bgp: T7760: remove per vrf instance system-as node #4684
Merged
+598
−72
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
c-po
added
bp/sagitta
|
👍 |
|
✅ No issues found in unused-imports check.. Please refer the workflow run |
1 task
c-po
force-pushed
the
bgp-vrf-system-as
branch
3 times, most recently
from
0e800f1 to
20a4de7
Compare
|
This pull request has conflicts, please resolve those before we can evaluate the pull request. |
c-po
force-pushed
the
bgp-vrf-system-as
branch
from
20a4de7 to
2781519
Compare
|
Conflicts have been resolved. A maintainer will review the pull request shortly. |
Originating from the bug in T7665. To avoid potential issues down the line - and given that there's no compelling technical reason to retain the system-as CLI node under per-VRF BGP configuration, which cannot be achieved through alternative means - the maintainers have collectively decided to deprecate the following command: set vrf name <name> protocols bgp system-as <asn> Starting with VyOS 1.4.4, this CLI command will be considered deprecated. While it will still be accepted, it will no longer have any operational effect. A deprecation warning will be displayed at commit time, indicating that the BGP ASN from the global BGP configuration is now used instead. A migration script will handle the transition and perform the following actions: * Ensure a global BGP configuration exists; if not, initialize one. * Iterate over all configured VRFs to determine whether a BGP instance exists * For any insance, update the configuration to use the global system-as and apply the local-as ASN no-prepend replace-as option on all affected neighbors to preserve existing behavior. * If a neighbor is already configured with a local-as directive, that neighbor will be excluded from the migration process, as it already follows a custom configuration. * Add allowas-in per neighbor option. Required to not deny prefix received updates due to as-path contains our own global ASN.
VyOS 1.5 and onwards will no longer have the following CLI node available: set vrf name <name> protocols bgp system-as <asn>
c-po
force-pushed
the
bgp-vrf-system-as
branch
from
2781519 to
85fe32f
Compare
|
CI integration 👍 passed! Details
|
dmbaturin
approved these changes
Sep 15, 2025
|
There could be a case for per VRF Check Check BGP table: Will it be impossible to do it after this change? |
|
Your config Will be migrated to:
Yes - you can always adjust an AS path with a route-map and replace ASNs as much as you like |
|
@aapostoliuk, could you take a look at whether we have some similar configs that could be affected? Or are you OK with those changes? |
sever-sever
approved these changes
Sep 23, 2025
vyosbot
added
mirror-completed
and removed
mirror-initiated
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Change summary
Originating from the bug in T7665. To avoid potential issues down the line - and given that there's no compelling technical reason to retain the system-as CLI node under per-VRF BGP configuration, which cannot be achieved through alternative means - the maintainers have collectively decided to deprecate the following command:
set vrf name <name> protocols bgp system-as <asn>Starting with VyOS 1.4.4, this CLI command will be considered deprecated. While it will still be accepted, it will no longer have any operational effect. A deprecation warning will be displayed at commit time, indicating that the BGP ASN from the global BGP configuration is now used instead.
A migration script will handle the transition and perform the following actions:
and apply the local-as ASN no-prepend replace-as option on all affected
neighbors to preserve existing behavior.
will be excluded from the migration process, as it already follows a custom
configuration.
The following migration takes place - verified by smoketests
Types of changes
Related Task(s)
Related PR(s)
How to test / Smoketest result
Checklist: