VyOS Platform Blog

When VyOS CLI isn't enough

Sometimes a particular configuration option is supported by the software that VyOS uses, but the CLI does not expose it. Since VyOS is open source, you can always fix that, but ...

DNS forwarding in VyOS

04/13/18 14:00 By: Daniil Baturin

A lot of small networks do not have their own DNS server, but it's not always desirable to just leave hosts to use an external third-party server either, that's why we've had DNS ...

Loopback and the dummies

04/06/18 13:43 By: Daniil Baturin

"There is no place like 127.0.0.1" the old saying goes. While the loopback interface is most often seen as the interface where the 127.0.0.1 address is assigned by default and ...

Take a third option: site to site OpenVPN

03/30/18 12:38 By: Daniil Baturin

I've written a long series of post about setting up IPsec VPNs between NATed machines. As you've already seen, with some creative configuration it's possible, but is it always ...

How to use AS path matching in your BGP policies

03/23/18 12:13 By: Daniil Baturin

AS path is one of the most fundamental attributes of a (e)BGP advertisments. Its length is the first parameter in the best path selection algorithm (shorter is better), and it's ...

Firewall groups today and tomorrow

03/16/18 14:36 By: Daniil Baturin

Substantial work has been done by Marian Tudosoiu to bring IPv6 firewall groups to the current implementation of firewall configuration scripts even before we give it a complete ...

The night of living dead protocols: RIPv2

03/09/18 15:43 By: Daniil Baturin

RIP's name seems to have anticipated its ultimate fate. It used to stand for Routing Information Protocol before newer and better protocols killed it. Still, most routers in the ...

IP tunnels I have known and loved

02/23/18 12:26 By: Daniil Baturin

Today we'll talk about the "classic" IP tunneling protocols. GRE is often seen as a one size fits all solution when it comes to classic IP tunneling protocols, and for a good ...

NAT with a thousand faces

02/16/18 12:35 By: Daniil Baturin

The familiar use cases for NAT are source NAT/masquerade for allowing private subnets access to the Internet, and port forwarding from the Internet to a host in a private ...

Configuration versioning and archiving in VyOS

02/10/18 18:11 By: Daniil Baturin

Last time I promised "node copying/renaming, node comments, and other little known features of the VyOS CLI", but the post actually only mentioned copying/renaming and comments, ...