v0.4.0

Packeteer v0.4.0 completes the v0.4 IRP-parity milestone (#30–#34).

Highlights

• Multi-POP federation (#30): federated instances over mTLS, inter-DC RTT, multiple routing domains, global commit control.
• Active/standby HA and backup (#31): lease-based elector, standby stays passive, config/history backup and restore.
• RBAC, SSO, audit (#32): users, roles, API tokens, audit log, and OIDC SSO for the ops API.
• Flow-baseline anomaly detection (#33): detects deviations from the learned flow baseline; mitigates only when an explicit rule matches, and never announces a prefix outside the learned RIB view.
• Remaining UI parity (#34): improvement weights, validated config editor and setup wizard, custom dashboards, email report subscriptions.

Safety (unchanged)

• Default mode stays observe. Inject still requires mode: inject, an allowlist, the configured community + NO_EXPORT, the max_improvements cap, and hold time/thresholds.
• Packeteer-originated routes are withdrawn on shutdown, SIGTERM, probe-source loss, stale data, or RIB session loss. No graceful restart.
• All new BGP behavior is lab-proven only (FRR/GoBGP in CI with documentation prefixes and ASNs), not on a public edge.

Image: ghcr.io/grandarcher/packeteer:0.4.0 (also :latest). See CHANGELOG.md for details.

What's Changed

• #30 multi-POP federation with inter-DC RTT, global commit, and central view, lab-proven by @GrandArcher in #84
• #31 active/standby HA with lease elector and config/history backup, lab-proven by @GrandArcher in #85
• #32 users, RBAC, API tokens, audit log, and OIDC SSO for the ops API by @GrandArcher in #86
• #33 flow-baseline anomaly detection that mitigates only on explicit rules, lab-proven by @GrandArcher in #88
• #34 improvement weights, validated config editor and wizard, custom dashboards, email report subscriptions by @GrandArcher in #89
• #30-#34 v0.4.0 release notes and pinned tag by @GrandArcher in #90

Full Changelog: v0.3.0...v0.4.0