RAHN v0.3.0-alpha — Isolated Linux Execution

[MHAlikhani]

RAHN v0.3.0-alpha

This release introduces RAHN's first real network execution backend through isolated Linux network namespaces.

Highlights

• Added the rahn-exec execution backend.
• Added isolated Linux network namespace execution.
• Added deterministic virtual Ethernet (veth) link creation.
• Added translation from RAHN link state to Linux network operations.
• Added explicit opt-in execution for real network changes.
• Kept simulation as the safe default.
• Added cleanup and recovery handling for isolated execution.
• Added Linux CI coverage for namespace execution.

Architecture

RAHN now has a clear execution boundary:

RAHN State
    ↓
Execution Plan
    ↓
Linux Execution Backend
    ↓
Network Namespace
    ↓
veth / virtual links

The abstract RAHN state remains independent from the Linux-specific execution backend.

Safety

Real network execution is explicitly opt-in.

Simulation remains the default, and execution is performed within isolated Linux network namespaces rather than modifying the host network by default.

Testing

Stage 3 adds coverage for:

• namespace creation
• veth setup
• link mapping
• execution planning
• cleanup
• failure recovery
• host-safety behavior

Linux-specific execution is validated in CI.

Known Limitations

This release does not yet include:

• typed network addressing
• full routing configuration
• traffic control
• observability
• causal memory
• distributed state
• eBPF/XDP backends
• P4 backends
• production network orchestration

Execution is currently limited to the isolated Linux backend introduced in this milestone.

Next

v0.4.0-alpha — Observability

---

This discussion was created from the release RAHN v0.3.0-alpha — Isolated Linux Execution.