VyOS is a Debian Linux-based software router aimed at the enterprise audience, service providers, and network enthusiasts. VyOS can be installed on hardware (amd64) or deployed as virtual machines. Configuration is typically done through the CLI.
VyOS includes:
- several dynamic routing protocols (BGP, OSPF, IS-IS, PIM-SM, Babel, …);
- multiple VPN options (OpenVPN, L2TP, WireGuard, IPsec, DMVPN…);
- a configuration system with snapshot/rollback capabilities and versioning;
- remote HTTP API and scripting APIs for shell and Python.
VyOS was founded in 2013 as a fork of the Vyatta software router, which, in turn, implemented a syntax similar to Juniper JunOS.
The business model of the developing company relies on selling LTS builds, technical support, and custom development. Therefore, a few years ago, public access to the LTS builds was discontinued, and later, so was access to their source codes. Access to the main codebase, from which the LTS builds were formed, has always remained available; daily automated builds were also accessible. It is worth noting that LTS builds are provided free of charge to several non-profit organizations and contributors to the project (who have contributed to development, testing, documentation writing, as well as to 'evangelists' spreading information about the project — see participation terms).
From a technical standpoint, openness is expressed in:
- availability of source codes;
- the ability to easily build custom ISO images (for example, you can install additional packages to suit your needs);
- availability of standard Linux tools and familiar utilities (grep, sed, awk, nmap, tcpdump, etc.);
- an open development process (see vyos.dev).
VyOS Stream is a new approach to forming publicly available releases. Here's what the developers say:
In brief, VyOS Stream is a snapshot of the new LTS release we are working on. Starting from VyOS 1.4, we create a new LTS release branch from the previous LTS instead of the current one. This allows us to start from a proven stable state and avoid lengthy stabilization processes. Only those features that have already been tested during the release candidate phase and have reached their final form are carried over to the new LTS branch—to reduce the number of situations where features need to be radically redesigned or removed from LTS releases.
New VyOS Stream images will be released approximately quarterly.
So, what are the goals of VyOS Stream?
First, it serves as a technology preview for users—to see what will be included in the new LTS release and to try it out.
Second, it provides a preview for developers, so they can identify potential API breakages and update their scripts, tools, system management integrations, and other things they might have developed—or add support for new VyOS features in those projects.
Third, it serves as a quality control measure: sometimes bugs can only be discovered by testing images in real environments, especially concerning hardware compatibility and interaction with other systems. VyOS Stream allows anyone interested to try out features intended for the next LTS release and verify whether they work well or need adjustments.
VyOS Stream (unlike night builds) provides certain stability guarantees. Here's what the developers say:
Since VyOS Stream is a pre-release of the next LTS, it follows the same approach as LTS releases. For example:
- If any feature is present in the VyOS Stream image, it can only be removed through a deprecation process.
- The configuration format is always compatible with previous versions (the migration scripts are not changed or modified during loading).
- Internal APIs are compatible or follow a deprecation procedure. Thus, you can be confident that if something works in the VyOS Stream image, it will work the same way when it becomes the official LTS. If anything changes, a deprecation warning will be issued. This should simplify the planning for deployment and support of projects such as the Ansible module collection.
Okay, now let's understand what VyOS Stream is not. Here's what the developers say:
VyOS Stream is not a free LTS release. We do not provide emergency bug fixes or security patches for it. If a critical vulnerability is found, we will fix it in the rolling release and LTS branches as soon as possible and provide patch packages for clients. However, Stream images with this fix may only appear in the next quarter.
We only provide a standard ISO image; no additional enhancements (like special builds for Azure — translator's note).
A separate mention is warranted for the accelerated dashboard based on VPP: it is not yet included in VyOS Stream, as its design and implementation are not considered stable enough and may change significantly. Therefore, VPP will only be included in images for rolling releases for now.
If you need stable images with timely fixes, you should purchase the LTS release through a subscription or one of the free subscriptions available for those who meet the requirements.
The key points of this release (1.5-2025-Q1) according to the developers are:
- support for FQDN in NAT rules;
- Conntrack logging daemon;
- ability to listen to the PPPoE server on the interface and in all its VLANs;
- DHCP server based on Kea.
Source: linux.org.ru
