VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2026-06-09T15:41:56+00:00 2026-06-09T15:41:56+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-05-26T15:27:56+00:00 urn:sha1:b49e8f00560bdbd69f85539396afb6391b281519 FRR only allows one BGP instance to hold `advertise-all-vni` at a time (FRR issue #9405). When a default BGP instance is present it is always started before named VRF instances, so if a named VRF holds the flag FRR silently rejects it on every boot (regardless of default EVPN config), causing the running config to diverge from what is stored in VyOS. Enforce the following policy in verify(): - Default BGP instance may always hold `advertise-all-vni`. - A named VRF may hold it only when no default BGP instance exists. - Only one BGP instance (default or named VRF) may hold it at a time. The default BGP verify path additionally scans dependent VRFs so that adding or modifying the default BGP instance while a named VRF already holds the flag is caught even when the VRF node is not part of the current commit. 2025-10-06T16:03:39+00:00 John Estabrook jestabro@vyos.io 2025-10-06T15:49:34+00:00 urn:sha1:bc73a4f7452434f25119267129f337640d8a959c This reverts commit d871fe9c4c65de87232802ed54b263c9b2824391. 2025-10-06T15:48:41+00:00 John Estabrook jestabro@vyos.io 2025-10-06T15:48:41+00:00 urn:sha1:58f0829ad41f6c9f6ff4ae442f8cf45fb1299ea2 This reverts commit 3f8404ac78e1a31e8afcacc6ce8e7331130d2093. 2025-09-26T19:30:19+00:00 Christian Breunig christian@breunig.cc 2025-09-26T19:30:19+00:00 urn:sha1:3f8404ac78e1a31e8afcacc6ce8e7331130d2093 2025-09-09T15:58:26+00:00 Christian Breunig christian@breunig.cc 2025-08-28T12:46:48+00:00 urn:sha1:d871fe9c4c65de87232802ed54b263c9b2824391 Originating from the bug in T7665. To avoid potential issues down the line - and given that there's no compelling technical reason to retain the system-as CLI node under per-VRF BGP configuration, which cannot be achieved through alternative means - the maintainers have collectively decided to deprecate the following command: set vrf name <name> protocols bgp system-as <asn> Starting with VyOS 1.4.4, this CLI command will be considered deprecated. While it will still be accepted, it will no longer have any operational effect. A deprecation warning will be displayed at commit time, indicating that the BGP ASN from the global BGP configuration is now used instead. A migration script will handle the transition and perform the following actions: * Ensure a global BGP configuration exists; if not, initialize one. * Iterate over all configured VRFs to determine whether a BGP instance exists * For any insance, update the configuration to use the global system-as and apply the local-as ASN no-prepend replace-as option on all affected neighbors to preserve existing behavior. * If a neighbor is already configured with a local-as directive, that neighbor will be excluded from the migration process, as it already follows a custom configuration. * Add allowas-in per neighbor option. Required to not deny prefix received updates due to as-path contains our own global ASN.