docs(wiki): sync wiki with 15f9b98ae..acbef856e (93 commits) No new pages. Updated 26 existing pages covering: the plugin peer-up barrier and exclusive role claims, progress-bounded plugin startup, the route-server replay/live partition at a peer-up cut, one End-of-RIB per family per session, forward refusal on an unresolvable source, IRR filtering becoming opt-in, same-subnet interface renumbering, all- participant config reload and nested config roots, tc noqueue snapshot and per-protocol filter priorities, DDoS fail-closed on an unresolved victim, OSPF interface-open resilience and the OSPFv3 DAD source, L2TP control frames on the adopted socket, runtime state persistence, the appliance e2fsprogs resolution, and off-Linux unit tests. Corrects two false claims found while syncing: - rfc-implementation.md said Ze "deviates from RFCs in a small number of cases, and every deviation is documented in exabgp-differences.md or in the relevant in-tree architecture doc". Neither half held. There are 539 {gap:} annotations across 84 of the 166 enrolled RFCs, and that is where deviations live, on the specific requirement line with the producing file:line. Replaced with the real shape plus three worked RFC 4271 examples. - The attribute-ordering deviation it cited no longer exists: all three builders keep type-code order since ea9c83ca5. Stale counts fixed: 86 registered plugins is now 87.

thomas-mangin committed Jul 26, 2026

docs(wiki): repoint every repo link at github.com/ze-software/ze Codeberg's 2026-07-23 LLM policy made hosting development there untenable, so the module path and origin moved to github.com/ze-software/ze (main 34cd33b87). Every clone URL, browse link, issue link and Go import path in the wiki still named a repository the project has left. Three forms needed three different targets, which is why this was scripted rather than sed'd: a browse link becomes /blob/main/ for a file and /tree/main/ for a directory, an import path just swaps its root, and the clone, issues and wiki links each have their own GitHub shape. The two prose labels that named Codeberg (the footer's "Source on Codeberg" and Home's "development on Codeberg") are corrected too, since the rewrite would otherwise leave them contradicting their own links. bin/gen-llms-txt.go carried the old base URL as its default, so every regeneration would have reintroduced 177 stale links into llms.txt. Fixed at the source rather than in the generated output. The Codeberg wiki remains a single-page redirect, so the remotes described in the untracked CLAUDE.md are unchanged and still accurate. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jul 25, 2026

docs(wiki): sync wiki with 075d46b4b..44673dfea (388 commits) New page: vrrp.md (VRRP first-hop redundancy, RFC 9568/3768). Updated 21 existing pages covering: the RFC requirement gate (make ze-rfc-check, 138 RFCs enrolled, ai/RFC-REQUIREMENTS.md ledger, /ze-rfc-audit); BMP Loc-RIB monitoring (RFC 9069, Peer Type 3); RPKI origin-validation actions (renamed rpki/action, per-peer/group override, re-validation on VRP change) and the matching config examples; Looking Glass per-peer route counts and birdwatcher state_changed/last_error; CLI namespace grammar, stdin/stdout, plugin tab-completion and renamed show commands; L2TP --user filter and RADIUS CoA port; AAA profile enforcement (fail-closed); and show bgp rib rpf. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EmLhGEE7o91brycJfwfvZm

thomas-mangin committed Jul 20, 2026

docs(wiki): sync wiki with cc71d46e2..075d46b4b (440 commits) New pages: as112, radius, ddos, anomaly. Updated existing pages covering: IPsec IKEv2 responder and real make-before-break rekeying; OSPF extension family (Segment Routing, TE, TI-LFA, graceful restart, virtual links, NBMA, point-to- multipoint, multi-instance, OSPFv3 IPsec); VPP tunnels, SPAN, WireGuard, LCP pairs, DSCP policing, and static routes; L2TP LAC initiator and PPPoE-to-L2TP relay; appliance pure-Go initrd and startup resilience; build-time feature gates; web RBAC, AAA-chain login, config transfer, and i18n; verb-first CLI and new show, announce, anomaly, and ddos verbs; DDoS mitigation; behavioral anomaly detection; encrypted and validated DNS (DoT, DoH, DNSSEC); RADIUS operator auth; GTSM and CoPP control-plane protection. Refreshed feature-inventory, status, plugins, comparison, glossary, and _Sidebar; regenerated llms.txt and llms-full.txt. Corrected stale show ip ospf to show ospf and show ipsec to show vpn ipsec commands. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ny5i2V6UuvNF8TQG4WN1zv

thomas-mangin committed Jul 13, 2026

docs(wiki): sync wiki with 57bc272..e87103f (130 commits) New pages: class-of-service, bgp-filter-irr, bgp-nlri-srpolicy. Updated 23 existing pages covering: CoS/QoS subsystem, PATHS-LIMIT capability, SR-Policy NLRI, IRR prefix filtering, granular debug, ze format, nop keyword, env var promotion, show enricher, FlowSpec rate-limit, plugin DoctorChecks, L2TP priority, Workbench default UI, appliance ISO workflow, and performance round 3 optimizations. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jun 15, 2026

Deep update for l2tp, firewall, vpp, appliance, and monitoring l2tp: rewrite with RADIUS auth/acct/CoA, IP pools, traffic shaping, CQM metrics, session observer, Prometheus metrics, web UI, kernel integration detail, and environment variables. firewall: rewrite with full match/action tables, VPP backend (NAT44-ED, ACL classify), named sets with timeouts, NAT exclude pattern. vpp: MPLS label programming now implemented (was "not yet wired"), add firewall VPP backend cross-reference, update roadmap table. appliance: add ze appliance management CLI (init, build, push, config-push with auto-revert, export/import, batch parallel ops). monitoring: add OS metrics (Netdata-compatible collectors), host hardware metrics (ze_host_* namespace), diagnostics section (FSM history, capture rings, VPP trace, active probes, structured log query, component health endpoint). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed May 14, 2026

wiki: sync with 538 commits of April development The wiki was pinned to 7fcc808 (2026-04-11) while the codebase added BFD, BMP, L2TP/PPP, firewall, traffic control, VPP integration, WireGuard, tunnel interfaces, TACACS+, NTP, sysctl, route reflector, route filters, gRPC API, and many more features across 538 commits. Updated 13 existing pages to fix factually wrong claims (BFD/BMP "not implemented", 32 plugin count, tunnels "not implemented") and reflect the current feature set. Created 9 new pages for the major new subsystems. Bumped .source-commit to current HEAD. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Apr 21, 2026