VyOS Services

VyOS provides a broad set of network services for enterprise infrastructure.

Section contents

DHCP Server

Automatic IP address assignment for clients.

Features:

• DHCPv4 and DHCPv6
• Static reservations
• DHCP options (gateway, DNS, domain)
• Multiple subnets
• Viewing active leases

DNS Forwarding

Caching DNS resolver for the local network.

Features:

• Recursive DNS queries
• Response caching
• Custom DNS records
• Forwarding to upstream DNS
• DNSSEC validation

SSH Server

Secure remote access to the router.

Features:

• SSH v2 protocol
• Key-based authentication
• Port configuration
• Access restrictions
• SFTP support

NTP Service

Time synchronization.

Features:

• NTP client for synchronization
• NTP server for clients
• Multiple time servers
• Authentication

HTTPS API

REST API for automation.

Features:

• RESTful API endpoints
• Configuration operations
• Show commands
• Image management
• API key authentication

Configuration recommendations

DHCP Server

Use it to automate IP address assignment in local networks. Always configure static reservations for servers.

DNS Forwarding

Improves DNS query performance through caching. Configure your provider’s upstream DNS servers or public ones (Google DNS, Cloudflare).

SSH

Disable password authentication in production. Use SSH keys only.

NTP

Critical for the correct operation of logs, certificates, and routing protocols.

HTTPS API

Required for automation via Ansible, Python, or CI/CD pipelines.

Additional resources

• VyOS Services Documentation

Additional services

• DHCPv6 Server - DHCPv6 server for IPv6 networks
• DHCP Relay - Relaying DHCP requests between subnets
• Dynamic DNS (DDNS) - Automatic DNS record updates
• Conntrack Sync - Connection tracking table synchronization
• Config Sync - Configuration synchronization between devices
• Event Handler - System event handler
• LLDP - Link Layer Discovery Protocol
• mDNS Repeater - Relaying mDNS between subnets
• Monitoring - VyOS services monitoring
• Router Advertisements - IPv6 Router Advertisements
• Salt-Minion - Salt-Minion for configuration automation
• SNMP - SNMP monitoring
• Suricata IDS/IPS - Intrusion detection and prevention system
• TFTP Server - TFTP server for file downloads
• Web Proxy (Squid) - HTTP/HTTPS proxy server
• UDP Broadcast Relay - Relaying UDP broadcast between subnets
• PPPoE Server - PPPoE server for ISPs
• IPoE Server - IPoE server for providers