VyOS - Blog

VyOS 1.5.0 GA release

daniil@sentrium.io (Daniil Baturin) — Tue, 31 Mar 2026 00:30:00 GMT

Hello, Community!

VyOS 1.5.0 LTS release is now finalized and its CLI is frozen for any non-compatible changes. Right now subscribers can already download the generic ISO and other on-premises flavors for x86-64 systems. If you are contributing to VyOS and want LTS release images for personal use, remember that we are happy to share them through contributor subscriptions.

Its development started in 2024 and followed the usual two-year LTS release cycle. In those two years we introduced multiple big features including a long-awaited accelerated dataplane and a huge amount of bug fixes.

Download the full release notes

VyOS Stream 2026.03 is available for download

daniil@sentrium.io (Daniil Baturin) — Fri, 20 Mar 2026 09:28:00 GMT

Hello, Community!

VyOS Stream 2026.03 is available for download now. It features multiple backports from the rolling release, including restored ability to directly upgrade from VyOS 1.3.x, a big rework of the VPP CLI, post-quantum pre-shared key support for IPsec, and multiple bug fixes.

VyOS Project March 2026 Update

daniil@sentrium.io (Daniil Baturin) — Tue, 10 Mar 2026 13:11:57 GMT

Hello, Community! The somewhat belated development update that covers changes in the VyOS rolling release in February is finally here. A lot of our attention in February went to VyOS Stream 2026.02, promoting VyOS at MWC Barcelona 2026, and the ongoing work on VyOS 1.5.0. However, there are quite a few updates in rolling that are worth a mention, including support for background operations in the HTTP API, multiple VPP CLI design improvements, and a whole bunch of bug fixes.

VyOS Stream 2026.02 is available for download

daniil@sentrium.io (Daniil Baturin) — Wed, 25 Feb 2026 12:32:59 GMT

Hello, Community!

VyOS Stream 2026.02 is available for download now. It features multiple backports from the rolling release, including TLS support for syslog, NAT66 source groups, IPFIX support in VPP, FRR and VPP updates, and over fifty bug fixes. It also makes the VPP configuration subsystem use DPDK as the default driver for NICs that support it and fall back to XDP automatically if needed — there is no need to and no option to configure the driver by hand anymore.

VyOS Project January 2026 Update

daniil@sentrium.io (Daniil Baturin) — Fri, 30 Jan 2026 09:00:00 GMT

Hello, Community! The belated development update for December 2025 and January 2026 is finally here.

We are getting closer to the 1.5 release but there's also quite a bit of work towards the future. In particular, there's good progress towards replacing the old configuration command completion mechanism with a VyConf-based equivalent, which will allow us to get rid of legacy command definition files eventually.

More immediate improvements include certificate-based authentication for OpenConnect, new operational commands for VPP, support for configuring watchdog timers, and multiple bug fixes.

VyOS Stream 2025.11 is available for download

daniil@sentrium.io (Daniil Baturin) — Mon, 17 Nov 2025 11:24:27 GMT

Hello, Сommunity!

VyOS Stream 2025.11 and its corresponding source tarball are now available for download. You can find them at the end of this post. This is the third VyOS Stream release on the way to the upcoming 1.5/Circinus LTS release and includes many of its features for you to test — most notably, a VPP-based accelerated dataplane.

VyOS Project October 2025 Update

daniil@sentrium.io (Daniil Baturin) — Tue, 04 Nov 2025 13:04:52 GMT

Hello, Community! The October update is here and it's dominated by bug fixes — as we are preparing to release the next VyOS Stream image on the way to the future VyOS 1.5 and working on the new 1.4.4 maintenance release as well. However, there are a few useful features as well, including support for DHCP options 82 (relay agent information) and 26 (interface MTU), containers health checks, and more.

Buckle Up! VyOS with VPP Is Coming in 1.5

taras@vyos.io (Taras Pudiak) — Mon, 22 Sep 2025 14:30:52 GMT

Happy September to everyone!

We haven't published an expanded blog post about VPP for a while, so it’s a good time to fulfill your curiosity and share the latest updates.

Over the past few months, we’ve made important progress: VPP has been promoted to a core feature, packaging and updates are now aligned with the base OS, smoke tests help catch regressions, fail‑safes have been added, and we’ve defined our initial hardware targets. Here’s what that means for you and what comes next.

VyOS Project July 2025 Update

daniil@sentrium.io (Daniil Baturin) — Wed, 06 Aug 2025 12:00:00 GMT

Hello, Community!

This month's update looks small — just a few small features and a bunch of bug fixes. One reason is the vacation season, of course. Some people (namely, I and Yuriy) went to DebConf 2025 rather than a vacation, where we heard a lot of interesting talks and had productive conversations with Debian developers — the biggest thing is that we will likely be able to contribute our improvements to live-build back to upstream which is great

The other reason is that there are lots of big developments in-progress that do not have visible effects yet, including an operational mode rework that will open up a pathway to operator-level user access controls; the ongoing work on rewriting the configuration backend; VPP support for VRRP, sFlow support for VPP, and BRAS protocols.

VyOS Stream 1.5-2025-Q2 is available for download

daniil@sentrium.io (Daniil Baturin) — Fri, 11 Jul 2025 18:55:23 GMT

Hello, Community!

VyOS Stream 1.5-2025-Q2 and its corresponding source tarball are now available for download. This is the second VyOS Stream release on the way to the upcoming VyOS 1.5 LTS, and it includes multiple bug fixes and improvements, including the new implementation of WAN load balancing, a general mechanism for allowing conntrack-unfriendly protocols in transparent bridge firewalls, a fix for CVE-2025-30095 (active MitM in console server SSH connections) that was already delivered in VyOS 1.4.2, and more.

VyOS Project May 2025 Update

daniil@sentrium.io (Daniil Baturin) — Thu, 29 May 2025 10:00:08 GMT

Hello, Community!

Quite a lot of things have happened since the last update we posted in April. In particular, we added the last bit of functionality that we considered a hard requirement for the VPP-based accelerated dataplane: support for VPP firewall. This marks the point when we consider the minimal viable product complete and we plan to ship it in a VyOS Stream release later this year, likely in Q3 — although you don't have to wait for it to play around with it, since it's already in the rolling release.

We are also making a very good progress towards replacing the legacy config backend — that work is still in the development phase and has no visible effects, and will take a while longer to complete, but it's underway.

When it comes to bugs, there are more than twenty recent fixes, including a fix for the nasty bug that led to routing protocol configuration loss if a protocol daemon crashed. Another important fix contributed by a community member makes VMware VMs suspend and resume correctly. Last but not least, the login prompt is no longer displayed in a bold font — that one took more time to track down than anyone hoped, and turned out to be caused by a truncated Systemd service name (ANSI control codes do not reset themselves on word boundaries, you know...).

There are multiple improvements in the base system as well. There's a new set ystem option reboot-on-upgrade-failure command that makes the system automatically reboot into the previous image if the configuration fails to load after upgrade. We hope it will help multiple people avoid unplanned trips to remove places — of course there should be out-of-band management everywhere for this case, but we all know that the real world is not perfect.

Other recently added features include support for IPv6 address in the datasets for firewall remote groups, BPDU guard and root guard supports for bridges, a new option to limit BRAS services (IPoE, PPPoE, and friends) to a specific number of CPU cores to avoid system overload, and more — read on for details!

VyOS Project April 2025 Update

daniil@sentrium.io (Daniil Baturin) — Wed, 30 Apr 2025 10:30:19 GMT

Hello, Community!

The April update is here — just at the end of April. We've been busy working on the VPP-based accelerated dataplane — you can watch that work in the repository and play with it in rolling release images. However, there are more features and bug fixes, and we are happy to see more active community contributors — there are quite a few community PRs that we merged lately, including DDNS update support for Kea, auto ignore prefixes for SLAAC, and more — read on for details!

VyOS Stream 1.5-2025-Q1 is available for download

daniil@sentrium.io (Daniil Baturin) — Thu, 20 Feb 2025 10:26:44 GMT

Hello, Сommunity!

VyOS Stream 1.5-2025-Q1 and its corresponding source tarball are now available for download. You may remember our announcement a while ago, but let us reiterate what VyOS Stream is and how it benefits the project and its community.

VyOS Project December 2024 Update

daniil@sentrium.io (Daniil Baturin) — Mon, 30 Dec 2024 15:56:27 GMT

Hello, Community!

The December update is here! The biggest highlight of this month is the 1.4.1 release but there was lots of work in the rolling release as well, both from the maintainers team and from our contributor community. One of the biggest news in the rolling release is that we are ready to update FRR — our routing protocol stack — to the latest 10.2 release. That will allow us to get rid of the legacy OpenNHRP daemon that we use for DMVPN and use FRR's built-in NHRP implementation, among other things.

Apart from that, there are many more bug fixes and improvements made in November and December, especially in QoS, IPoE server, and other areas — read on for details!

VyOS Project November 2024 Update

daniil@sentrium.io (Daniil Baturin) — Fri, 29 Nov 2024 14:06:15 GMT

Hello, Community!

The November update is here. This post is short, but not all we've done lately: many internal changes in the configuration system will soon significantly improve commit speeds and open up a path to even more significant improvements. The 1.4.1 release is around the corner, together with the first VyOS Stream image — all built by the new CI system that produces tarballs with the corresponding source code for every image. But now, let's focus on the changes we made in the rolling release in October.

VyOS Project October 2024 Update

daniil@sentrium.io (Daniil Baturin) — Wed, 30 Oct 2024 12:41:52 GMT

Hello, Community!

The October update, which summarizes our work in September, is here. The maintainers and community contributors were busy: four new features, multiple small improvements, and a few bug fixes. Then, there is secure boot implementation, but that will get its blog post when the last bits fall into place!

VyOS Project September 2024 Update

daniil@sentrium.io (Daniil Baturin) — Sun, 22 Sep 2024 21:42:55 GMT

Hello, Community!

Summer is over now, and many people are returning to their routines. Check out what we've done in the last month of the summer: that includes a few small config syntax changes, multiple improvements in OpenVPN, an API endpoint for importing PKI objects, and a whole bunch of bug fixes!

VyOS Project August 2024 Update

daniil@sentrium.io (Daniil Baturin) — Tue, 27 Aug 2024 00:12:32 GMT

Hello, Community!

This month's development news includes many bug fixes and features, including remote access IPsec using VTI interfaces, support for WPA enterprise clients, and machine-readable tech support reports.

VyOS Project July 2024 Update

daniil@sentrium.io (Daniil Baturin) — Fri, 26 Jul 2024 20:26:12 GMT

Hello, Сommunity!

This summer is anything but a slow news season, but if you need a break from world events, here's a VyOS development update for you — a purely technical read. Our development efforts in June brought a reorganized (and much faster) config syntax migration subsystem, improvements in QoS and reverse proxy; support for raw firewall tables, and more.

Introducing VyOS Stream — a next step in the VyOS project evolution

daniil@sentrium.io (Daniil Baturin) — Thu, 27 Jun 2024 18:29:02 GMT

Hello, Community!

Historically, we had two types of branches — rolling (current) and LTS branches. When we started working on a new LTS release, its branch would be branched off directly from the current one, but it wouldn’t be frozen for experimental changes until very late in the development process. Only when the upcoming LTS release came to a full freeze would any new features be limited to occasional, knowingly safe backports.
However, that approach created significant problems, both technical and social. Now, we are going to present our solution to both.

VyOS Project June 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 20 Jun 2024 18:56:22 GMT

Hello, Community!

Now that VyOS 1.4.0/Sagitta is officially available as a new LTS release, it's time to start looking into the future again — what will VyOS 1.5/Circinus be like? Rolling release images from June already include a big and long-awaited feature, thanks for a new contributor Maxime Thiebaut — support for Suricata IDS.

Another highlight is that the UPnP service was removed due to issues with its implementation and the prospect of maintainability. Multiple smaller improvements are also made in CGNAT, L2TP, bonding, and other areas—read on for details!

VyOS Project May 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Tue, 21 May 2024 10:24:24 GMT

Hello, Community!

Lately, we have all been busy preparing the 1.4.0-epa3 release that will transition to GA status in two weeks if no serious issues are found, and its configuration syntax and APIs will be completely frozen for all incompatible changes or require migration scripts.

Since the current branch (future Circinus/1.5.0 release) and Sagitta/1.4 codebases are so similar at the moment, most changes we made in the current branch, already backported to Sagitta and available in 1.4.0-epa3, such as the ability to run SSH server in multiple VRFs, DHCP server active-active high availability mode, and reverse proxy server health check. However, we are already making experimental changes that will stay in 1.5 for quite a while before we can decide if they are ready for backporting to an LTS branch, such as an initial implementation of CGNAT.

Introducing the image build flavor system

daniil@sentrium.io (Daniil Baturin) — Fri, 10 May 2024 09:35:46 GMT

Hello, Community!

Building customized images of VyOS for different platforms has become much easier now. The last bit of the revamped build flavor system has fallen into place: the ability to build image formats other than ISO. Some other options, such as the ability to include custom packages and files, have been there for a while, but recently we fixed a few issues with them. Let's review those improvements and see how to use them.

VyOS Project April 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 11 Apr 2024 19:40:48 GMT

Hello, Сommunity!

In March, we made many minor improvements to existing features. Still, there are some significant features: many new services are available for configuration sync, drive encryption via LUKS with TPM support, and a new command to trigger commit archive manually.

VyOS Project March 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Fri, 22 Mar 2024 17:08:46 GMT

Hello, Community!
While VyOS 1.4/Sagitta has taken its final shape, and we are working to smoothen any remaining sharp edges (especially in migration scripts), the upcoming 1.5/Circinus branch is the new frontier where we can go wild and experiment freely. Safe features from the current branch are still backported to 1.4/Sagitta.

Still, we already have non-back portable features — such as improvements to the new DHCP server implementation based on Kea rather than the now-obsolete ISC DHCP server.
In the last month, there were quite a few improvements, including the ability to set multiple peer addresses for unicast VRRP (a feature by our new core team member Natalia Solomko), segment routing support for static IPv6 routes, support for SSH public keys in the PKI subsystem, and more.

VyOS Project January 2024 Update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 11 Jan 2024 21:26:57 GMT

Hello, Community!

The new monthly development update is here. Quite a few of these changes were already mentioned in the 1.4.0-rc1 release candidate post, but quite a few are exclusive to the rolling release — at least for now until they are well-tested. Among them is a migration of the DHCP server from ISC DHCPD to Kea, a new NAT64 implementation based on Jool, and configuration rollback without reboot — read on for details!

VyOS Project December 2023 update

e.altunbas@vyos.io (Erkin Batu Altunbas) — Thu, 30 Nov 2023 23:43:38 GMT

Hello, community! While we are now mostly busy with stabilizing the future 1.4.0 LTS release and also working on the new 1.3.5 maintenance release, there's still news to share about the current developments. During the last month, we've added Git support for commit archive, VNI filtering for VXLAN, and made a bunch of other improvements — read on for details!