VyOS is a Debian Linux-based software router aimed at corporate audiences, service providers, and network geeks. VyOS is installed on hardware (amd64) or deployed as virtual machines. Configuration is usually performed via CLI.
VyOS includes:
- several dynamic routing protocols (BGP, OSPF, IS-IS, PIM-SM, Babel, …);
- multiple VPNs (OpenVPN, L2TP, WireGuard, IPsec, DMVPN…);
- a configuration system with commit/rollback and versioning functionality;
- remote HTTP API and scripting APIs for shell and Python.
VyOS was founded in 2013 as a fork of the Vyatta software router, which in turn implemented a syntax similar to Juniper JunOS.
The business model of the development company is selling LTS builds, technical support and custom development. Therefore, several years ago, free access to LTS builds was stopped, and then to their source codes. Access to the main code base from which LTS builds were formed was always available; automatic daily builds were also available. It is worth noting that LTS builds are provided free of charge to a number of non-profit companies and project contributors (who contributed to development, testing, writing documentation, as well as "evangelists" who spread information about the project - see conditions of participation).
From a technical point of view, openness is expressed in:
- availability of source codes;
- the ability to easily build your own ISO images (for example, you can install additional packages to suit your needs);
- availability of standard Linux tools and familiar utilities (grep, sed, awk, nmap, tcpdump, etc.);
- open development process (see vyos.dev).
VyOS Stream is a new approach to creating publicly available releases. Here's what the developers write:
In short, VyOS Stream is a snapshot of a new LTS release we are working on. Starting with VyOS 1.4, we create a new LTS release branch from the previous LTS, rather than the current one. This allows us to start from a known good state and avoid a lengthy stabilization process. Only features that have been tested during testing and have reached their final form are moved to the new LTS branch, to reduce the number of situations where features have to be radically reworked or removed from LTS releases.
New VyOS Stream images will be released approximately once per quarter.
So what are the goals of VyOS Stream?
First, it's a technology preview for users to see what's coming in the new LTS release and try it out.
Second, it's a preview for developers so they can spot potential API breaks and update their scripts, tools, management and monitoring system integrations, and other things they might have done - or add support for new VyOS features to those projects.
Third, quality control: sometimes bugs can only be found by testing images in a real environment, especially when it comes to hardware compatibility and interaction with other systems. VyOS Stream allows anyone to try out features intended for the next LTS release and see if they work well or need some work.
VyOS Stream (unlike nightly builds) provides some stability guarantees. Here's what the developers write:
Since VyOS Stream is a preview of the next LTS, it should follow the same approach as LTS releases. For example:
- If any feature is present in a VyOS Stream image, it can only be removed through the deprivation procedure.
- The configuration format is always compatible with previous versions (not changed or adjusted by migration scripts during boot).
- Internal APIs are compatible or follow a deprecation process. This way, you can be sure that if something works in the VyOS Stream image, it will work the same way when it becomes an official LTS. If something changes, a deprecation warning will appear. This should make it easier to plan deployments and maintain projects like the Ansible module collection.
OK, now let's figure out what VyOS Stream is not. Here's what the developers write:
VyOS Stream is not a free LTS release. We do not provide emergency bug fixes or security patches for it. If a critical vulnerability is found, we will fix it in the rolling release branch and LTS releases as soon as possible and provide patches to customers. However, Stream images with this fix may not appear until the next quarter.
We only provide a generic ISO image; no extra bells and whistles (like special builds for Azure - translator's note)
The VPP-based accelerated data panel deserves a special mention: it is not yet included in VyOS Stream, as its design and implementation are not considered stable enough and may change significantly. Thus, for now, VPP will only be included in rolling release images.
If you want stable images with hot fixes, you should purchase an LTS release through a subscription or one of the free subscriptions for those who qualify.
The main points of this release (1.5-2025-Q1), according to the developers, are:
- FQDN support for NAT rules;
- Conntrack logging daemon;
- the ability to listen to the PPPoE server on the interface and in all its VLANs;
- DHCP server based on Kea.
Source: linux.org.ru
