v0.7.0

Packeteer v0.7.0 adds exchange (IX) visibility and the UI pages that were still open from the v0.6 review, all read-only or observe-safe.

Highlights

• Exchanges (#148, #149, #152, #154, #155, #156): an exchange view on Providers & Exchanges, IX LAN health probes per peer next hop with exchange.degraded/recovered events, route-server vs bilateral prefix views, a transit-to-IX offload report, a potential-peers report, and discovered LAN members you can accept as draft peers.
• UI (#172, #174, #177, #178, #182, #184, #211): top bar search, Commit & Cost, Reports with CSV/XLSX export, maintenance windows on Policies, chart widgets and grid layout on dashboards, a System page, and link-outs to HE, RIPEstat, PeeringDB, bgp.tools, Radar, IRR Explorer and opt-in NLNOG RING.
• Safety docs and tests (#210, #235): steering precedence with pairwise interaction tests, and per-vendor export-deny guides for packeteer_community.
• Code health (#236): config.go, main.go and policy.go split into per-concern files; behavior unchanged.

Safety (unchanged)

• Default mode stays observe. Inject still requires mode: inject, an allowlist, the configured community + NO_EXPORT, the max_improvements cap, and hold time/thresholds.
• Packeteer never announces a prefix that is not in the learned RIB view.
• BGP behavior in this release is lab-proven only (simulated routers in CI, documentation prefixes and private ASNs), not on a public edge.

Image: ghcr.io/grandarcher/packeteer:0.7.0 (also :0.7 and :latest once the publish workflow finishes). See CHANGELOG.md for details.

What's Changed

• #159 Internet exchanges row split into done, partial, and planned rows by @GrandArcher in #280
• #181 Settings form edits exchanges and their peers by @GrandArcher in #281
• v0.6.0 release notes and pinned tag by @GrandArcher in #284
• #210 router guides show export deny on every eBGP session by @GrandArcher in #282
• #211 prefix, ASN, and exchange-peer pages link out to public BGP tools by @GrandArcher in #285
• docs: publish release signing public key (#196) by @GrandArcher in #290
• #155 accept a discovered exchange member as a draft peer by @GrandArcher in #292
• docs: refresh README for v0.6.0 by @GrandArcher in #293
• #235 steering precedence doc and pairwise interaction tests by @GrandArcher in #291
• #177 maintenance window page by @GrandArcher in #294
• docs: link Packeteer Discord server by @GrandArcher in #297
• docs: add Packeteer logo by @GrandArcher in #298
• ci: post releases and merged PRs to Discord by @GrandArcher in #299
• #184 System page: per-component health panel by @GrandArcher in #295
• #172 Global search by prefix, ASN, or AS name over live data and history by @GrandArcher in #301
• #178 Reports: any date range, filters, sortable columns, CSV and XLSX export by @GrandArcher in #304
• #174 Commit & Cost page: 95th vs commit graph per provider and a commit setup flow by @GrandArcher in #309
• #182 Dashboard chart widgets, drag/keyboard move and resize, favorite dashboard by @GrandArcher in #312
• #148 Exchange dashboard view and improvements-to-exchanges report by @GrandArcher in #313
• #236 split config.go into schema, defaults, and validation by @GrandArcher in #314
• nightly cleanup 2026-10-14 by @GrandArcher in #310
• #156 Per-member route server vs bilateral availability comparison by @GrandArcher in #315
• #152 Transit-to-IX offload report (observe only) by @GrandArcher in #317
• #149 IX LAN health: per-peer next-hop reachability and exchange.degraded alert by @GrandArcher in #316
• #236 Split controller main.go into per-area wiring files by @GrandArcher in #319
• #154 Potential-peers report from flow by destination ASN by @GrandArcher in #318
• #236 split internal/policy/policy.go into per-concern files by @GrandArcher in #320

Full Changelog: v0.6.0...v0.7.0

Verifying upgrades

Release binaries are covered by SHA256SUMS; SHA256SUMS.sig is a base64 Ed25519 signature over SHA256SUMS. To use the Settings upgrade (#196), pin the release public key (not a secret):

upgrade:
  enabled: true
  public_key: "xbP7Os7YIqfBhu36+E+WK0xvTizFyPROA1QCAseqEkA="

A release whose signature or checksum does not verify is never switched to. See CONFIG.md.