Vyatta

Last updated
Vyatta Software Technology
Type Subsidiary
Industry LAN, wide area network, security appliance, Internet security, network security
Founded2005;18 years ago (2005)
Products Router, firewall, VPN, virtual router, virtual firewall, DHCP, network address translation, web caching, network virtualization
Parent Ciena
Website www.vyatta.com   OOjs UI icon edit-ltr-progressive.svg

Vyatta is a software-based virtual router, virtual firewall and VPN product for Internet Protocol networks (IPv4 and IPv6). A free download of Vyatta has been available since March 2006. The system is a specialized Debian-based Linux distribution with networking applications such as Quagga, OpenVPN, and many others. A standardized management console, similar to Juniper JUNOS or Cisco IOS, in addition to a web-based GUI and traditional Linux system commands, provides configuration of the system and applications. In recent versions of Vyatta, web-based management interface is supplied only in the subscription edition. However, all functionality is available through KVM, serial console or SSH/telnet protocols. The software runs on standard x86-64 servers.

Contents

Vyatta is also delivered as a virtual machine file and can provide (vRouter, vFirewall, VPN) functionality for Xen, VMware, KVM, Rackspace, [1] SoftLayer, [2] and Amazon EC2 virtual and cloud computing environments. As of October, 2012, Vyatta has also been available through Amazon Marketplace and can be purchased as a service to provide VPN, cloud bridging and other network functions to users of Amazon's AWS services.

Vyatta sells a subscription edition that includes all the functionality of the open source version as well as a graphical user interface, access to Vyatta's RESTful API's, Serial Support, TACACS+, Config Sync, System Image Cloning, software updates, 24x7 phone and email technical support, and training. Certification as a Vyatta Professional is now available. Vyatta also offers professional services and consulting engagements.

The Vyatta system is intended as a replacement for Cisco IOS 1800 through ASR 1000 [3] series Integrated Services Routers (ISR) and ASA 5500 security appliances, with a strong emphasis on the cost and flexibility inherent in an open source, Linux-based system [4] running on commodity x86 hardware or in VMware ESXi, Microsoft Hyper-V, Citrix XenServer, Open Source Xen and KVM virtual environments.

In 2012, Brocade Communications Systems acquired Vyatta. In April, 2013, Brocade renamed the product from the Vyatta Subscription Edition (VSE) to the Brocade Vyatta 5400 vRouter. [5] The latest commercial release of the Brocade vRouter is no longer open-source based.

In June 2017, Brocade sold Vyatta Software Technology to AT&T Communications. [6] [7]

In September 2021, AT&T supplier Ciena Corporation announced an agreement to acquire the Vyatta talent and assets. [8]

Vyatta Core

The free community Vyatta Core software (VC) was an open source network operating system providing advanced IPv4 and IPv6 routing, stateful firewalling, secure communication through both an IPSec based VPN as well as through the SSL based OpenVPN. [9]

In October 2013, an independent group started a fork of Vyatta Core under the name VyOS. [10]

In March 2018, ATT released a new open source project based on the proprietary Brocade version of Vyatta under the name DANOS. [11]

Release history

Version numberRelease dateStatusBranchBased onKernel usedMajor changesNotes
6.6 [12] May 2013CurrentDaisyPacifica3.3.8DMVPN, Multicast Routing, SNMPv3
6.5Oct. 2012PacificaOxnard3.3Support for Hyper-V, policy based routing, Virtual Tunnel Interface (VTI), BGP Multipath support, and IPsec for IPv6, 64-bit supportIPS is removed from Vyatta Core.
6.4April 2012HistoricalOxnardNapa3.0.23reorganizing operational mode commands, better support of VRRP, Global stateful behavior for firewall,Connection Tracking Enhancements, Enhanced Connection Sync Functionality - Support for seamless failover of FTP, SIP and H.323 connections, NAT Enhancements, CLI Enhancements, Upgrade improvements for bare-metal installations (VSE only), Virtualization upgrade improvements (VSE only), VMware vSphere 5 support (VSE only), XenServer 6.0 support (VSE only), expanded GUI with additional tabs – Dashboard and Statistics. (VSE only)
6.3 [13] August 2011NapaMendocino2.6.37x.509 for IPsec, improved user management for remote access VPN, OpenVPN sessions restart, OpenVPN server bridging, migration use volatile data apart from config between images, file management commands.Web GUI is removed from Vyatta Core. First release with experimental 64-bit builds.
6.2 [14] March 2011MendocinoLarkspur2.6.35Build on Debian Squeeze (vs 6.1 based on Lenny), configurable serial console lines, confirmed commits, configuration archive and possibility to view changes, scripting API, IPv6 DNS resolver, OpenVPN enhancements, improved Configuration Management
6.1 [15] August 2010LarkspurKenwood2.6.32DHCPv6, stateful firewall failover, LLDP, configuration items (de)activating and commenting, OpenVPN bridging, IPv6 BGP.
6.0 [16] April 2010KenwoodIsla Vista, Jenner2.6.31IPv6 firewall, IPv6 BGP, OSPFv3, firewall groups, binary installation, p2p traffic control, NetFlow, drivers for serial interfaces removed.Vyatta Community renamed to Vyatta Core, subscription and community branches merged [17]
5.0.2 [18] March 2009Isla VistaHollywood, Hollister [19] 2.6.26OpenVPN, Ethernet bonding, web proxy, url filtering (Squish), IPS (Snort), dns forwarding, wireless modems, RAID1, basic IPv6 support, serial interfaces full support.
4.1 [20] September 2008HollywoodGlendale2.6.24BGP MD5 authorization, experimental IPS, ADSL interfacesIncremental update for 4.0, never released as a separate distro.
4.0 [21] April 2008GlendaleEureka [22] 2.6.23New CLI, PPTP and L2TP VPN servers, PPPoE client, DHCP client, WAN load balancing, ECMP (Equal Cost Multipath Routing), user roles. XORP replaced with quagga.
3.0 [23] October 2007DublinCamarillo2.6.20IPsec VPN, multilink PPP, BGP enhancements.
2.2September 2007CamarilloBakersfield ?Probably an update set for 2.0.
2.0 [24] Feb 2007Alameda1.1.12.6.16Multiport T1/E1 cards, BGP performance improved, experimental IPv6 and multicast routing.
1.1 ? ? ?The first Debian based release. [25]
1.0 [26] 24 July 2006 ??
0.5 [26] 6 April 20062.6.12

Related Research Articles

A network operating system (NOS) is a specialized operating system for a network device such as a router, switch or firewall.

<span class="mw-page-title-main">Xen</span> Type-1 hypervisor

Xen is a free and open-source type-1 hypervisor, providing services that allow multiple computer operating systems to execute on the same computer hardware concurrently. It was originally developed by the University of Cambridge Computer Laboratory and is now being developed by the Linux Foundation with support from Intel, Citrix, Arm Ltd, Huawei, AWS, Alibaba Cloud, AMD, Bitdefender and epam.

fli4l

fli4l is a Linux distribution, actively developed by German developers since 2000. The projects main task is to provide a small Linux system that turns almost every machine into a router. The distribution can run from a floppy disk and was created with the aim of simple configuration and support for older hardware.

OpenVPN is a virtual private network (VPN) system that implements techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It implements both client and server applications.

Cisco PIX was a popular IP firewall and network address translation (NAT) appliance. It was one of the first products in this market segment.

<span class="mw-page-title-main">LogMeIn Hamachi</span> Virtual private network application

LogMeIn Hamachi is a virtual private network (VPN) application developed and released in 2004 by Alex Pankratov. It is capable of establishing direct links between computers that are behind network address translation (NAT) firewalls without requiring reconfiguration. Like other VPNs, it establishes a connection over the Internet that emulates the connection that would exist if the computers were connected over a local area network (LAN).

<span class="mw-page-title-main">Kernel-based Virtual Machine</span> Virtualization module in the Linux kernel

Kernel-based Virtual Machine (KVM) is a free and open-source virtualization module in the Linux kernel that allows the kernel to function as a hypervisor. It was merged into the mainline Linux kernel in version 2.6.20, which was released on February 5, 2007. KVM requires a processor with hardware virtualization extensions, such as Intel VT or AMD-V. KVM has also been ported to other operating systems such as FreeBSD and illumos in the form of loadable kernel modules.

In computing, network virtualization is the process of combining hardware and software network resources and network functionality into a single, software-based administrative entity, a virtual network. Network virtualization involves platform virtualization, often combined with resource virtualization.

A virtual security switch is a software Ethernet switch with embedded security controls within it that runs within virtual environments such as VMware vSphere, Citrix XenDesktop, Microsoft Hyper-V and Virtual Iron. The primary purpose of a virtual security switch is to provide security measures such as isolation, control and content inspection between virtual machines.

Nimbus is a toolkit that, once installed on a cluster, provides an infrastructure as a service cloud to its client via WSRF-based or Amazon EC2 WSDL web service APIs. Nimbus is free and open-source software, subject to the requirements of the Apache License, version 2.

libvirt Management tool

libvirt is an open-source API, daemon and management tool for managing platform virtualization. It can be used to manage KVM, Xen, VMware ESXi, QEMU and other virtualization technologies. These APIs are widely used in the orchestration layer of hypervisors in the development of a cloud-based solution.

CloudStack is open-source Infrastructure-as-a-Service cloud computing software for creating, managing, and deploying infrastructure cloud services. It uses existing hypervisor platforms for virtualization, such as KVM, VMware vSphere, including ESXi and vCenter, XenServer/XCP and XCP-ng. In addition to its own API, CloudStack also supports the Amazon Web Services (AWS) API and the Open Cloud Computing Interface from the Open Grid Forum.

In computer networking, Cisco ASA 5500 Series Adaptive Security Appliances, or simply Cisco ASA, is Cisco's line of network security devices introduced in May 2005. It succeeded three existing lines of popular Cisco products:

OpenConnect is a free and open-source cross-platform multi-protocol virtual private network (VPN) client software which implement secure point-to-point connections.

<span class="mw-page-title-main">SoftEther VPN</span> Open-source VPN client and server software

SoftEther VPN is free open-source, cross-platform, multi-protocol VPN client and VPN server software, developed as part of Daiyuu Nobori's master's thesis research at the University of Tsukuba. VPN protocols such as SSL VPN, L2TP/IPsec, OpenVPN, and Microsoft Secure Socket Tunneling Protocol are provided in a single VPN server. It was released using the GPLv2 license on January 4, 2014. The license was switched to Apache License 2.0 on January 21, 2019.

<span class="mw-page-title-main">Open vSwitch</span> Virtual network switch

Open vSwitch, sometimes abbreviated as OVS, is an open-source implementation of a distributed virtual multilayer switch. The main purpose of Open vSwitch is to provide a switching stack for hardware virtualization environments, while supporting multiple protocols and standards used in computer networks.

<span class="mw-page-title-main">VNS3</span>

VNS3 is a software-only virtual appliance that allows users to control access and network topology and secure data in motion across public and private clouds. VNS3 is a virtual router, switch, firewall, protocol re-distributor, and SSL/IPSec VPN concentrator. The Network Virtualization Software creates a customer-controlled overlay network over top of the underlying network backbone.

<span class="mw-page-title-main">VyOS</span> Linux distribution

VyOS is an open source network operating system based on Debian.

<span class="mw-page-title-main">IPFire</span> Linux distribution

IPFire is a hardened open source Linux distribution that primarily performs as a router and a firewall; a standalone firewall system with a web-based management console for configuration.

References

  1. "Rackspace Cloud Servers Brocade Vyatta vRouter". Rackspace. Archived from the original on 2014-11-02. Retrieved 2014-11-02.
  2. "SoftLayer Network Appliances". SoftLayer . Retrieved 2016-05-02.
  3. Larry Chaffin (2010-01-17). "Putting Realism Into Your Network: 10Gbps Routing + Security for under $5k, and it's not from Cisco or Juniper". Network World . Retrieved 2012-01-28.
  4. Kelly Herrell (2009-12-18). "Intel Takes Vyatta to 10Gig" . Retrieved 2012-01-28.
  5. "Brocade Newsroom".
  6. "AT&T Inc. (NYSE:T) Closes Vyatta Acquisition". Financial Trends. Retrieved 2018-05-25.
  7. "AT&T to Acquire Vyatta Software Technology from Brocade". AT&T . Retrieved 2 June 2017.
  8. "Ciena Expands Edge and 5G Capabilities with Acquisition of Vyatta Routing and Switching Technology from AT&T" . Retrieved 2021-09-15.
  9. See http://www.vyatta.org Archived 2012-04-24 at the Wayback Machine
  10. "VyOS".
  11. "The Linux Foundation Hosts 'DANOS' Project, a Unified Network Operating System". 27 March 2018. Archived from the original on 26 October 2020. Retrieved 25 April 2020.
  12. "SDN + NFV" (PDF). Brocade Community Forums. Archived from the original (PDF) on 2013-06-26. Retrieved 2013-07-31.
  13. "Vyatta Release 6.3 – Extending Networking in the Cloud". Archived from the original on 2012-04-23. Retrieved 2012-04-28.
  14. "Vyatta Roadmap". Vyatta.org. Archived from the original on 2012-05-14. Retrieved 2012-06-12.
  15. "Press Releases". www.vyatta.com. Archived from the original on 2010-11-04. Retrieved 2012-06-12.
  16. tmccafferty (2010-03-30). "View topic - Vyatta Version 6.0 is here!". Vyatta.org. Archived from the original on 2010-12-01. Retrieved 2012-06-12.
  17. Subscription versions now are different from core only with additional components, other features are the same.
  18. "View topic - VC5 Released". Vyatta.org. Archived from the original on 2012-05-15. Retrieved 2012-06-12.
  19. "View topic - About branch hollister". Vyatta.org. 2008-04-30. Archived from the original on 2013-04-16. Retrieved 2012-06-12.
  20. "View topic - VC4.1 (Hollywood) released to stable". Vyatta.org. Archived from the original on 2010-12-01. Retrieved 2012-06-12.
  21. DaveRoberts (2008-04-21). "View topic - VC4 released". Vyatta.org. Archived from the original on 2010-12-01. Retrieved 2012-06-12.
  22. "Bug 2544 – Glendale's Nightly-built Version Should be Changed to glendale (instead of eureka beta)". Bugzilla.vyatta.com. Archived from the original on 2012-07-12. Retrieved 2012-06-12.
  23. "Vyatta Community Edition 3 - Routing,Firewall,VPN enhancements". ItsyourIP.com. Retrieved 2012-06-12.
  24. "Press Releases". www.vyatta.com. Archived from the original on 2009-12-31. Retrieved 2012-06-12.
  25. "[Vyatta-users] ANN: Glendale timeline". Mail-archive.com. 2008-01-14. Retrieved 2012-06-12.
  26. 1 2 "WebHome < Community < TWiki". Archived from the original on 2006-04-12. Retrieved 2006-04-12.