v0.1.0

First release of nft_exporter — a Prometheus exporter for full Linux network observability via direct AF_NETLINK on a monoio / io_uring runtime.

Collectors (21)

Native netlink/genetlink (13, default-on): rtnetlink, rtnetlink-extended, traffic_control, conntrack, conntrack_expect, nftables, sock_diag, ethtool, ipvs, wireguard, devlink, drop_monitor, xfrm.

Opt-in procfs/sysfs (8, default-off, ADR-0027): softnet, netstat, softirq, irq, sockstat, nic_bql, nic_pcie, nic_temp.

Highlights

• Native-API-first (ADR-0025): direct netlink wire protocol over io_uring (ADR-0011 / ADR-0023 / ADR-0024) — no high-level netlink crates, no tokio/axum.
• Opt-in procfs/sysfs relax (ADR-0027) for signals with no netlink API; isolated in the nlx-procfs crate behind a read-only path allowlist, default-off.
• Bounded cardinality: nic_pcie AER counters aggregated per device (ADR-0028); duplicate-series guard in the serializer.
• Exposition: Prometheus text 0.0.4.
• Architecture: hexagonal (ADR-0002); CAP_NET_ADMIN-only privilege drop.

Verified live: 21/21 collectors reporting, 0 duplicate series, clippy/fmt clean, full unit-test suite green.