History / web ui

docs(wiki): sync the wiki with 5054225..e101797 (1049 commits) The wiki's .source-commit had not moved since 5054225. This sync covers the delta to e101797, and the two largest themes in it are a CLI that answers with structured data and a development toolchain that is no longer make. The pipe layer. Every command now answers structured data, and a chain of 17 operators renders or filters it, a record at a time. cli.md and show-commands.md carry the full catalog, replacing a 10-row table that also described match as a regex that drops non-matching entries; it takes text and keeps them. Pipe aliases, the ze help command --json machine surface, and the newly piped config, schema, yang and data groups are documented. Commands that changed name or shape. show bgp summary is deleted and show bgp answers what it used to. ze --plugins is removed with no alias and now answers unknown command; show plugins replaces it, with seven declared columns and a setup outcome. Eight pages still told a reader to run the removed flag. announce is three commands and withdraw three forms, each also reachable peer-scoped with the selector first. ze format does not exist; the command is ze pipe, and three pages named the wrong one. Rendering flags. --json is gone from fifteen commands and the pipe layer replaces it. It survives on doctor, explain, support, skills, interface show/routes/neighbors, bgp decode and plugin test, so the sweep was scoped to the commands that lost it rather than to the flag. Protocol. The RFC 4456 Section 9 CLUSTER_LIST tie-break is documented as best-path step 8. MED removal is del { med; }, not set { med-remove true; }. IPsec gains PAD sub-tree matching and the policy-priority leaf. peers.md records the two RFC 9687 Send Hold Timer obligations, including that a peer proposing a zero hold time now holds its session. memlock and anomaly-observe get catalogue rows. Not included. command-catalog.md carries a third session's uncommitted work and is generated, so it is left out and left unlinked from _Sidebar.md; linking it would pull 296KB of another session's in-flight content into llms-full.txt. ze config ls and ze data ls keep their spelling: the ls to list rename covered the show forms only, and the offline roots are still ls at e101797. llms.txt and llms-full.txt are regenerated (181 pages). .source-commit is bumped last.

thomas-mangin committed Aug 31, 2026

docs(wiki): sync wiki with 505422597..10d198be3 (835 commits) New pages: none. Every change lands on a page that already existed. Updated 52 existing pages, from 181 user-facing commits in the range. Areas: the CLI and its pipe operators, BGP and the RIB, RPKI and IRR filtering, FlowSpec, plugins and the plugin SDK wire format, IPsec, interfaces and the VPP dataplane, the firewall, DDoS and anomaly detection, configuration and YANG, and the REST, gRPC, MCP and web surfaces. Two entries record a feature that had never run. The FlowSpec to firewall bridge read a flat event envelope no writer produces, so every FlowSpec route a peer sent was dropped in silence. BGP-LS attribute validation was registered for no attribute code, so a live session validated nothing. Both had passing tests. ddos.md and status.md now say what works and when it started working. Two spellings changed under operators: show bgp summary is now show bgp, with summary and peers as pipe aliases, and a one-scope OSPF router-information config advertises at the one scope written rather than at both. The wiki command catalog and the llms files are regenerated, not hand-edited. Links check clean over 179 pages. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

thomas-mangin committed Aug 29, 2026

docs: update canonical Make target names

thomas-mangin committed Aug 17, 2026

docs: update Make target names

thomas-mangin committed Aug 16, 2026

docs(wiki): sync wiki with acbef856e..505422597 (795 commits) New pages: dns.md, the shared authoritative DNS harness behind as112 and geodns, plus the caching resolver. Updated 94 existing pages. Feature areas covered: IKE/IPsec RFC 7296 conformance, EAP-TLS 1.3 and kernel dataplane read-back; BGP communities (RFC 1997 egress suppression, RFC 7999 blackhole agreement, RFC 7454 scrub); dynamic peer groups; RFC 9234 roles and OTC; RFC 4271 Section 5 egress attribute rules; RFC 7606 typed-family discard; RFC 7911 path-identifier regeneration; protocol event capture and replay; RPKI sync reporting and blackhole exemption; RIB-to-FIB forwarding actions; IS-IS LSDB operations; OSPF RFC 3101 NSSA defaults; BMP delivery bounds; MRT damage reporting; PPPoE subscriber authentication; L2TP accounting attributes; DNS answer policy; DDoS mitigation lifetime; IPv6 Router Advertisements; VPP and firewall reconcile deadlines; the templ and htmx 4 rendering cutover for the web UI and Looking Glass; MCP protocol revision 2026-07-28; startup config validation; the management listener exposure guard; PKI-backed TLS; the verb-first CLI migration; appliance kernel and build gates; and the RFC requirement ledger. Corrections to claims the code no longer supports: MOBIKE is not implemented, the BGP hold-timer grace period was deleted, the IPsec virtual IP pool is not wired, the Looking Glass defaults to TLS on, MCP tool names were wrong, and about twenty-five removed bare command spellings were replaced with their registered verb-first forms. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FwRCPDR1JhZFg5aynjDQoo

thomas-mangin committed Aug 16, 2026

docs(wiki): repoint every repo link at github.com/ze-software/ze Codeberg's 2026-07-23 LLM policy made hosting development there untenable, so the module path and origin moved to github.com/ze-software/ze (main 34cd33b87). Every clone URL, browse link, issue link and Go import path in the wiki still named a repository the project has left. Three forms needed three different targets, which is why this was scripted rather than sed'd: a browse link becomes /blob/main/ for a file and /tree/main/ for a directory, an import path just swaps its root, and the clone, issues and wiki links each have their own GitHub shape. The two prose labels that named Codeberg (the footer's "Source on Codeberg" and Home's "development on Codeberg") are corrected too, since the rewrite would otherwise leave them contradicting their own links. bin/gen-llms-txt.go carried the old base URL as its default, so every regeneration would have reintroduced 177 stale links into llms.txt. Fixed at the source rather than in the generated output. The Codeberg wiki remains a single-page redirect, so the remotes described in the untracked CLAUDE.md are unchanged and still accurate. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jul 25, 2026

docs(wiki): sync wiki with cc71d46e2..075d46b4b (440 commits) New pages: as112, radius, ddos, anomaly. Updated existing pages covering: IPsec IKEv2 responder and real make-before-break rekeying; OSPF extension family (Segment Routing, TE, TI-LFA, graceful restart, virtual links, NBMA, point-to- multipoint, multi-instance, OSPFv3 IPsec); VPP tunnels, SPAN, WireGuard, LCP pairs, DSCP policing, and static routes; L2TP LAC initiator and PPPoE-to-L2TP relay; appliance pure-Go initrd and startup resilience; build-time feature gates; web RBAC, AAA-chain login, config transfer, and i18n; verb-first CLI and new show, announce, anomaly, and ddos verbs; DDoS mitigation; behavioral anomaly detection; encrypted and validated DNS (DoT, DoH, DNSSEC); RADIUS operator auth; GTSM and CoPP control-plane protection. Refreshed feature-inventory, status, plugins, comparison, glossary, and _Sidebar; regenerated llms.txt and llms-full.txt. Corrected stale show ip ospf to show ospf and show ipsec to show vpn ipsec commands. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ny5i2V6UuvNF8TQG4WN1zv

thomas-mangin committed Jul 13, 2026

docs(wiki): sync wiki with 57bc272..e87103f (130 commits) New pages: class-of-service, bgp-filter-irr, bgp-nlri-srpolicy. Updated 23 existing pages covering: CoS/QoS subsystem, PATHS-LIMIT capability, SR-Policy NLRI, IRR prefix filtering, granular debug, ze format, nop keyword, env var promotion, show enricher, FlowSpec rate-limit, plugin DoctorChecks, L2TP priority, Workbench default UI, appliance ISO workflow, and performance round 3 optimizations. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Jun 15, 2026

Update mcp, web-ui, bgp-rib, and system pages mcp: add task-augmented tools/call and Apps resources sections. web-ui: add Workbench V2 (experimental RouterOS-style operator UI). bgp-rib: document two-level ribInPool with ProtocolID for multi-source. system: add SSH public key authentication and static DNS nameservers. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed May 14, 2026

Flatten wiki to root directory for GitHub wiki compatibility GitHub wiki resolves pages by filename in the root directory only. Moved all 123 .md files from subdirectories to root. Renamed configuration/interfaces.md to configuration-interfaces.md to avoid collision with interfaces/interfaces.md. Fixed 8 image paths. Subdirectories are now empty (images/ retained for assets). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

thomas-mangin committed Apr 8, 2026