I see no need in adding mpls enable - all FRR does is writing 1/0 to '/proc/sys/net/mpls/conf/eth1/input' (see https://github.com/FRRouting/frr/blob/1dd655dda3f38ab1227683ed78e51fc35e3c254b/zebra/netconf_netlink.c#L185), VyOS does the same for set protocols mpls interface eth1. If I'm missing something please write.

Thu, Sep 24, 6:36 AM · VyOS Rolling

mrpops2ko added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

not sure if this is the appropriate place for it, but the speeds are not good. here are some benchmark comparisons using the same VPN node which has wireguard enabled and DCO.

Thu, Sep 24, 5:19 AM · VyOS Rolling

Wed, Sep 23

SrividyaA created T9346: The migration from 1.3.5 to 1.4 or 1.5 fails if policy prefix-list name contains dot.

Wed, Sep 23, 7:18 AM · VyOS Rolling

t.shiroma added a comment to T9345: BGP: Unsupported address families in named VRFs bypass configuration validation.

I made a pull-req on https://github.com/vyos/vyos-1x/pull/5494

Wed, Sep 23, 4:25 AM · VyOS Rolling

t.shiroma created T9345: BGP: Unsupported address families in named VRFs bypass configuration validation.

Wed, Sep 23, 2:39 AM · VyOS Rolling

Tue, Sep 22

jestabro added a comment to T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache.

PRs:
https://github.com/vyos/vyos1x-config/pull/93
https://github.com/vyos/vyos-1x/pull/5493

Tue, Sep 22, 6:55 PM · VyOS Rolling

c-po added a comment to T9344: frr: remove code path when vyos-configd is not running.

https://github.com/vyos/vyos-1x/pull/5492

Tue, Sep 22, 6:06 PM · VyOS Rolling

c-po created T9344: frr: remove code path when vyos-configd is not running.

Tue, Sep 22, 6:03 PM · VyOS Rolling

fernando added a comment to T9338: mpls inter-as - l3vpn-multi-domain-switching.

here is the documenation on frr about mpls enable/disable : https://docs.frrouting.org/en/latest/zebra.html#clicmd-mpls-enable-disable

Tue, Sep 22, 3:57 PM · VyOS Rolling

jestabro created T9343: http-api: bump supporting package anyio to 4.14.2.

Tue, Sep 22, 2:40 PM · VyOS Rolling

DarkDreamSan created T9342: flowspec-netfilter: support traffic-rate and traffic-marking FlowSpec actions.

Tue, Sep 22, 11:20 AM · VyOS Rolling

Apachez added a comment to T9123: Resolve regex escape sequences.

Possible workarounds/fixes:

Tue, Sep 22, 7:44 AM · VyOS Rolling

jestabro created T9341: Ensure consistency of legacy templates, xml_ref cache, and reference tree cache.

Tue, Sep 22, 12:58 AM · VyOS Rolling

Mon, Sep 21

fernando added a comment to T9338: mpls inter-as - l3vpn-multi-domain-switching.

we need to expose as well the following command to interfaces level :mpls enable

Mon, Sep 21, 4:50 PM · VyOS Rolling

o.kuchmystyi changed the status of T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF from Open to In progress.

Mon, Sep 21, 12:13 PM · VyOS Rolling

SrividyaA merged T9333: Add mpls bgp l3vpn-multi-domain-switching option into T9338: mpls inter-as - l3vpn-multi-domain-switching.

Mon, Sep 21, 5:34 AM · VyOS Rolling

SrividyaA merged task T9333: Add mpls bgp l3vpn-multi-domain-switching option into T9338: mpls inter-as - l3vpn-multi-domain-switching.

Mon, Sep 21, 5:34 AM · VyOS Rolling

Sun, Sep 20

sarthurdev closed T9340: Tab completion for first element broken as Resolved.

Resolved in https://github.com/vyos/vyos-build/pull/1308

Sun, Sep 20, 3:45 PM · VyOS Rolling

L0crian created T9340: Tab completion for first element broken.

Sun, Sep 20, 3:06 PM · VyOS Rolling

DarkDreamSan created T9339: ipsec: allow per-proposal dh-group in esp-group, mirroring ike-group.

Sun, Sep 20, 12:56 PM · VyOS Rolling

Sat, Sep 19

c-po closed T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7 as Resolved.

Sat, Sep 19, 6:01 AM · VyOS Rolling

Fri, Sep 18

evgmol closed T6828: [vyos_config] Remove statements not in config as Resolved.

Fri, Sep 18, 8:51 PM · VyOS Ansible Collection

evgmol closed T6837: Add replace configuration for module vyos_config as Resolved.

Fri, Sep 18, 8:50 PM · VyOS Ansible Collection

evgmol closed T8323: Add NAT support to VyOS Ansible Collection as Resolved.

Fri, Sep 18, 8:50 PM · VyOS Ansible Collection

fernando created T9338: mpls inter-as - l3vpn-multi-domain-switching.

Fri, Sep 18, 7:24 PM · VyOS Rolling

natali-rs1985 changed the status of T9320: VPN StrongSwan add IPsec IKEv1 deprecation warning from Open to In progress.

https://github.com/vyos/vyos-1x/pull/5485

Fri, Sep 18, 1:17 PM · VyOS Rolling

DarkDreamSan added a comment to T7449: IS-IS Memory Leak in isisd Leading to OOM Crash.

The IS-IS daemon leaks memory during its shortest-path calculation. When a node in the topology has more than 64 equal-cost adjacencies, FRR trims the excess entries but does not release their memory.

Fri, Sep 18, 12:26 PM · VyOS Rolling

b3r1k created T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel.

Fri, Sep 18, 11:06 AM · VyOS Rolling

chris.blackburn added a comment to T8855: Refer to WWAN modems by unique identifier.

This is a duplicate of T7487 which has an open PR against is so I think this ticket should be closed.

Fri, Sep 18, 10:24 AM · VyOS Rolling

b3r1k added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

Rather than rejecting "interval 0" in verify(), the change leaves the directive
out of the generated file: "keepalive" only stands for "ping" and "ping-restart",
and the server branch of the template sets neither on its own, so an absent
directive is the keepalive-off the interval asked for. Nothing needs a migration
and a saved configuration still commits.

Fri, Sep 18, 10:23 AM · VyOS Rolling

ordex added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

This is a regression caused by the version bump we just merged (from 2.7.5 to 2.7.7).
The following commit

Fri, Sep 18, 9:54 AM · VyOS Rolling

SrividyaA created T9336: Remote syslog server defined by FQDN fails to work when configured in a non-default VRF.

Fri, Sep 18, 9:44 AM · VyOS Rolling

a.kudientsov created T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

Fri, Sep 18, 8:09 AM · VyOS Rolling

SrividyaA created T9333: Add mpls bgp l3vpn-multi-domain-switching option.

Fri, Sep 18, 6:00 AM · VyOS Rolling

Thu, Sep 17

arogers added a comment to T9332: GeoIP source/destination nftables set collision.

Created PR - https://github.com/vyos/vyos-1x/pull/5487

Thu, Sep 17, 11:20 PM · VyOS Rolling

arogers created T9332: GeoIP source/destination nftables set collision.

Thu, Sep 17, 11:03 PM · VyOS Rolling

cr0ntab added a comment to T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.

Update: the fix moved to vyos-1x, https://github.com/vyos/vyos-1x/pull/5486

Thu, Sep 17, 9:10 PM · VyOS Rolling

sarthurdev added a comment to T7575: Update vyatta-bash to bash 5.2.

Completion fix: https://github.com/vyos/vyos-build/pull/1308

Thu, Sep 17, 4:26 PM · VyOS Rolling

Viacheslav closed T9316: smoketest: do not race the DHCP client when checking VRF membership as Resolved.

Thu, Sep 17, 2:54 PM · VyOS Rolling

natali-rs1985 changed the status of T9312: VPP sFlow: bonding interface produces no flow samples while physical bond members are rejected by configuration validation from Open to In progress.

Thu, Sep 17, 12:50 PM · VyOS Rolling

evgmol created T9331: Prepare Ansible Galaxy Collection vyos.vyos 6.1.0 Release.

Thu, Sep 17, 10:54 AM · VyOS Ansible Collection

Viacheslav reassigned T9330: bump OpenVPN to 2.7.7 from Viacheslav to ordex.

Thu, Sep 17, 10:22 AM · VyOS Rolling

Viacheslav closed T9330: bump OpenVPN to 2.7.7 as Resolved.

Thu, Sep 17, 10:22 AM · VyOS Rolling

ordex added a comment to T9330: bump OpenVPN to 2.7.7.

PR: https://github.com/vyos/vyos-build/pull/1307

Thu, Sep 17, 10:14 AM · VyOS Rolling

Viacheslav changed the status of T7487: wwan interface numbers do not always match the modem numbers from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5483

Thu, Sep 17, 10:07 AM · VyOS Rolling

ordex created T9330: bump OpenVPN to 2.7.7.

Thu, Sep 17, 9:57 AM · VyOS Rolling

Viacheslav closed T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module as Resolved.

Thu, Sep 17, 9:56 AM · VyOS Rolling

Viacheslav closed T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes as Resolved.

Thu, Sep 17, 9:38 AM · VyOS Rolling

Viacheslav triaged T9329: internal PKI cannot be linked to the Telegraf configuration as Normal priority.

Thu, Sep 17, 9:35 AM · VyOS Rolling

Viacheslav closed T8599: vyos-build: Fail package build if patch cannot be applied as Resolved.

Thu, Sep 17, 9:11 AM · VyOS Rolling

DarkDreamSan created T9329: internal PKI cannot be linked to the Telegraf configuration.

Thu, Sep 17, 8:50 AM · VyOS Rolling

MSonger created T9328: Add prometheus input to telegraf.

Thu, Sep 17, 8:23 AM · VyOS Rolling

Viacheslav triaged T9326: WWAN dual-stack (ipv4v6) connect fails with ip-version-mismatch on networks requiring a single combined PDN context as Low priority.

Thu, Sep 17, 8:19 AM · VyOS Rolling

RC added a comment to T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes.

https://github.com/accel-ppp/accel-ppp-ng/pull/43

Thu, Sep 17, 6:32 AM · VyOS Rolling

SrividyaA created T9327: Add native support for NAT64 session synchronization (joold).

Thu, Sep 17, 5:19 AM · VyOS Rolling

yzguy created T9326: WWAN dual-stack (ipv4v6) connect fails with ip-version-mismatch on networks requiring a single combined PDN context.

Thu, Sep 17, 1:51 AM · VyOS Rolling

yzguy added a comment to T5965: WWAN modems using raw-ip do not work with dhclient/dhcp6c.

Just some new learnings

Thu, Sep 17, 1:45 AM · VyOS 1.4 Sagitta (1.4.0-epa1), VyOS 1.5 Circinus

Wed, Sep 16

c-po closed T9228: Prevent user nagging for fixed-ethernet settings, a subtask of T9158: Add option to disable/enable rx offload, as Resolved.

Wed, Sep 16, 6:54 PM · VyOS Rolling

c-po closed T9228: Prevent user nagging for fixed-ethernet settings as Resolved.

Wed, Sep 16, 6:54 PM · VyOS Rolling

c-po closed T9308: Fix OpenVPN DCO issues after Kernel upgrade as Invalid.

Wed, Sep 16, 6:53 PM · VyOS Rolling

c-po closed T9308: Fix OpenVPN DCO issues after Kernel upgrade, a subtask of T8147: Update Linux Kernel to 6.18, as Invalid.

Wed, Sep 16, 6:53 PM · VyOS Rolling

c-po added a comment to T9308: Fix OpenVPN DCO issues after Kernel upgrade.

Rejected - Superseeded by

Wed, Sep 16, 6:53 PM · VyOS Rolling

rherold added a comment to T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string.

PR https://github.com/vyos/vyos-1x/pull/5477

Wed, Sep 16, 2:02 PM · VyOS Rolling

Viacheslav closed T8952: ipsec: expose per-peer unique setting for site-to-site connections as Resolved.

Wed, Sep 16, 12:48 PM · VyOS Rolling

Viacheslav changed the status of T9323: Fix spurious CI errors from Open to In progress.

Wed, Sep 16, 11:59 AM · VyOS Rolling

Viacheslav added a comment to T9323: Fix spurious CI errors.

PR https://github.com/vyos/vyos-1x/pull/5480

Wed, Sep 16, 11:59 AM · VyOS Rolling

Viacheslav closed T9281: Bridge fails to transmit locally-generated ARP replies on member interfaces after upgrade to rolling 2026.09.01 (regression from 1.5-rolling-202405140019) as Invalid.

Looks like a firewall misconfiguration, not a real bug.
Re-open it with the minimal steps to reproduce or the configuration that maintainers can use to confirm.
Or open a topic at the forum if you need help with firewall settings.
Closing the task

Wed, Sep 16, 9:14 AM · VyOS Rolling

Viacheslav triaged T9324: Five plugins import to_text from ansible.module_utils._text, removed in ansible-core 2.24 as Normal priority.

Wed, Sep 16, 9:02 AM · VyOS Ansible Collection

Viacheslav changed the status of T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py from Open to In progress.

Wed, Sep 16, 9:01 AM · VyOS Rolling

Viacheslav added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

PR https://github.com/vyos/vyos-1x/pull/5468

Wed, Sep 16, 9:01 AM · VyOS Rolling

rockfish added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

Update on #5468 (defect 1 fix).

Wed, Sep 16, 8:24 AM · VyOS Rolling

Viacheslav changed the status of T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog from Open to In progress.

Wed, Sep 16, 7:52 AM · VyOS Rolling

cr0ntab added a comment to T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.

I hit this on my own fleet and put up a PR for fix (a): https://github.com/vyos/vyos-build/pull/1304. It sets ForwardToSyslog=no in data/live-build-config/includes.chroot/etc/systemd/journald.conf, which is where the image gets its journald.conf. That line came in with vyos-build bc0406ce3 (T552, 2018), back when the rsyslog config only loaded imuxsock and imklog. imjournal showed up later, in vyos-1x e143e496e (T6989, 2025-01-13).

Wed, Sep 16, 3:38 AM · VyOS Rolling

Tue, Sep 15

RC changed the status of T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes from Open to In progress.

Tue, Sep 15, 11:31 PM · VyOS Rolling

RC created T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes.

Tue, Sep 15, 11:30 PM · VyOS Rolling

evgmol created T9324: Five plugins import to_text from ansible.module_utils._text, removed in ansible-core 2.24.

Tue, Sep 15, 11:00 PM · VyOS Ansible Collection

jestabro added a comment to T7886: Create unified check for interface dependencies-.

Draft PR here https://github.com/vyos/vyos-1x/pull/5478 implementing a method as discussed in https://github.com/vyos/vyos-1x/pull/4765. Draft until addition of remaining XML annotations, but the simple method is complete.

Tue, Sep 15, 7:35 PM · VyOS Rolling

Viacheslav closed T9315: smoketest: give up once the system under test stops answering as Resolved.

Tue, Sep 15, 4:25 PM · VyOS Rolling

Viacheslav closed T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes as Resolved.

Tue, Sep 15, 3:59 PM · VyOS Rolling

Viacheslav closed T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD as Resolved.

Tue, Sep 15, 3:55 PM · VyOS Rolling

Viacheslav closed T9318: VXLAN: GPE validation checks external mode at the wrong configuration level as Resolved.

Tue, Sep 15, 3:53 PM · VyOS Rolling

Viacheslav closed T9155: Integrate FRR security fixes from PRs 19983, 21098, 21074, 21054 as Resolved.

Tue, Sep 15, 3:31 PM · VyOS Rolling

je added a comment to T9284: dhcp6c integer overflow / garbage value in pltime causes vyos-netlinkd loop and loss of connectivity.