VyOS - Blog

VyOS 1.4.4 LTS Achieves Nutanix Ready Validation for AOS 7.3

yago.blanquet@vyos.io (Santiago Blanquet) — Tue, 06 Jan 2026 14:30:00 GMT

We’re excited to announce that VyOS 1.4.4 LTS has officially achieved Nutanix Ready validation for Nutanix Acropolis Operating System (AOS) 7.3 and AHV Hypervisor 10.3.

This milestone strengthens our collaboration with Nutanix and ensures full interoperability for customers deploying VyOS Universal Router within the Nutanix Cloud Infrastructure solution.

VyOS 1.4.4 released: syslog over TLS, AWS GLB support, and 50+ bug fixes

daniil@sentrium.io (Daniil Baturin) — Fri, 19 Dec 2025 09:22:24 GMT

Hello, Community!

Customers and holders of contributor subscriptions can now download VyOS 1.4.4 release images and the corresponding source tarball. This release adds TLS support for syslog, support for AWS gateway load balancer tunnel handler (on AWS only), an option to match BGP prefix origin validation extended communities in route maps, and more. It also fixes over fifty bugs. Additionally, there's now a proper validation to prevent manually assigned multicast addresses, which may break some old malformed configs, so pay attention to it. Last but not least, there's a deprecation warning for SSH DSA keys that will stop working in VyOS releases after 1.5 due to changes in OpenSSH, so make sure to update your user accounts to more secure algorithm keys while you still have the time.

VyOS Project October 2025 Update

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Nov 2025 13:04:52 GMT

Hello, Community! The October update is here and it's dominated by bug fixes — as we are preparing to release the next VyOS Stream image on the way to the future VyOS 1.5 and working on the new 1.4.4 maintenance release as well. However, there are a few useful features as well, including support for DHCP options 82 (relay agent information) and 26 (interface MTU), containers health checks, and more.

VyOS Project September 2025 Update

daniil@sentrium.io (Daniil Baturin) — Wed, 15 Oct 2025 15:15:52 GMT

Hello, Community! The holiday season in the Northern hemisphere is over and it's very visible in the commit log. There are lots of things that happened in VyOS in September — that includes a new, more performant kernel mode NetFlow sensor; the equally long-awaited support for using firewall groups in WAN load balancing rules; improvements that will hopefully make config corruption on power loss very unlikely; TLS support for syslog; and many more smaller features and fixes.

VyOS 1.4.3 release

daniil@sentrium.io (Daniil Baturin) — Thu, 17 Jul 2025 13:46:44 GMT

Hello, Community!

Customers and holders of contributor subscriptions can now download VyOS 1.4.3 release images and the corresponding source tarball.

This release includes fixes for CVE-2024-3596 (BlastRADIUS) — a vulnerability in the RADIUS PAM module that made it possible (even if not easy) for an attacker capable of active MitM to forge a server response and log in to a vulnerable system without valid credentials. It also fixes over seventy bugs and adds a few new features. Those features include container improvements such as options to add custom container image registries, set name servers for containers, and allow running containers in privileged mode; an option to import routes from a non-default table into the system RIB; an option to explicitly configure traffic selectors for VTI tunnels, and more.

VyOS Project May 2025 Update

daniil@sentrium.io (Daniil Baturin) — Thu, 29 May 2025 10:00:08 GMT

Hello, Community!

Quite a lot of things have happened since the last update we posted in April. In particular, we added the last bit of functionality that we considered a hard requirement for the VPP-based accelerated dataplane: support for VPP firewall. This marks the point when we consider the minimal viable product complete and we plan to ship it in a VyOS Stream release later this year, likely in Q3 — although you don't have to wait for it to play around with it, since it's already in the rolling release.

We are also making a very good progress towards replacing the legacy config backend — that work is still in the development phase and has no visible effects, and will take a while longer to complete, but it's underway.

When it comes to bugs, there are more than twenty recent fixes, including a fix for the nasty bug that led to routing protocol configuration loss if a protocol daemon crashed. Another important fix contributed by a community member makes VMware VMs suspend and resume correctly. Last but not least, the login prompt is no longer displayed in a bold font — that one took more time to track down than anyone hoped, and turned out to be caused by a truncated Systemd service name (ANSI control codes do not reset themselves on word boundaries, you know...).

There are multiple improvements in the base system as well. There's a new set ystem option reboot-on-upgrade-failure command that makes the system automatically reboot into the previous image if the configuration fails to load after upgrade. We hope it will help multiple people avoid unplanned trips to remove places — of course there should be out-of-band management everywhere for this case, but we all know that the real world is not perfect.

Other recently added features include support for IPv6 address in the datasets for firewall remote groups, BPDU guard and root guard supports for bridges, a new option to limit BRAS services (IPoE, PPPoE, and friends) to a specific number of CPU cores to avoid system overload, and more — read on for details!

VyOS 1.4.2 release

daniil@sentrium.io (Daniil Baturin) — Thu, 03 Apr 2025 16:28:13 GMT

Hello, Community! VyOS 1.4.2 release images and the corresponding source tarball are now available for download to customers and holders of contributor subscriptions.

This release includes a fix for a security issue that made console server users vulnerable to MitM attacks, over forty bug fixes, a few improvements in BRAS functionality, performance optimizations that can improve BGP convergence time by as much as 5-10 minutes in some scenarios, and other improvements. Additionally, FastNetMon is now deprecated and is scheduled to be removed in the future 1.5 release, and we are also finally phasing out legacy GnuPG signatures in favor of minisign. Read on for details!

VyOS 1.4.1 release

daniil@sentrium.io (Daniil Baturin) — Fri, 20 Dec 2024 16:55:59 GMT

Hello, Community!

VyOS 1.4.1 release is now available to customers and community members with contributor subscriptions. Its source code is available as a tarball upon request to everyone who legitimately received a binary image for us. Fixes for CVE-2023-32728 (Zabbix agent SMART plugin RCE) and CVE-2024-6387 (regreSSHion) that were already available as hotfixes are integrated in the image, and there is a fix for a potential DoS in the HTTP API caused by a vulnerability in the python-multipart library (CVE-2024-53981). This release also includes multiple bug fixes and a few improvements, including support for Base64-encoded IPsec secrets, VXLAN VNI to VLAN range mappings, reject routes, and more — read on for details!

VyOS Project November 2024 Update

daniil@sentrium.io (Daniil Baturin) — Fri, 29 Nov 2024 14:06:15 GMT

Hello, Community!

The November update is here. This post is short, but not all we've done lately: many internal changes in the configuration system will soon significantly improve commit speeds and open up a path to even more significant improvements. The 1.4.1 release is around the corner, together with the first VyOS Stream image — all built by the new CI system that produces tarballs with the corresponding source code for every image. But now, let's focus on the changes we made in the rolling release in October.

Remote code execution in listening Zabbix agent (CVE-2023-32728)

daniil@sentrium.io (Daniil Baturin) — Thu, 24 Oct 2024 09:17:37 GMT

Hello, Community!

Our community member Fabian Riechsteiner brought to our attention that the version of the Zabbix agent present in VyOS 1.4.0 is susceptible to a remote code execution vulnerability — CVE-2023-32728. We made a hotfix available to subscribers, and the fix will be a part of the upcoming VyOS 1.4.1 release.

VyOS Universal Router on Azure and Accelerated Networking

f.maidana@vyos.io (Fernando Maidana) — Tue, 08 Oct 2024 13:42:52 GMT

Greetings, Community!

I'm back with an exciting topic:

Azure Accelerated Networking and its integration with VyOS Universal Router. In this discussion, we'll delve into how this powerful feature can be leveraged to create high-performance routers in the Azure cloud environment.

Our focus will be on:

Understanding Azure Accelerated Networking.
Steps to integrate this feature with VyOS.
Practical use cases for building efficient, high-speed routers on Azure.
Potential benefits and considerations.

Introducing VyOS Stream — a next step in the VyOS project evolution

daniil@sentrium.io (Daniil Baturin) — Thu, 27 Jun 2024 18:29:02 GMT

Hello, Community!

Historically, we had two types of branches — rolling (current) and LTS branches. When we started working on a new LTS release, its branch would be branched off directly from the current one, but it wouldn’t be frozen for experimental changes until very late in the development process. Only when the upcoming LTS release came to a full freeze would any new features be limited to occasional, knowingly safe backports.
However, that approach created significant problems, both technical and social. Now, we are going to present our solution to both.

VyOS 1.4.0 GA release

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Jun 2024 17:46:44 GMT

Hello, Community!

The VyOS 1.4.0 release has finally reached general availability. Its configuration syntax and API are frozen for any changes now— we can add new commands, but existing commands and functions will stay the same until it reaches EOL to make it friendly to automation tools. Let us review what is new in this release!

VyOS 1.4.0-epa3 release

daniil@sentrium.io (Daniil Baturin) — Tue, 14 May 2024 16:38:00 GMT

Hello, Сommunity!

The VyOS 1.4.0-epa3 (Early Production Access) release is now available to subscribers. It includes a fix for CVE-2024-2961 — the recently discovered buffer overflow vulnerability in GNU libc.

This is the final EPA of 1.4.0/Sagitta release, which includes all supported flavors (hardware and virtual). It also includes a few configuration syntax changes (all automatically migrated) that were required to make old configs work or to unblock improvement paths, such as implementing the DHCP server active/active high availability mode in addition to the old active/passive failover mechanism.

Please let us know if you notice any anomalies! We expect the 1.4.0 GA release in two weeks if no significant issues are detected.

Introducing the image build flavor system

daniil@sentrium.io (Daniil Baturin) — Fri, 10 May 2024 09:35:46 GMT

Hello, Community!

Building customized images of VyOS for different platforms has become much easier now. The last bit of the revamped build flavor system has fallen into place: the ability to build image formats other than ISO. Some other options, such as the ability to include custom packages and files, have been there for a while, but recently we fixed a few issues with them. Let's review those improvements and see how to use them.

VyOS Project April 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 11 Apr 2024 19:40:48 GMT

Hello, Сommunity!

In March, we made many minor improvements to existing features. Still, there are some significant features: many new services are available for configuration sync, drive encryption via LUKS with TPM support, and a new command to trigger commit archive manually.

VyOS Project March 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Fri, 22 Mar 2024 17:08:46 GMT

Hello, Community!
While VyOS 1.4/Sagitta has taken its final shape, and we are working to smoothen any remaining sharp edges (especially in migration scripts), the upcoming 1.5/Circinus branch is the new frontier where we can go wild and experiment freely. Safe features from the current branch are still backported to 1.4/Sagitta.

Still, we already have non-back portable features — such as improvements to the new DHCP server implementation based on Kea rather than the now-obsolete ISC DHCP server.
In the last month, there were quite a few improvements, including the ability to set multiple peer addresses for unicast VRRP (a feature by our new core team member Natalia Solomko), segment routing support for static IPv6 routes, support for SSH public keys in the PKI subsystem, and more.

VyOS 1.4.0-epa2

daniil@sentrium.io (Daniil Baturin) — Fri, 15 Mar 2024 00:36:40 GMT

Hello, Community!

VyOS 1.4.0-epa2 image is now available to customers and contributors (and everyone can build it from the sagitta branch of vyos-build, of course)! If you are new to VyOS, the "EPA" part means "early production access" — the final stage when the release is already used in production by a subset of users and on our proper infrastructure. This is the second release on the path to the final stabilization of the 1.4.0/Sagitta branch. It mainly features bug fixes but contains minor features

VyOS Project February 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 08 Feb 2024 07:21:23 GMT

Hello, community!
Curious what we've been up to in January? Our main focus is the final stabilization of the 1.4.0/Sagitta branch, and we will soon make the first EPA (Early Production Access) release — after that point, config syntax and behavior will not change in the 1.4 LTS release lifetime, and all radical changes will go to the upcoming 1.5/Circinus branch. Quite a lot of things are happening in the development branch, and many of those improvements are also backported to 1.4, including support for Let's Encrypt (or any other ACME provider) in PKI, multiple BGP improvements, and an option to disable Spectre/Meltdown mitigations from the CLI.

VyOS 1.4.0-rc3 release candidate

daniil@sentrium.io (Daniil Baturin) — Mon, 22 Jan 2024 07:11:13 GMT

Hello, Community!

VyOS 1.4.0-rc3 image is now available for everyone to download and test. We are grateful to everyone who helped us test previously release candidate images. Thanks to your bug reports and pull requests, we fixed many bugs, including two that could cause the system to lock up at startup or shut down! We also did a lot of internal refactoring in January, but this image still has quite a few new features, including support for obtaining certificates from ACME providers (such as Let's Encrypt), IPv6 segment routing, IS-IS fast reroute, and more. We are also taking the last chance to make configuration syntax changes that will make the config look cleaner and make it easier to implement new features, so please pay attention to the config syntax and behavior changes section of this post. There's one feature from the rolling release time that we decided to remove due to its design flaws and the fact that it doesn't fit the scope of a router OS well — HTTPS virtual host configuration support.

VyOS Project January 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 11 Jan 2024 21:26:57 GMT

Hello, Community!

The new monthly development update is here. Quite a few of these changes were already mentioned in the 1.4.0-rc1 release candidate post, but quite a few are exclusive to the rolling release — at least for now until they are well-tested. Among them is a migration of the DHCP server from ISC DHCPD to Kea, a new NAT64 implementation based on Jool, and configuration rollback without reboot — read on for details!

VyOS 1.4.0-rc1 release candidate

daniil@sentrium.io (Daniil Baturin) — Fri, 22 Dec 2023 05:18:48 GMT

Hello, community! Exactly two years ago we made the VyOS 1.3.0/Equuleus LTS release. Now, after two years of development, the upcoming 1.4.0/Sagitta release has taken its final shape and we are happy to announce the first release candidate. The 1.4.0-rc1 image is now available for everyone to download and test and will become the new LTS release when real-world testing proves that it's stable and free of unexpected regressions.

VyOS 1.3.5 security release

daniil@sentrium.io (Daniil Baturin) — Fri, 15 Dec 2023 19:37:19 GMT

Hello, Сommunity!

VyOS 1.3.5/Equuleus LTS release is now officially available for download for customers and contributors. It includes fixes for two security vulnerabilities and a few bugs. One vulnerability is related to the HTTPS API, and the other is in the BGP daemon. Even though they require specific configurations and conditions to exploit, we encourage everyone to update. Images for on-premises deployment and for upgrade are already available, and cloud marketplace listing updates are in progress.

VyOS Project December 2023 update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 30 Nov 2023 23:43:38 GMT

Hello, community! While we are now mostly busy with stabilizing the future 1.4.0 LTS release and also working on the new 1.3.5 maintenance release, there's still news to share about the current developments. During the last month, we've added Git support for commit archive, VNI filtering for VXLAN, and made a bunch of other improvements — read on for details!

VyOS LTS Support Policy

yuriy@sentrium.io (Yuriy Andamasov) — Wed, 15 Nov 2023 05:20:54 GMT

Hello, Community!

Now that the 1.3.4 LTS release is over and the upcoming 1.4.0 release is on its path to the first early production access release, we'd like to clarify the support policy for our LTS releases to help support customers plan their updates. In short, the three latest minor versions in each LTS release line are supported unconditionally, but if your version is older, we will likely ask you to upgrade before we can take further steps to help you with your issues.

VyOS Project November 2023 update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Wed, 08 Nov 2023 05:15:02 GMT

Hello, Community!

Curious what we've been up to lately?

Here's the update for November: it includes the removal of the long de-facto deprecated cluster feature (all cluster configs will be migrated to VRRP) and multiple additions, such as interface group support in NAT rules, operational mode commands to display SSH key fingerprints, MRU settings for PPPoE, loop-free alternative support for IS-IS, EVPN ESI multihoming, and more.

What's left to do for 1.4 LTS? New zone-based firewall and more

daniil@sentrium.io (Daniil Baturin) — Thu, 12 Oct 2023 20:34:03 GMT

Hello, Community!

Many people ask us when VyOS 1.4 will become a stable release. Some people have even started using development builds of the Sagitta branch in production — we'd like to remind everyone that you should only do it at your own risk, but we are certainly happy that we added so many features that people want to use. We assure you that 1.4 is well on track to become a new LTS by the end of this year. A few things are still missing, though — let's discuss them.

VyOS Project October 2023 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 05 Oct 2023 19:06:16 GMT

Hello, Community!

September was quite the hectic month for us, not only because of the upcoming release of VyOS 1.4 Sagitta (you may have noticed the new branch in the Git repository), but also because development on the trunk is continuing at full throttle, as you can tell from the list below.

What's coming for OpenVPN in VyOS 1.4?

daniil@sentrium.io (Daniil Baturin) — Tue, 26 Sep 2023 13:00:00 GMT

Hello, Community!

OpenVPN is one of the oldest open-source VPN protocols and implementations. It took the world by storm in the early 2000s because it was a huge improvement over VPN solutions of the time: PPTP that used a patent-encumbered cipher with questionable security; IPsec or L2TP/IPsec, which was hard to set up and very unfriendly to NATed and poorly configured networks; and a variety of proprietary SSL VPNs. OpenVPN was trivial to set up on the client — give it a single config file, and you are done, and it was open-source and available for all popular OSes.

VyOS Project September 2023 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 14 Sep 2023 18:43:26 GMT

Hello, community!

We're back with an end-of-summer update. We've been quite busy cleaning up legacy code, fixing bugs, and adding remaining features planned for the future 1.4.0 (Sagitta) LTS release that we hope to finish by 2024. Soon, we'll create a sagitta branch in our git repositories to stabilize the codebase that will become the new 1.4.0 LTS release. Rolling release development will continue in the current branch, and the future 1.5 LTS release will be "Circinus". Meanwhile, the minor release 1.3.4 of the Equuleus branch is in its final stages, and we'll soon build and release its images. Here's what's happened in August.

VyOS Project August 2023 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 10 Aug 2023 12:00:00 GMT

Hello, Сommunity!
Summer may be supposed to be a quiet season, but there's quite some work that VyOS maintainers and contributors managed to do in July, nonetheless. There are many valuable features in the rolling release now, including the kernel-mode OpenVPN DCO offload support that can make tunnels multiple times faster, OSPF graceful restart parameters, mirror mode support for the DDoS protection services, and more.

VyOS Project July 2023 Update

daniil@sentrium.io (Daniil Baturin) — Fri, 14 Jul 2023 12:48:28 GMT

Hello, Сommunity!

We hope you enjoy your summer!

In June, there was a lot of work done on VyOS. Why is this update so short, then?

One reason is that VyOS 1.4 is now on the way to becoming the new LTS release, and there's a lot of work on smoke tests and refactoring that is required to stabilize it.

However, a few long-awaited features also landed in the rolling release in June, including TACACS+, config sync, and initial support for accelerated networking with VPP. Let's review the user-visible changes in the 1.3 LTS branch and the rolling release.

VyOS project June 2023 update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Mon, 05 Jun 2023 23:45:32 GMT

Hello, community!

We constantly develop VyOS, even if we don't always share updates. Currently, we're focused on the 1.3.3 LTS release, which should be out these days

In the meantime, here's a summary of what's been happening in the project lately.

VyOS project April 2023 update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 27 Apr 2023 15:19:59 GMT

Hello, Community!
We haven't posted development updates lately, but that's just because there were lots of things to do, not because development has slowed down. There have been lots of improvements. Let's summarize what happened in March.

VyOS in 2023: multi-year subscriptions, future plans, and more

yuriy@sentrium.io (Yuriy Andamasov) — Sun, 05 Mar 2023 23:19:04 GMT

Hello, Community!

This mail contains essential information about subscriptions.

We are already two months into 2023 and expect this year to impact the VyOS project significantly!

Not only is the project passing ten years mark, and a 1.4 LTS release is planned for this year, but more crucial things are also happening in the background.

Since we made our first commercially-supported 1.2.0 LTS release in 2019, VyOS has steadily grown in all dimensions. We aren’t only talking about our revenue, customer count, and other business performance indicators — our team is growing, our open-source user and contributor community is also growing, and thus our responsibility is growing.

When we started, we aimed to have a network operating system that we could use and improve for our needs. A few years later, VyOS was adopted by companies that we thought would never look at it, in roles we never thought it would fulfill, from critical communication infrastructure to network engineer education and training.

That brings a new set of challenges — how to keep VyOS available, open-source, and sustainably funded; how to make it better suited to environments where it’s now taking hold; and how to ensure that its development direction reflects the best interests of our Community.

So here are a few things we have in the pipeline this year.

VyOS Project November 2022 Update

daniil@sentrium.io (Daniil Baturin) — Wed, 23 Nov 2022 10:22:49 GMT

Hello, community!

If you are wondering what we've been up to — we are on track to bring the 1.4/Sagitta release to its final shape and we are pretty sure next year we'll focus on stabilizing it and preparing it to become the new LTS release.

There are still a lot of things to do and our main focus is now on the implementations of firewall and QoS and on the new-style operational mode that automatically makes all functionality available to the CLI and to the GraphQL API without any additional effort.

However, there are multiple smaller features and fixes as well — read on for details!

VyOS Project July 2021 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Sun, 08 Aug 2021 16:55:57 GMT

Hi again!

It's time for the progress update for the month of July. We are still on the road to the 1.3.0-epa1 release that will mark the transition of the 1.3/Equuleus branch from experimental to stable and will serve as a platform for ironing out the last bugs.

Past 1.3.0-epa1 there will not be any big CLI changes (only extensions), so we are making the last such changes now. The work on the future 1.4 branch hasn't stopped either. Interested in details?

Read on!

PKI and IPSec IKEv2 remote-access VPN

christian@poessinger.com (Christian Pössinger) — Sun, 01 Aug 2021 20:30:39 GMT

Hello!

VyOS was always strong in supporting a multitude of different VPN techniques ranging from old school IPsec site-to-site/DMVPN setups to new kids on the block like SSTP, OpenVPN, and WireGuard. Today I want to present a new feature that was added to VyOS in the current 1.4 (Sagitta) development cycle — IKEv2 remote-access VPN.

Given the fact this is actually not a "new" technology, it is still a very interesting one as it is natively supported on all major operating systems!

VyOS Project May/June 2021 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 22 Jul 2021 15:48:10 GMT

Hello everyone,

it's time for the progress update for the months of May and June.

We've been a bit too busy with working on the code that we forgot to post a progress update in June—time to fix it! In short: the 1.3 release is on track to become the new LTS in the late summer or early autumn, 1.2.x maintenance continues, and the 1.4 release is gaining new cool features that we can later backport to 1.3.

The future of VyOS, part 1: release schedule

daniil@sentrium.io (Daniil Baturin) — Sun, 06 Jun 2021 21:27:55 GMT

Hello Community!

The future of VyOS is bright!

And in this post series, we will talk about our plans for the VyOS Project. This first post focuses on the most immediately important part: the release schedule and support timeline of VyOS 1.2.x and 1.3.x.