History / configuration interfaces

docs(wiki): sync the wiki with 5054225..e101797 (1049 commits) The wiki's .source-commit had not moved since 5054225. This sync covers the delta to e101797, and the two largest themes in it are a CLI that answers with structured data and a development toolchain that is no longer make. The pipe layer. Every command now answers structured data, and a chain of 17 operators renders or filters it, a record at a time. cli.md and show-commands.md carry the full catalog, replacing a 10-row table that also described match as a regex that drops non-matching entries; it takes text and keeps them. Pipe aliases, the ze help command --json machine surface, and the newly piped config, schema, yang and data groups are documented. Commands that changed name or shape. show bgp summary is deleted and show bgp answers what it used to. ze --plugins is removed with no alias and now answers unknown command; show plugins replaces it, with seven declared columns and a setup outcome. Eight pages still told a reader to run the removed flag. announce is three commands and withdraw three forms, each also reachable peer-scoped with the selector first. ze format does not exist; the command is ze pipe, and three pages named the wrong one. Rendering flags. --json is gone from fifteen commands and the pipe layer replaces it. It survives on doctor, explain, support, skills, interface show/routes/neighbors, bgp decode and plugin test, so the sweep was scoped to the commands that lost it rather than to the flag. Protocol. The RFC 4456 Section 9 CLUSTER_LIST tie-break is documented as best-path step 8. MED removal is del { med; }, not set { med-remove true; }. IPsec gains PAD sub-tree matching and the policy-priority leaf. peers.md records the two RFC 9687 Send Hold Timer obligations, including that a peer proposing a zero hold time now holds its session. memlock and anomaly-observe get catalogue rows. Not included. command-catalog.md carries a third session's uncommitted work and is generated, so it is left out and left unlinked from _Sidebar.md; linking it would pull 296KB of another session's in-flight content into llms-full.txt. ze config ls and ze data ls keep their spelling: the ls to list rename covered the show forms only, and the offline roots are still ls at e101797. llms.txt and llms-full.txt are regenerated (181 pages). .source-commit is bumped last.

thomas-mangin committed Aug 31, 2026

docs(wiki): sync wiki with 505422597..10d198be3 (835 commits) New pages: none. Every change lands on a page that already existed. Updated 52 existing pages, from 181 user-facing commits in the range. Areas: the CLI and its pipe operators, BGP and the RIB, RPKI and IRR filtering, FlowSpec, plugins and the plugin SDK wire format, IPsec, interfaces and the VPP dataplane, the firewall, DDoS and anomaly detection, configuration and YANG, and the REST, gRPC, MCP and web surfaces. Two entries record a feature that had never run. The FlowSpec to firewall bridge read a flat event envelope no writer produces, so every FlowSpec route a peer sent was dropped in silence. BGP-LS attribute validation was registered for no attribute code, so a live session validated nothing. Both had passing tests. ddos.md and status.md now say what works and when it started working. Two spellings changed under operators: show bgp summary is now show bgp, with summary and peers as pipe aliases, and a one-scope OSPF router-information config advertises at the one scope written rather than at both. The wiki command catalog and the llms files are regenerated, not hand-edited. Links check clean over 179 pages. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

thomas-mangin committed Aug 29, 2026

docs(wiki): sync wiki with acbef856e..505422597 (795 commits) New pages: dns.md, the shared authoritative DNS harness behind as112 and geodns, plus the caching resolver. Updated 94 existing pages. Feature areas covered: IKE/IPsec RFC 7296 conformance, EAP-TLS 1.3 and kernel dataplane read-back; BGP communities (RFC 1997 egress suppression, RFC 7999 blackhole agreement, RFC 7454 scrub); dynamic peer groups; RFC 9234 roles and OTC; RFC 4271 Section 5 egress attribute rules; RFC 7606 typed-family discard; RFC 7911 path-identifier regeneration; protocol event capture and replay; RPKI sync reporting and blackhole exemption; RIB-to-FIB forwarding actions; IS-IS LSDB operations; OSPF RFC 3101 NSSA defaults; BMP delivery bounds; MRT damage reporting; PPPoE subscriber authentication; L2TP accounting attributes; DNS answer policy; DDoS mitigation lifetime; IPv6 Router Advertisements; VPP and firewall reconcile deadlines; the templ and htmx 4 rendering cutover for the web UI and Looking Glass; MCP protocol revision 2026-07-28; startup config validation; the management listener exposure guard; PKI-backed TLS; the verb-first CLI migration; appliance kernel and build gates; and the RFC requirement ledger. Corrections to claims the code no longer supports: MOBIKE is not implemented, the BGP hold-timer grace period was deleted, the IPsec virtual IP pool is not wired, the Looking Glass defaults to TLS on, MCP tool names were wrong, and about twenty-five removed bare command spellings were replaced with their registered verb-first forms. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FwRCPDR1JhZFg5aynjDQoo

thomas-mangin committed Aug 16, 2026

docs(wiki): sync wiki with 15f9b98ae..acbef856e (93 commits) No new pages. Updated 26 existing pages covering: the plugin peer-up barrier and exclusive role claims, progress-bounded plugin startup, the route-server replay/live partition at a peer-up cut, one End-of-RIB per family per session, forward refusal on an unresolvable source, IRR filtering becoming opt-in, same-subnet interface renumbering, all- participant config reload and nested config roots, tc noqueue snapshot and per-protocol filter priorities, DDoS fail-closed on an unresolved victim, OSPF interface-open resilience and the OSPFv3 DAD source, L2TP control frames on the adopted socket, runtime state persistence, the appliance e2fsprogs resolution, and off-Linux unit tests. Corrects two false claims found while syncing: - rfc-implementation.md said Ze "deviates from RFCs in a small number of cases, and every deviation is documented in exabgp-differences.md or in the relevant in-tree architecture doc". Neither half held. There are 539 {gap:} annotations across 84 of the 166 enrolled RFCs, and that is where deviations live, on the specific requirement line with the producing file:line. Replaced with the real shape plus three worked RFC 4271 examples. - The attribute-ordering deviation it cited no longer exists: all three builders keep type-code order since ea9c83ca5. Stale counts fixed: 86 registered plugins is now 87.

thomas-mangin committed Jul 26, 2026

docs(wiki): repoint every repo link at github.com/ze-software/ze Codeberg's 2026-07-23 LLM policy made hosting development there untenable, so the module path and origin moved to github.com/ze-software/ze (main 34cd33b87). Every clone URL, browse link, issue link and Go import path in the wiki still named a repository the project has left. Three forms needed three different targets, which is why this was scripted rather than sed'd: a browse link becomes /blob/main/ for a file and /tree/main/ for a directory, an import path just swaps its root, and the clone, issues and wiki links each have their own GitHub shape. The two prose labels that named Codeberg (the footer's "Source on Codeberg" and Home's "development on Codeberg") are corrected too, since the rewrite would otherwise leave them contradicting their own links. bin/gen-llms-txt.go carried the old base URL as its default, so every regeneration would have reintroduced 177 stale links into llms.txt. Fixed at the source rather than in the generated output. The Codeberg wiki remains a single-page redirect, so the remotes described in the untracked CLAUDE.md are unchanged and still accurate. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jul 25, 2026

docs(wiki): sync wiki with e87103f5..cc71d46e2 (155 commits) New pages: ospf, isis (native OSPFv2/OSPFv3 and IS-IS link-state IGPs). Updated 26 existing pages covering: OSPF and IS-IS index entries (sidebar, feature-inventory, plugins, status, comparison, command-reference, show-commands, glossary); MPLS/LDP/RSVP-TE with RFC 4090 facility-backup fast reroute; the logical-name interface resolver and mac/match binding; firewall IRR prefix-list filtering and the shared IRR prefix store; BGP SR-Policy/MUP/VPLS/MVPN/FlowSpec plugin-pipeline migration, SRv6 RFC 9252 fixes, and PATHS-LIMIT; the Go installer, zero-touch provisioning, and appliance auto-init; and the interactive TUI launcher with the 7-role color system. Regenerated llms.txt and llms-full.txt; bumped .source-commit to HEAD. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KY83ZW6tzbKTiJrS2MEVx1

thomas-mangin committed Jun 24, 2026

docs(wiki): sync wiki with 57bc272..e87103f (130 commits) New pages: class-of-service, bgp-filter-irr, bgp-nlri-srpolicy. Updated 23 existing pages covering: CoS/QoS subsystem, PATHS-LIMIT capability, SR-Policy NLRI, IRR prefix filtering, granular debug, ze format, nop keyword, env var promotion, show enricher, FlowSpec rate-limit, plugin DoctorChecks, L2TP priority, Workbench default UI, appliance ISO workflow, and performance round 3 optimizations. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jun 15, 2026

docs(wiki): sync wiki with 952308c..0318cf8 (192 commits) New pages: ipsec, docker, health-checks, production-diagnostics, self-update, ze-install. Updated 25 existing pages covering: IPsec/IKEv2, diagnostics suite, self-update with fleet rollout, ze doctor, health registry, crash capture, XFRM interfaces, interface rate tracking, FlowSpec-to-firewall bridge, ASPA policy enforcement, RS dynamic peers, AIGP support, DHCP named ranges, Docker support, zero-touch provisioning, ZeFS integrity, config schema stamp, graceful listener migration, chaos v2 actions, monitor ping/traceroute/netlink, live packet capture, DNS cache management, conntrack nfs/sqlnet helpers, archive pruning, performance optimization campaign, Go 1.26, and glossary additions. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed May 24, 2026

docs(wiki): sync wiki with ab0d20c..952308c (22 user-facing commits) ASPA path verification, named archive blocks, per-family address containers, named interface units, offload/steering, rpf-check enum, PPPoE client, keepalive timer, static route tables, kernel redistribute, DHCP server, conntrack, serial console, firmware update, RPF lookup, ze-analyse aspath, RIB attribute bundling, show <noun> grammar. New page: dhcp-server.md

thomas-mangin committed May 17, 2026

wiki: sync with 538 commits of April development The wiki was pinned to 7fcc808 (2026-04-11) while the codebase added BFD, BMP, L2TP/PPP, firewall, traffic control, VPP integration, WireGuard, tunnel interfaces, TACACS+, NTP, sysctl, route reflector, route filters, gRPC API, and many more features across 538 commits. Updated 13 existing pages to fix factually wrong claims (BFD/BMP "not implemented", 32 plugin count, tunnels "not implemented") and reflect the current feature set. Created 9 new pages for the major new subsystems. Bumped .source-commit to current HEAD. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Apr 21, 2026

Flatten wiki to root directory for GitHub wiki compatibility GitHub wiki resolves pages by filename in the root directory only. Moved all 123 .md files from subdirectories to root. Renamed configuration/interfaces.md to configuration-interfaces.md to avoid collision with interfaces/interfaces.md. Fixed 8 image paths. Subdirectories are now empty (images/ retained for assets). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Apr 8, 2026