VyOS Networks Blog

Hi again!

It's time for the progress update for the month of July. We are still on the road to the 1.3.0-epa1 release that will mark the transition of the 1.3/Equuleus branch from experimental to stable and will serve as a platform for ironing out the last bugs.

Past 1.3.0-epa1 there will not be any big CLI changes (only extensions), so we are making the last such changes now. The work on the future 1.4 branch hasn't stopped either. Interested in details?

Read on!

The overwhelming amount of work done in the last month was on IPsec and PKI. Check out Christian's detailed blog post on our new killer feature: IKEv2/IPsec remote-access/road-warrior VPN.

VyOS 1.3 Equuleus

Meanwhile, we're preparing Equuleus for its first stable release. It's most likely going to be ready by the end of this month.

Besides bugfixes and polish, there are some new features:

• WireGuard CLI underwent an overhaul and is much more flexible now.
• BGP CLI was greatly extended to provide more information (mainly show bgp).
• Support for macOS, Windows, and iOS profile generation for IPsec.
• ISIS supports IPv6 route redistribution.
• Solo option for neighbors in BGP.

VyOS 1.4 Sagitta

In addition to all this, we have a few more new features added to Sagitta in July:

• OpenVPN was migrated to the new PKI management interface.
• conntrack can now handle multiple failsafe links and the peer port is now configurable (previously hardcoded to 3780).
• VXLAN now supports VRF.
• You can now add SANs to PKI certificate requests.

VyOS 1.2 Crux

The development of 1.2.9 is underway. Since there are no major issues that need an immediate fix, we aren't going to rush it, so we are accumulating bug fixes, but if a major vulnerability is found, we are prepared to make a release in a short timeframe.

That's it for July. You can try all these new features on the latest rolling release for 1.3 and 1.4.

See you next time!