VyOS

VyOS
Name	VyOS
Developer	VyOS Project
Family	Debian
Source model	Open source
Latest release	1.4 (as of 2026)
Kernel type	Monolithic (Linux)
Ui	Command-line interface
License	GNU General Public License

VyOS is an open-source network operating system that provides routing, firewall, and VPN functionality on x86_64 platforms and in virtualized environments. It originated as a community-driven fork of proprietary and academic network distribution projects and has evolved into a professional-grade appliance used by service providers, enterprises, and cloud operators. VyOS integrates a traditional command-line configuration model with modern packaging and virtualization support to serve as a flexible network building block.

History

VyOS traces its lineage to community forks and commercial derivatives that emerged in the wake of changes to projects such as Vyatta and distributions influenced by Debian packaging practices. Early developers and contributors from networking and open-source communities shaped its roadmap alongside events in the virtualization ecosystem, including the growth of Amazon Web Services and OpenStack. The project matured through releases aligned with upstream Linux kernel cycles and collaborations with vendors participating in conferences like Interop and KubeCon. Over time, governance structures and release engineering were influenced by models used by projects such as FreeBSD and Ubuntu.

Features

VyOS implements a broad set of networking features comparable to commercial appliances. It provides dynamic routing protocols including Border Gateway Protocol, Open Shortest Path First, and Intermediate System to Intermediate System for interoperability with infrastructure from vendors like Cisco Systems and Juniper Networks. For perimeter control it supports stateful firewalling compatible with concepts from iptables and integration with IPsec and WireGuard for VPN tunnels used by organizations such as Cloudflare and Google. High availability is achieved with protocols and mechanisms inspired by VRRP and clustering approaches used by Haproxy deployments. For traffic control it offers QoS features referenced in standards from bodies like IETF and measurement tools common in research at RIPE NCC.

Architecture and Design

VyOS is built on a Linux userland influenced by Debian packaging; its architecture separates a transactional configuration datastore from runtime processes. The system uses a unified configuration model that maps to Linux kernel subsystems such as the netfilter framework and routing daemons interoperating with FRRouting codebases. Design principles echo practices from projects like systemd for service orchestration and container-native patterns popularized by Docker and Kubernetes for deployment. The image format and init system enable operation on hypervisors including KVM, VMware ESXi, and Microsoft Hyper-V as well as cloud platforms such as Amazon EC2 and Google Cloud Platform.

Installation and Deployment

VyOS images are distributed as ISO and cloud images that follow practices familiar to administrators experienced with Debian and virtualization providers such as Proxmox VE. Installation can target bare metal servers supplied by vendors like Dell Technologies and Hewlett Packard Enterprise or be deployed as virtual appliances on Xen and VMware. The platform supports automated provisioning workflows integrated with orchestration tools used in data center automation such as Ansible, Terraform, and SaltStack. For large-scale rollout, operators adopt techniques similar to those in NetOps teams at companies including Netflix and Facebook.

Configuration and Management

VyOS exposes a hierarchical command-line interface that models configuration as commit/rollback transactions, reminiscent of interfaces from Juniper Networks and Arista Networks. Management workflows integrate with monitoring and observability stacks like Prometheus and Nagios and with logging systems used by enterprises such as Splunk and ELK Stack. Backup and version control strategies mirror patterns from Git-based configuration repositories and infrastructure-as-code pipelines employed by teams at Red Hat and Canonical. Authentication and access control can leverage external identity providers compatible with protocols defined by IETF and federations used by organizations such as Okta.

Use Cases and Deployments

VyOS is used in scenarios ranging from edge routing for telecommunications operators influenced by architectures from AT&T and Verizon to secure site-to-site VPN connectivity for remote offices at companies following practices by Siemens and Schneider Electric. Cloud-native deployments include transit routing in hybrid architectures similar to designs from VMware and Google Anthos, while service providers deploy VyOS in network function virtualization chains alongside virtualized appliances from Cisco and Juniper. Research institutions and universities that participate in projects coordinated by Internet2 adopt VyOS for prototyping network experiments and teaching routing protocols seen in curricula from MIT and Stanford.

Development and Community

The VyOS project is sustained by a community of contributors, commercial partners, and users who coordinate through mailing lists, code repositories, and events paralleling those used by projects such as GitHub and foundations like the Linux Foundation. Development follows release management practices and continuous integration approaches similar to those in large open-source projects such as Debian and OpenStack. Governance includes maintainers and working groups that align with open governance patterns seen in Apache Software Foundation projects. Training, consulting, and commercial support are provided by third parties and integrators with expertise comparable to vendors offering services for Cisco IOS and Juniper Junos.

Category:Network operating systems Category:Free routing software