Directories
¶
| Path | Synopsis |
|---|---|
|
api
|
|
|
cmd
|
|
|
ze
command
Package main is the ze command that dispatches every ze subcommand from a single build-tag-selected entry point.
|
Package main is the ze command that dispatches every ze subcommand from a single build-tag-selected entry point. |
|
ze-gok
command
Package main is the ze-gok command that wraps the gokrazy build tool with a project-local module cache.
|
Package main is the ze-gok command that wraps the gokrazy build tool with a project-local module cache. |
|
ze-perf-run
command
|
|
|
ze-serial-shell
command
Package main is the ze-serial-shell command that symlinks the ze binary as the gokrazy serial console login shell.
|
Package main is the ze-serial-shell command that symlinks the ze binary as the gokrazy serial console login shell. |
|
ze-terminal-pty
command
|
|
|
ze/hub
Design: docs/architecture/hub-architecture.md -- hub CLI entry point Detail: service_mcp.go -- MCP server factory (//go:build ze_mcp) Detail: api.go -- REST/gRPC API server startup Detail: infra_setup.go -- infrastructure server setup hook Related: main_reload.go -- SIGHUP config reload Related: main_servers.go -- web, LG, SSH server startup Related: main_system.go -- host tuning, resolvers, telemetry
|
Design: docs/architecture/hub-architecture.md -- hub CLI entry point Detail: service_mcp.go -- MCP server factory (//go:build ze_mcp) Detail: api.go -- REST/gRPC API server startup Detail: infra_setup.go -- infrastructure server setup hook Related: main_reload.go -- SIGHUP config reload Related: main_servers.go -- web, LG, SSH server startup Related: main_system.go -- host tuning, resolvers, telemetry |
|
ze/internal/cmdutil
Design: docs/architecture/api/commands.md — shared CLI command utilities
|
Design: docs/architecture/api/commands.md — shared CLI command utilities |
|
ze/internal/helpfmt
Package helpfmt is a thin compatibility shim over internal/core/helpfmt.
|
Package helpfmt is a thin compatibility shim over internal/core/helpfmt. |
|
ze/internal/ssh/client
Design: docs/architecture/system-architecture.md — SSH client helper for CLI tools
|
Design: docs/architecture/system-architecture.md — SSH client helper for CLI tools |
|
ze/internal/suggest
Design: docs/architecture/core-design.md — CLI command suggestions
|
Design: docs/architecture/core-design.md — CLI command suggestions |
|
demos
|
|
|
terminal/cmd/ze-demo
command
|
|
|
internal
|
|
|
analyze
Design: (none -- research/analysis tool) RFC: rfc/short/rfc6396.md -- per-record-type AS width; rfc/short/rfc6793.md -- AS4_PATH is always 4-octet
|
Design: (none -- research/analysis tool) RFC: rfc/short/rfc6396.md -- per-record-type AS width; rfc/short/rfc6793.md -- AS4_PATH is always 4-octet |
|
appliance
Design: docs/architecture/appliance/builder.md -- appliance CLI dispatch
|
Design: docs/architecture/appliance/builder.md -- appliance CLI dispatch |
|
appliance/instance
Package instance prepares a relocated copy of the checked-in gokrazy instance so an image build never runs from, or writes to, a tracked path.
|
Package instance prepares a relocated copy of the checked-in gokrazy instance so an image build never runs from, or writes to, a tracked path. |
|
appliance/kernelbuilder
Package kernelbuilder builds Ze runtime and installer kernels without an interpreter.
|
Package kernelbuilder builds Ze runtime and installer kernels without an interpreter. |
|
chaos
Package chaos provides fault-injection primitives and a virtual clock for deterministic chaos simulation.
|
Package chaos provides fault-injection primitives and a virtual clock for deterministic chaos simulation. |
|
chaos/engine
Design: docs/architecture/chaos-web-dashboard.md — chaos action scheduling
|
Design: docs/architecture/chaos-web-dashboard.md — chaos action scheduling |
|
chaos/guard
Package guard filters chaos actions that are incompatible with a peer's current state.
|
Package guard filters chaos actions that are incompatible with a peer's current state. |
|
chaos/inprocess
Package inprocess schedules in-process chaos fault injection against simulated BGP peers.
|
Package inprocess schedules in-process chaos fault injection against simulated BGP peers. |
|
chaos/mcp
Package mcp exposes chaos dashboard state and controls as MCP tools for AI queries.
|
Package mcp exposes chaos dashboard state and controls as MCP tools for AI queries. |
|
chaos/mocknet
Design: docs/architecture/chaos-web-dashboard.md — mock network for in-process chaos
|
Design: docs/architecture/chaos-web-dashboard.md — mock network for in-process chaos |
|
chaos/peer
Design: docs/architecture/chaos-web-dashboard.md — BGP peer simulation
|
Design: docs/architecture/chaos-web-dashboard.md — BGP peer simulation |
|
chaos/replay
Design: docs/architecture/chaos-web-dashboard.md — event replay and diff
|
Design: docs/architecture/chaos-web-dashboard.md — event replay and diff |
|
chaos/report
Design: docs/architecture/chaos-web-dashboard.md — chaos reporting and metrics
|
Design: docs/architecture/chaos-web-dashboard.md — chaos reporting and metrics |
|
chaos/route
Design: docs/architecture/chaos-web-dashboard.md — route action scheduling
|
Design: docs/architecture/chaos-web-dashboard.md — route action scheduling |
|
chaos/scenario
Design: docs/architecture/chaos-web-dashboard.md — scenario generation
|
Design: docs/architecture/chaos-web-dashboard.md — scenario generation |
|
chaos/shrink
Design: docs/architecture/chaos-web-dashboard.md — test case shrinking
|
Design: docs/architecture/chaos-web-dashboard.md — test case shrinking |
|
chaos/validation
Design: docs/architecture/chaos-web-dashboard.md — property-based validation
|
Design: docs/architecture/chaos-web-dashboard.md — property-based validation |
|
chaos/watchdog
Package watchdog detects anomalies such as reconnect timeouts and convergence plateaus during chaos runs.
|
Package watchdog detects anomalies such as reconnect timeouts and convergence plateaus during chaos runs. |
|
chaos/web
Design: docs/architecture/chaos-web-dashboard.md — web dashboard UI Detail: state_activeset.go — active set peer visibility management Detail: state_routematrix.go — route flow matrix and heatmap tracking Related: viz_convergence_trend.go — ConvergenceTrend RingBuffer and ComputeConvergencePercentiles
|
Design: docs/architecture/chaos-web-dashboard.md — web dashboard UI Detail: state_activeset.go — active set peer visibility management Detail: state_routematrix.go — route flow matrix and heatmap tracking Related: viz_convergence_trend.go — ConvergenceTrend RingBuffer and ComputeConvergencePercentiles |
|
component/aaa
Package aaa defines the pluggable AAA (Authentication, Authorization, Accounting) backend layer.
|
Package aaa defines the pluggable AAA (Authentication, Authorization, Accounting) backend layer. |
|
component/aaa/all
Package all blank-imports every AAA backend so their init() functions fire and aaa.Default contains the backend factories.
|
Package all blank-imports every AAA backend so their init() functions fire and aaa.Default contains the backend factories. |
|
component/aaa/cmd
Package cmd registers engine-side RPC handlers for the AAA component's CLI surface.
|
Package cmd registers engine-side RPC handlers for the AAA component's CLI surface. |
|
component/aihelp
Design: docs/features/ai-first.md -- AI reference assembly (single source of truth)
|
Design: docs/features/ai-first.md -- AI reference assembly (single source of truth) |
|
component/api
Package api provides the shared command-execution engine backing the REST and gRPC transports.
|
Package api provides the shared command-execution engine backing the REST and gRPC transports. |
|
component/api/grpc
Design: docs/architecture/api/architecture.md -- gRPC API transport
|
Design: docs/architecture/api/architecture.md -- gRPC API transport |
|
component/api/grpc/yang
Package yang embeds and registers the gRPC transport YANG configuration module.
|
Package yang embeds and registers the gRPC transport YANG configuration module. |
|
component/api/rest
Design: docs/architecture/api/architecture.md -- REST API transport Related: auth.go -- the per-request credential gate and the reload seam that replaces it
|
Design: docs/architecture/api/architecture.md -- REST API transport Related: auth.go -- the per-request credential gate and the reload seam that replaces it |
|
component/api/rest/yang
Package yang embeds and registers the REST transport YANG configuration module.
|
Package yang embeds and registers the REST transport YANG configuration module. |
|
component/api/yang
Package yang embeds and registers the API YANG configuration module.
|
Package yang embeds and registers the API YANG configuration module. |
|
component/authz
Package authz provides profile-based command authorization.
|
Package authz provides profile-based command authorization. |
|
component/authz/yang
Package yang embeds and registers the authorization YANG configuration module.
|
Package yang embeds and registers the authorization YANG configuration module. |
|
component/bfd
Design: rfc/short/rfc5880.md -- BFD plugin entry point Design: docs/research/bfd-implementation-guide.md -- ze plugin layout Detail: config.go -- parser for the YANG bfd container
|
Design: rfc/short/rfc5880.md -- BFD plugin entry point Design: docs/research/bfd-implementation-guide.md -- ze plugin layout Detail: config.go -- parser for the YANG bfd container |
|
component/bfd/api
Package api defines the BFD engine's client-facing service interface for requesting sessions and receiving state changes.
|
Package api defines the BFD engine's client-facing service interface for requesting sessions and receiving state changes. |
|
component/bfd/auth
Package auth implements BFD packet authentication signers and verifiers per RFC 5880.
|
Package auth implements BFD packet authentication signers and verifiers per RFC 5880. |
|
component/bfd/cmd
Design: docs/architecture/bfd.md -- BFD CLI handlers
|
Design: docs/architecture/bfd.md -- BFD CLI handlers |
|
component/bfd/engine
Design: rfc/short/rfc5880.md -- Echo Function (Section 6.4) Related: loop.go -- express-loop goroutine that drains the echo RX channel Related: ../packet/echo.go -- ZEEC envelope codec Related: ../session/timers.go -- EchoInterval / NextEchoTxDeadline / AdvanceEcho
|
Design: rfc/short/rfc5880.md -- Echo Function (Section 6.4) Related: loop.go -- express-loop goroutine that drains the echo RX channel Related: ../packet/echo.go -- ZEEC envelope codec Related: ../session/timers.go -- EchoInterval / NextEchoTxDeadline / AdvanceEcho |
|
component/bfd/packet
Design: rfc/short/rfc5880.md -- Authentication Section (Section 4.2-4.4) Related: control.go -- 24-byte mandatory section codec
|
Design: rfc/short/rfc5880.md -- Authentication Section (Section 4.2-4.4) Related: control.go -- 24-byte mandatory section codec |
|
component/bfd/session
Design: rfc/short/rfc5880.md -- Section 6.7 (authentication integration) Related: session.go -- Machine state and identity Related: fsm.go -- reception procedure that drives Verify
|
Design: rfc/short/rfc5880.md -- Section 6.7 (authentication integration) Related: session.go -- Machine state and identity Related: fsm.go -- reception procedure that drives Verify |
|
component/bfd/transport
Design: rfc/short/rfc5881.md -- single-hop UDP encapsulation Design: rfc/short/rfc5883.md -- multi-hop UDP encapsulation Related: udp.go -- IPv4 UDP transport wrapped by Dual Related: socket.go -- Transport interface contract
|
Design: rfc/short/rfc5881.md -- single-hop UDP encapsulation Design: rfc/short/rfc5883.md -- multi-hop UDP encapsulation Related: udp.go -- IPv4 UDP transport wrapped by Dual Related: socket.go -- Transport interface contract |
|
component/bfd/yang
Package yang embeds and registers the BFD YANG configuration and command modules.
|
Package yang embeds and registers the BFD YANG configuration and command modules. |
|
component/bgp
Package bgp provides shared types and event parsing for the BGP subsystem.
|
Package bgp provides shared types and event parsing for the BGP subsystem. |
|
component/bgp/attrpool
Package attrpool provides refcounted, deduplicating attribute pools for BGP path attributes.
|
Package attrpool provides refcounted, deduplicating attribute pools for BGP path attributes. |
|
component/bgp/blackholecfg
Package blackholecfg reads the per-peer `blackhole` container of a BGP config subtree.
|
Package blackholecfg reads the per-peer `blackhole` container of a BGP config subtree. |
|
component/bgp/cli
Design: docs/architecture/core-design.md — BGP CLI commands Detail: cmd_plugin.go — plugin CLI simulator subcommand
|
Design: docs/architecture/core-design.md — BGP CLI commands Detail: cmd_plugin.go — plugin CLI simulator subcommand |
|
component/bgp/cli/yang
Package yang embeds and registers the BGP tools CLI command YANG module.
|
Package yang embeds and registers the BGP tools CLI command YANG module. |
|
component/bgp/config
Design: docs/architecture/config/syntax.md — the bgp/as-notation leaf Overview: loader_create.go — the two apply paths that call this Related: internal/core/bgp/asn/asn.go — Configure, the one writer of the value
|
Design: docs/architecture/config/syntax.md — the bgp/as-notation leaf Overview: loader_create.go — the two apply paths that call this Related: internal/core/bgp/asn/asn.go — Configure, the one writer of the value |
|
component/bgp/configjson
Package configjson provides shared helpers for traversing BGP config JSON delivered to plugins at Stage 2 (configure callback).
|
Package configjson provides shared helpers for traversing BGP config JSON delivered to plugins at Stage 2 (configure callback). |
|
component/bgp/filter
Package filter implements BGP route filtering based on attribute matching rules.
|
Package filter implements BGP route filtering based on attribute matching rules. |
|
component/bgp/filterapi
Design: docs/architecture/bgp/fanout-dedup.md -- fingerprint the edit set, confirm by equality Overview: filterapi.go -- ModAccumulator, whose state this encodes Related: editset.go -- the rebuild plan the digest predicts the output of
|
Design: docs/architecture/bgp/fanout-dedup.md -- fingerprint the edit set, confirm by equality Overview: filterapi.go -- ModAccumulator, whose state this encodes Related: editset.go -- the rebuild plan the digest predicts the output of |
|
component/bgp/filtertext
Package filtertext reads one attribute out of the policy filter text format.
|
Package filtertext reads one attribute out of the policy filter text format. |
|
component/bgp/format
Package format provides JSON and text formatting of BGP messages directly from wire bytes.
|
Package format provides JSON and text formatting of BGP messages directly from wire bytes. |
|
component/bgp/fsm
Package fsm implements the BGP Finite State Machine per RFC 4271 Section 8, managing peer state transitions, timers, and session lifecycle events.
|
Package fsm implements the BGP Finite State Machine per RFC 4271 Section 8, managing peer state transitions, timers, and session lifecycle events. |
|
component/bgp/grmarker
Design: docs/architecture/core-design.md -- GR restart marker for Restarting Speaker detection
|
Design: docs/architecture/core-design.md -- GR restart marker for Restarting Speaker detection |
|
component/bgp/message
Design: docs/architecture/wire/messages.md — BGP message types Related: update_build.go — UPDATE builder infrastructure
|
Design: docs/architecture/wire/messages.md — BGP message types Related: update_build.go — UPDATE builder infrastructure |
|
component/bgp/plugins/adj_rib_in
Design: docs/architecture/plugin/rib-storage-design.md — Adj-RIB-In raw hex storage RFC: rfc/short/rfc4271.md -- Adj-RIBs-In stores unprocessed routing information Detail: rib_commands.go — command handlers (status, show, replay, validation) Detail: rib_validation.go — RPKI validation gate (pending routes, timeout, state constants)
|
Design: docs/architecture/plugin/rib-storage-design.md — Adj-RIB-In raw hex storage RFC: rfc/short/rfc4271.md -- Adj-RIBs-In stores unprocessed routing information Detail: rib_commands.go — command handlers (status, show, replay, validation) Detail: rib_validation.go — RPKI validation gate (pending routes, timeout, state constants) |
|
component/bgp/plugins/adj_rib_in/yang
Package yang embeds and registers the adj-rib-in API YANG module.
|
Package yang embeds and registers the adj-rib-in API YANG module. |
|
component/bgp/plugins/aigp
Design: (none -- predates documentation) RFC: rfc/short/rfc7311.md
|
Design: (none -- predates documentation) RFC: rfc/short/rfc7311.md |
|
component/bgp/plugins/bmp
Design: docs/architecture/core-design.md -- BGP plugin model
|
Design: docs/architecture/core-design.md -- BGP plugin model |
|
component/bgp/plugins/bmp/yang
Package yang embeds and registers the BMP command and configuration YANG modules.
|
Package yang embeds and registers the BMP command and configuration YANG modules. |
|
component/bgp/plugins/cmd/announce
Package announce implements the on-demand BGP route origination command handlers.
|
Package announce implements the on-demand BGP route origination command handlers. |
|
component/bgp/plugins/cmd/announce/yang
Package yang embeds and registers the BGP announce command and API YANG modules.
|
Package yang embeds and registers the BGP announce command and API YANG modules. |
|
component/bgp/plugins/cmd/cache
Package cache implements the BGP cache operation command handlers.
|
Package cache implements the BGP cache operation command handlers. |
|
component/bgp/plugins/cmd/cache/yang
Package yang embeds and registers the YANG schema modules for the cache command.
|
Package yang embeds and registers the YANG schema modules for the cache command. |
|
component/bgp/plugins/cmd/commit
Package commit implements the BGP commit command that manages named route commit transactions.
|
Package commit implements the BGP commit command that manages named route commit transactions. |
|
component/bgp/plugins/cmd/commit/yang
Package yang embeds and registers the YANG schema modules for the commit command.
|
Package yang embeds and registers the YANG schema modules for the commit command. |
|
component/bgp/plugins/cmd/monitor
Design: docs/architecture/api/commands.md — BGP monitor command handlers
|
Design: docs/architecture/api/commands.md — BGP monitor command handlers |
|
component/bgp/plugins/cmd/monitor/yang
Package yang embeds and registers the YANG schema modules for the monitor command.
|
Package yang embeds and registers the YANG schema modules for the monitor command. |
|
component/bgp/plugins/cmd/peer
Package peer provides BGP peer lifecycle and introspection command handlers for the plugin server.
|
Package peer provides BGP peer lifecycle and introspection command handlers for the plugin server. |
|
component/bgp/plugins/cmd/peer/yang
Package yang embeds and registers the YANG schema modules for the peer command.
|
Package yang embeds and registers the YANG schema modules for the peer command. |
|
component/bgp/plugins/cmd/policy
Package policy implements the show policy commands that inspect policy chains and dry-run policy evaluation.
|
Package policy implements the show policy commands that inspect policy chains and dry-run policy evaluation. |
|
component/bgp/plugins/cmd/policy/yang
Package yang embeds and registers the YANG schema module for the policy command.
|
Package yang embeds and registers the YANG schema module for the policy command. |
|
component/bgp/plugins/cmd/raw
Design: docs/architecture/api/commands.md — BGP raw message command handler
|
Design: docs/architecture/api/commands.md — BGP raw message command handler |
|
component/bgp/plugins/cmd/raw/yang
Package yang embeds and registers the YANG schema modules for the raw command.
|
Package yang embeds and registers the YANG schema modules for the raw command. |
|
component/bgp/plugins/cmd/rib
Design: docs/architecture/api/commands.md — RIB CLI proxy handlers
|
Design: docs/architecture/api/commands.md — RIB CLI proxy handlers |
|
component/bgp/plugins/cmd/rib/yang
Package yang embeds and registers the YANG schema modules for the rib command.
|
Package yang embeds and registers the YANG schema modules for the rib command. |
|
component/bgp/plugins/cmd/update
Design: docs/architecture/bgp/replay-cursor.md -- stateful cursor for replay batching Overview: update_text.go — handleUpdate dispatch, parsedAttrs, snapshot, parseCommonAttributeText Related: update_text_nlri.go — parseNLRISection (reused unchanged)
|
Design: docs/architecture/bgp/replay-cursor.md -- stateful cursor for replay batching Overview: update_text.go — handleUpdate dispatch, parsedAttrs, snapshot, parseCommonAttributeText Related: update_text_nlri.go — parseNLRISection (reused unchanged) |
|
component/bgp/plugins/cmd/update/yang
Package yang embeds and registers the YANG schema modules for the update command.
|
Package yang embeds and registers the YANG schema modules for the update command. |
|
component/bgp/plugins/filter_aspath
Design: docs/architecture/core-design.md -- AS-path filter config parsing Related: match.go -- AS-path regex matching algorithm Related: filter_aspath.go -- SDK entry point and handleFilterUpdate
|
Design: docs/architecture/core-design.md -- AS-path filter config parsing Related: match.go -- AS-path regex matching algorithm Related: filter_aspath.go -- SDK entry point and handleFilterUpdate |
|
component/bgp/plugins/filter_aspath/yang
Package yang embeds and registers the YANG schema module for the aspath filter.
|
Package yang embeds and registers the YANG schema module for the aspath filter. |
|
component/bgp/plugins/filter_aspath_length/yang
Package yang embeds and registers the YANG schema module for the aspath-length filter.
|
Package yang embeds and registers the YANG schema module for the aspath-length filter. |
|
component/bgp/plugins/filter_community
Package filter_community implements the bgp-filter-community plugin.
|
Package filter_community implements the bgp-filter-community plugin. |
|
component/bgp/plugins/filter_community/yang
Package yang embeds and registers the community-filter plugin's YANG configuration schema module.
|
Package yang embeds and registers the community-filter plugin's YANG configuration schema module. |
|
component/bgp/plugins/filter_community_match
Design: docs/architecture/core-design.md -- community match filter config parsing Related: match.go -- community matching algorithm Related: filter_community_match.go -- SDK entry point and handleFilterUpdate
|
Design: docs/architecture/core-design.md -- community match filter config parsing Related: match.go -- community matching algorithm Related: filter_community_match.go -- SDK entry point and handleFilterUpdate |
|
component/bgp/plugins/filter_community_match/yang
Package yang embeds and registers the YANG schema module for the community-match filter.
|
Package yang embeds and registers the YANG schema module for the community-match filter. |
|
component/bgp/plugins/filter_family
Design: docs/architecture/core-design.md -- address-family policy filter Related: config.go -- bgp/policy/family-filter config parsing + tear-down-in-export guard Related: match.go -- family extraction from the raw UPDATE body Related: handler.go -- per-update remove / tear-down decision RFC: rfc/short/rfc4760.md -- multiprotocol families (Section 6) RFC: rfc/short/rfc4271.md -- NOTIFICATION + session close (Section 6)
|
Design: docs/architecture/core-design.md -- address-family policy filter Related: config.go -- bgp/policy/family-filter config parsing + tear-down-in-export guard Related: match.go -- family extraction from the raw UPDATE body Related: handler.go -- per-update remove / tear-down decision RFC: rfc/short/rfc4760.md -- multiprotocol families (Section 6) RFC: rfc/short/rfc4271.md -- NOTIFICATION + session close (Section 6) |
|
component/bgp/plugins/filter_family/yang
Package yang embeds and registers the family-filter plugin's YANG configuration schema module.
|
Package yang embeds and registers the family-filter plugin's YANG configuration schema module. |
|
component/bgp/plugins/filter_irr/yang
Package yang embeds and registers the IRR-filter plugin's YANG configuration schema modules.
|
Package yang embeds and registers the IRR-filter plugin's YANG configuration schema modules. |
|
component/bgp/plugins/filter_modify
Design: docs/architecture/core-design.md -- route modify filter config parsing Related: modify.go -- delta building and attribute encoding Related: filter_modify.go -- SDK entry point and handleFilterUpdate
|
Design: docs/architecture/core-design.md -- route modify filter config parsing Related: modify.go -- delta building and attribute encoding Related: filter_modify.go -- SDK entry point and handleFilterUpdate |
|
component/bgp/plugins/filter_modify/yang
Package yang embeds and registers the modify-filter plugin's YANG configuration schema module.
|
Package yang embeds and registers the modify-filter plugin's YANG configuration schema module. |
|
component/bgp/plugins/filter_path_asn
Design: docs/architecture/bgp/filter-path-asn.md -- the reject-asn filter plugin Detail: register_command.go -- the YANG command nodes and the in-core forwarders Detail: curated.go -- the annotation table and the transit-free set Related: filter_path_asn.go -- the SDK entry point that installs handleCommand
|
Design: docs/architecture/bgp/filter-path-asn.md -- the reject-asn filter plugin Detail: register_command.go -- the YANG command nodes and the in-core forwarders Detail: curated.go -- the annotation table and the transit-free set Related: filter_path_asn.go -- the SDK entry point that installs handleCommand |
|
component/bgp/plugins/filter_path_asn/yang
Package yang embeds and registers the YANG schema module for the reject-asn filter.
|
Package yang embeds and registers the YANG schema module for the reject-asn filter. |
|
component/bgp/plugins/filter_prefix
Design: docs/architecture/core-design.md -- prefix-list filter plugin Detail: match.go -- prefix matching algorithm and update evaluator Detail: config.go -- bgp/policy/prefix-list config parsing
|
Design: docs/architecture/core-design.md -- prefix-list filter plugin Detail: match.go -- prefix matching algorithm and update evaluator Detail: config.go -- bgp/policy/prefix-list config parsing |
|
component/bgp/plugins/filter_prefix/yang
Package yang embeds and registers the prefix-filter plugin's YANG configuration schema module.
|
Package yang embeds and registers the prefix-filter plugin's YANG configuration schema module. |
|
component/bgp/plugins/filter_remove_private_as/yang
Package yang embeds and registers the remove-private-AS filter plugin's YANG configuration schema module.
|
Package yang embeds and registers the remove-private-AS filter plugin's YANG configuration schema module. |
|
component/bgp/plugins/gr
Design: docs/architecture/core-design.md — graceful restart plugin RFC: rfc/short/rfc4724.md RFC: rfc/short/rfc9494.md Detail: gr_state.go — GR state machine (per-peer timers, stale family tracking) Detail: gr_llgr.go — LLGR capability decode, config extraction, CLI decode (RFC 9494)
|
Design: docs/architecture/core-design.md — graceful restart plugin RFC: rfc/short/rfc4724.md RFC: rfc/short/rfc9494.md Detail: gr_state.go — GR state machine (per-peer timers, stale family tracking) Detail: gr_llgr.go — LLGR capability decode, config extraction, CLI decode (RFC 9494) |
|
component/bgp/plugins/gr/yang
Package yang embeds and registers the graceful-restart plugin's YANG configuration schema module.
|
Package yang embeds and registers the graceful-restart plugin's YANG configuration schema module. |
|
component/bgp/plugins/healthcheck
Design: docs/architecture/bgp/healthcheck-plugin.md -- healthcheck config parsing Overview: healthcheck.go -- plugin lifecycle and probe management
|
Design: docs/architecture/bgp/healthcheck-plugin.md -- healthcheck config parsing Overview: healthcheck.go -- plugin lifecycle and probe management |
|
component/bgp/plugins/healthcheck/yang
Package yang embeds and registers the healthcheck plugin's YANG configuration schema module.
|
Package yang embeds and registers the healthcheck plugin's YANG configuration schema module. |
|
component/bgp/plugins/hostname
Design: docs/architecture/core-design.md — hostname capability plugin
|
Design: docs/architecture/core-design.md — hostname capability plugin |
|
component/bgp/plugins/hostname/yang
Package yang embeds and registers the hostname plugin's YANG configuration schema module.
|
Package yang embeds and registers the hostname plugin's YANG configuration schema module. |
|
component/bgp/plugins/llnh
Design: docs/architecture/core-design.md — link-local next-hop plugin RFC: rfc/short/rfc5549.md
|
Design: docs/architecture/core-design.md — link-local next-hop plugin RFC: rfc/short/rfc5549.md |
|
component/bgp/plugins/llnh/yang
Package yang embeds and registers the link-local-nexthop plugin's YANG configuration schema module.
|
Package yang embeds and registers the link-local-nexthop plugin's YANG configuration schema module. |
|
component/bgp/plugins/nlri/evpn
Design: docs/architecture/wire/nlri-evpn.md — EVPN NLRI plugin RFC: rfc/short/rfc7432.md
|
Design: docs/architecture/wire/nlri-evpn.md — EVPN NLRI plugin RFC: rfc/short/rfc7432.md |
|
component/bgp/plugins/nlri/flowspec
Design: docs/architecture/wire/nlri-flowspec.md — FlowSpec NLRI plugin RFC: rfc/short/rfc5575.md Detail: plugin_decode.go — wire-to-JSON decoding and formatting Detail: plugin_encode_text.go — text-to-wire encoding Detail: plugin_protocol.go — stdin/stdout protocol dispatch
|
Design: docs/architecture/wire/nlri-flowspec.md — FlowSpec NLRI plugin RFC: rfc/short/rfc5575.md Detail: plugin_decode.go — wire-to-JSON decoding and formatting Detail: plugin_encode_text.go — text-to-wire encoding Detail: plugin_protocol.go — stdin/stdout protocol dispatch |
|
component/bgp/plugins/nlri/flowspec/yang
Package yang embeds and registers the FlowSpec match components that augment the announce command tree.
|
Package yang embeds and registers the FlowSpec match components that augment the announce command tree. |
|
component/bgp/plugins/nlri/labeled
Design: docs/architecture/wire/nlri.md — labeled unicast NLRI plugin RFC: rfc/short/rfc8277.md
|
Design: docs/architecture/wire/nlri.md — labeled unicast NLRI plugin RFC: rfc/short/rfc8277.md |
|
component/bgp/plugins/nlri/ls
Design: docs/architecture/wire/nlri-bgpls.md — BGP-LS attribute TLV framework RFC: rfc/short/rfc7752.md — BGP-LS attribute type 29 TLV format Overview: types.go — core types, TLV constants, and helper functions Detail: attr_node.go — node attribute TLV types Detail: attr_link.go — link attribute TLV types Detail: attr_prefix.go — prefix attribute TLV types Detail: attr_srv6.go — SRv6 attribute TLV types Detail: register_attr.go — attribute TLV registration
|
Design: docs/architecture/wire/nlri-bgpls.md — BGP-LS attribute TLV framework RFC: rfc/short/rfc7752.md — BGP-LS attribute type 29 TLV format Overview: types.go — core types, TLV constants, and helper functions Detail: attr_node.go — node attribute TLV types Detail: attr_link.go — link attribute TLV types Detail: attr_prefix.go — prefix attribute TLV types Detail: attr_srv6.go — SRv6 attribute TLV types Detail: register_attr.go — attribute TLV registration |
|
component/bgp/plugins/nlri/mup
Design: docs/architecture/wire/nlri.md — MUP NLRI prefix encoding helpers RFC: rfc/short/draft-ietf-bess-mup-safi.md — MUP SAFI encoding
|
Design: docs/architecture/wire/nlri.md — MUP NLRI prefix encoding helpers RFC: rfc/short/draft-ietf-bess-mup-safi.md — MUP SAFI encoding |
|
component/bgp/plugins/nlri/mvpn
Design: docs/architecture/wire/nlri.md — MVPN NLRI plugin
|
Design: docs/architecture/wire/nlri.md — MVPN NLRI plugin |
|
component/bgp/plugins/nlri/rtc
Design: docs/architecture/wire/nlri.md — route target constraint plugin RFC: rfc/short/rfc4684.md
|
Design: docs/architecture/wire/nlri.md — route target constraint plugin RFC: rfc/short/rfc4684.md |
|
component/bgp/plugins/nlri/srpolicy
Design: docs/architecture/wire/nlri.md -- SR-Policy NLRI plugin RFC: rfc/short/rfc9830.md -- SR-Policy NLRI wire format (SAFI 73)
|
Design: docs/architecture/wire/nlri.md -- SR-Policy NLRI plugin RFC: rfc/short/rfc9830.md -- SR-Policy NLRI wire format (SAFI 73) |
|
component/bgp/plugins/nlri/vpls
Design: docs/architecture/wire/nlri.md — VPLS NLRI plugin RFC: rfc/short/rfc4761.md
|
Design: docs/architecture/wire/nlri.md — VPLS NLRI plugin RFC: rfc/short/rfc4761.md |
|
component/bgp/plugins/nlri/vpn
Design: docs/architecture/wire/nlri.md — VPN NLRI plugin RFC: rfc/short/rfc4364.md
|
Design: docs/architecture/wire/nlri.md — VPN NLRI plugin RFC: rfc/short/rfc4364.md |
|
component/bgp/plugins/rib
Design: docs/architecture/plugin/rib-storage-design.md — best-path selection Overview: rib.go — RIB plugin core types and event handlers Related: rib_attr_format.go — attribute formatting (asPathLength, firstASInPath shared concern) Related: rib_commands.go — extractCandidate, gatherCandidates Related: rib_pipeline_best.go — best-path pipeline for show bgp rib best commands Related: rib_bestchange.go — best-path change tracking and Bus publishing
|
Design: docs/architecture/plugin/rib-storage-design.md — best-path selection Overview: rib.go — RIB plugin core types and event handlers Related: rib_attr_format.go — attribute formatting (asPathLength, firstASInPath shared concern) Related: rib_commands.go — extractCandidate, gatherCandidates Related: rib_pipeline_best.go — best-path pipeline for show bgp rib best commands Related: rib_bestchange.go — best-path change tracking and Bus publishing |
|
component/bgp/plugins/rib/pool
Package pool holds the per-attribute-type BGP path-attribute pools used for fine-grained RIB deduplication.
|
Package pool holds the per-attribute-type BGP path-attribute pools used for fine-grained RIB deduplication. |
|
component/bgp/plugins/rib/storage
Package storage implements the per-peer, per-family RIB storage with per-attribute-type deduplication.
|
Package storage implements the per-peer, per-family RIB storage with per-attribute-type deduplication. |
|
component/bgp/plugins/rib/yang
Package yang embeds and registers the BGP RIB YANG schema modules.
|
Package yang embeds and registers the BGP RIB YANG schema modules. |
|
component/bgp/plugins/role
Design: docs/architecture/core-design.md — BGP role plugin RFC: rfc/short/rfc9234.md Detail: otc.go — OTC attribute processing (ingress/egress) Detail: config.go — per-peer role config parsing (import/export)
|
Design: docs/architecture/core-design.md — BGP role plugin RFC: rfc/short/rfc9234.md Detail: otc.go — OTC attribute processing (ingress/egress) Detail: config.go — per-peer role config parsing (import/export) |
|
component/bgp/plugins/role/yang
Package yang embeds and registers the BGP role YANG schema module.
|
Package yang embeds and registers the BGP role YANG schema module. |
|
component/bgp/plugins/route_refresh
Design: docs/architecture/core-design.md — route refresh capability plugin RFC: rfc/short/rfc2918.md — route refresh capability RFC: rfc/short/rfc7313.md — enhanced route refresh
|
Design: docs/architecture/core-design.md — route refresh capability plugin RFC: rfc/short/rfc2918.md — route refresh capability RFC: rfc/short/rfc7313.md — enhanced route refresh |
|
component/bgp/plugins/route_refresh/handler
Design: docs/architecture/api/commands.md — BGP route refresh command handlers Overview: ../register.go — bgp-route-refresh SDK plugin registration
|
Design: docs/architecture/api/commands.md — BGP route refresh command handlers Overview: ../register.go — bgp-route-refresh SDK plugin registration |
|
component/bgp/plugins/route_refresh/yang
Package yang embeds and registers the BGP route-refresh YANG schema modules.
|
Package yang embeds and registers the BGP route-refresh YANG schema modules. |
|
component/bgp/plugins/rpki
Design: docs/architecture/plugin/rib-storage-design.md -- ASPA record cache Overview: rpki.go -- plugin using this cache for ASPA path verification Related: roa_cache.go -- ROA cache following the same pattern
|
Design: docs/architecture/plugin/rib-storage-design.md -- ASPA record cache Overview: rpki.go -- plugin using this cache for ASPA path verification Related: roa_cache.go -- ROA cache following the same pattern |
|
component/bgp/plugins/rpki/yang
Package yang embeds and registers the RPKI YANG schema module.
|
Package yang embeds and registers the RPKI YANG schema module. |
|
component/bgp/plugins/rpki_decorator
Package rpki_decorator provides the bgp-rpki-decorator plugin.
|
Package rpki_decorator provides the bgp-rpki-decorator plugin. |
|
component/bgp/plugins/rpki_decorator/yang
Package yang embeds and registers the RPKI decorator YANG schema module.
|
Package yang embeds and registers the RPKI decorator YANG schema module. |
|
component/bgp/plugins/rr/yang
Package yang embeds and registers the BGP route-reflector command YANG schema module.
|
Package yang embeds and registers the BGP route-reflector command YANG schema module. |
|
component/bgp/plugins/rs/yang
Package yang embeds and registers the BGP route-server configuration YANG schema module.
|
Package yang embeds and registers the BGP route-server configuration YANG schema module. |
|
component/bgp/plugins/softver
Design: docs/architecture/core-design.md — software-version capability plugin
|
Design: docs/architecture/core-design.md — software-version capability plugin |
|
component/bgp/plugins/softver/yang
Package yang embeds and registers the BGP software-version capability YANG schema module.
|
Package yang embeds and registers the BGP software-version capability YANG schema module. |
|
component/bgp/plugins/watchdog
Design: docs/architecture/rib-transition.md — watchdog plugin extraction Detail: server.go — command dispatch and state management Detail: config.go — config tree parser Detail: pool.go — route pool management
|
Design: docs/architecture/rib-transition.md — watchdog plugin extraction Detail: server.go — command dispatch and state management Detail: config.go — config tree parser Detail: pool.go — route pool management |
|
component/bgp/reactor
RFC: rfc/short/rfc4271.md -- Adj-RIB-Out (Section 3.2) and the Update-Send Process (Section 9.2) Design: docs/architecture/update-building.md -- the API origination rail this table guards Overview: reactor_api_batch.go -- announceBatchToPeers and withdrawBatchFromPeers, the only writers Related: forward_dedup.go -- the fan-out's per-call dedup, which shares a BUILD rather than suppressing a SEND
|
RFC: rfc/short/rfc4271.md -- Adj-RIB-Out (Section 3.2) and the Update-Send Process (Section 9.2) Design: docs/architecture/update-building.md -- the API origination rail this table guards Overview: reactor_api_batch.go -- announceBatchToPeers and withdrawBatchFromPeers, the only writers Related: forward_dedup.go -- the fan-out's per-call dedup, which shares a BUILD rather than suppressing a SEND |
|
component/bgp/reactor/filter
Design: docs/architecture/core-design.md — route loop detection ingress filter RFC: rfc/short/rfc4271.md RFC: rfc/short/rfc4456.md
|
Design: docs/architecture/core-design.md — route loop detection ingress filter RFC: rfc/short/rfc4271.md RFC: rfc/short/rfc4456.md |
|
component/bgp/reactor/filter/yang
Package yang embeds and registers the BGP loop-detection filter YANG schema module.
|
Package yang embeds and registers the BGP loop-detection filter YANG schema module. |
|
component/bgp/redistribute
Package redistribute bridges BGP RIB best-path changes into the generic redistribution subsystem and injects redistributed routes back as BGP updates.
|
Package redistribute bridges BGP RIB best-path changes into the generic redistribution subsystem and injects redistributed routes back as BGP updates. |
|
component/bgp/rib
Package rib implements the BGP Routing Information Base with per-attribute-type deduplication.
|
Package rib implements the BGP Routing Information Base with per-attribute-type deduplication. |
|
component/bgp/route
Package route parses text-format BGP route definitions into wire-ready attributes and NLRI.
|
Package route parses text-format BGP route definitions into wire-ready attributes and NLRI. |
|
component/bgp/server
Package server provides BGP-specific event delivery and dispatch for the plugin server.
|
Package server provides BGP-specific event delivery and dispatch for the plugin server. |
|
component/bgp/textparse
Package textparse provides a zero-allocation tokenizer and keyword resolution for BGP text commands.
|
Package textparse provides a zero-allocation tokenizer and keyword resolution for BGP text commands. |
|
component/bgp/transaction
Package transaction manages named BGP commits that queue route announcements and withdrawals until they are ended or rolled back.
|
Package transaction manages named BGP commits that queue route announcements and withdrawals until they are ended or rolled back. |
|
component/bgp/types
Package types defines shared BGP-specific types for routes, next-hops, and reactor interfaces.
|
Package types defines shared BGP-specific types for routes, next-hops, and reactor interfaces. |
|
component/bgp/wireu
Package wireu ("wire UPDATE") implements lazy-parsed BGP UPDATE messages with zero-copy iterators over wire bytes.
|
Package wireu ("wire UPDATE") implements lazy-parsed BGP UPDATE messages with zero-copy iterators over wire bytes. |
|
component/bgp/yang
Package schema embeds the YANG schemas for BGP configuration and API.
|
Package schema embeds the YANG schemas for BGP configuration and API. |
|
component/cli
Package cli provides a unified interactive TUI for config editing, CLI, and SSH sessions.
|
Package cli provides a unified interactive TUI for config editing, CLI, and SSH sessions. |
|
component/cli/client
Design: docs/architecture/core-design.md — interactive CLI Related: ../../../../cmd/ze/internal/cmdutil/cmdutil.go — shared command utilities (uses BuildCommandTree)
|
Design: docs/architecture/core-design.md — interactive CLI Related: ../../../../cmd/ze/internal/cmdutil/cmdutil.go — shared command utilities (uses BuildCommandTree) |
|
component/cli/contract
Design: docs/architecture/core-design.md -- component boundaries (cli/contract)
|
Design: docs/architecture/core-design.md -- component boundaries (cli/contract) |
|
component/cli/testing
Design: docs/architecture/config/yang-config-design.md — editor test infrastructure
|
Design: docs/architecture/config/yang-config-design.md — editor test infrastructure |
|
component/cmd/clear
Design: docs/architecture/api/commands.md -- clear verb (generic verb shell)
|
Design: docs/architecture/api/commands.md -- clear verb (generic verb shell) |
|
component/cmd/clear/yang
Package yang embeds and registers the CLI clear command YANG schema modules.
|
Package yang embeds and registers the CLI clear command YANG schema modules. |
|
component/cmd/delete
Design: docs/architecture/api/commands.md — delete verb command handlers
|
Design: docs/architecture/api/commands.md — delete verb command handlers |
|
component/cmd/delete/yang
Package yang embeds and registers the CLI delete command YANG schema modules.
|
Package yang embeds and registers the CLI delete command YANG schema modules. |
|
component/cmd/log
Design: docs/architecture/api/commands.md — BGP log level command handlers
|
Design: docs/architecture/api/commands.md — BGP log level command handlers |
|
component/cmd/log/yang
Package yang embeds and registers the BGP log command YANG schema modules.
|
Package yang embeds and registers the BGP log command YANG schema modules. |
|
component/cmd/meta
Design: docs/architecture/api/commands.md — BGP command discovery and plugin configuration
|
Design: docs/architecture/api/commands.md — BGP command discovery and plugin configuration |
|
component/cmd/meta/yang
Package yang embeds and registers the BGP meta command YANG schema modules.
|
Package yang embeds and registers the BGP meta command YANG schema modules. |
|
component/cmd/metrics
Design: docs/architecture/api/commands.md — BGP metrics command handlers
|
Design: docs/architecture/api/commands.md — BGP metrics command handlers |
|
component/cmd/metrics/yang
Package yang embeds and registers the BGP metrics command YANG schema modules.
|
Package yang embeds and registers the BGP metrics command YANG schema modules. |
|
component/cmd/monitor
Design: docs/architecture/api/commands.md — monitor verb root (unowned)
|
Design: docs/architecture/api/commands.md — monitor verb root (unowned) |
|
component/cmd/monitor/yang
Package yang embeds and registers the CLI monitor command YANG module.
|
Package yang embeds and registers the CLI monitor command YANG module. |
|
component/cmd/set
Design: docs/architecture/api/commands.md — set verb command handlers
|
Design: docs/architecture/api/commands.md — set verb command handlers |
|
component/cmd/set/yang
Package yang embeds and registers the CLI set command and API YANG modules.
|
Package yang embeds and registers the CLI set command and API YANG modules. |
|
component/cmd/show
Design: docs/architecture/api/commands.md -- show verb command handlers
|
Design: docs/architecture/api/commands.md -- show verb command handlers |
|
component/cmd/show/yang
Package yang embeds and registers the CLI show command and API YANG modules.
|
Package yang embeds and registers the CLI show command and API YANG modules. |
|
component/cmd/subscribe
Design: docs/architecture/api/commands.md — BGP event subscription handlers
|
Design: docs/architecture/api/commands.md — BGP event subscription handlers |
|
component/cmd/subscribe/yang
Package yang embeds and registers the CLI subscribe command and API YANG modules.
|
Package yang embeds and registers the CLI subscribe command and API YANG modules. |
|
component/cmd/update
Design: docs/architecture/api/commands.md — update verb command handlers
|
Design: docs/architecture/api/commands.md — update verb command handlers |
|
component/cmd/update/yang
Package yang embeds and registers the CLI update command and API YANG modules.
|
Package yang embeds and registers the CLI update command and API YANG modules. |
|
component/command
Package command provides shared types and logic for operational command execution.
|
Package command provides shared types and logic for operational command execution. |
|
component/command/grammar
Design: docs/architecture/cli/command-namespacing.md -- CLI command grammar
|
Design: docs/architecture/cli/command-namespacing.md -- CLI command grammar |
|
component/command/registry
Package registry holds the process-wide registries for ze's command-line surface: offline local handlers, top-level root commands, and owner-backed root command handlers.
|
Package registry holds the process-wide registries for ze's command-line surface: offline local handlers, top-level root commands, and owner-backed root command handlers. |
|
component/config
Design: docs/architecture/config/syntax.md — config parsing and loading
|
Design: docs/architecture/config/syntax.md — config parsing and loading |
|
component/config/archive
Package archive saves committed configuration to file and HTTP locations on commit, manual, and scheduled triggers.
|
Package archive saves committed configuration to file and HTTP locations on commit, manual, and scheduled triggers. |
|
component/config/archive/cmd
Package cmd handles the config archive trigger command that archives the running configuration.
|
Package cmd handles the config archive trigger command that archives the running configuration. |
|
component/config/archive/yang
Package yang embeds and registers the config archive API YANG module.
|
Package yang embeds and registers the config archive API YANG module. |
|
component/config/claims
Design: docs/architecture/config/yang-config-design.md — config claim model Related: schema.go -- builds the merged config-schema tree Audit walks Related: allowlist.json -- recorded exceptions, one reason and one owner each
|
Design: docs/architecture/config/yang-config-design.md — config claim model Related: schema.go -- builds the merged config-schema tree Audit walks Related: allowlist.json -- recorded exceptions, one reason and one owner each |
|
component/config/cli
Design: docs/architecture/config/syntax.md — stdin ("-") wiring for config editor commands Overview: main.go — dispatch and exit codes
|
Design: docs/architecture/config/syntax.md — stdin ("-") wiring for config editor commands Overview: main.go — dispatch and exit codes |
|
component/config/env
Design: docs/architecture/config/environment.md — environment variable handling
|
Design: docs/architecture/config/environment.md — environment variable handling |
|
component/config/infra
Package infra holds the always-on daemon-startup contract between the hub and whichever routing engine constructs a reactor.
|
Package infra holds the always-on daemon-startup contract between the hub and whichever routing engine constructs a reactor. |
|
component/config/migration
Package migration rewrites deprecated configuration syntax into its current equivalent.
|
Package migration rewrites deprecated configuration syntax into its current equivalent. |
|
component/config/redistribute
Package redistribute moves routes between routing protocols with origin-based loop prevention.
|
Package redistribute moves routes between routing protocols with origin-based loop prevention. |
|
component/config/redistribute/yang
Package yang embeds and registers the redistribute configuration YANG module.
|
Package yang embeds and registers the redistribute configuration YANG module. |
|
component/config/schema/cli
Design: docs/architecture/config/yang-config-design.md — schema CLI
|
Design: docs/architecture/config/yang-config-design.md — schema CLI |
|
component/config/secret
Design: docs/architecture/config/syntax.md — sensitive value encoding
|
Design: docs/architecture/config/syntax.md — sensitive value encoding |
|
component/config/storage
Design: docs/architecture/zefs-format.md -- config storage abstraction Detail: blob.go -- blob storage implementation wrapping zefs
|
Design: docs/architecture/zefs-format.md -- config storage abstraction Detail: blob.go -- blob storage implementation wrapping zefs |
|
component/config/storage/cli
Design: docs/architecture/zefs-format.md -- ZeFS blob store CLI
|
Design: docs/architecture/zefs-format.md -- ZeFS blob store CLI |
|
component/config/system
Package system manages system-wide configuration including identity, DNS, console, connection tracking, and self-update.
|
Package system manages system-wide configuration including identity, DNS, console, connection tracking, and self-update. |
|
component/config/system/yang
Package yang embeds and registers the system configuration YANG module.
|
Package yang embeds and registers the system configuration YANG module. |
|
component/config/transaction
Package transaction implements the stream-based config transaction protocol.
|
Package transaction implements the stream-based config transaction protocol. |
|
component/config/transaction/events
Package events defines event constants for config transactions.
|
Package events defines event constants for config transactions. |
|
component/config/yang
Design: docs/architecture/config/yang-config-design.md — YANG schema handling
|
Design: docs/architecture/config/yang-config-design.md — YANG schema handling |
|
component/config/yang/cli
Design: docs/architecture/config/yang-config-design.md -- YANG analysis tool Related: tree.go -- unified analysis tree builder Related: format.go -- output formatting for collisions and trees
|
Design: docs/architecture/config/yang-config-design.md -- YANG analysis tool Related: tree.go -- unified analysis tree builder Related: format.go -- output formatting for collisions and trees |
|
component/debug/yang
Package yang registers debug YANG modules and validates debug flag and scope names against them.
|
Package yang registers debug YANG modules and validates debug flag and scope names against them. |
|
component/doctor/cmd
Package cmd handles the show doctor command that runs system and plugin diagnostic checks.
|
Package cmd handles the show doctor command that runs system and plugin diagnostic checks. |
|
component/doctor/yang
Package yang embeds and registers the doctor command YANG module.
|
Package yang embeds and registers the doctor command YANG module. |
|
component/engine
Package engine implements the top-level supervisor that composes Bus, ConfigProvider, and PluginManager.
|
Package engine implements the top-level supervisor that composes Bus, ConfigProvider, and PluginManager. |
|
component/firewall
Package firewall defines the abstract data model for ze-managed nftables firewall tables.
|
Package firewall defines the abstract data model for ze-managed nftables firewall tables. |
|
component/firewall/cli
Package firewall provides the ze firewall subcommand for viewing nftables firewall state (tables, chains, rules, counters).
|
Package firewall provides the ze firewall subcommand for viewing nftables firewall state (tables, chains, rules, counters). |
|
component/firewall/cmd
Package cmd provides formatting functions for firewall CLI output.
|
Package cmd provides formatting functions for firewall CLI output. |
|
component/firewall/plugins/domain/yang
Package yang embeds and registers the firewall domain-group command and schema YANG modules.
|
Package yang embeds and registers the firewall domain-group command and schema YANG modules. |
|
component/firewall/plugins/irr
Design: docs/architecture/firewall/firewall-irr.md -- firewall IRR plugin entry point Related: doctor.go -- the ze doctor check over the same references verifyRefs guards
|
Design: docs/architecture/firewall/firewall-irr.md -- firewall IRR plugin entry point Related: doctor.go -- the ze doctor check over the same references verifyRefs guards |
|
component/firewall/plugins/irr/yang
Package yang embeds and registers the firewall IRR command and schema YANG modules.
|
Package yang embeds and registers the firewall IRR command and schema YANG modules. |
|
component/firewall/yang
Package yang embeds and registers the firewall component's YANG schema modules.
|
Package yang embeds and registers the firewall component's YANG schema modules. |
|
component/gnmi
Package gnmi implements a gNMI server exposing Ze's YANG-modeled configuration over gRPC.
|
Package gnmi implements a gNMI server exposing Ze's YANG-modeled configuration over gRPC. |
|
component/gnmi/yang
Package yang embeds and registers the gNMI component's YANG schema module.
|
Package yang embeds and registers the gNMI component's YANG schema module. |
|
component/gokrazy
Design: (none — new component for gokrazy management proxy)
|
Design: (none — new component for gokrazy management proxy) |
|
component/gtsm
Design: rfc/short/rfc5082.md -- GTSM, the TTL 255 rule for related ICMP messages Overview: route_linux.go -- the RTAX_HOPLIMIT host route this package installs Related: internal/core/network/ttl_linux.go -- the socket options that carry GTSM for the main protocol packets
|
Design: rfc/short/rfc5082.md -- GTSM, the TTL 255 rule for related ICMP messages Overview: route_linux.go -- the RTAX_HOPLIMIT host route this package installs Related: internal/core/network/ttl_linux.go -- the socket options that carry GTSM for the main protocol packets |
|
component/host
Design: docs/architecture/host/inventory.md -- hardware inventory detection
|
Design: docs/architecture/host/inventory.md -- hardware inventory detection |
|
component/hub/yang
Package yang embeds and registers the hub component's YANG schema module.
|
Package yang embeds and registers the hub component's YANG schema module. |
|
component/iface
Package iface implements the interface monitoring and management plugin.
|
Package iface implements the interface monitoring and management plugin. |
|
component/iface/cli
Design: docs/architecture/iface/management.md -- Interface CLI commands
|
Design: docs/architecture/iface/management.md -- Interface CLI commands |
|
component/iface/cmd
Design: docs/features/interfaces.md — Interface RPC handlers for daemon dispatch Related: manage.go — command registration and server wiring for this package
|
Design: docs/features/interfaces.md — Interface RPC handlers for daemon dispatch Related: manage.go — command registration and server wiring for this package |
|
component/iface/yang
Package yang embeds and registers the interface component's YANG schema modules.
|
Package yang embeds and registers the interface component's YANG schema modules. |
|
component/ike/cmd
Package cmd registers the IPsec VPN operational command handlers.
|
Package cmd registers the IPsec VPN operational command handlers. |
|
component/ike/crypto
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation.
|
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation. |
|
component/ike/dataplane
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends.
|
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends. |
|
component/ike/engine
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14
|
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14 |
|
component/ike/ipsec
Package ipsec defines the IPsec data model types and parses their configuration.
|
Package ipsec defines the IPsec data model types and parses their configuration. |
|
component/ike/ipsec/yang
Package yang embeds and registers the IPsec configuration YANG schema module.
|
Package yang embeds and registers the IPsec configuration YANG schema module. |
|
component/ike/transport
Package transport implements the IKE UDP transport with NAT detection and keepalive handling.
|
Package transport implements the IKE UDP transport with NAT detection and keepalive handling. |
|
component/ike/wire
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14)
|
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14) |
|
component/ike/yang
Package yang embeds and registers the IPsec operational command YANG schema module.
|
Package yang embeds and registers the IPsec operational command YANG schema module. |
|
component/kernelcap
Package kernelcap enrolls the kernel features a configured subsystem cannot work without, so ze doctor reports a missing one, the daemon refuses to start, a reload is refused and ze config validate fails, all from one verdict.
|
Package kernelcap enrolls the kernel features a configured subsystem cannot work without, so ze doctor reports a missing one, the daemon refuses to start, a reload is refused and ze config validate fails, all from one verdict. |
|
component/l2tp
Package l2tp implements L2TPv2 (RFC 2661) wire format parsing and serialization for ze's L2TP subsystem.
|
Package l2tp implements L2TPv2 (RFC 2661) wire format parsing and serialization for ze's L2TP subsystem. |
|
component/l2tp/cli
Design: docs/architecture/core-design.md -- l2tp offline CLI
|
Design: docs/architecture/core-design.md -- l2tp offline CLI |
|
component/l2tp/cmd
Design: docs/guide/l2tp.md -- L2TP CLI handlers
|
Design: docs/guide/l2tp.md -- L2TP CLI handlers |
|
component/l2tp/cmd/yang
Package yang embeds and registers the L2TP operational command YANG schema module.
|
Package yang embeds and registers the L2TP operational command YANG schema module. |
|
component/l2tp/events
Package events defines the typed EventBus handle for L2TP subscriber route-change events.
|
Package events defines the typed EventBus handle for L2TP subscriber route-change events. |
|
component/l2tp/plugins/authlocal/yang
Package yang embeds and registers the L2TP local authentication YANG schema module.
|
Package yang embeds and registers the L2TP local authentication YANG schema module. |
|
component/l2tp/plugins/authradius/yang
Package yang embeds and registers the L2TP RADIUS authentication YANG schema module.
|
Package yang embeds and registers the L2TP RADIUS authentication YANG schema module. |
|
component/l2tp/plugins/pool/yang
Package yang embeds and registers the L2TP address pool YANG schema module.
|
Package yang embeds and registers the L2TP address pool YANG schema module. |
|
component/l2tp/plugins/shaper/yang
Package yang embeds and registers the L2TP shaper configuration YANG module.
|
Package yang embeds and registers the L2TP shaper configuration YANG module. |
|
component/l2tp/ppp
Package ppp implements the PPP control plane (LCP, authentication, IPCP, IPv6CP) over chan/unit file descriptors obtained from /dev/ppp.
|
Package ppp implements the PPP control plane (LCP, authentication, IPCP, IPv6CP) over chan/unit file descriptors obtained from /dev/ppp. |
|
component/l2tp/pppoe
Package pppoe implements the PPPoE (RFC 2516) access concentrator for subscriber session management over Ethernet.
|
Package pppoe implements the PPPoE (RFC 2516) access concentrator for subscriber session management over Ethernet. |
|
component/l2tp/pppoe/cmd
Design: docs/architecture/l2tp/bng-5-pppoe.md -- PPPoE CLI handlers
|
Design: docs/architecture/l2tp/bng-5-pppoe.md -- PPPoE CLI handlers |
|
component/l2tp/pppoe/cmd/yang
Package yang embeds and registers the PPPoE command YANG module.
|
Package yang embeds and registers the PPPoE command YANG module. |
|
component/l2tp/pppoe/yang
Package yang embeds and registers the PPPoE API and configuration YANG modules.
|
Package yang embeds and registers the PPPoE API and configuration YANG modules. |
|
component/l2tp/pppoeclient
Package pppoeclient implements a PPPoE client dialer that performs RFC 2516 discovery and kernel session setup.
|
Package pppoeclient implements a PPPoE client dialer that performs RFC 2516 discovery and kernel session setup. |
|
component/l2tp/subscriber
Package subscriber provides the shared subscriber session model, registry, and metrics for PPPoE and L2TP access.
|
Package subscriber provides the shared subscriber session model, registry, and metrics for PPPoE and L2TP access. |
|
component/l2tp/subscriber/cmd
Package cmd registers the show subscriber CLI RPC handlers.
|
Package cmd registers the show subscriber CLI RPC handlers. |
|
component/l2tp/subscriber/cmd/yang
Package yang embeds and registers the subscriber command YANG module.
|
Package yang embeds and registers the subscriber command YANG module. |
|
component/l2tp/subscriber/events
Package events defines the subscriber session event namespace and payloads.
|
Package events defines the subscriber session event namespace and payloads. |
|
component/l2tp/yang
Package yang embeds and registers the L2TP API and configuration YANG modules.
|
Package yang embeds and registers the L2TP API and configuration YANG modules. |
|
component/lg
Package lg provides the looking glass HTTP server for Ze.
|
Package lg provides the looking glass HTTP server for Ze. |
|
component/lg/yang
Package yang embeds and registers the looking-glass configuration YANG module.
|
Package yang embeds and registers the looking-glass configuration YANG module. |
|
component/managed
Design: docs/architecture/fleet-config.md — managed client component
|
Design: docs/architecture/fleet-config.md — managed client component |
|
component/mcp
Package mcp implements the MCP (Model Context Protocol) server surface: JSON-RPC tool dispatch wrapping Ze's command dispatcher, served over the Streamable HTTP transport (streamable.go).
|
Package mcp implements the MCP (Model Context Protocol) server surface: JSON-RPC tool dispatch wrapping Ze's command dispatcher, served over the Streamable HTTP transport (streamable.go). |
|
component/mcp/yang
Package yang embeds and registers the MCP configuration YANG module.
|
Package yang embeds and registers the MCP configuration YANG module. |
|
component/mpls
Package mpls reads the kernel MPLS forwarding table and serves the show mpls forwarding command.
|
Package mpls reads the kernel MPLS forwarding table and serves the show mpls forwarding command. |
|
component/ping/cmd
Package cmd owns the entire ping feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
|
Package cmd owns the entire ping feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules"). |
|
component/pki
Package pki parses, validates, and stores X.509 certificates with show commands and expiry health checks.
|
Package pki parses, validates, and stores X.509 certificates with show commands and expiry health checks. |
|
component/pki/yang
Package yang embeds and registers the PKI API and configuration YANG modules.
|
Package yang embeds and registers the PKI API and configuration YANG modules. |
|
component/plugin
Package plugin provides the plugin infrastructure for ze, including registry management, process lifecycle, hub-based message routing, and event dispatch.
|
Package plugin provides the plugin infrastructure for ze, including registry management, process lifecycle, hub-based message routing, and event dispatch. |
|
component/plugin/all
Package all imports all internal plugins and schema packages, triggering their init() registration.
|
Package all imports all internal plugins and schema packages, triggering their init() registration. |
|
component/plugin/cli
Design: docs/architecture/cli/plugin-modes.md — plugin CLI framework
|
Design: docs/architecture/cli/plugin-modes.md — plugin CLI framework |
|
component/plugin/doctor
Package doctor registers a diagnostic check that verifies configured plugin binaries are present.
|
Package doctor registers a diagnostic check that verifies configured plugin binaries are present. |
|
component/plugin/ipc
Package ipc provides Unix socket pairs and typed RPC for engine-plugin communication.
|
Package ipc provides Unix socket pairs and typed RPC for engine-plugin communication. |
|
component/plugin/manager
Package plugin implements the PluginManager for plugin registration, lifecycle, and capabilities.
|
Package plugin implements the PluginManager for plugin registration, lifecycle, and capabilities. |
|
component/plugin/process
Package process manages plugin process lifecycle, respawn, and event delivery pipelines.
|
Package process manages plugin process lifecycle, respawn, and event delivery pipelines. |
|
component/plugin/registry
Package registry provides compile-time plugin registration and query for CLI dispatch, engine startup, and decode routing.
|
Package registry provides compile-time plugin registration and query for CLI dispatch, engine startup, and decode routing. |
|
component/plugin/server
Package server manages plugin process connections, the 5-stage startup protocol, and command dispatch.
|
Package server manages plugin process connections, the 5-stage startup protocol, and command dispatch. |
|
component/plugin/yang
Package schema embeds the YANG schema for plugin configuration.
|
Package schema embeds the YANG schema for plugin configuration. |
|
component/radius
radiusAuthenticator bridges the RADIUS client to aaa.Authenticator for operator/admin login (SSH, web, MCP).
|
radiusAuthenticator bridges the RADIUS client to aaa.Authenticator for operator/admin login (SSH, web, MCP). |
|
component/radius/yang
Package yang embeds the radius component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the radius component's YANG configuration schema and registers it with the config module registry. |
|
component/resolve
Design: docs/architecture/resolve.md -- Resolution component container
|
Design: docs/architecture/resolve.md -- Resolution component container |
|
component/resolve/cache
Design: docs/architecture/resolve.md -- Shared TTL cache for resolution components
|
Design: docs/architecture/resolve.md -- Shared TTL cache for resolution components |
|
component/resolve/cli
Design: docs/architecture/resolve.md -- Team Cymru ASN resolution CLI
|
Design: docs/architecture/resolve.md -- Team Cymru ASN resolution CLI |
|
component/resolve/cmd
Design: docs/architecture/resolve.md -- resolve command handlers for dispatcher
|
Design: docs/architecture/resolve.md -- resolve command handlers for dispatcher |
|
component/resolve/cymru
Design: docs/architecture/resolve.md -- Team Cymru ASN name resolution Related: ../dns/resolver.go -- DNS resolver used for TXT queries
|
Design: docs/architecture/resolve.md -- Team Cymru ASN name resolution Related: ../dns/resolver.go -- DNS resolver used for TXT queries |
|
component/resolve/dns
Package dns provides a DNS resolver component for Ze.
|
Package dns provides a DNS resolver component for Ze. |
|
component/resolve/irr
Design: (none -- predates documentation)
|
Design: (none -- predates documentation) |
|
component/resolve/irr/store
Design: docs/architecture/resolve.md -- shared IRR prefix resolution + persistence
|
Design: docs/architecture/resolve.md -- shared IRR prefix resolution + persistence |
|
component/resolve/peeringdb
Design: docs/architecture/resolve.md -- PeeringDB client for prefix update
|
Design: docs/architecture/resolve.md -- PeeringDB client for prefix update |
|
component/resolve/yang
Package yang embeds and registers the resolver API YANG module.
|
Package yang embeds and registers the resolver API YANG module. |
|
component/ssh
Package ssh implements the SSH server that serves the interactive CLI over public-key-authenticated sessions.
|
Package ssh implements the SSH server that serves the interactive CLI over public-key-authenticated sessions. |
|
component/ssh/yang
Package yang embeds and registers the SSH configuration YANG module.
|
Package yang embeds and registers the SSH configuration YANG module. |
|
component/storage
Package storage runs periodic SMART disk health checks and self-test scheduling for block devices.
|
Package storage runs periodic SMART disk health checks and self-test scheduling for block devices. |
|
component/storage/yang
Package yang embeds the storage component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the storage component's YANG configuration schema and registers it with the config module registry. |
|
component/support
Package support collects host and configuration diagnostics into a sanitized tech-support archive.
|
Package support collects host and configuration diagnostics into a sanitized tech-support archive. |
|
component/sysctl
Design: docs/architecture/core-design.md -- sysctl plugin Detail: backend.go -- platform-specific read/write Detail: register.go -- plugin registration and EventBus wiring
|
Design: docs/architecture/core-design.md -- sysctl plugin Detail: backend.go -- platform-specific read/write Detail: register.go -- plugin registration and EventBus wiring |
|
component/sysctl/cli
Design: docs/architecture/core-design.md -- sysctl offline CLI
|
Design: docs/architecture/core-design.md -- sysctl offline CLI |
|
component/sysctl/events
Package events defines event constants for the sysctl plugin.
|
Package events defines event constants for the sysctl plugin. |
|
component/sysctl/yang
Package yang embeds the sysctl component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the sysctl component's YANG configuration schema and registers it with the config module registry. |
|
component/sysrib
Design: docs/architecture/core-design.md -- System RIB plugin Related: nhresolver.go -- recursive next-hop resolution using Loc-RIB LPM Related: ecmp.go -- ECMP path collection from equal-cost protocol routes
|
Design: docs/architecture/core-design.md -- System RIB plugin Related: nhresolver.go -- recursive next-hop resolution using Loc-RIB LPM Related: ecmp.go -- ECMP path collection from equal-cost protocol routes |
|
component/sysrib/events
Package events defines event constants and typed event handles for the system RIB plugin.
|
Package events defines event constants and typed event handles for the system RIB plugin. |
|
component/sysrib/yang
Package yang embeds the sysrib component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the sysrib component's YANG configuration schema and registers it with the config module registry. |
|
component/tacacs
TacacsAccountant implements aaa.Accountant for TACACS+ accounting.
|
TacacsAccountant implements aaa.Accountant for TACACS+ accounting. |
|
component/tacacs/cli
Design: docs/architecture/aaa-tacacs.md -- TACACS+ AAA operational CLI
|
Design: docs/architecture/aaa-tacacs.md -- TACACS+ AAA operational CLI |
|
component/tacacs/yang
Package yang embeds the tacacs component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the tacacs component's YANG configuration schema and registers it with the config module registry. |
|
component/telemetry/collector
Package collector reads Netdata-compatible OS metrics from procfs and sysfs and feeds them into the shared metrics registry.
|
Package collector reads Netdata-compatible OS metrics from procfs and sysfs and feeds them into the shared metrics registry. |
|
component/telemetry/exporter/yang
Package yang embeds the telemetry exporter's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the telemetry exporter's YANG configuration schema and registers it with the config module registry. |
|
component/traceroute/cmd
Package cmd owns the entire traceroute feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
|
Package cmd owns the entire traceroute feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules"). |
|
component/traffic
Package traffic defines the data model for ze-managed tc (traffic control) qdiscs, classes, and filters.
|
Package traffic defines the data model for ze-managed tc (traffic control) qdiscs, classes, and filters. |
|
component/traffic/cli
Package tc provides the ze traffic control subcommand for viewing tc qdisc, class, and filter state on network interfaces.
|
Package tc provides the ze traffic control subcommand for viewing tc qdisc, class, and filter state on network interfaces. |
|
component/traffic/cmd
Package cmd provides formatting functions for traffic control CLI output.
|
Package cmd provides formatting functions for traffic control CLI output. |
|
component/traffic/yang
Package yang embeds the traffic component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the traffic component's YANG configuration schema and registers it with the config module registry. |
|
component/trafficfeature
Package trafficfeature derives neutral per-source traffic feature signals from the observation feed for detection plugins.
|
Package trafficfeature derives neutral per-source traffic feature signals from the observation feed for detection plugins. |
|
component/trafficfeature/cmd
Package cmd registers the show traffic feature CLI handler that surfaces neutral per-source feature signals.
|
Package cmd registers the show traffic feature CLI handler that surfaces neutral per-source feature signals. |
|
component/trafficfeature/cmd/yang
Package yang embeds the traffic-feature command's YANG schema and registers it with the config module registry.
|
Package yang embeds the traffic-feature command's YANG schema and registers it with the config module registry. |
|
component/trafficstat
Package trafficstat aggregates the observation feed into a lazy, consumer-refcounted snapshot of top talkers, ports, and protocols.
|
Package trafficstat aggregates the observation feed into a lazy, consumer-refcounted snapshot of top talkers, ports, and protocols. |
|
component/trafficstat/cmd
Package cmd registers the show and monitor traffic stat CLI handlers.
|
Package cmd registers the show and monitor traffic stat CLI handlers. |
|
component/trafficstat/cmd/yang
Package yang embeds the traffic-stat command's YANG schema and registers it with the config module registry.
|
Package yang embeds the traffic-stat command's YANG schema and registers it with the config module registry. |
|
component/vpp/yang
Package yang embeds the vpp component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the vpp component's YANG configuration schema and registers it with the config module registry. |
|
component/web
Package web provides the ze web interface, including session-based authentication middleware and security headers for all HTTP responses.
|
Package web provides the ze web interface, including session-based authentication middleware and security headers for all HTTP responses. |
|
component/web/testing
Design: docs/architecture/testing/ci-format.md -- web browser test parser Related: runner.go -- .wb test execution and browser control Related: expect.go -- expectation checking
|
Design: docs/architecture/testing/ci-format.md -- web browser test parser Related: runner.go -- .wb test execution and browser control Related: expect.go -- expectation checking |
|
component/web/yang
Package yang embeds the web component's YANG configuration schema and registers it with the config module registry.
|
Package yang embeds the web component's YANG configuration schema and registers it with the config module registry. |
|
core/anomalyevent
Package anomalyevent defines the source-oriented behavioral anomaly detection event contract.
|
Package anomalyevent defines the source-oriented behavioral anomaly detection event contract. |
|
core/audit
Package audit provides Ze's local, append-only structured audit log.
|
Package audit provides Ze's local, append-only structured audit log. |
|
core/bgp/asn
Design: docs/architecture/config/syntax.md — the config tokens an operator types Related: internal/core/bgp/attribute/text.go — AS-path text parsing that calls Parse Related: internal/core/bgp/attribute/text_append.go — AS-path text rendering that calls Append
|
Design: docs/architecture/config/syntax.md — the config tokens an operator types Related: internal/core/bgp/attribute/text.go — AS-path text parsing that calls Parse Related: internal/core/bgp/attribute/text_append.go — AS-path text rendering that calls Append |
|
core/bgp/attribute
Design: docs/architecture/wire/attributes.md — path attribute encoding RFC: rfc/short/rfc4271.md — AS_PATH attribute (Section 5.1.2) RFC: rfc/short/rfc6793.md — 4-byte ASN support in AS_PATH
|
Design: docs/architecture/wire/attributes.md — path attribute encoding RFC: rfc/short/rfc4271.md — AS_PATH attribute (Section 5.1.2) RFC: rfc/short/rfc6793.md — 4-byte ASN support in AS_PATH |
|
core/bgp/capability
Design: docs/architecture/wire/capabilities.md — capability negotiation RFC: rfc/short/rfc5492.md — BGP capability advertisement
|
Design: docs/architecture/wire/capabilities.md — capability negotiation RFC: rfc/short/rfc5492.md — BGP capability advertisement |
|
core/bgp/configop
Package configop defines the config operation labels of the BGP root.
|
Package configop defines the config operation labels of the BGP root. |
|
core/bgp/context
Design: docs/architecture/encoding-context.md — encoding context
|
Design: docs/architecture/encoding-context.md — encoding context |
|
core/bgp/events
Package events defines event constants for the BGP component.
|
Package events defines event constants for the BGP component. |
|
core/bgp/msgtype
Package msgtype owns the BGP message-type code (the 1-octet Type field of the RFC 4271 header) and its RFC-defined values.
|
Package msgtype owns the BGP message-type code (the 1-octet Type field of the RFC 4271 header) and its RFC-defined values. |
|
core/bgp/nlri
Design: docs/architecture/wire/nlri.md — NLRI encoding and decoding RFC: rfc/short/rfc4271.md — IPv4 unicast NLRI (Section 4.3) RFC: rfc/short/rfc4760.md — multiprotocol NLRI extensions
|
Design: docs/architecture/wire/nlri.md — NLRI encoding and decoding RFC: rfc/short/rfc4271.md — IPv4 unicast NLRI (Section 4.3) RFC: rfc/short/rfc4760.md — multiprotocol NLRI extensions |
|
core/bgp/nlri/nlrisplit
Design: docs/architecture/rib/unified-locrib.md -- per-family NLRI split
|
Design: docs/architecture/rib/unified-locrib.md -- per-family NLRI split |
|
core/bgp/nlri/nlritype
Design: rfc/short/rfc7606.md -- Section 5.4, typed NLRI RFC: rfc/short/rfc7606.md -- Section 5.4 discard of unrecognized NLRI types Related: ../nlrisplit/nlrisplit.go -- the per-family framing this registry carves with
|
Design: rfc/short/rfc7606.md -- Section 5.4, typed NLRI RFC: rfc/short/rfc7606.md -- Section 5.4 discard of unrecognized NLRI types Related: ../nlrisplit/nlrisplit.go -- the per-family framing this registry carves with |
|
core/bgp/ribevents
Package ribevents defines the (bgp-rib, ...) event constants and typed event handles: the best-path change contract between the BGP RIB and everything downstream of it.
|
Package ribevents defines the (bgp-rib, ...) event constants and typed event handles: the best-path change contract between the BGP RIB and everything downstream of it. |
|
core/bgp/routeaction
Package routeaction owns the typed route-action vocabulary shared by the BGP engine and the always-on route consumers (sysrib, the FIB backends, the best-change event contract).
|
Package routeaction owns the typed route-action vocabulary shared by the BGP engine and the always-on route consumers (sysrib, the FIB backends, the best-change event contract). |
|
core/bgp/wire
Package wire provides zero-allocation buffer writing for BGP message encoding.
|
Package wire provides zero-allocation buffer writing for BGP message encoding. |
|
core/bufpool
Package bufpool provides a sync.Pool-seeded-for-peak byte-slice pool for protocol subsystems that share a buffer path across multiple goroutines (TACACS+ AAA, plugin-rpc framing, BGP BMP sender, etc.).
|
Package bufpool provides a sync.Pool-seeded-for-peak byte-slice pool for protocol subsystems that share a buffer path across multiple goroutines (TACACS+ AAA, plugin-rpc framing, BGP BMP sender, etc.). |
|
core/callsink
Package callsink is the neutral registration seam between the PPPoE access concentrator and the L2TP tunnel engine, letting a PADS-completed PPPoE subscriber be relayed into an L2TP incoming call (the LAC role, RFC 2661) WITHOUT the pppoe package importing the l2tp package.
|
Package callsink is the neutral registration seam between the PPPoE access concentrator and the L2TP tunnel engine, letting a PADS-completed PPPoE subscriber be relayed into an L2TP incoming call (the LAC role, RFC 2661) WITHOUT the pppoe package importing the l2tp package. |
|
core/capture
Package capture defines the on-disk format of a Ze protocol event capture: a JSONL stream whose first line is a version header and whose every later line is one event.
|
Package capture defines the on-disk format of a Ze protocol event capture: a JSONL stream whose first line is a version header and whose every later line is one event. |
|
core/ccm
Package ccm implements Counter with CBC-MAC, the authenticated encryption block cipher mode of RFC 3610 and NIST SP 800-38C.
|
Package ccm implements Counter with CBC-MAC, the authenticated encryption block cipher mode of RFC 3610 and NIST SP 800-38C. |
|
core/cliio
Design: ai/rules/cli.md -- "-" means stdin/stdout across every command
|
Design: ai/rules/cli.md -- "-" means stdin/stdout across every command |
|
core/clock
Package clock provides injectable abstractions for time operations.
|
Package clock provides injectable abstractions for time operations. |
|
core/configorder
Design: docs/architecture/config/syntax.md -- the entry order of a YANG list on the plugin config path RFC: rfc/short/rfc7950.md -- Section 6.2, what a YANG identifier can start with
|
Design: docs/architecture/config/syntax.md -- the entry order of a YANG list on the plugin config path RFC: rfc/short/rfc7950.md -- Section 6.2, what a YANG identifier can start with |
|
core/configvalue
Design: docs/architecture/config/syntax.md -- the shapes a delivered config value takes
|
Design: docs/architecture/config/syntax.md -- the shapes a delivered config value takes |
|
core/cos
Package cos holds the shared registry of named class-of-service QoS profiles and their resolver.
|
Package cos holds the shared registry of named class-of-service QoS profiles and their resolver. |
|
core/ddosevent
Package ddosevent defines the destination-oriented DDoS attack detection event contract.
|
Package ddosevent defines the destination-oriented DDoS attack detection event contract. |
|
core/diagnostic
Package diagnostic provides stable diagnostic records, codes, and explanations for Ze's agent-facing tooling surface.
|
Package diagnostic provides stable diagnostic records, codes, and explanations for Ze's agent-facing tooling surface. |
|
core/diskspace
Package diskspace answers how much room a filesystem has left.
|
Package diskspace answers how much room a filesystem has left. |
|
core/dnsserver
Design: docs/architecture/dns/server-harness.md -- generic DNS listener lifecycle shared by two or more authoritative-only DNS plugins.
|
Design: docs/architecture/dns/server-harness.md -- generic DNS listener lifecycle shared by two or more authoritative-only DNS plugins. |
|
core/dscp
Package dscp parses DSCP class names (e.g.
|
Package dscp parses DSCP class names (e.g. |
|
core/duration
Package duration parses CLI duration strings with explicit unit suffixes into minutes.
|
Package duration parses CLI duration strings with explicit unit suffixes into minutes. |
|
core/eap
Package eap implements the EAP authentication framework and its MD5-Challenge, MSCHAPv2 and TLS methods for IKEv2.
|
Package eap implements the EAP authentication framework and its MD5-Challenge, MSCHAPv2 and TLS methods for IKEv2. |
|
core/env
Design: docs/architecture/config/environment.md — centralized env var lookup Detail: registry.go — env var registration and entry listing
|
Design: docs/architecture/config/environment.md — centralized env var lookup Detail: registry.go — env var registration and entry listing |
|
core/envcatalog
Package envcatalog assembles the catalog of visible environment configuration keys, expanding per-subsystem log-level entries.
|
Package envcatalog assembles the catalog of visible environment configuration keys, expanding per-subsystem log-level entries. |
|
core/errorfragment
Package errorfragment answers a refused htmx request with markup the browser can swap into the target the request named.
|
Package errorfragment answers a refused htmx request with markup the browser can swap into the target the request named. |
|
core/events
Design: docs/architecture/api/process-protocol.md -- event bus namespace and type registry Related: ids.go -- typed NamespaceID/EventTypeID/Direction populated by registration here Related: typed.go -- Event[T]/SignalEvent generic handles that call RegisterNamespace
|
Design: docs/architecture/api/process-protocol.md -- event bus namespace and type registry Related: ids.go -- typed NamespaceID/EventTypeID/Direction populated by registration here Related: typed.go -- Event[T]/SignalEvent generic handles that call RegisterNamespace |
|
core/family
Design: docs/architecture/wire/nlri.md -- BGP address family types RFC: rfc/short/rfc4760.md -- Multiprotocol Extensions (AFI/SAFI wire format) Detail: registry.go -- runtime registration and string cache
|
Design: docs/architecture/wire/nlri.md -- BGP address family types RFC: rfc/short/rfc4760.md -- Multiprotocol Extensions (AFI/SAFI wire format) Detail: registry.go -- runtime registration and string cache |
|
core/gokrazyutil
Package gokrazyutil provides helpers for authenticating to gokrazy's HTTP management interface.
|
Package gokrazyutil provides helpers for authenticating to gokrazy's HTTP management interface. |
|
core/health
Package health registers named component health checks and aggregates them into a JSON status report.
|
Package health registers named component health checks and aggregates them into a JSON status report. |
|
core/helpfmt
Design: docs/architecture/core-design.md — CLI help formatting
|
Design: docs/architecture/core-design.md — CLI help formatting |
|
core/hostload
Package hostload samples system load to classify whether a test run was CPU-contended.
|
Package hostload samples system load to classify whether a test run was CPU-contended. |
|
core/identity
Package identity resolves a stable machine identity and persists it to the blob store.
|
Package identity resolves a stable machine identity and persists it to the blob store. |
|
core/iface/events
Package events defines event constants for the interface component.
|
Package events defines event constants for the interface component. |
|
core/ipc
Package ipc routes and serializes plugin RPC method calls for the IPC wire protocol.
|
Package ipc routes and serializes plugin RPC method calls for the IPC wire protocol. |
|
core/ipc/yang
Package yang embeds the ze plugin and system YANG modules and registers them with the config loader.
|
Package yang embeds the ze plugin and system YANG modules and registers them with the config loader. |
|
core/memguard
Design: docs/architecture/memory/lifetime-contracts.md — shared "held past boundary" vocabulary
|
Design: docs/architecture/memory/lifetime-contracts.md — shared "held past boundary" vocabulary |
|
core/metrics
Design: docs/architecture/core-design.md — metric collection interfaces Detail: prometheus.go — Prometheus backend implementing Registry Detail: nop.go — no-op backend for tests and disabled state Detail: server.go — HTTP server for metrics endpoint
|
Design: docs/architecture/core-design.md — metric collection interfaces Detail: prometheus.go — Prometheus backend implementing Registry Detail: nop.go — no-op backend for tests and disabled state Detail: server.go — HTTP server for metrics endpoint |
|
core/mplsfib
Package mplsfib defines the event channel carrying MPLS forwarding entries from label-distribution sources to the kernel FIB.
|
Package mplsfib defines the event channel carrying MPLS forwarding entries from label-distribution sources to the kernel FIB. |
|
core/naming
Package naming validates configuration node names against the shared node-name pattern.
|
Package naming validates configuration node names against the shared node-name pattern. |
|
core/ndp
Design: docs/architecture/core-design.md -- shared IPv6 Neighbor Discovery encoding
|
Design: docs/architecture/core-design.md -- shared IPv6 Neighbor Discovery encoding |
|
core/network
Package network provides injectable abstractions for network operations.
|
Package network provides injectable abstractions for network operations. |
|
core/observation
Package observation provides an in-process, multi-subscriber feed for traffic observations.
|
Package observation provides an in-process, multi-subscriber feed for traffic observations. |
|
core/pacer
Package pacer paces the retries of a goroutine whose read keeps failing.
|
Package pacer paces the retries of a goroutine whose read keeps failing. |
|
core/parse
Design: docs/architecture/config/syntax.md — parsing helpers
|
Design: docs/architecture/config/syntax.md — parsing helpers |
|
core/paths
Package paths resolves the ze configuration directory from the running binary's location.
|
Package paths resolves the ze configuration directory from the running binary's location. |
|
core/pcap
Design: docs/architecture/diagnostics/packet-capture.md -- the one owner of the pcap file format Detail: frame.go -- synthetic IP and TCP headers around a payload Detail: reader.go -- reading a pcap file back, either endianness Detail: reassemble.go -- TCP stream reassembly across records
|
Design: docs/architecture/diagnostics/packet-capture.md -- the one owner of the pcap file format Detail: frame.go -- synthetic IP and TCP headers around a payload Detail: reader.go -- reading a pcap file back, either endianness Detail: reassemble.go -- TCP stream reassembly across records |
|
core/portname
Package portname resolves transport port numbers to service names and amplification-vector labels.
|
Package portname resolves transport port numbers to service names and amplification-vector labels. |
|
core/privilege
Design: docs/architecture/system-architecture.md — daemon privilege dropping Detail: drop_unix.go — Unix setuid/setgid implementation Detail: drop_other.go — no-op for non-Unix platforms
|
Design: docs/architecture/system-architecture.md — daemon privilege dropping Detail: drop_unix.go — Unix setuid/setgid implementation Detail: drop_other.go — no-op for non-Unix platforms |
|
core/probe
Design: docs/architecture/api/commands.md — shared ICMP probe primitives
|
Design: docs/architecture/api/commands.md — shared ICMP probe primitives |
|
core/procfs
Package procfs provides helpers for reading and decoding Linux /proc network state.
|
Package procfs provides helpers for reading and decoding Linux /proc network state. |
|
core/redact
Package redact scrubs credential-bearing tokens from strings before they are logged.
|
Package redact scrubs credential-bearing tokens from strings before they are logged. |
|
core/redistevents
Design: docs/architecture/core-design.md -- cross-protocol route-change events Detail: pool.go -- batch pool allocation Detail: registry.go -- protocol ID registration
|
Design: docs/architecture/core-design.md -- cross-protocol route-change events Detail: pool.go -- batch pool allocation Detail: registry.go -- protocol ID registration |
|
core/replay
Design: docs/architecture/core-design.md -- shared late-join replay vocabulary (Redistribute Late-Join Replay)
|
Design: docs/architecture/core-design.md -- shared late-join replay vocabulary (Redistribute Late-Join Replay) |
|
core/rescueauth
Package rescueauth encodes and verifies the installer's rescue-shell credential.
|
Package rescueauth encodes and verifies the installer's rescue-shell credential. |
|
core/resolve
Package resolve selects the storage backend and default config filename for ze.
|
Package resolve selects the storage backend and default config filename for ze. |
|
core/rib/distance
Package distance carries every protocol's administrative distance from the one place it is declared to the producers that stamp it on a route.
|
Package distance carries every protocol's administrative distance from the one place it is declared to the producers that stamp it on a route. |
|
core/rib/igpcost
Package igpcost carries the IGP metric of a resolved next-hop from whoever computes it to whoever ranks paths by it.
|
Package igpcost carries the IGP metric of a resolved next-hop from whoever computes it to whoever ranks paths by it. |
|
core/rib/locrib
Package locrib implements the unified, sharded Loc-RIB that arbitrates best paths across routing protocols.
|
Package locrib implements the unified, sharded Loc-RIB that arbitrates best paths across routing protocols. |
|
core/rib/nexthop
Package nexthop carries the one description of a forwarding target that crosses every RIB boundary: the Loc-RIB Path, the best-change event the BGP RIB emits, and the multipath group sysrib hands the FIB plugins.
|
Package nexthop carries the one description of a forwarding target that crosses every RIB boundary: the Loc-RIB Path, the best-change event the BGP RIB emits, and the multipath group sysrib hands the FIB plugins. |
|
core/rib/routeinstall
Design: docs/architecture/forked-route-install.md -- forked route install via Loc-RIB RPC
|
Design: docs/architecture/forked-route-install.md -- forked route install via Loc-RIB RPC |
|
core/rib/routetype
Package routetype holds the forwarding action a FIB entry takes.
|
Package routetype holds the forwarding action a FIB entry takes. |
|
core/rib/store
Package store provides a generic prefix-keyed route store backed by a BART trie.
|
Package store provides a generic prefix-keyed route store backed by a BART trie. |
|
core/routewatch
Package routewatch subscribes to kernel route changes via netlink and fans them out to handlers.
|
Package routewatch subscribes to kernel route changes via netlink and fans them out to handlers. |
|
core/routingtable
Package routingtable maps routing-table names to kernel table IDs.
|
Package routingtable maps routing-table names to kernel table IDs. |
|
core/rtproto
Design: docs/architecture/core-design.md -- Linux route protocol IDs
|
Design: docs/architecture/core-design.md -- Linux route protocol IDs |
|
core/selector
Design: docs/architecture/core-design.md — peer selector
|
Design: docs/architecture/core-design.md — peer selector |
|
core/selfcert
Package selfcert generates and persists self-signed HTTPS certificates for local Ze services.
|
Package selfcert generates and persists self-signed HTTPS certificates for local Ze services. |
|
core/seqmap
Design: (none — internal utility, no architecture doc) — generic sequence-indexed map
|
Design: (none — internal utility, no architecture doc) — generic sequence-indexed map |
|
core/show
Package show registers enrichers that augment show-command output with plugin-provided fields.
|
Package show registers enrichers that augment show-command output with plugin-provided fields. |
|
core/slogutil
Design: docs/architecture/config/environment.md — structured logging utilities Detail: color.go — ANSI color formatting for terminal output
|
Design: docs/architecture/config/environment.md — structured logging utilities Detail: color.go — ANSI color formatting for terminal output |
|
core/smart
Package smart reads disk SMART health data via direct ATA and NVMe ioctls.
|
Package smart reads disk SMART health data via direct ATA and NVMe ioctls. |
|
core/source
Design: docs/architecture/core-design.md — source registry
|
Design: docs/architecture/core-design.md — source registry |
|
core/ssh/client
Package client provides SSH client connectivity for ze CLI tools.
|
Package client provides SSH client connectivity for ze CLI tools. |
|
core/statestore
Design: ai/rules/architecture.md -- runtime state persists in the managed zefs store, never as loose files.
|
Design: ai/rules/architecture.md -- runtime state persists in the managed zefs store, never as loose files. |
|
core/stats
Design: docs/architecture/traffic/traffic-analysis-layers.md -- shared traffic-analysis stats primitives
|
Design: docs/architecture/traffic/traffic-analysis-layers.md -- shared traffic-analysis stats primitives |
|
core/stringsx
Package stringsx provides string-splitting helpers that also report the resulting count.
|
Package stringsx provides string-splitting helpers that also report the resulting count. |
|
core/subdispatch
Package subdispatch routes action-first CLI subcommands to registered handlers.
|
Package subdispatch routes action-first CLI subcommands to registered handlers. |
|
core/suggest
Design: (none — utility package)
|
Design: (none — utility package) |
|
core/syncutil
Package syncutil provides concurrency helpers.
|
Package syncutil provides concurrency helpers. |
|
core/sysctl
Design: docs/architecture/core-design.md -- sysctl known-keys registry Detail: known_linux.go -- Linux sysctl key registrations
|
Design: docs/architecture/core-design.md -- sysctl known-keys registry Detail: known_linux.go -- Linux sysctl key registrations |
|
core/textbuf
Package textbuf provides allocation-free string building and formatting helpers.
|
Package textbuf provides allocation-free string building and formatting helpers. |
|
core/version
Package version provides build and VCS version information for ze.
|
Package version provides build and VCS version information for ze. |
|
core/vpp/events
Package events defines event constants for the VPP component.
|
Package events defines event constants for the VPP component. |
|
exabgp/bridge
Design: docs/architecture/core-design.md — startup protocol and bridge runtime Detail: bridge_event.go — ZeBGP to ExaBGP JSON event translation Detail: bridge_command.go — ExaBGP text command translation Detail: bridge_muxconn.go — MuxConn wire format parsing for post-startup I/O
|
Design: docs/architecture/core-design.md — startup protocol and bridge runtime Detail: bridge_event.go — ZeBGP to ExaBGP JSON event translation Detail: bridge_command.go — ExaBGP text command translation Detail: bridge_muxconn.go — MuxConn wire format parsing for post-startup I/O |
|
exabgp/migration
Package migration converts ExaBGP configuration to Ze format.
|
Package migration converts ExaBGP configuration to Ze format. |
|
exabgp/topics
Package topics provides the canonical mapping from ExaBGP log topic names to Ze subsystem paths.
|
Package topics provides the canonical mapping from ExaBGP log topic names to Ze subsystem paths. |
|
graph
Package graph models AS-path topology graphs and renders them as layered text diagrams.
|
Package graph models AS-path topology graphs and renders them as layered text diagrams. |
|
install/disk
Package disk implements the ze install disk workflow that writes a disk image and injects the database.
|
Package disk implements the ze install disk workflow that writes a disk image and injects the database. |
|
iter
Package iter provides generic zero-allocation iterators for walking variable-length records in byte slices.
|
Package iter provides generic zero-allocation iterators for walking variable-length records in byte slices. |
|
le
Design: docs/architecture/core-design.md -- the development-tool composition root
|
Design: docs/architecture/core-design.md -- the development-tool composition root |
|
le/ai
Design: ai/rules/repo-maintenance.md -- one canonical source, several tool mirrors Related: actions.go -- the verbs that reach this mirror Related: report.go -- what a run answers
|
Design: ai/rules/repo-maintenance.md -- one canonical source, several tool mirrors Related: actions.go -- the verbs that reach this mirror Related: report.go -- what a run answers |
|
le/archmap
Design: docs/architecture/core-design.md -- the architecture lists, generated
|
Design: docs/architecture/core-design.md -- the architecture lists, generated |
|
le/changed
Design: docs/architecture/testing/verify-freshness-scope.md -- what a scoped run covers Related: actions.go -- the verbs that reach this selection Related: scope.go -- the scoped-verify question this area also answers Related: report.go -- the two renderings of one selection
|
Design: docs/architecture/testing/verify-freshness-scope.md -- what a scoped run covers Related: actions.go -- the verbs that reach this selection Related: scope.go -- the scoped-verify question this area also answers Related: report.go -- the two renderings of one selection |
|
le/commit
Design: docs/architecture/core-design.md -- one structured commit workflow command
|
Design: docs/architecture/core-design.md -- one structured commit workflow command |
|
le/deployment
Design: docs/architecture/testing/interop.md -- ze against a real peer Related: l2tp.go -- the first proof built on what this file holds Related: vppiface.go -- the second Related: daemonbuild.go -- the daemon both of them drive Related: gokrazykernel.go -- the kernel gate an appliance proof goes through Detail: netns.go -- the namespaces the on-host proofs keep their daemons apart in
|
Design: docs/architecture/testing/interop.md -- ze against a real peer Related: l2tp.go -- the first proof built on what this file holds Related: vppiface.go -- the second Related: daemonbuild.go -- the daemon both of them drive Related: gokrazykernel.go -- the kernel gate an appliance proof goes through Detail: netns.go -- the namespaces the on-host proofs keep their daemons apart in |
|
le/derived
Design: docs/architecture/core-design.md -- a derived artifact declares its inputs and its rebuild
|
Design: docs/architecture/core-design.md -- a derived artifact declares its inputs and its rebuild |
|
le/digest
Design: docs/contributing/documentation-testing.md -- the digest anchor check
|
Design: docs/contributing/documentation-testing.md -- the digest anchor check |
|
le/discoveryindex
Design: docs/architecture/core-design.md -- the generated package map Detail: report.go -- what the command answers and the two halves that write it Detail: sources.go -- which changed file can drift the index
|
Design: docs/architecture/core-design.md -- the generated package map Detail: report.go -- what the command answers and the two halves that write it Detail: sources.go -- which changed file can drift the index |
|
le/doc/wiring
Design: docs/architecture/core-design.md -- changed-file wiring and docs router.
|
Design: docs/architecture/core-design.md -- changed-file wiring and docs router. |
|
le/dockerhost
Package dockerhost names the Docker daemon socket a development command must talk to when nothing else can name one.
|
Package dockerhost names the Docker daemon socket a development command must talk to when nothing else can name one. |
|
le/docstocode
Design: docs/architecture/core-design.md -- the generated docs-to-code index Detail: report.go -- what the command answers, and the rendering of the file Detail: codetodocs.go -- the MIRROR index, from the anchors inside docs/
|
Design: docs/architecture/core-design.md -- the generated docs-to-code index Detail: report.go -- what the command answers, and the rendering of the file Detail: codetodocs.go -- the MIRROR index, from the anchors inside docs/ |
|
le/docvalid
Design: docs/architecture/core-design.md -- published command surfaces come from the live catalog
|
Design: docs/architecture/core-design.md -- published command surfaces come from the live catalog |
|
le/evidence
Design: docs/architecture/testing/ci-format.md -- the release-candidate gate Detail: report.go -- the payload this run answers Related: actions.go -- the area table that reaches this run
|
Design: docs/architecture/testing/ci-format.md -- the release-candidate gate Detail: report.go -- the payload this run answers Related: actions.go -- the area table that reaches this run |
|
le/featuretags
Design: ai/rules/plugins.md -- static consumers are GENERATED, not hand-maintained Related: daemontags.go -- the second consumer of the same manifest
|
Design: ai/rules/plugins.md -- static consumers are GENERATED, not hand-maintained Related: daemontags.go -- the second consumer of the same manifest |
|
le/gaterun
Design: docs/architecture/core-design.md -- how le runs a gate's command Detail: ../gotoolchain/gotoolchain.go -- the environment that command runs under
|
Design: docs/architecture/core-design.md -- how le runs a gate's command Detail: ../gotoolchain/gotoolchain.go -- the environment that command runs under |
|
le/goextract
Design: docs/architecture/core-design.md -- moving Go declarations between files
|
Design: docs/architecture/core-design.md -- moving Go declarations between files |
|
le/gokrazygosum
Design: docs/architecture/appliance/gokrazy-build-pins.md -- the packed go.sum gate
|
Design: docs/architecture/appliance/gokrazy-build-pins.md -- the packed go.sum gate |
|
le/goversion
Design: docs/architecture/core-design.md -- one declaration of the Go version, and the carriers that copy it Detail: dockerfile.go -- how a build stage is read out of a Dockerfile Detail: report.go -- what `le go-version check` answers
|
Design: docs/architecture/core-design.md -- one declaration of the Go version, and the carriers that copy it Detail: dockerfile.go -- how a build stage is read out of a Dockerfile Detail: report.go -- what `le go-version check` answers |
|
le/hookcheck
Design: docs/architecture/core-design.md -- hook selftests and runtime are one le action area Overview: hookcheck.go -- native selftest implementation
|
Design: docs/architecture/core-design.md -- hook selftests and runtime are one le action area Overview: hookcheck.go -- native selftest implementation |
|
le/hookruntime
Design: docs/architecture/core-design.md -- native delegation hook policy
|
Design: docs/architecture/core-design.md -- native delegation hook policy |
|
le/ianaasn
Design: docs/architecture/resolve.md -- the shipped RIR delegation seed
|
Design: docs/architecture/resolve.md -- the shipped RIR delegation seed |
|
le/integration
Design: docs/architecture/testing/interop.md -- what an integration gate needs Detail: actions.go -- the dispatch every row here is turned into
|
Design: docs/architecture/testing/interop.md -- what an integration gate needs Detail: actions.go -- the dispatch every row here is turned into |
|
le/interoplab
Design: docs/architecture/testing/interop.md -- scenario discovery and selector contract Related: lab.go -- discovered scenarios become lifecycle plans.
|
Design: docs/architecture/testing/interop.md -- scenario discovery and selector contract Related: lab.go -- discovered scenarios become lifecycle plans. |
|
le/interoplab/bgp
Design: docs/architecture/testing/interop.md -- fail-closed peer assertions.
|
Design: docs/architecture/testing/interop.md -- fail-closed peer assertions. |
|
le/interoplab/ipsec
Design: docs/architecture/testing/interop.md -- complete typed assertions for every checked-in strongSwan scenario.
|
Design: docs/architecture/testing/interop.md -- complete typed assertions for every checked-in strongSwan scenario. |
|
le/interoplab/l2tp
Design: docs/architecture/testing/interop.md -- typed L2TP scenario assertions.
|
Design: docs/architecture/testing/interop.md -- typed L2TP scenario assertions. |
|
le/interoplab/l2tp/radiusmock
command
Design: docs/architecture/testing/interop.md -- independent RADIUS wire peer for the L2TP accounting scenario.
|
Design: docs/architecture/testing/interop.md -- independent RADIUS wire peer for the L2TP accounting scenario. |
|
le/interoplab/pppoe
Design: docs/architecture/testing/interop.md -- typed Ze access-concentrator checks against an independent pppd client.
|
Design: docs/architecture/testing/interop.md -- typed Ze access-concentrator checks against an independent pppd client. |
|
le/interoplab/radius
Design: docs/architecture/testing/interop.md -- what a checker owes, and the five vacuity traps.
|
Design: docs/architecture/testing/interop.md -- what a checker owes, and the five vacuity traps. |
|
le/job
Design: docs/architecture/core-design.md -- admission for heavy jobs in a shared checkout Detail: registry.go -- the entry that IS the claim, and the scan that reads every one of them Detail: attach.go -- what a second asker does instead of running the same job twice Detail: treehash.go -- the fingerprint of the tree a job judges Detail: jobkey.go -- the fingerprint of the work a job does
|
Design: docs/architecture/core-design.md -- admission for heavy jobs in a shared checkout Detail: registry.go -- the entry that IS the claim, and the scan that reads every one of them Detail: attach.go -- what a second asker does instead of running the same job twice Detail: treehash.go -- the fingerprint of the tree a job judges Detail: jobkey.go -- the fingerprint of the work a job does |
|
le/journal
Design: docs/architecture/core-design.md -- the journal area, as one command
|
Design: docs/architecture/core-design.md -- the journal area, as one command |
|
le/leaction
Design: docs/architecture/core-design.md -- an le area, as one command
|
Design: docs/architecture/core-design.md -- an le area, as one command |
|
le/lepath
Design: docs/features/ai-first.md -- per-harness commit-session identity
|
Design: docs/features/ai-first.md -- per-harness commit-session identity |
|
le/leroot
Design: docs/architecture/core-design.md -- le's registration adapter Detail: dispatch.go -- the loop that runs the commands registered here Detail: group.go -- the five groups a registration names, and their order
|
Design: docs/architecture/core-design.md -- le's registration adapter Detail: dispatch.go -- the loop that runs the commands registered here Detail: group.go -- the five groups a registration names, and their order |
|
le/module
Design: docs/architecture/core-design.md -- module migration workflows
|
Design: docs/architecture/core-design.md -- module migration workflows |
|
le/mutation
Design: docs/architecture/core-design.md -- native developer-tool actions
|
Design: docs/architecture/core-design.md -- native developer-tool actions |
|
le/netlab
actions.go exposes the native netlab render check and golden rewrite through leaction.
|
actions.go exposes the native netlab render check and golden rewrite through leaction. |
|
le/perfbench
Design: docs/architecture/core-design.md -- the perf benchmark, as three actions Detail: ../../test/perfrunner/run.go -- the multi-DUT Docker run these verbs drive Overview: actions.go -- the table these three verbs are declared in
|
Design: docs/architecture/core-design.md -- the perf benchmark, as three actions Detail: ../../test/perfrunner/run.go -- the multi-DUT Docker run these verbs drive Overview: actions.go -- the table these three verbs are declared in |
|
le/platformvet
Design: docs/architecture/core-design.md -- the platform-vet area, as one command Overview: platformvet.go -- the shared runner for both cross-target actions
|
Design: docs/architecture/core-design.md -- the platform-vet area, as one command Overview: platformvet.go -- the shared runner for both cross-target actions |
|
le/plugin/imports
Design: docs/architecture/command-ownership.md -- the generated composition root
|
Design: docs/architecture/command-ownership.md -- the generated composition root |
|
le/population
Design: docs/contributing/testing.md -- a gate accounts for every member it does not walk Related: ../verify/lint/verifylint.go -- the first gate that carried this accounting
|
Design: docs/contributing/testing.md -- a gate accounts for every member it does not walk Related: ../verify/lint/verifylint.go -- the first gate that carried this accounting |
|
le/protocolskeleton
Design: ai/rules/protocol.md -- the protocol skeleton, as a lens
|
Design: ai/rules/protocol.md -- the protocol skeleton, as a lens |
|
le/qemu
Design: docs/architecture/testing/qemu-integration.md -- what the VM proves Related: alltests_report.go -- what one whole run answers Related: alltests_tally.go -- how many tests a suite actually executed Related: netns.go -- which suites run outside the transport's namespace Related: actions.go -- the verb that reaches this run
|
Design: docs/architecture/testing/qemu-integration.md -- what the VM proves Related: alltests_report.go -- what one whole run answers Related: alltests_tally.go -- how many tests a suite actually executed Related: netns.go -- which suites run outside the transport's namespace Related: actions.go -- the verb that reaches this run |
|
le/repository
Design: docs/architecture/core-design.md -- what the repository gate answers
|
Design: docs/architecture/core-design.md -- what the repository gate answers |
|
le/rfc
Design: docs/architecture/core-design.md -- the rfc area, as one command Overview: rfc.go -- the types, the paths and the closed sets every reader here shares
|
Design: docs/architecture/core-design.md -- the rfc area, as one command Overview: rfc.go -- the types, the paths and the closed sets every reader here shares |
|
le/rules
Design: docs/architecture/core-design.md -- measure whether routed rules were read Overview: actions.go -- the rules command surface Related: rules.go -- the shared rule corpus predicate
|
Design: docs/architecture/core-design.md -- measure whether routed rules were read Overview: actions.go -- the rules command surface Related: rules.go -- the shared rule corpus predicate |
|
le/runlog
Design: docs/contributing/running-commands.md -- the lines of a run log a reader needs first Related: ../verify/engine/summary.go -- the verification failure index built from these lines Related: ../job/quiet.go -- the same lines, answered by one job
|
Design: docs/contributing/running-commands.md -- the lines of a run log a reader needs first Related: ../verify/engine/summary.go -- the verification failure index built from these lines Related: ../job/quiet.go -- the same lines, answered by one job |
|
le/scratch
Design: docs/architecture/core-design.md -- le action packages Overview: scratch.go -- filesystem policy and implementation
|
Design: docs/architecture/core-design.md -- le action packages Overview: scratch.go -- filesystem policy and implementation |
|
le/session
Design: docs/architecture/core-design.md -- native session lifecycle command Related: seed.go -- session store seeding Related: summary.go -- session recovery snapshot
|
Design: docs/architecture/core-design.md -- native session lifecycle command Related: seed.go -- session store seeding Related: summary.go -- session recovery snapshot |
|
le/setup
Design: docs/guide/developer-setup.md -- the supported Ubuntu server bootstrap
|
Design: docs/guide/developer-setup.md -- the supported Ubuntu server bootstrap |
|
le/site
Design: website/AI.md -- one native command surface owns site build tools
|
Design: website/AI.md -- one native command surface owns site build tools |
|
le/site/facts
Design: docs/architecture/core-design.md -- the published repository facts, as one command
|
Design: docs/architecture/core-design.md -- the published repository facts, as one command |
|
le/site/wiki
Design: docs/architecture/core-design.md -- the wiki-index area, as one command
|
Design: docs/architecture/core-design.md -- the wiki-index area, as one command |
|
le/sourcerewrite
Design: docs/architecture/core-design.md -- one command area, separate native actions
|
Design: docs/architecture/core-design.md -- one command area, separate native actions |
|
le/spec/citation
Design: docs/architecture/core-design.md -- le's native development gates Related: report.go -- structured findings and the legacy text rendering
|
Design: docs/architecture/core-design.md -- le's native development gates Related: report.go -- structured findings and the legacy text rendering |
|
le/spec/session
Package specsession owns spec claims, state paths, review artifacts, and the transcript facts those contracts use.
|
Package specsession owns spec claims, state paths, review artifacts, and the transcript facts those contracts use. |
|
le/spec/specpath
Design: docs/architecture/core-design.md -- le's one declaration of the spec layout
|
Design: docs/architecture/core-design.md -- le's one declaration of the spec layout |
|
le/spec/status
Design: docs/architecture/core-design.md -- le's spec inventory
|
Design: docs/architecture/core-design.md -- le's spec inventory |
|
le/ste
Design: docs/architecture/core-design.md -- the ste area Overview: ste.go -- the checker behind each action
|
Design: docs/architecture/core-design.md -- the ste area Overview: ste.go -- the checker behind each action |
|
le/terminaldemo
Design: docs/architecture/core-design.md -- one definition of the demo manifest contract Overview: manifest.go -- the contracts a render writes and verifies Related: types.go -- Manifest, Demo and ArtifactEntry, which this answers
|
Design: docs/architecture/core-design.md -- one definition of the demo manifest contract Overview: manifest.go -- the contracts a render writes and verifies Related: types.go -- Manifest, Demo and ArtifactEntry, which this answers |
|
le/testchaos
Design: docs/architecture/core-design.md -- the chaos test area.
|
Design: docs/architecture/core-design.md -- the chaos test area. |
|
le/testhealth
Design: docs/architecture/testing/test-health.md -- native health actions
|
Design: docs/architecture/testing/test-health.md -- native health actions |
|
le/testhelper
Design: docs/architecture/core-design.md -- native development command composition
|
Design: docs/architecture/core-design.md -- native development command composition |
|
le/testunit
Design: docs/architecture/core-design.md -- the unit-test area as one command Overview: groups.go -- the named package groups, and what `all` sweeps
|
Design: docs/architecture/core-design.md -- the unit-test area as one command Overview: groups.go -- the named package groups, and what `all` sweeps |
|
le/testweakened
Design: docs/architecture/testing/test-health.md -- weakened-test gate declarations Related: testweakened.go -- the live check; selftest.go -- the fixture proof.
|
Design: docs/architecture/testing/test-health.md -- weakened-test gate declarations Related: testweakened.go -- the live check; selftest.go -- the fixture proof. |
|
le/textrepr
Design: docs/architecture/core-design.md -- stable quoted diagnostic values.
|
Design: docs/architecture/core-design.md -- stable quoted diagnostic values. |
|
le/tier
Design: ai/rules/architecture.md -- the tier area, as one command
|
Design: ai/rules/architecture.md -- the tier area, as one command |
|
le/tokeneconomy
Design: ai/rules/context-economy.md -- where a session's tokens go Detail: aggregate.go -- the figures derived from what this file reads Detail: run.go -- the command that resolves a store and fills the report
|
Design: ai/rules/context-economy.md -- where a session's tokens go Detail: aggregate.go -- the figures derived from what this file reads Detail: run.go -- the command that resolves a store and fills the report |
|
le/vendorweb
Design: docs/architecture/core-design.md -- the vendored-web tools, as commands
|
Design: docs/architecture/core-design.md -- the vendored-web tools, as commands |
|
le/verify
Design: docs/architecture/testing/verify-freshness-scope.md -- detached-worktree verification command
|
Design: docs/architecture/testing/verify-freshness-scope.md -- detached-worktree verification command |
|
le/verify/deps
Design: docs/architecture/core-design.md -- verifier dependencies as one command Overview: verifydeps.go -- plans, execution, and structured reports
|
Design: docs/architecture/core-design.md -- verifier dependencies as one command Overview: verifydeps.go -- plans, execution, and structured reports |
|
le/verify/dispatch
Design: docs/architecture/core-design.md -- registered in-process verification dispatch
|
Design: docs/architecture/core-design.md -- registered in-process verification dispatch |
|
le/verify/engine
Design: docs/functional-tests.md -- published verification failure protocol
|
Design: docs/functional-tests.md -- published verification failure protocol |
|
le/verify/failuregroup
Design: docs/architecture/testing/verify-freshness-scope.md -- failure attribution Related: ../engine/artifacts.go -- DeclaredGroups, which reads what Declare writes Related: ../../commit/verification.go -- structuralGateReds, which charges the red
|
Design: docs/architecture/testing/verify-freshness-scope.md -- failure attribution Related: ../engine/artifacts.go -- DeclaredGroups, which reads what Declare writes Related: ../../commit/verification.go -- structuralGateReds, which charges the red |
|
le/verify/lint
Design: docs/architecture/core-design.md -- native verifier work is callable through le Detail: verifylint.go -- the full lint plan and direct process execution
|
Design: docs/architecture/core-design.md -- native verifier work is callable through le Detail: verifylint.go -- the full lint plan and direct process execution |
|
le/verify/lock
Design: docs/architecture/core-design.md -- verify-class admission through the shared job registry Related: ../job/job.go -- the single admission, locking, and process implementation
|
Design: docs/architecture/core-design.md -- verify-class admission through the shared job registry Related: ../job/job.go -- the single admission, locking, and process implementation |
|
le/verify/status
Design: docs/architecture/testing/verify-freshness-scope.md -- verification status command
|
Design: docs/architecture/testing/verify-freshness-scope.md -- verification status command |
|
le/verify/summary
Design: docs/architecture/testing/verify-freshness-scope.md -- verification failure summary command
|
Design: docs/architecture/testing/verify-freshness-scope.md -- verification failure summary command |
|
le/webassets
Design: docs/architecture/web-interface.md -- per-page web asset sets
|
Design: docs/architecture/web-interface.md -- per-page web asset sets |
|
le/weekly
Design: docs/architecture/core-design.md -- the weekly update's command Detail: poster.go -- what the parsed options drive
|
Design: docs/architecture/core-design.md -- the weekly update's command Detail: poster.go -- what the parsed options drive |
|
le/wikicatalog
Design: docs/architecture/core-design.md -- one closed le action area
|
Design: docs/architecture/core-design.md -- one closed le action area |
|
le/workingtree
Design: ai/rules/git-safety.md -- how wide the uncommitted tree is
|
Design: ai/rules/git-safety.md -- how wide the uncommitted tree is |
|
le/worktree
Design: ai/rules/git-safety.md -- what may rewrite a checkout, and what may not Related: report.go -- what an update answers Related: actions.go -- the verb that reaches this updater
|
Design: ai/rules/git-safety.md -- what may rewrite a checkout, and what may not Related: report.go -- what an update answers Related: actions.go -- the verb that reaches this updater |
|
le/yang/glue
Design: docs/architecture/command-ownership.md -- YANG as data, generated glue wires it in
|
Design: docs/architecture/command-ownership.md -- YANG as data, generated glue wires it in |
|
le/yang/migration
Design: docs/architecture/core-design.md -- three native YANG migration actions
|
Design: docs/architecture/core-design.md -- three native YANG migration actions |
|
mrt
Package mrt reads, decodes, and encodes MRT routing-information records (RFC 6396).
|
Package mrt reads, decodes, and encodes MRT routing-information records (RFC 6396). |
|
perf
Design: docs/functional-tests.md -- allocation-ceiling verification
|
Design: docs/functional-tests.md -- allocation-ceiling verification |
|
perf/report
Design: (none -- new tool, predates documentation)
|
Design: (none -- new tool, predates documentation) |
|
plugins/aaa-cmd/yang
Package yang embeds and registers the AAA command YANG schema module.
|
Package yang embeds and registers the AAA command YANG schema module. |
|
plugins/anomaly/detect
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
|
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam. |
|
plugins/anomaly/detect/cmd/yang
Package yang embeds and registers the anomaly-detection command YANG schema module.
|
Package yang embeds and registers the anomaly-detection command YANG schema module. |
|
plugins/anomaly/detect/yang
Package yang embeds and registers the anomaly-detection configuration YANG schema module.
|
Package yang embeds and registers the anomaly-detection configuration YANG schema module. |
|
plugins/anomaly/observe/cmd/yang
Package yang embeds and registers the ze-anomaly-observe-cmd YANG command schema for the behavioral anomaly observe plugin.
|
Package yang embeds and registers the ze-anomaly-observe-cmd YANG command schema for the behavioral anomaly observe plugin. |
|
plugins/anomaly/observe/yang
Package yang embeds and registers the ze-anomaly-observe-conf YANG configuration schema for the behavioral anomaly observe plugin.
|
Package yang embeds and registers the ze-anomaly-observe-conf YANG configuration schema for the behavioral anomaly observe plugin. |
|
plugins/anomaly/shape
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
|
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam. |
|
plugins/anomaly/shape/cmd/yang
Package yang embeds and registers the anomaly-shaping command YANG schema module.
|
Package yang embeds and registers the anomaly-shaping command YANG schema module. |
|
plugins/anomaly/shape/yang
Package yang embeds and registers the anomaly-shaping configuration YANG schema module.
|
Package yang embeds and registers the anomaly-shaping configuration YANG schema module. |
|
plugins/as112/events
Package as112events holds the as112 plugin's redistribute producer identity: its numeric ProtocolID and the LOCAL typed EventBus handle for (as112, route-change).
|
Package as112events holds the as112 plugin's redistribute producer identity: its numeric ProtocolID and the LOCAL typed EventBus handle for (as112, route-change). |
|
plugins/as112/yang
Package yang embeds and registers the AS112 command and configuration YANG schema modules.
|
Package yang embeds and registers the AS112 command and configuration YANG schema modules. |
|
plugins/completion
Design: (none -- new feature, shell completion generation) Detail: bash.go -- bash completion script generation Detail: zsh.go -- zsh completion script generation Detail: fish.go -- fish completion script generation Detail: nushell.go -- nushell completion script generation Detail: words.go -- dynamic completion data source for shell scripts Detail: peers.go -- dynamic peer selector completion from running daemon
|
Design: (none -- new feature, shell completion generation) Detail: bash.go -- bash completion script generation Detail: zsh.go -- zsh completion script generation Detail: fish.go -- fish completion script generation Detail: nushell.go -- nushell completion script generation Detail: words.go -- dynamic completion data source for shell scripts Detail: peers.go -- dynamic peer selector completion from running daemon |
|
plugins/config-archive-cmd/yang
Package yang embeds and registers the configuration-archive command YANG schema module.
|
Package yang embeds and registers the configuration-archive command YANG schema module. |
|
plugins/config-cli/yang
Package yang embeds and registers the config CLI command YANG schema module.
|
Package yang embeds and registers the config CLI command YANG schema module. |
|
plugins/config-schema/yang
Package yang embeds and registers the schema CLI command YANG schema module.
|
Package yang embeds and registers the schema CLI command YANG schema module. |
|
plugins/config-storage/yang
Package yang embeds and registers the storage CLI command YANG schema module.
|
Package yang embeds and registers the storage CLI command YANG schema module. |
|
plugins/config-yang/yang
Package yang embeds and registers the YANG CLI command YANG schema module.
|
Package yang embeds and registers the YANG CLI command YANG schema module. |
|
plugins/connected/events
Package connectedevents registers the connected-routes redistribution producer and route-change event.
|
Package connectedevents registers the connected-routes redistribution producer and route-change event. |
|
plugins/connected/yang
Package yang embeds and registers the connected-routes configuration YANG schema module.
|
Package yang embeds and registers the connected-routes configuration YANG schema module. |
|
plugins/copp/yang
Package yang embeds and registers the control-plane policing (CoPP) configuration YANG schema module.
|
Package yang embeds and registers the control-plane policing (CoPP) configuration YANG schema module. |
|
plugins/cos/yang
Package yang embeds and registers the class-of-service (CoS) configuration YANG schema module.
|
Package yang embeds and registers the class-of-service (CoS) configuration YANG schema module. |
|
plugins/crashes/cmd
Package cmd registers the show-crashes RPC handler that lists and displays recorded crash reports.
|
Package cmd registers the show-crashes RPC handler that lists and displays recorded crash reports. |
|
plugins/crashes/yang
Package yang embeds and registers the crashes command YANG schema module.
|
Package yang embeds and registers the crashes command YANG schema module. |
|
plugins/ddos/detect
Design: docs/architecture/ddos/cp-survival-5-detect-5-characterization.md -- flow-source readiness.
|
Design: docs/architecture/ddos/cp-survival-5-detect-5-characterization.md -- flow-source readiness. |
|
plugins/ddos/detect/yang
Package yang embeds and registers the DDoS-detection configuration YANG schema module.
|
Package yang embeds and registers the DDoS-detection configuration YANG schema module. |
|
plugins/ddos/flowspec/cmd/yang
Package yang embeds and registers the ze-ddos-flowspec-cmd YANG command schema for the DDoS FlowSpec plugin.
|
Package yang embeds and registers the ze-ddos-flowspec-cmd YANG command schema for the DDoS FlowSpec plugin. |
|
plugins/ddos/flowspec/yang
Package yang embeds and registers the ze-ddos-flowspec-conf YANG configuration schema for the DDoS FlowSpec plugin.
|
Package yang embeds and registers the ze-ddos-flowspec-conf YANG configuration schema for the DDoS FlowSpec plugin. |
|
plugins/ddos/flowtriq/yang
Package yang embeds and registers the ze-ddos-flowtriq-conf YANG configuration schema for the DDoS flowtriq plugin.
|
Package yang embeds and registers the ze-ddos-flowtriq-conf YANG configuration schema for the DDoS flowtriq plugin. |
|
plugins/ddos/local/cmd/yang
Package yang embeds and registers the ze-ddos-local-cmd YANG command schema for the DDoS local plugin.
|
Package yang embeds and registers the ze-ddos-local-cmd YANG command schema for the DDoS local plugin. |
|
plugins/ddos/local/yang
Package yang embeds and registers the ze-ddos-local-conf YANG configuration schema for the DDoS local plugin.
|
Package yang embeds and registers the ze-ddos-local-conf YANG configuration schema for the DDoS local plugin. |
|
plugins/ddos/observe/cmd/yang
Package yang embeds and registers the ze-ddos-cmd YANG command schema for the DDoS observe plugin.
|
Package yang embeds and registers the ze-ddos-cmd YANG command schema for the DDoS observe plugin. |
|
plugins/ddos/observe/yang
Package yang embeds and registers the ze-ddos-observe-conf YANG configuration schema for the DDoS observe plugin.
|
Package yang embeds and registers the ze-ddos-observe-conf YANG configuration schema for the DDoS observe plugin. |
|
plugins/debug/cmd
Package cmd registers RPC handlers that report live debug logging state for the debug plugin.
|
Package cmd registers RPC handlers that report live debug logging state for the debug plugin. |
|
plugins/debug/yang
Package yang embeds and registers the ze-debug-cmd YANG command schema for the debug plugin.
|
Package yang embeds and registers the ze-debug-cmd YANG command schema for the debug plugin. |
|
plugins/dhcpserver/yang
Package yang embeds and registers the ze-dhcp-server-conf YANG configuration schema for the DHCP server plugin.
|
Package yang embeds and registers the ze-dhcp-server-conf YANG configuration schema for the DHCP server plugin. |
|
plugins/diag/cmd
Package cmd registers RPC handlers for diagnostic show commands including TCP reachability checks and control-plane packet capture.
|
Package cmd registers RPC handlers for diagnostic show commands including TCP reachability checks and control-plane packet capture. |
|
plugins/diag/yang
Package yang embeds and registers the ze-diag-cmd YANG command schema for the diag plugin.
|
Package yang embeds and registers the ze-diag-cmd YANG command schema for the diag plugin. |
|
plugins/env/yang
Package yang embeds and registers the ze-env-cmd YANG command schema for the env plugin.
|
Package yang embeds and registers the ze-env-cmd YANG command schema for the env plugin. |
|
plugins/exabgp
Design: docs/architecture/core-design.md — external format bridge CLI Detail: main_sdk.go — SDK/TLS connect-back mode for engine-launched bridge
|
Design: docs/architecture/core-design.md — external format bridge CLI Detail: main_sdk.go — SDK/TLS connect-back mode for engine-launched bridge |
|
plugins/fib/kernel
Design: docs/architecture/core-design.md -- FIB backend abstraction Overview: fibkernel.go -- FIB kernel plugin Related: backend_linux.go -- Linux netlink backend Related: backend_other.go -- noop backend for non-Linux platforms Related: monitor.go -- external route change handling
|
Design: docs/architecture/core-design.md -- FIB backend abstraction Overview: fibkernel.go -- FIB kernel plugin Related: backend_linux.go -- Linux netlink backend Related: backend_other.go -- noop backend for non-Linux platforms Related: monitor.go -- external route change handling |
|
plugins/fib/kernel/events
Package events defines event constants for the FIB kernel plugin.
|
Package events defines event constants for the FIB kernel plugin. |
|
plugins/fib/kernel/yang
Package yang embeds and registers the ze-fib-conf YANG configuration schema for the kernel FIB plugin.
|
Package yang embeds and registers the ze-fib-conf YANG configuration schema for the kernel FIB plugin. |
|
plugins/fib/p4
Design: docs/architecture/core-design.md -- FIB P4 backend Overview: fibp4.go -- FIB P4 plugin
|
Design: docs/architecture/core-design.md -- FIB P4 backend Overview: fibp4.go -- FIB P4 plugin |
|
plugins/fib/p4/yang
Package yang embeds and registers the ze-fib-p4-conf YANG configuration schema for the P4 FIB plugin.
|
Package yang embeds and registers the ze-fib-p4-conf YANG configuration schema for the P4 FIB plugin. |
|
plugins/fib/vpp
Design: docs/research/vpp-deployment-reference.md -- VPP FIB route programming Detail: backend.go -- GoVPP backend and mock for testing
|
Design: docs/research/vpp-deployment-reference.md -- VPP FIB route programming Detail: backend.go -- GoVPP backend and mock for testing |
|
plugins/fib/vpp/yang
Package yang embeds and registers the ze-fib-vpp-conf YANG configuration schema for the VPP FIB plugin.
|
Package yang embeds and registers the ze-fib-vpp-conf YANG configuration schema for the VPP FIB plugin. |
|
plugins/firewall/nft
Package firewallnft implements the firewall backend using google/nftables.
|
Package firewallnft implements the firewall backend using google/nftables. |
|
plugins/firewall/vpp
Package firewallvpp implements the ze firewall Backend interface on top of VPP's ACL plugin binary API via GoVPP.
|
Package firewallvpp implements the ze firewall Backend interface on top of VPP's ACL plugin binary API via GoVPP. |
|
plugins/flowexport-cmd/yang
Package yang embeds and registers the ze-flowexport-cmd YANG command schema for the flow export plugin.
|
Package yang embeds and registers the ze-flowexport-cmd YANG command schema for the flow export plugin. |
|
plugins/flowexport/conntrack
Package conntrack reads Linux conntrack flow entries via netlink and tracks per-flow byte and packet deltas for flow export.
|
Package conntrack reads Linux conntrack flow entries via netlink and tracks per-flow byte and packet deltas for flow export. |
|
plugins/flowexport/enrich
Package enrich annotates exported flows with BGP-derived AS, next-hop, and local-pref metadata via longest-prefix-match lookups.
|
Package enrich annotates exported flows with BGP-derived AS, next-hop, and local-pref metadata via longest-prefix-match lookups. |
|
plugins/flowexport/ipfix
Package ipfix encodes flow and interface-counter records into IPFIX export messages.
|
Package ipfix encodes flow and interface-counter records into IPFIX export messages. |
|
plugins/flowexport/netflow9
Package netflow9 encodes flow and interface-counter records into NetFlow v9 export packets.
|
Package netflow9 encodes flow and interface-counter records into NetFlow v9 export packets. |
|
plugins/flowexport/sampling
Package sampling captures sampled packets using the Linux tc sample action and the psample generic netlink reader.
|
Package sampling captures sampled packets using the Linux tc sample action and the psample generic netlink reader. |
|
plugins/flowexport/sflow
Package sflow encodes interface counters and sampled packets into sFlow v5 export datagrams.
|
Package sflow encodes interface counters and sampled packets into sFlow v5 export datagrams. |
|
plugins/flowexport/yang
Package yang embeds and registers the flow export configuration YANG schema module.
|
Package yang embeds and registers the flow export configuration YANG schema module. |
|
plugins/flowspec-firewall
Design: docs/architecture/core-design.md -- FlowSpec-to-firewall bridge engine Related: register.go -- plugin registration that invokes runEngine
|
Design: docs/architecture/core-design.md -- FlowSpec-to-firewall bridge engine Related: register.go -- plugin registration that invokes runEngine |
|
plugins/geodns
Design: docs/architecture/dns/geodns.md -- geodns listen-port bind-capability doctor check Related: register.go -- DoctorChecks registration (geodns-listen-capability)
|
Design: docs/architecture/dns/geodns.md -- geodns listen-port bind-capability doctor check Related: register.go -- DoctorChecks registration (geodns-listen-capability) |
|
plugins/geodns/yang
Package yang embeds and registers the GeoDNS command and configuration YANG schema modules.
|
Package yang embeds and registers the GeoDNS command and configuration YANG schema modules. |
|
plugins/gnmi-cmd/yang
Package yang embeds and registers the gNMI command YANG schema module.
|
Package yang embeds and registers the gNMI command YANG schema module. |
|
plugins/host
Package host is the offline fallback for `show host [section]`.
|
Package host is the offline fallback for `show host [section]`. |
|
plugins/host-cmd/cmd
Package cmd registers the host inventory, kernel-log, and file-descriptor command handlers.
|
Package cmd registers the host inventory, kernel-log, and file-descriptor command handlers. |
|
plugins/host-cmd/yang
Package yang embeds and registers the host command YANG schema modules.
|
Package yang embeds and registers the host command YANG schema modules. |
|
plugins/iface/dhcp
Package ifacedhcp implements DHCPv4/DHCPv6 client functionality as a separate plugin.
|
Package ifacedhcp implements DHCPv4/DHCPv6 client functionality as a separate plugin. |
|
plugins/iface/netlink
Package ifacenetlink implements the netlink-based interface management backend for Linux.
|
Package ifacenetlink implements the netlink-based interface management backend for Linux. |
|
plugins/iface/ra
Design: docs/features/interfaces.md -- Router Advertisement sender for a LAN unit Related: register.go -- the factory that binds the counters declared here
|
Design: docs/features/interfaces.md -- Router Advertisement sender for a LAN unit Related: register.go -- the factory that binds the counters declared here |
|
plugins/iface/vpp
Package ifacevpp implements the iface backend for VPP via the GoVPP binary API.
|
Package ifacevpp implements the iface backend for VPP via the GoVPP binary API. |
|
plugins/iface/vpp/yang
Package yang embeds and registers the VPP interface command YANG schema module.
|
Package yang embeds and registers the VPP interface command YANG schema module. |
|
plugins/imageserver/yang
Package yang embeds and registers the image server configuration YANG schema module.
|
Package yang embeds and registers the image server configuration YANG schema module. |
|
plugins/init
Package init provides the `ze init` command that bootstraps the zefs database with SSH credentials before any other ze command can work.
|
Package init provides the `ze init` command that bootstraps the zefs database with SSH credentials before any other ze command can work. |
|
plugins/isis
Design: docs/architecture/isis/isis-4-component-config.md -- IS-IS component registration Related: config.go -- typed config resolution Related: server.go -- engine orchestration + PDU dispatcher Related: events.go -- event namespace + typed handles
|
Design: docs/architecture/isis/isis-4-component-config.md -- IS-IS component registration Related: config.go -- typed config resolution Related: server.go -- engine orchestration + PDU dispatcher Related: events.go -- event namespace + typed handles |
|
plugins/isis/adjacency
Package adjacency implements the IS-IS adjacency finite state machine and per-circuit neighbor table.
|
Package adjacency implements the IS-IS adjacency finite state machine and per-circuit neighbor table. |
|
plugins/isis/circuit
Package circuit implements the per-interface IS-IS circuit runtime that drives Hello exchange and the adjacency table.
|
Package circuit implements the per-interface IS-IS circuit runtime that drives Hello exchange and the adjacency table. |
|
plugins/isis/lsdb
Package lsdb implements the per-level IS-IS link-state database store.
|
Package lsdb implements the per-level IS-IS link-state database store. |
|
plugins/isis/packet
Package packet is the IS-IS PDU and TLV wire codec: the protocol's serialization boundary.
|
Package packet is the IS-IS PDU and TLV wire codec: the protocol's serialization boundary. |
|
plugins/isis/redistribute/events
Design: docs/architecture/isis/isis-11-redistribution.md -- IS-IS redistevents producer wiring.
|
Design: docs/architecture/isis/isis-11-redistribution.md -- IS-IS redistevents producer wiring. |
|
plugins/isis/spf
Package spf computes IS-IS shortest paths via Dijkstra over the LSDB graph and installs the resulting routes.
|
Package spf computes IS-IS shortest paths via Dijkstra over the LSDB graph and installs the resulting routes. |
|
plugins/isis/transport
Package transport implements the raw L2 transport that carries IS-IS PDUs between the socket and the engine.
|
Package transport implements the raw L2 transport that carries IS-IS PDUs between the socket and the engine. |
|
plugins/isis/types
Package types defines the pure IS-IS domain value types: SystemID, SourceID, LSPID, NET, AreaID, the two wide metric widths (Metric and PrefixMetric), SequenceNumber, RemainingLifetime and HoldingTime.
|
Package types defines the pure IS-IS domain value types: SystemID, SourceID, LSPID, NET, AreaID, the two wide metric widths (Metric and PrefixMetric), SequenceNumber, RemainingLifetime and HoldingTime. |
|
plugins/isis/yang
Package yang embeds and registers the IS-IS command and configuration YANG schema modules.
|
Package yang embeds and registers the IS-IS command and configuration YANG schema modules. |
|
plugins/kernel/events
Package kernelevents registers the kernel redistribution protocol and its route-change events.
|
Package kernelevents registers the kernel redistribution protocol and its route-change events. |
|
plugins/kernel/yang
Package yang embeds and registers the kernel plugin's YANG configuration schema.
|
Package yang embeds and registers the kernel plugin's YANG configuration schema. |
|
plugins/ldp
RFC: rfc/short/rfc5036.md -- Section 3.5.2 Hello Hold Time defaults Design: docs/architecture/ldp/mpls-ldp.md -- LDP discovery (UDP hello) Related: wire.go -- HelloMessage encoding/decoding
|
RFC: rfc/short/rfc5036.md -- Section 3.5.2 Hello Hold Time defaults Design: docs/architecture/ldp/mpls-ldp.md -- LDP discovery (UDP hello) Related: wire.go -- HelloMessage encoding/decoding |
|
plugins/ldp/yang
Package yang embeds and registers the LDP plugin's YANG command and configuration schemas.
|
Package yang embeds and registers the LDP plugin's YANG command and configuration schemas. |
|
plugins/local
Package local implements the ze install and uninstall local-mode commands that copy the binary and scaffold its config directory.
|
Package local implements the ze install and uninstall local-mode commands that copy the binary and scaffold its config directory. |
|
plugins/log/cmd
Package cmd implements the log plugin's command handlers for listing, setting, and reading runtime log levels.
|
Package cmd implements the log plugin's command handlers for listing, setting, and reading runtime log levels. |
|
plugins/log/yang
Package yang embeds and registers the log plugin's YANG command schema.
|
Package yang embeds and registers the log plugin's YANG command schema. |
|
plugins/memlock
Design: docs/architecture/plugin/plugin-system.md -- plugin registration Detail: memlock_linux.go -- the init() that takes the lock Detail: register.go -- registration, the engine run, and the doctor check
|
Design: docs/architecture/plugin/plugin-system.md -- plugin registration Detail: memlock_linux.go -- the init() that takes the lock Detail: register.go -- registration, the engine run, and the doctor check |
|
plugins/meta/cmd
Package cmd implements the meta plugin's command discovery, help, event-monitor, and plugin-configuration handlers.
|
Package cmd implements the meta plugin's command discovery, help, event-monitor, and plugin-configuration handlers. |
|
plugins/meta/yang
Package yang embeds and registers the command-meta plugin's YANG API, command, and monitor schemas.
|
Package yang embeds and registers the command-meta plugin's YANG API, command, and monitor schemas. |
|
plugins/mpls-cmd/yang
Package yang embeds and registers the MPLS command plugin's YANG schema.
|
Package yang embeds and registers the MPLS command plugin's YANG schema. |
|
plugins/mrt/yang
Package yang embeds and registers the MRT plugin's YANG configuration schema.
|
Package yang embeds and registers the MRT plugin's YANG configuration schema. |
|
plugins/ntp
Package ntp implements a lightweight NTP client plugin for ze.
|
Package ntp implements a lightweight NTP client plugin for ze. |
|
plugins/ntp/events
Package events defines event constants for the "system" event namespace.
|
Package events defines event constants for the "system" event namespace. |
|
plugins/ntp/yang
Package yang embeds and registers the NTP plugin's YANG command and configuration schemas.
|
Package yang embeds and registers the NTP plugin's YANG command and configuration schemas. |
|
plugins/ospf
Design: docs/architecture/ospf/ospf-4-component-config.md -- per-area state scaffolding Related: config.go -- areaConfig and interfaceConfig inputs
|
Design: docs/architecture/ospf/ospf-4-component-config.md -- per-area state scaffolding Related: config.go -- areaConfig and interfaceConfig inputs |
|
plugins/ospf/iface
Package iface implements the per-interface OSPF runtime, including the interface state machine, Hello exchange, DR election, and neighbor management.
|
Package iface implements the per-interface OSPF runtime, including the interface state machine, Hello exchange, DR election, and neighbor management. |
|
plugins/ospf/lsdb
Package lsdb implements the per-area OSPF link-state database with LSA flooding, origination, and aging.
|
Package lsdb implements the per-area OSPF link-state database with LSA flooding, origination, and aging. |
|
plugins/ospf/neighbor
Package neighbor implements the OSPFv2 Neighbor State Machine and database-exchange scaffolding.
|
Package neighbor implements the OSPFv2 Neighbor State Machine and database-exchange scaffolding. |
|
plugins/ospf/packet
Package packet is the OSPFv2 packet and LSA wire codec: the protocol's serialization boundary.
|
Package packet is the OSPFv2 packet and LSA wire codec: the protocol's serialization boundary. |
|
plugins/ospf/redistribute/events
Design: docs/architecture/ospf/ospf-10-as-external-asbr.md -- OSPF redistevents producer wiring.
|
Design: docs/architecture/ospf/ospf-10-as-external-asbr.md -- OSPF redistevents producer wiring. |
|
plugins/ospf/spf
Package spf implements OSPF shortest-path-first computation, route selection, and loop-free-alternate backup calculation.
|
Package spf implements OSPF shortest-path-first computation, route selection, and loop-free-alternate backup calculation. |
|
plugins/ospf/sr
Package sr holds the address-family-neutral control plane for OSPF Segment Routing (RFC 8665 for the IPv4 family, RFC 8666 for the IPv6 family).
|
Package sr holds the address-family-neutral control plane for OSPF Segment Routing (RFC 8665 for the IPv4 family, RFC 8666 for the IPv6 family). |
|
plugins/ospf/transport
Package transport is the OSPFv2 raw IPv4 transport byte pipe.
|
Package transport is the OSPFv2 raw IPv4 transport byte pipe. |
|
plugins/ospf/types
Package types contains pure OSPFv2 value types and checksum algorithms.
|
Package types contains pure OSPFv2 value types and checksum algorithms. |
|
plugins/ospf/v3/packet
Package packet is the OSPFv3 (RFC 5340) packet and LSA wire codec: the protocol's serialization boundary.
|
Package packet is the OSPFv3 (RFC 5340) packet and LSA wire codec: the protocol's serialization boundary. |
|
plugins/ospf/v3/transport
Package transport implements the OSPFv3 raw IPv6 socket transport that sends and receives OSPF datagrams per interface.
|
Package transport implements the OSPFv3 raw IPv6 socket transport that sends and receives OSPF datagrams per interface. |
|
plugins/ospf/v3/types
Package types holds the OSPFv3 (RFC 5340) leaf value types shared by every later OSPFv3 child spec: Router ID, Area ID, Instance ID, Interface ID, Link State ID, the 16-bit LS Type with embedded flooding scope, the comparable LSA key, sequence numbers, ages, the 24-bit Options field, IPv6 prefix length/options, and metrics.
|
Package types holds the OSPFv3 (RFC 5340) leaf value types shared by every later OSPFv3 child spec: Router ID, Area ID, Instance ID, Interface ID, Link State ID, the 16-bit LS Type with embedded flooding scope, the comparable LSA key, sequence numbers, ages, the 24-bit Options field, IPv6 prefix length/options, and metrics. |
|
plugins/ospf/wire
Package wire defines the address-family-neutral RawPacket handed from an OSPF transport up to the shared engine.
|
Package wire defines the address-family-neutral RawPacket handed from an OSPF transport up to the shared engine. |
|
plugins/ospf/yang
Package yang embeds and registers the OSPF plugin's YANG command and configuration schemas.
|
Package yang embeds and registers the OSPF plugin's YANG command and configuration schemas. |
|
plugins/passwd
Package passwd implements the `ze passwd` subcommand.
|
Package passwd implements the `ze passwd` subcommand. |
|
plugins/ping-cmd/yang
Package yang embeds and registers the ping command plugin's YANG schema.
|
Package yang embeds and registers the ping command plugin's YANG schema. |
|
plugins/pki-cmd/yang
Package yang embeds and registers the PKI command plugin's YANG schema.
|
Package yang embeds and registers the PKI command plugin's YANG schema. |
|
plugins/policyroute/yang
Package yang embeds and registers the policy-route plugin's YANG command and configuration schemas.
|
Package yang embeds and registers the policy-route plugin's YANG command and configuration schemas. |
|
plugins/provision
Package provision implements the ze provision command that runs DHCP, PXE, and TFTP servers for remote device installation.
|
Package provision implements the ze provision command that runs DHCP, PXE, and TFTP servers for remote device installation. |
|
plugins/resolve-cmd/yang
Package yang embeds and registers the resolve command plugin's YANG schema.
|
Package yang embeds and registers the resolve command plugin's YANG schema. |
|
plugins/routingtable/yang
Package yang embeds and registers the routing-table plugin's YANG configuration schema.
|
Package yang embeds and registers the routing-table plugin's YANG configuration schema. |
|
plugins/rsvpte
Design: docs/architecture/rsvpte/mpls-rsvp-te.md -- RSVP-TE bandwidth admission control Related: wire.go -- FlowSpec carries bandwidth parameters Related: fsm.go -- LSP tracks bandwidth reservation
|
Design: docs/architecture/rsvpte/mpls-rsvp-te.md -- RSVP-TE bandwidth admission control Related: wire.go -- FlowSpec carries bandwidth parameters Related: fsm.go -- LSP tracks bandwidth reservation |
|
plugins/rsvpte/yang
Package yang embeds and registers the RSVP-TE plugin's YANG schema modules.
|
Package yang embeds and registers the RSVP-TE plugin's YANG schema modules. |
|
plugins/signal
Design: docs/architecture/behavior/signals.md — signal handling CLI
|
Design: docs/architecture/behavior/signals.md — signal handling CLI |
|
plugins/static/events
Package staticevents registers the static route protocol's redistribution event types.
|
Package staticevents registers the static route protocol's redistribution event types. |
|
plugins/static/vpp
Package staticvpp programs static routes into the VPP FIB via GoVPP.
|
Package staticvpp programs static routes into the VPP FIB via GoVPP. |
|
plugins/static/yang
Package yang embeds and registers the static route plugin's YANG schema modules.
|
Package yang embeds and registers the static route plugin's YANG schema modules. |
|
plugins/storage-cmd/yang
Package yang embeds and registers the storage command plugin's YANG schema module.
|
Package yang embeds and registers the storage command plugin's YANG schema module. |
|
plugins/systemd
Package systemd installs and uninstalls ze as a systemd service.
|
Package systemd installs and uninstalls ze as a systemd service. |
|
plugins/tftpserver/yang
Package yang embeds and registers the TFTP server plugin's YANG schema module.
|
Package yang embeds and registers the TFTP server plugin's YANG schema module. |
|
plugins/traceroute-cmd/yang
Package yang embeds and registers the traceroute command plugin's YANG schema module.
|
Package yang embeds and registers the traceroute command plugin's YANG schema module. |
|
plugins/traffic-cmd/yang
Package yang embeds and registers the traffic command plugin's YANG schema module.
|
Package yang embeds and registers the traffic command plugin's YANG schema module. |
|
plugins/traffic/netlink
Package trafficnetlink implements the traffic control backend using vishvananda/netlink.
|
Package trafficnetlink implements the traffic control backend using vishvananda/netlink. |
|
plugins/traffic/vpp
Package trafficvpp implements the ze traffic-control Backend interface on top of VPP's binary API via GoVPP.
|
Package trafficvpp implements the ze traffic-control Backend interface on top of VPP's binary API via GoVPP. |
|
plugins/trafficusage
Package trafficusage implements the `traffic-usage` system plugin: eBPF TCX per-(port,protocol) and (opt-in) per-IP byte accounting on operator-selected interfaces, exported as Prometheus metrics and viewable via `show traffic-usage`.
|
Package trafficusage implements the `traffic-usage` system plugin: eBPF TCX per-(port,protocol) and (opt-in) per-IP byte accounting on operator-selected interfaces, exported as Prometheus metrics and viewable via `show traffic-usage`. |
|
plugins/trafficusage/yang
Package yang embeds and registers the traffic-usage plugin's YANG schema modules.
|
Package yang embeds and registers the traffic-usage plugin's YANG schema modules. |
|
plugins/update-cmd/cmd
Package cmd handles the system update and firmware show/update RPC commands.
|
Package cmd handles the system update and firmware show/update RPC commands. |
|
plugins/update-cmd/yang
Package yang embeds and registers the update command plugin's YANG schema modules.
|
Package yang embeds and registers the update command plugin's YANG schema modules. |
|
plugins/vrrp
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- Accept_Mode dataplane enforcement RFC: rfc/short/rfc9568.md (VRRPv3) -- Section 6.1 Accept_Mode, Section 6.4.3 Active Related: instance.go -- doInstallVIPs and doRemoveVIPs own this filter's lifetime
|
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- Accept_Mode dataplane enforcement RFC: rfc/short/rfc9568.md (VRRPv3) -- Section 6.1 Accept_Mode, Section 6.4.3 Active Related: instance.go -- doInstallVIPs and doRemoveVIPs own this filter's lifetime |
|
plugins/vrrp/fsm
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- VRRP FSM output actions (closed set) RFC: rfc/short/rfc9568.md (VRRPv3) and rfc/short/rfc3768.md (VRRPv2)
|
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- VRRP FSM output actions (closed set) RFC: rfc/short/rfc9568.md (VRRPv3) and rfc/short/rfc3768.md (VRRPv2) |
|
plugins/vrrp/packet
RFC: rfc/short/rfc9568.md -- Section 5.2.8 (v3 checksum, IPv4 message-only) + rx RFC 5798 dual-accept RFC: rfc/short/rfc3768.md -- Section 5.3.7 (v2 checksum, no pseudo-header) Design: (RFC 8200 Section 8.1 -- IPv6 upper-layer checksum pseudo-header)
|
RFC: rfc/short/rfc9568.md -- Section 5.2.8 (v3 checksum, IPv4 message-only) + rx RFC 5798 dual-accept RFC: rfc/short/rfc3768.md -- Section 5.3.7 (v2 checksum, no pseudo-header) Design: (RFC 8200 Section 8.1 -- IPv6 upper-layer checksum pseudo-header) |
|
test/ci
Design: docs/architecture/testing/ci-format.md — CI test format parsing
|
Design: docs/architecture/testing/ci-format.md — CI test format parsing |
|
test/cli
Package cli registers the ze-test command's functional-test and mock-server handlers.
|
Package cli registers the ze-test command's functional-test and mock-server handlers. |
|
test/decode
Design: docs/architecture/testing/ci-format.md — decode test helpers
|
Design: docs/architecture/testing/ci-format.md — decode test helpers |
|
test/failsyscall
Package failsyscall fails one named syscall for one launched process, through a seccomp filter rather than a tracer.
|
Package failsyscall fails one named syscall for one launched process, through a seccomp filter rather than a tracer. |
|
test/fixture
Package fixture provides compiled helper processes for .ci scenarios.
|
Package fixture provides compiled helper processes for .ci scenarios. |
|
test/golden
Package golden compares captured bytes against fixtures committed beside the package under test.
|
Package golden compares captured bytes against fixtures committed beside the package under test. |
|
test/markupcheck
Package markupcheck holds the static checks over a package that renders markup.
|
Package markupcheck holds the static checks over a package that renders markup. |
|
test/mock/cymru
Package cymru implements a deterministic Team Cymru DNS mock server for tests.
|
Package cymru implements a deterministic Team Cymru DNS mock server for tests. |
|
test/mock/dns
Package dns implements a deterministic DNS mock server for functional tests.
|
Package dns implements a deterministic DNS mock server for functional tests. |
|
test/mock/irr
Package irr implements a deterministic IRR whois mock server for tests.
|
Package irr implements a deterministic IRR whois mock server for tests. |
|
test/mock/peeringdb
Package peeringdb implements a deterministic PeeringDB HTTP mock server for tests.
|
Package peeringdb implements a deterministic PeeringDB HTTP mock server for tests. |
|
test/mock/radius
Package radius implements a mock RADIUS server (RFC 2865) for AAA testing.
|
Package radius implements a mock RADIUS server (RFC 2865) for AAA testing. |
|
test/mock/rpki
Package rpki implements a deterministic RPKI/RTR mock server for tests.
|
Package rpki implements a deterministic RPKI/RTR mock server for tests. |
|
test/mock/rtr
Package rtr implements a mock RTR cache server for RPKI testing.
|
Package rtr implements a mock RTR cache server for RPKI testing. |
|
test/mock/tacacs
Package tacacs implements a mock TACACS+ server for AAA testing.
|
Package tacacs implements a mock TACACS+ server for AAA testing. |
|
test/peer
Design: docs/architecture/testing/ci-format.md — test BGP peer Detail: message.go — BGP message types, wire helpers, and Message struct Detail: checker.go — message validation against expected patterns Detail: expect.go — .ci file loading and option parsing RFC: rfc/short/rfc4724.md — the Graceful Restart capability a .ci declares here RFC: rfc/short/rfc9494.md — the Long-Lived Graceful Restart stale time RFC: rfc/short/draft-abraitis-idr-addpath-paths-limit.md — the PATHS-LIMIT entry
|
Design: docs/architecture/testing/ci-format.md — test BGP peer Detail: message.go — BGP message types, wire helpers, and Message struct Detail: checker.go — message validation against expected patterns Detail: expect.go — .ci file loading and option parsing RFC: rfc/short/rfc4724.md — the Graceful Restart capability a .ci declares here RFC: rfc/short/rfc9494.md — the Long-Lived Graceful Restart stale time RFC: rfc/short/draft-abraitis-idr-addpath-paths-limit.md — the PATHS-LIMIT entry |
|
test/plugins/fakeas112
Design: docs/architecture/core-design.md -- in-process test producer for the AS112 redistribute source
|
Design: docs/architecture/core-design.md -- in-process test producer for the AS112 redistribute source |
|
test/plugins/fakeas112/yang
Package yang provides the YANG schema for the fakeas112 test plugin.
|
Package yang provides the YANG schema for the fakeas112 test plugin. |
|
test/plugins/fakeddos
Package fakeddos is a test-only plugin that drives the ddos-local responder end-to-end against a REAL nft backend.
|
Package fakeddos is a test-only plugin that drives the ddos-local responder end-to-end against a REAL nft backend. |
|
test/plugins/fakeddos/yang
Package yang provides the YANG schema for the fakeddos test plugin.
|
Package yang provides the YANG schema for the fakeddos test plugin. |
|
test/plugins/fakel2tp
Design: docs/architecture/core-design.md -- in-process test producer for L2TP route-change events
|
Design: docs/architecture/core-design.md -- in-process test producer for L2TP route-change events |
|
test/plugins/fakel2tp/yang
Package yang provides the YANG schema for the fakel2tp test plugin.
|
Package yang provides the YANG schema for the fakel2tp test plugin. |
|
test/plugins/fakeredist/yang
Package yang provides the YANG schema for the fakeredist test plugin.
|
Package yang provides the YANG schema for the fakeredist test plugin. |
|
test/runner
Design: docs/architecture/testing/ci-format.md — test runner framework
|
Design: docs/architecture/testing/ci-format.md — test runner framework |
|
test/sessionpath
Package sessionpath answers one question: where do THIS AI session's build and test artifacts go?
|
Package sessionpath answers one question: where do THIS AI session's build and test artifacts go? |
|
test/sim
Package sim provides fake implementations of clock and network interfaces for use in unit tests.
|
Package sim provides fake implementations of clock and network interfaces for use in unit tests. |
|
test/syslog
Design: docs/architecture/testing/ci-format.md — syslog test helpers
|
Design: docs/architecture/testing/ci-format.md — syslog test helpers |
|
test/templcheck
Package templcheck reads the components templ generates and requires every parameter to be a type the compiler checks a field name against.
|
Package templcheck reads the components templ generates and requires every parameter to be a type the compiler checks a field name against. |
|
test/testcond
Package testcond provides conditional test-skipping helpers.
|
Package testcond provides conditional test-skipping helpers. |
|
test/tmpfs
Design: docs/architecture/system-architecture.md — temporary filesystem management
|
Design: docs/architecture/system-architecture.md — temporary filesystem management |
|
test/toolstub/cmd
command
|
|
|
test/trace
Package trace formats per-step functional-test trace output.
|
Package trace formats per-step functional-test trace output. |
|
thirdparty/fat
Package fat implements writing FAT16B file system images, which is useful when generating images for embedded devices such as the Raspberry Pi.
|
Package fat implements writing FAT16B file system images, which is useful when generating images for embedded devices such as the Raspberry Pi. |
|
pkg
|
|
|
fleet
Design: docs/architecture/fleet-config.md — managed config shared types
|
Design: docs/architecture/fleet-config.md — managed config shared types |
|
plugin
Design: docs/architecture/api/process-protocol.md — plugin package
|
Design: docs/architecture/api/process-protocol.md — plugin package |
|
plugin/rpc
Design: docs/architecture/api/ipc_protocol.md — plugin RPC connection Related: message.go — Request type, line parsing/formatting Related: framing.go — newline-delimited FrameReader/FrameWriter Related: mux.go — MuxConn multiplexer (consumes readFrame) Related: bridge.go — DirectBridge for internal plugins
|
Design: docs/architecture/api/ipc_protocol.md — plugin RPC connection Related: message.go — Request type, line parsing/formatting Related: framing.go — newline-delimited FrameReader/FrameWriter Related: mux.go — MuxConn multiplexer (consumes readFrame) Related: bridge.go — DirectBridge for internal plugins |
|
plugin/sdk
Design: docs/architecture/api/process-protocol.md — plugin SDK Detail: sdk_callbacks.go — On*/Set* callback registration methods Detail: sdk_engine.go — plugin-to-engine RPC methods Detail: sdk_dispatch.go — event loop and callback dispatch Detail: sdk_types.go — re-exported RPC type aliases Detail: union.go — event stream correlation Related: ../../../internal/component/plugin/ipc/tls.go — TLS transport and auth (SendAuth, PluginAcceptor) Related: ../../../internal/component/plugin/process/process.go — engine-side process lifecycle (startExternal forks + WaitForPlugin)
|
Design: docs/architecture/api/process-protocol.md — plugin SDK Detail: sdk_callbacks.go — On*/Set* callback registration methods Detail: sdk_engine.go — plugin-to-engine RPC methods Detail: sdk_dispatch.go — event loop and callback dispatch Detail: sdk_types.go — re-exported RPC type aliases Detail: union.go — event stream correlation Related: ../../../internal/component/plugin/ipc/tls.go — TLS transport and auth (SendAuth, PluginAcceptor) Related: ../../../internal/component/plugin/process/process.go — engine-side process lifecycle (startExternal forks + WaitForPlugin) |
|
ze
Package ze defines the public interfaces for the Ze engine, plugins, subsystems, config, and event bus.
|
Package ze defines the public interfaces for the Ze engine, plugins, subsystems, config, and event bus. |
|
zefs
Package zefs provides a netcapstring-framed blob store with hierarchical keys.
|
Package zefs provides a netcapstring-framed blob store with hierarchical keys. |
|
tools
|
|
|
freertr-entrypoint
command
Package main starts freeRtr and its raw Ethernet bridge inside the interop image.
|
Package main starts freeRtr and its raw Ethernet bridge inside the interop image. |
|
kernel-builder
command
|
Click to show internal directories.
Click to hide internal directories.