
based on Debian 12, bringing the redesigned firewall, IKEv2 road warrior VPN, new PKI CLI, and many more improvements to the new LTS branch.

Seasoned Network operator & hobbyist Sysadmin. Dog dad. Beer lover. Aspiring Greybeard. Strong believer in community action.
Mastodon: @[email protected]
Blog: zealnetworks.ca
Sorry for the necro
yikess... sorry I'm reading this 7 months later, according to Lemmy.
If you still have this issue, feel free to DM me (here or via my mastodon handle, [email protected] )
VyOS 1.4.0 LTS release (EPA)
based on Debian 12, bringing the redesigned firewall, IKEv2 road warrior VPN, new PKI CLI, and many more improvements to the new LTS branch.
VyOS 1.4.0 is finally here as a full LTS release (although, it's early production access).
So many great features are highlighted in the post. I've been using 1.4 images for quite some time, with great success, in my labs. Looking forward to using this one more.
Congrats to the VyOS team.
Thanks for reporting back. Every time I looked at it's features, I came to roughly the same conclusions. Glad you actually did the work to try it, though.
Looks cool. Adding to my linkding. Thanks!
Okay.
Yet another reason to love VyOS
Yep, mainly because it's targetting DC/SP operators, rather than just the home
This is somehow worse than "five giant websites, each filled with screenshots of text from the other four"
You just hurt Huawei & Arista's feelings. /s
Cool project. Saving it for future reference, once I get a better handle on Rust.
Another vote for LibreNMS. I've been using it for a long time and it's just great for most small - relatively large orgs (you have to work a bit harder to deploy it properly / distributed, if you're going for a larger build).
I've also had Zabbix data piped into grafana and that was rock solid.... I just find that Zabbix requires quite a bit more finessing to get going, if you're not a seasoned sysadmin.
Sorry, I commented then went to Europe for 3 weeks; Browsing detox.
Symmetric NAT wouldn't be an issue for Nebula at all -- or WireGuard, as you know, but neither ZeroTier.
If you're worried about CGNAT, it has several ways to deal with it:
https://nebula.defined.net/docs/config/punchy/
The lighthouse can also act as a bastion/proxy and handle the connections for you, if your two nodes can't speak directly.
That being said.... if you're supporting other users, I think wireguard is the way to go.
I've been using Nebula for a long time. It's great and definitely worth your time to setup.
Pretty good suggestions here. Can't remember the last time I saw such quality replies on r/networking .
Wow.. I just uninstalled Boost after midnight. Looks like it will be back soon :)
VyOS 1.3.3 LTS released
Available now, with a new event handler, full container support, and more. Big thanks to all involved! #vyos #project #lts #release
Great project for anyone who likes what the Vyatta project was doing, or anyone who wants a more operator focused distribution of FRR.
Great job, everyone. Hoping this community becomes a lot more engaged & less superficial than the r/networking one.
Very dumb move by IBM Redhat
Jeff Geerling's take was good:
https://www.jeffgeerling.com/blog/2023/dear-red-hat-are-you-dumb
NANOG88 Last week. Notable talks
I went to NANOG88 last week. It was a great time, and I haven't been since 76 in DC.
They just posted the talks yesterday. Allow me to share some of my favourites I attended:
AWS deep dive ( architecture hints & hardware used in AWS):
New encrypted protocol stack (Mainly about QUIC pattern/flow detection & behaviour)
Those are just the ones that stood out. There are some other interes