyOS 1.5 Circinus (1.5-stream-2025-Q3).
Aug 29 2025, 8:41 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav closed T7732: VPP load vfio modules before starting VPP, a subtask of T7221: VPP related features the root task, as Resolved.
Aug 29 2025, 8:41 AM · VyOS Rolling
Viacheslav closed T7732: VPP load vfio modules before starting VPP as Resolved.
Aug 29 2025, 8:41 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav moved T7537: Bump aws-gwlbtun to version c1fd48b from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.4) board.
Aug 29 2025, 8:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav moved T7537: Bump aws-gwlbtun to version c1fd48b from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 8:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav closed T7537: Bump aws-gwlbtun to version c1fd48b as Resolved.
Aug 29 2025, 8:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav moved T7749: Dehardcode x86_64 ARCH to build VPP libraries used for accel-ppp-ng from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q3) board.
Aug 29 2025, 8:32 AM · VyOS 1.5 Circinus (2025.11)
Viacheslav closed T7749: Dehardcode x86_64 ARCH to build VPP libraries used for accel-ppp-ng as Resolved.
Aug 29 2025, 8:32 AM · VyOS 1.5 Circinus (2025.11)
c-po edited projects for T6322: Include microcode update packages for both Intel and AMD64 cpus, added: VyOS 1.5 Circinus (1.5-stream-2025-Q3); removed Bugs.
Aug 29 2025, 6:36 AM · VyOS 1.5 Circinus (2025.11)

Aug 28 2025

L0crian added a comment to T7186: Macvlan support for podman containers.

PR: https://github.com/vyos/vyos-1x/pull/4686

Aug 28 2025, 7:49 PM · VyOS 1.5 Circinus (2025.11)
hedrok added a comment to T7761: New NetFlow implementation based on ipt-netflow.

I suggest just removing buffer-size option - in data/templates/pmacct/uacctd.conf.j2 it is translated to pmacct option plugin_pipe_size - specific to pmacct option about pipe size between processes of pmacct.
ipt_NETFLOW's sndbuf is size of output socket buffer in bytes with system default as default - no relation to plugin_pipe_size pmacct option, I don't think there is need to publish it via vyos CLI.

Aug 28 2025, 7:36 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling