v0.8.0

Packeteer v0.8.0 is about Internet exchanges and shared measurements, all observe-safe.

Highlights

• IXP mode (#160-#167): observe-only IXP mode with IX-F member import, fabric probes, Birdseye route-server history and signals, fabric incident correlation, member pages, and multi-site health.
• Measurement (#150, #157, #158, #343, #347): probe-path check, probe multiplexing with a PBR generator, RPKI origin labels, health labels from measured loss, and provider health events.
• Exchanges (#147, #151, #153): BMP exchange peer monitoring, a shared IX port, and PeeringDB / IX-F lookup.
• UI (#329, #330, #344-#346): settings forms for most config blocks with a Preview diff, clearer observe wording.
• Herd (#260, #261): opt-in herd phase 1 and the hub client.

Upgrade: sign-in is now on by default for every install, upgrades included (#328). A config without an auth block requires sign-in; tokenless scrapers and API clients (for example /metrics) get 401 until given a token. Without PACKETEER_ADMIN_PASSWORD, the first start generates a one-time admin password. To keep the old open behavior, set auth: {enabled: false}. See the README "From 0.7 to 0.8" notes.

Safety (unchanged)

• Default mode stays observe. Inject still requires mode: inject, an allowlist, the configured community + NO_EXPORT, the max_improvements cap, and hold time/thresholds. IXP mode never announces.
• Packeteer never announces a prefix that is not in the learned RIB view.
• BGP behavior in this release is lab-proven only (simulated routers in CI, documentation prefixes and private ASNs), not on a public edge.

Image: ghcr.io/grandarcher/packeteer:0.8.0 (also :0.8 and :latest once the publish workflow finishes). See CHANGELOG.md for details.

What's Changed

• #147 BMP exchange peer session events, prefix counts, and max-prefix warnings by @GrandArcher in #322
• v0.7.0 release notes and pinned tag by @GrandArcher in #324
• #150 automatic probe-path check per provider and IX peer by @GrandArcher in #323
• #160 IXP mode is observe-only and never announces by @GrandArcher in #326
• #327 show the Packeteer logo in the web UI by @GrandArcher in #331
• #161 read-only IX-F member import by @GrandArcher in #332
• #162 fabric prober from IX vantages by @GrandArcher in #334
• nightly cleanup 2026-10-15 by @GrandArcher in #321
• #153 read-only cached PeeringDB / IX-F lookup by @GrandArcher in #340
• #164 route-server observability via Birdseye, with history and alerts by @GrandArcher in #339
• #337 redact IX-F view query strings and omit unset times by @GrandArcher in #354
• #336 expire the Can Ping list after three intervals by @GrandArcher in #363
• #338 BMP exchange peer state: stats do not flip up, per-router keying, unknown down reason by @GrandArcher in #364
• #163 fabric vs member incident correlation by @GrandArcher in #365
• #151 shared IX port: capacity, commit, and flat port cost by @GrandArcher in #366
• #165 hijack, leak, and blackhole signals from route-server data by @GrandArcher in #368
• #329 guided settings inputs by @GrandArcher in #333
• #157 Probe multiplexing: shared source_ip with fwmark or DSCP per provider, PBR generator by @GrandArcher in #369
• #158 RPKI origin validation for IX paths by @GrandArcher in #325
• #343 Provider health follows what was measured by @GrandArcher in #367
• #166 per-member IXP pages, Prometheus series, and IXP Manager links by @GrandArcher in #370
• #344 Settings Save applies pending form edits and names each change by @GrandArcher in #372
• #346 observe mode shows Traffic now (router) and Packeteer recommends, not steered by @GrandArcher in #371
• #167 Multi-site IXP fabric health via federation by @GrandArcher in #374
• #347 Events for failing providers and unestablished BGP sessions, with a headline and next step by @GrandArcher in #375
• #345 Setup wizard keeps a working config: collapse, diff, confirm, auth kept by @GrandArcher in #373
• #311 Commit settings form matches loader case handling and keeps Track commit across a rename by @GrandArcher in #376
• #335 Steer reason text uses ASCII -> by @GrandArcher in #377
• Bump github.com/oschwald/maxminddb-golang/v2 from 2.7.0 to 2.8.0 by @dependabot[bot] in #357
• Bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 by @dependabot[bot] in #358
• Bump golang from 1.26-alpine to 1.27-alpine by @dependabot[bot] in #355
• #378 handleEvent reads neighbors under the RIB lock by @GrandArcher in #389
• #379 mitigation rule waits for outbound to release its prefix by @GrandArcher in #390
• #380 run go test -race on every PR by @GrandArcher in #391
• #260 Herd phase 1: local store, signed pull API, and pull among static peers by @GrandArcher in #388
• #397 flow: race-aware time budget in TestPrefixCapBatchEviction by @GrandArcher in #398
• #261 Herd hub list: verified seed peers from a public list of signed member entries by @GrandArcher in #396
• #330 Settings forms for the YAML-only sections, Preview, raw YAML under Advanced by @GrandArcher in #394
• #87 herd design: add IXP vantage kind and the cost answer by @GrandArcher in #399
• #328 Secure by default: sign-in on for new installs and upgrades with a first-run admin password by @GrandArcher in #403
• #400 README and docs match v0.8: counts, upgrade notes, CHANGELOG 0.8.0, portable ASCII check by @GrandArcher in #404
• Release prep: v0.8.0 changelog date, compare link, and pinned tag by @GrandArcher in #405

Full Changelog: v0.7.0...v0.8.0