Page MenuHomeVyOS Platform
Feed All Stories

Mar 7 2025

GitHub <[email protected]> committed rVYOSONEXc65d443fd2c3: Merge pull request #4382 from c-po/ipsec-ios-profile-fixes (authored by c-po).
Mar 7 2025, 9:31 AM
c-po committed rVYOSONEXc31df5a5b5c1: ipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profile.
Mar 7 2025, 9:31 AM
c-po committed rVYOSONEX117e9edef844: ipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be set.
Mar 7 2025, 9:31 AM
c-po moved T7225: Unhandled template error in "generate ipsec profile ios-remote-access" from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Mar 7 2025, 6:00 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
c-po moved T7225: Unhandled template error in "generate ipsec profile ios-remote-access" from Open to Finished on the VyOS 1.5 Circinus board.
Mar 7 2025, 6:00 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Mar 6 2025

syncer removed a project from T7208: Some sysctl options like nf_conntrack_buckets are different between a clean install and the first reboot: VyOS 1.5 Circinus.
Mar 6 2025, 10:33 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
syncer removed a project from T7209: Configured conntrack on input affects on forward: VyOS 1.5 Circinus.
Mar 6 2025, 10:33 PM · VyOS 1.4 Sagitta (1.4.4), VyOS Rolling
carlos added a comment to T7220: Add the option to disable enforce-first-as at peer level.

So I guess this is very low priority for you guys, but it is very critical for me, so quick question, do you accept PR from general public? If yes, I might go ahead and take a look in how to get this done :)

Mar 6 2025, 9:08 PM · VyOS Rolling
c-po moved T7225: Unhandled template error in "generate ipsec profile ios-remote-access" from Need Triage to Completed on the VyOS Rolling board.
Mar 6 2025, 6:28 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
GitHub <[email protected]> committed rVYOSONEX4a5fbf5e2c80: Merge pull request #4381 from c-po/ipsec-opmode-profile (authored by c-po).
Mar 6 2025, 6:25 PM
c-po committed rVYOSONEXc3a7fdc5cc75: ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError.
Mar 6 2025, 6:25 PM
curtdept closed T7224: static route blackhole, not respecting distance as Resolved.

It appears this is by design, FRR creates kernel routes with metric 20

Mar 6 2025, 5:58 PM · VyOS Rolling
curtdept added a comment to T7224: static route blackhole, not respecting distance.

vtysh show ip route, shows correct route

Mar 6 2025, 5:50 PM · VyOS Rolling
GitHub <[email protected]> committed rVYOSONEX0ca77717a033: Merge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpoint (authored by c-po).
Mar 6 2025, 3:41 PM
oniko94 <[email protected]> committed rVYOSONEX9fe7d85f78e9: T4406: Add public API endpoint to display information.
Mar 6 2025, 3:41 PM
c-po added a comment to T7225: Unhandled template error in "generate ipsec profile ios-remote-access".

https://github.com/vyos/vyos-1x/pull/4381

Mar 6 2025, 3:37 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
c-po changed the status of T7225: Unhandled template error in "generate ipsec profile ios-remote-access" from Open to In progress.
Mar 6 2025, 3:35 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
c-po changed the status of T7225: Unhandled template error in "generate ipsec profile ios-remote-access", a subtask of T6617: ipsec: remote access VPN: "generate ipsec profile ios-remote-access" wrong profile for x509 auth, from Open to In progress.
Mar 6 2025, 3:35 PM · Bugs, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, VyOS 1.5 Circinus
c-po added a parent task for T7225: Unhandled template error in "generate ipsec profile ios-remote-access": T6617: ipsec: remote access VPN: "generate ipsec profile ios-remote-access" wrong profile for x509 auth.
Mar 6 2025, 3:34 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
c-po added a subtask for T6617: ipsec: remote access VPN: "generate ipsec profile ios-remote-access" wrong profile for x509 auth: T7225: Unhandled template error in "generate ipsec profile ios-remote-access".
Mar 6 2025, 3:34 PM · Bugs, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, VyOS 1.5 Circinus
c-po created T7225: Unhandled template error in "generate ipsec profile ios-remote-access".
Mar 6 2025, 3:34 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
evgmol added a comment to T6831: vyos_ospf_interfaces does not handle virtual interfaces for the name/identifier of the interface.

https://github.com/vyos/vyos.vyos/pull/400

Mar 6 2025, 8:17 AM · Bugs, VyOS Ansible Collection
SrividyaA closed T6938: removing disable from a site-to-site ipsec peer never initializes the ipsec tunnel as Not Applicable.
Mar 6 2025, 5:34 AM
mjones-vsat added a comment to T7217: Private SSH key reuse in the console server service.

Is there anyone else we should tag on this ticket?

Mar 6 2025, 1:23 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
curtdept updated the task description for T7224: static route blackhole, not respecting distance.
Mar 6 2025, 12:42 AM · VyOS Rolling
curtdept updated the task description for T7224: static route blackhole, not respecting distance.
Mar 6 2025, 12:41 AM · VyOS Rolling
curtdept created T7224: static route blackhole, not respecting distance.
Mar 6 2025, 12:40 AM · VyOS Rolling

Mar 5 2025

c-po added a comment to T6230: Implement kernel-mode flow collection and/or dataplane offload collection for high volume systems.

https://github.com/vyos/vyos-build/pull/924

Mar 5 2025, 8:02 PM · VyOS Rolling
c-po changed the status of T6230: Implement kernel-mode flow collection and/or dataplane offload collection for high volume systems from Open to In progress.
Mar 5 2025, 7:39 PM · VyOS Rolling
Viacheslav closed T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined as Resolved.
Mar 5 2025, 12:47 PM
JeffWDH added a comment to T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined.

Is resolved in VyOS 2025.03.05-0017-rolling.

Mar 5 2025, 12:41 PM
Viacheslav closed T7197: Decrease config smoketests to 2 CPUs and 7G RAM as Resolved.
Mar 5 2025, 12:30 PM · VyOS Rolling
Viacheslav triaged T7223: VPP defunc_ interfaces have to be flushed for the Mellanox as High priority.
Mar 5 2025, 11:39 AM · VyOS Rolling
Viacheslav created T7223: VPP defunc_ interfaces have to be flushed for the Mellanox.
Mar 5 2025, 11:39 AM · VyOS Rolling
Viacheslav changed the status of T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined from Open to Needs reporter action.
Mar 5 2025, 11:00 AM
opswill added a comment to T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined.

I am running on VyOS 1.5-rolling-202503030030 , and this error has fixed

Mar 5 2025, 10:55 AM
c-po claimed T7208: Some sysctl options like nf_conntrack_buckets are different between a clean install and the first reboot.
Mar 5 2025, 10:54 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
Viacheslav added a parent task for T7222: VPP add configuration for teib entries: T7221: VPP related features the root task.
Mar 5 2025, 10:46 AM · VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T7222: VPP add configuration for teib entries.
Mar 5 2025, 10:46 AM · VyOS Rolling
Viacheslav triaged T7222: VPP add configuration for teib entries as Normal priority.
Mar 5 2025, 10:46 AM · VyOS Rolling
Viacheslav created T7222: VPP add configuration for teib entries.
Mar 5 2025, 10:46 AM · VyOS Rolling
Viacheslav changed the status of T7178: Enable vDPA (VirtIO Data Path Acceleration) Support from Needs testing to Needs reporter action.
Mar 5 2025, 10:34 AM · VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T7175: VPP add sflow plugin.
Mar 5 2025, 10:33 AM · VyOS Rolling
Viacheslav added a parent task for T7175: VPP add sflow plugin: T7221: VPP related features the root task.
Mar 5 2025, 10:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T7181: VPP add source NAT.
Mar 5 2025, 10:31 AM · VyOS Rolling
Viacheslav added a parent task for T7181: VPP add source NAT: T7221: VPP related features the root task.
Mar 5 2025, 10:31 AM · VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T7203: VPP add op-mode to show bridge-domain.
Mar 5 2025, 10:30 AM · VyOS Rolling
Viacheslav added a parent task for T7203: VPP add op-mode to show bridge-domain: T7221: VPP related features the root task.
Mar 5 2025, 10:30 AM · VyOS Rolling
Viacheslav added a parent task for T7218: VPP add ability to configure VXLAN multicast group: T7221: VPP related features the root task.
Mar 5 2025, 10:29 AM · VyOS Rolling
Viacheslav added a subtask for T7221: VPP related features the root task: T7218: VPP add ability to configure VXLAN multicast group.
Mar 5 2025, 10:29 AM · VyOS Rolling
Viacheslav triaged T7221: VPP related features the root task as Normal priority.
Mar 5 2025, 10:29 AM · VyOS Rolling
Viacheslav created T7221: VPP related features the root task.
Mar 5 2025, 10:29 AM · VyOS Rolling
GitHub <[email protected]> committed rVYOSONEX67a4363ed91e: Merge pull request #4378 from jestabro/libvyosconfig-build (authored by jestabro).
Mar 5 2025, 8:15 AM
jestabro committed rVYOSONEX731195c7adb2: T5400: add local build of libvyosconfig to Makefile.
Mar 5 2025, 8:15 AM

Mar 4 2025

MPStudyly added a comment to T7215: VRF smoke tests failing.
In T7215#217255, @c-po wrote:

Hi @MPStudyly,

can it be the case that your system you're running the test son already has a VRF named red?

Mar 4 2025, 9:16 PM · VyOS Rolling
Viacheslav added a comment to T7220: Add the option to disable enforce-first-as at peer level.

FRR changed this behavior several times https://github.com/FRRouting/frr/commit/322462920e2a2c8b73191c6eb5157d64cf4a593e
Sometimes it is disabled by default, sometimes enabled :)
So, depending on the FRR version, the behavior could be different.

Mar 4 2025, 5:55 PM · VyOS Rolling
carlos created T7220: Add the option to disable enforce-first-as at peer level.
Mar 4 2025, 5:10 PM · VyOS Rolling
Viacheslav updated the task description for T7218: VPP add ability to configure VXLAN multicast group.
Mar 4 2025, 5:07 PM · VyOS Rolling
Viacheslav triaged T7219: VXLAN needs to make remote and group options mutually exclusive as Normal priority.
Mar 4 2025, 5:04 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
Viacheslav created T7219: VXLAN needs to make remote and group options mutually exclusive.
Mar 4 2025, 5:04 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
Viacheslav triaged T7218: VPP add ability to configure VXLAN multicast group as Normal priority.
Mar 4 2025, 5:00 PM · VyOS Rolling
Viacheslav created T7218: VPP add ability to configure VXLAN multicast group.
Mar 4 2025, 4:59 PM · VyOS Rolling
mjones-vsat renamed T7217: Private SSH key reuse in the console server service from test to Key reuse in VyOS Dropbear deployment.
Mar 4 2025, 4:54 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
mjones-vsat changed the visibility for T7217: Private SSH key reuse in the console server service.
Mar 4 2025, 4:53 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
mjones-vsat created T7217: Private SSH key reuse in the console server service.
Mar 4 2025, 4:52 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
a.apostoliuk closed T7118: Add redistribution of NHRP to other routing protocols as Resolved.
Mar 4 2025, 4:06 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po reopened T4873: Option to define source IP for rsyslog as "In progress".
Mar 4 2025, 4:00 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po reopened T4873: Option to define source IP for rsyslog, a subtask of T6989: syslog: convert old configuration format to "advanced", as In progress.
Mar 4 2025, 4:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav added a comment to T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined.

Should be fixed in https://vyos.dev/T7123
And/Or https://github.com/vyos/vyos-1x/commit/23477683cea2777f570ac0d98098aa2c6f041661
Can you try the latest rolling?

Mar 4 2025, 3:56 PM
c-po closed T6989: syslog: convert old configuration format to "advanced" as Resolved.
Mar 4 2025, 3:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T6989: syslog: convert old configuration format to "advanced" from Open to Finished on the VyOS 1.5 Circinus board.
Mar 4 2025, 3:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po closed T4873: Option to define source IP for rsyslog, a subtask of T6989: syslog: convert old configuration format to "advanced", as Resolved.
Mar 4 2025, 3:16 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po closed T4873: Option to define source IP for rsyslog as Resolved.
Mar 4 2025, 3:16 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po moved T4873: Option to define source IP for rsyslog from Backlog - Feature Requests to Completed on the VyOS Rolling board.
Mar 4 2025, 3:16 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po moved T4873: Option to define source IP for rsyslog from Open to Finished on the VyOS 1.5 Circinus board.
Mar 4 2025, 3:16 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
GitHub <[email protected]> committed rVYOSONEX99d929d18d73: Merge pull request #4377 from vyos/syslog-typos-T6989 (authored by c-po).
Mar 4 2025, 3:12 PM
c-po committed rVYOSONEXcf99d54870da: syslog: T6989: add option do disable "MARK".
Mar 4 2025, 3:12 PM
c-po committed rVYOSONEX3500e743ad60: syslog: T6989: fix validator range to match completion helper.
Mar 4 2025, 3:12 PM
GitHub <[email protected]> committed rVYOSONEXa4ba60b63993: Merge pull request #4379 from vyos/c-po-patch-1 (authored by c-po).
Mar 4 2025, 3:05 PM
GitHub <[email protected]> committed rVYOSONEXf6a92ee2a3de: GitHub: T5400: evaluate OPAM environment before package build (authored by c-po).
Mar 4 2025, 3:05 PM
JeffWDH created T7216: VyOS 1.5-rolling-202503020018: show interfaces wireguard wg0 summary - NameError: name 'timedelta' is not defined.
Mar 4 2025, 2:29 PM
a.apostoliuk moved T6756: frr: add nhrp cisco authentication to frr 10.1 from Need Triage to Completed on the VyOS Rolling board.
Mar 4 2025, 1:57 PM · VyOS Rolling
a.apostoliuk closed T6756: frr: add nhrp cisco authentication to frr 10.1, a subtask of T6747: frr: upgrade routing suite to 10.2, as Resolved.
Mar 4 2025, 1:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
a.apostoliuk closed T6756: frr: add nhrp cisco authentication to frr 10.1 as Resolved.
Mar 4 2025, 1:57 PM · VyOS Rolling
c-po added a comment to T7215: VRF smoke tests failing.

can it be the case that your system you're running the test son already has a VRF named red?

Mar 4 2025, 1:28 PM · VyOS Rolling
Viacheslav changed the subtype of T6211: VRF support for Kea-based DHCP server from "Bug" to "Feature Request".
Mar 4 2025, 11:33 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
SrividyaA edited projects for T7214: BGP: Add an option to disable "enforce-first-as" , added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.2).
Mar 4 2025, 11:17 AM · VyOS Rolling, VyOS 1.5 Circinus
Harliff added a comment to T6211: VRF support for Kea-based DHCP server.

Hello! Any news regarding this issue?

Mar 4 2025, 11:08 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
MPStudyly added a comment to T7159: Display the non-production banner depending on the build type.

Just to add to the argument: Using the build_type to determine if the banner gets shown or not would allow individual/custom builds to have it disabled as well (we know what we are doing). Obviously I can just speak for my use case, where we roll our own builds to get back qemu-guest-agent. I can't tell if this would go against the intention of introducing this banner in the first place.

Mar 4 2025, 10:54 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling
MPStudyly added a comment to T7206: VyOS cloud init fails with No such file or directory: '/opt/vyatta/etc/config.boot.default'.

I tried adding

[[includes_chroot]]
  path = "opt/vyatta/etc/config/config.boot"
  data = ""

to the build flavor, and now it seems to work.

I still get warning in the cloud init log, but so far I haven't noticed anything not working. This works as a workaround for me, but I still think that this is a bug.

Mar 4 2025, 10:45 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
MPStudyly set Forum thread to https://forum.vyos.io/t/smoke-tests-failing-again/16200 on T7215: VRF smoke tests failing.
Mar 4 2025, 10:26 AM · VyOS Rolling
Viacheslav triaged T7215: VRF smoke tests failing as Normal priority.
Mar 4 2025, 10:24 AM · VyOS Rolling
MPStudyly updated the task description for T7215: VRF smoke tests failing.
Mar 4 2025, 10:19 AM · VyOS Rolling
Viacheslav moved T7190: Allow configuring more timeouts for HAProxy from Open to Finished on the VyOS 1.5 Circinus board.

@treo Could you check the latest rolling to confirm if everything works as expected?

Mar 4 2025, 10:11 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
MPStudyly created T7215: VRF smoke tests failing.
Mar 4 2025, 9:41 AM · VyOS Rolling
c-po merged task T3876: Replace vyos-netplug with a VyOS link state monitor service into T5718: Add netlink wrapper to talk to the Kernel.
Mar 4 2025, 9:20 AM · VyOS 1.5 Circinus
c-po merged T3876: Replace vyos-netplug with a VyOS link state monitor service into T5718: Add netlink wrapper to talk to the Kernel.
Mar 4 2025, 9:20 AM · VyOS Rolling
SrividyaA renamed T7214: BGP: Add an option to disable "enforce-first-as" from BGP: Add "enforce-first-as" option to BGP: Add an option to disable "enforce-first-as" .
Mar 4 2025, 9:09 AM · VyOS Rolling, VyOS 1.5 Circinus
c-po updated subscribers of T5718: Add netlink wrapper to talk to the Kernel.

With T6641 implemented and a discussion with @jestabro and @dmbaturin this would be a perfect addition.

Mar 4 2025, 9:05 AM · VyOS Rolling
Viacheslav added a comment to T7178: Enable vDPA (VirtIO Data Path Acceleration) Support.

@daniel.arconada can you check this? The latest rolling has these modules.

vyos@vpp-left:~$ zcat /proc/config.gz | grep -i vdpa
CONFIG_VIRTIO_VDPA=m
CONFIG_VDPA=m
# CONFIG_VDPA_USER is not set
# CONFIG_MLX5_VDPA_NET is not set
# CONFIG_MLX5_VDPA_STEERING_DEBUG is not set
# CONFIG_VP_VDPA is not set
# CONFIG_ALIBABA_ENI_VDPA is not set
# CONFIG_SNET_VDPA is not set
CONFIG_VHOST_VDPA=m
vyos@vpp-left:~$ 
vyos@vpp-left:~$ show ver
Version:          VyOS 1.5-rolling-202503020018
Mar 4 2025, 9:02 AM · VyOS Rolling