ze

module
v0.0.0-...-9e3298e Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 14, 2026 License: AGPL-3.0

README

Ze

Ze is an open-source configuration and protocol engine written in Go. The network operating system built on it speaks BGP, manages Linux network interfaces, and programs the forwarding table. Operators use a shared configuration model through an SSH CLI or a web editor.

Pre-release. Ze has not been released yet. Some features are incomplete or experimental, and APIs and configuration syntax can change. The feature inventory records their status. A lab is the right place to evaluate Ze before putting it on a live network.

I wrote ExaBGP, and its users are the people I had in mind while building Ze. The aim is to keep programmable routing and add control of the device around it, with one configuration for the protocols and the system they run on.

Start Here

To explore Start with
A first BGP session Quick Start
A network lab netlab and containerlab
An existing ExaBGP deployment Migration guide
A dedicated device or VM Appliance guide

What Ze Includes

Features depend on the build and configuration. The guides describe how to use each area, and the feature inventory distinguishes supported, experimental, and partial implementations.

Area Guides
Routing BGP, route injection, OSPF, and RPKI validation
Linux networking Interfaces, static routes, firewall, and IPsec
Configuration and operations Configuration, CLI, command reference, and operations
Automation and visibility Plugins, MCP, monitoring, and looking glass

Build from Source

Development requires Go 1.27 or newer on Linux or macOS. Linux is the platform for the network operating system's kernel features.

git clone https://github.com/ze-software/ze.git
cd ze
./ze --help

On a fresh checkout, the ./ze launcher builds the daemon before it runs the command. It derives the feature tags from feature-gates.txt, so there is no tag list to maintain by hand. Later invocations reuse the existing binary.

The Quick Start guide covers credentials, an example configuration, and commands to start Ze and inspect its peers. The Ubuntu installation guide covers a systemd installation.

Build Only What You Run

Subsystems have ze_<feature> build tags. A custom build can omit BGP or an operator interface along with its registered schema. The architecture guide explains the component boundaries, and the feature manifest names the packages behind each tag.

Architecture and Plugins

The core is a protocol-independent supervisor. It manages subsystem lifecycles through a message bus, a configuration provider, and a plugin manager. Protocols and system features register themselves and contribute their own YANG modules.

Those modules form a shared configuration schema for validation and the editors. The Model Context Protocol (MCP) server derives tools from the running daemon's command catalog, so AI clients can discover its available commands.

Plugins can be compiled Go modules or separate processes. Compiled plugins contribute their YANG to the daemon's configuration validator. External plugins can expose a model through ze schema, but that model does not automatically extend the daemon's validator.

The architecture overview describes the runtime and BGP wire design. The plugin development guide covers the SDK and process protocol.

From ExaBGP

ze exabgp migrate converts ExaBGP configuration files, and ze exabgp plugin provides a bridge for existing process scripts. The migration guide documents the syntax and API differences to check when moving a deployment.

If you run ExaBGP, I would appreciate reports from your own configurations and process scripts. A report that shows what failed and what ExaBGP did with the same input gives me something concrete to fix. You can use the issue tracker or Discord.

Testing and Project Status

The testing overview explains the unit, functional, fuzz, mutation, and chaos tests, plus Linux checks under QEMU. The interop guide describes scenarios against other implementations, including FRR, BIRD, and GoBGP.

The RFC requirement ledger publishes requirements and their test evidence, including gaps. These records help evaluate the current implementation. They do not replace deployment experience.

AI-Assisted Development

Ze is developed with AI coding assistants. I decide the architecture, the tradeoffs, and what the code must preserve. Tests and independent review are part of that process. I explain the reasoning in AI slop is the wrong test.

Contributing and License

Bug reports and contributions are welcome through the contribution process. A Contributor License Agreement applies to contributions.

Ze is licensed under the GNU Affero General Public License v3.0.

Directories

Path Synopsis
api
cmd
ze command
Package main is the ze command that dispatches every ze subcommand from a single build-tag-selected entry point.
Package main is the ze command that dispatches every ze subcommand from a single build-tag-selected entry point.
ze-gok command
Package main is the ze-gok command that wraps the gokrazy build tool with a project-local module cache.
Package main is the ze-gok command that wraps the gokrazy build tool with a project-local module cache.
ze-perf-run command
ze-serial-shell command
Package main is the ze-serial-shell command that symlinks the ze binary as the gokrazy serial console login shell.
Package main is the ze-serial-shell command that symlinks the ze binary as the gokrazy serial console login shell.
ze-terminal-pty command
ze/hub
Design: docs/architecture/hub-architecture.md -- hub CLI entry point Detail: service_mcp.go -- MCP server factory (//go:build ze_mcp) Detail: api.go -- REST/gRPC API server startup Detail: infra_setup.go -- infrastructure server setup hook Related: main_reload.go -- SIGHUP config reload Related: main_servers.go -- web, LG, SSH server startup Related: main_system.go -- host tuning, resolvers, telemetry
Design: docs/architecture/hub-architecture.md -- hub CLI entry point Detail: service_mcp.go -- MCP server factory (//go:build ze_mcp) Detail: api.go -- REST/gRPC API server startup Detail: infra_setup.go -- infrastructure server setup hook Related: main_reload.go -- SIGHUP config reload Related: main_servers.go -- web, LG, SSH server startup Related: main_system.go -- host tuning, resolvers, telemetry
ze/internal/cmdutil
Design: docs/architecture/api/commands.md — shared CLI command utilities
Design: docs/architecture/api/commands.md — shared CLI command utilities
ze/internal/helpfmt
Package helpfmt is a thin compatibility shim over internal/core/helpfmt.
Package helpfmt is a thin compatibility shim over internal/core/helpfmt.
ze/internal/ssh/client
Design: docs/architecture/system-architecture.md — SSH client helper for CLI tools
Design: docs/architecture/system-architecture.md — SSH client helper for CLI tools
ze/internal/suggest
Design: docs/architecture/core-design.md — CLI command suggestions
Design: docs/architecture/core-design.md — CLI command suggestions
demos
internal
analyze
Design: (none -- research/analysis tool) RFC: rfc/short/rfc6396.md -- per-record-type AS width; rfc/short/rfc6793.md -- AS4_PATH is always 4-octet
Design: (none -- research/analysis tool) RFC: rfc/short/rfc6396.md -- per-record-type AS width; rfc/short/rfc6793.md -- AS4_PATH is always 4-octet
appliance
Design: docs/architecture/appliance/builder.md -- appliance CLI dispatch
Design: docs/architecture/appliance/builder.md -- appliance CLI dispatch
appliance/instance
Package instance prepares a relocated copy of the checked-in gokrazy instance so an image build never runs from, or writes to, a tracked path.
Package instance prepares a relocated copy of the checked-in gokrazy instance so an image build never runs from, or writes to, a tracked path.
appliance/kernelbuilder
Package kernelbuilder builds Ze runtime and installer kernels without an interpreter.
Package kernelbuilder builds Ze runtime and installer kernels without an interpreter.
chaos
Package chaos provides fault-injection primitives and a virtual clock for deterministic chaos simulation.
Package chaos provides fault-injection primitives and a virtual clock for deterministic chaos simulation.
chaos/engine
Design: docs/architecture/chaos-web-dashboard.md — chaos action scheduling
Design: docs/architecture/chaos-web-dashboard.md — chaos action scheduling
chaos/guard
Package guard filters chaos actions that are incompatible with a peer's current state.
Package guard filters chaos actions that are incompatible with a peer's current state.
chaos/inprocess
Package inprocess schedules in-process chaos fault injection against simulated BGP peers.
Package inprocess schedules in-process chaos fault injection against simulated BGP peers.
chaos/mcp
Package mcp exposes chaos dashboard state and controls as MCP tools for AI queries.
Package mcp exposes chaos dashboard state and controls as MCP tools for AI queries.
chaos/mocknet
Design: docs/architecture/chaos-web-dashboard.md — mock network for in-process chaos
Design: docs/architecture/chaos-web-dashboard.md — mock network for in-process chaos
chaos/peer
Design: docs/architecture/chaos-web-dashboard.md — BGP peer simulation
Design: docs/architecture/chaos-web-dashboard.md — BGP peer simulation
chaos/replay
Design: docs/architecture/chaos-web-dashboard.md — event replay and diff
Design: docs/architecture/chaos-web-dashboard.md — event replay and diff
chaos/report
Design: docs/architecture/chaos-web-dashboard.md — chaos reporting and metrics
Design: docs/architecture/chaos-web-dashboard.md — chaos reporting and metrics
chaos/route
Design: docs/architecture/chaos-web-dashboard.md — route action scheduling
Design: docs/architecture/chaos-web-dashboard.md — route action scheduling
chaos/scenario
Design: docs/architecture/chaos-web-dashboard.md — scenario generation
Design: docs/architecture/chaos-web-dashboard.md — scenario generation
chaos/shrink
Design: docs/architecture/chaos-web-dashboard.md — test case shrinking
Design: docs/architecture/chaos-web-dashboard.md — test case shrinking
chaos/validation
Design: docs/architecture/chaos-web-dashboard.md — property-based validation
Design: docs/architecture/chaos-web-dashboard.md — property-based validation
chaos/watchdog
Package watchdog detects anomalies such as reconnect timeouts and convergence plateaus during chaos runs.
Package watchdog detects anomalies such as reconnect timeouts and convergence plateaus during chaos runs.
chaos/web
Design: docs/architecture/chaos-web-dashboard.md — web dashboard UI Detail: state_activeset.go — active set peer visibility management Detail: state_routematrix.go — route flow matrix and heatmap tracking Related: viz_convergence_trend.go — ConvergenceTrend RingBuffer and ComputeConvergencePercentiles
Design: docs/architecture/chaos-web-dashboard.md — web dashboard UI Detail: state_activeset.go — active set peer visibility management Detail: state_routematrix.go — route flow matrix and heatmap tracking Related: viz_convergence_trend.go — ConvergenceTrend RingBuffer and ComputeConvergencePercentiles
component/aaa
Package aaa defines the pluggable AAA (Authentication, Authorization, Accounting) backend layer.
Package aaa defines the pluggable AAA (Authentication, Authorization, Accounting) backend layer.
component/aaa/all
Package all blank-imports every AAA backend so their init() functions fire and aaa.Default contains the backend factories.
Package all blank-imports every AAA backend so their init() functions fire and aaa.Default contains the backend factories.
component/aaa/cmd
Package cmd registers engine-side RPC handlers for the AAA component's CLI surface.
Package cmd registers engine-side RPC handlers for the AAA component's CLI surface.
component/aihelp
Design: docs/features/ai-first.md -- AI reference assembly (single source of truth)
Design: docs/features/ai-first.md -- AI reference assembly (single source of truth)
component/api
Package api provides the shared command-execution engine backing the REST and gRPC transports.
Package api provides the shared command-execution engine backing the REST and gRPC transports.
component/api/grpc
Design: docs/architecture/api/architecture.md -- gRPC API transport
Design: docs/architecture/api/architecture.md -- gRPC API transport
component/api/grpc/yang
Package yang embeds and registers the gRPC transport YANG configuration module.
Package yang embeds and registers the gRPC transport YANG configuration module.
component/api/rest
Design: docs/architecture/api/architecture.md -- REST API transport Related: auth.go -- the per-request credential gate and the reload seam that replaces it
Design: docs/architecture/api/architecture.md -- REST API transport Related: auth.go -- the per-request credential gate and the reload seam that replaces it
component/api/rest/yang
Package yang embeds and registers the REST transport YANG configuration module.
Package yang embeds and registers the REST transport YANG configuration module.
component/api/yang
Package yang embeds and registers the API YANG configuration module.
Package yang embeds and registers the API YANG configuration module.
component/authz
Package authz provides profile-based command authorization.
Package authz provides profile-based command authorization.
component/authz/yang
Package yang embeds and registers the authorization YANG configuration module.
Package yang embeds and registers the authorization YANG configuration module.
component/bfd
Design: rfc/short/rfc5880.md -- BFD plugin entry point Design: docs/research/bfd-implementation-guide.md -- ze plugin layout Detail: config.go -- parser for the YANG bfd container
Design: rfc/short/rfc5880.md -- BFD plugin entry point Design: docs/research/bfd-implementation-guide.md -- ze plugin layout Detail: config.go -- parser for the YANG bfd container
component/bfd/api
Package api defines the BFD engine's client-facing service interface for requesting sessions and receiving state changes.
Package api defines the BFD engine's client-facing service interface for requesting sessions and receiving state changes.
component/bfd/auth
Package auth implements BFD packet authentication signers and verifiers per RFC 5880.
Package auth implements BFD packet authentication signers and verifiers per RFC 5880.
component/bfd/cmd
Design: docs/architecture/bfd.md -- BFD CLI handlers
Design: docs/architecture/bfd.md -- BFD CLI handlers
component/bfd/engine
Design: rfc/short/rfc5880.md -- Echo Function (Section 6.4) Related: loop.go -- express-loop goroutine that drains the echo RX channel Related: ../packet/echo.go -- ZEEC envelope codec Related: ../session/timers.go -- EchoInterval / NextEchoTxDeadline / AdvanceEcho
Design: rfc/short/rfc5880.md -- Echo Function (Section 6.4) Related: loop.go -- express-loop goroutine that drains the echo RX channel Related: ../packet/echo.go -- ZEEC envelope codec Related: ../session/timers.go -- EchoInterval / NextEchoTxDeadline / AdvanceEcho
component/bfd/packet
Design: rfc/short/rfc5880.md -- Authentication Section (Section 4.2-4.4) Related: control.go -- 24-byte mandatory section codec
Design: rfc/short/rfc5880.md -- Authentication Section (Section 4.2-4.4) Related: control.go -- 24-byte mandatory section codec
component/bfd/session
Design: rfc/short/rfc5880.md -- Section 6.7 (authentication integration) Related: session.go -- Machine state and identity Related: fsm.go -- reception procedure that drives Verify
Design: rfc/short/rfc5880.md -- Section 6.7 (authentication integration) Related: session.go -- Machine state and identity Related: fsm.go -- reception procedure that drives Verify
component/bfd/transport
Design: rfc/short/rfc5881.md -- single-hop UDP encapsulation Design: rfc/short/rfc5883.md -- multi-hop UDP encapsulation Related: udp.go -- IPv4 UDP transport wrapped by Dual Related: socket.go -- Transport interface contract
Design: rfc/short/rfc5881.md -- single-hop UDP encapsulation Design: rfc/short/rfc5883.md -- multi-hop UDP encapsulation Related: udp.go -- IPv4 UDP transport wrapped by Dual Related: socket.go -- Transport interface contract
component/bfd/yang
Package yang embeds and registers the BFD YANG configuration and command modules.
Package yang embeds and registers the BFD YANG configuration and command modules.
component/bgp
Package bgp provides shared types and event parsing for the BGP subsystem.
Package bgp provides shared types and event parsing for the BGP subsystem.
component/bgp/attrpool
Package attrpool provides refcounted, deduplicating attribute pools for BGP path attributes.
Package attrpool provides refcounted, deduplicating attribute pools for BGP path attributes.
component/bgp/blackholecfg
Package blackholecfg reads the per-peer `blackhole` container of a BGP config subtree.
Package blackholecfg reads the per-peer `blackhole` container of a BGP config subtree.
component/bgp/cli
Design: docs/architecture/core-design.md — BGP CLI commands Detail: cmd_plugin.go — plugin CLI simulator subcommand
Design: docs/architecture/core-design.md — BGP CLI commands Detail: cmd_plugin.go — plugin CLI simulator subcommand
component/bgp/cli/yang
Package yang embeds and registers the BGP tools CLI command YANG module.
Package yang embeds and registers the BGP tools CLI command YANG module.
component/bgp/config
Design: docs/architecture/config/syntax.md — the bgp/as-notation leaf Overview: loader_create.go — the two apply paths that call this Related: internal/core/bgp/asn/asn.go — Configure, the one writer of the value
Design: docs/architecture/config/syntax.md — the bgp/as-notation leaf Overview: loader_create.go — the two apply paths that call this Related: internal/core/bgp/asn/asn.go — Configure, the one writer of the value
component/bgp/configjson
Package configjson provides shared helpers for traversing BGP config JSON delivered to plugins at Stage 2 (configure callback).
Package configjson provides shared helpers for traversing BGP config JSON delivered to plugins at Stage 2 (configure callback).
component/bgp/filter
Package filter implements BGP route filtering based on attribute matching rules.
Package filter implements BGP route filtering based on attribute matching rules.
component/bgp/filterapi
Design: docs/architecture/bgp/fanout-dedup.md -- fingerprint the edit set, confirm by equality Overview: filterapi.go -- ModAccumulator, whose state this encodes Related: editset.go -- the rebuild plan the digest predicts the output of
Design: docs/architecture/bgp/fanout-dedup.md -- fingerprint the edit set, confirm by equality Overview: filterapi.go -- ModAccumulator, whose state this encodes Related: editset.go -- the rebuild plan the digest predicts the output of
component/bgp/filtertext
Package filtertext reads one attribute out of the policy filter text format.
Package filtertext reads one attribute out of the policy filter text format.
component/bgp/format
Package format provides JSON and text formatting of BGP messages directly from wire bytes.
Package format provides JSON and text formatting of BGP messages directly from wire bytes.
component/bgp/fsm
Package fsm implements the BGP Finite State Machine per RFC 4271 Section 8, managing peer state transitions, timers, and session lifecycle events.
Package fsm implements the BGP Finite State Machine per RFC 4271 Section 8, managing peer state transitions, timers, and session lifecycle events.
component/bgp/grmarker
Design: docs/architecture/core-design.md -- GR restart marker for Restarting Speaker detection
Design: docs/architecture/core-design.md -- GR restart marker for Restarting Speaker detection
component/bgp/message
Design: docs/architecture/wire/messages.md — BGP message types Related: update_build.go — UPDATE builder infrastructure
Design: docs/architecture/wire/messages.md — BGP message types Related: update_build.go — UPDATE builder infrastructure
component/bgp/plugins/adj_rib_in
Design: docs/architecture/plugin/rib-storage-design.md — Adj-RIB-In raw hex storage RFC: rfc/short/rfc4271.md -- Adj-RIBs-In stores unprocessed routing information Detail: rib_commands.go — command handlers (status, show, replay, validation) Detail: rib_validation.go — RPKI validation gate (pending routes, timeout, state constants)
Design: docs/architecture/plugin/rib-storage-design.md — Adj-RIB-In raw hex storage RFC: rfc/short/rfc4271.md -- Adj-RIBs-In stores unprocessed routing information Detail: rib_commands.go — command handlers (status, show, replay, validation) Detail: rib_validation.go — RPKI validation gate (pending routes, timeout, state constants)
component/bgp/plugins/adj_rib_in/yang
Package yang embeds and registers the adj-rib-in API YANG module.
Package yang embeds and registers the adj-rib-in API YANG module.
component/bgp/plugins/aigp
Design: (none -- predates documentation) RFC: rfc/short/rfc7311.md
Design: (none -- predates documentation) RFC: rfc/short/rfc7311.md
component/bgp/plugins/bmp
Design: docs/architecture/core-design.md -- BGP plugin model
Design: docs/architecture/core-design.md -- BGP plugin model
component/bgp/plugins/bmp/yang
Package yang embeds and registers the BMP command and configuration YANG modules.
Package yang embeds and registers the BMP command and configuration YANG modules.
component/bgp/plugins/cmd/announce
Package announce implements the on-demand BGP route origination command handlers.
Package announce implements the on-demand BGP route origination command handlers.
component/bgp/plugins/cmd/announce/yang
Package yang embeds and registers the BGP announce command and API YANG modules.
Package yang embeds and registers the BGP announce command and API YANG modules.
component/bgp/plugins/cmd/cache
Package cache implements the BGP cache operation command handlers.
Package cache implements the BGP cache operation command handlers.
component/bgp/plugins/cmd/cache/yang
Package yang embeds and registers the YANG schema modules for the cache command.
Package yang embeds and registers the YANG schema modules for the cache command.
component/bgp/plugins/cmd/commit
Package commit implements the BGP commit command that manages named route commit transactions.
Package commit implements the BGP commit command that manages named route commit transactions.
component/bgp/plugins/cmd/commit/yang
Package yang embeds and registers the YANG schema modules for the commit command.
Package yang embeds and registers the YANG schema modules for the commit command.
component/bgp/plugins/cmd/monitor
Design: docs/architecture/api/commands.md — BGP monitor command handlers
Design: docs/architecture/api/commands.md — BGP monitor command handlers
component/bgp/plugins/cmd/monitor/yang
Package yang embeds and registers the YANG schema modules for the monitor command.
Package yang embeds and registers the YANG schema modules for the monitor command.
component/bgp/plugins/cmd/peer
Package peer provides BGP peer lifecycle and introspection command handlers for the plugin server.
Package peer provides BGP peer lifecycle and introspection command handlers for the plugin server.
component/bgp/plugins/cmd/peer/yang
Package yang embeds and registers the YANG schema modules for the peer command.
Package yang embeds and registers the YANG schema modules for the peer command.
component/bgp/plugins/cmd/policy
Package policy implements the show policy commands that inspect policy chains and dry-run policy evaluation.
Package policy implements the show policy commands that inspect policy chains and dry-run policy evaluation.
component/bgp/plugins/cmd/policy/yang
Package yang embeds and registers the YANG schema module for the policy command.
Package yang embeds and registers the YANG schema module for the policy command.
component/bgp/plugins/cmd/raw
Design: docs/architecture/api/commands.md — BGP raw message command handler
Design: docs/architecture/api/commands.md — BGP raw message command handler
component/bgp/plugins/cmd/raw/yang
Package yang embeds and registers the YANG schema modules for the raw command.
Package yang embeds and registers the YANG schema modules for the raw command.
component/bgp/plugins/cmd/rib
Design: docs/architecture/api/commands.md — RIB CLI proxy handlers
Design: docs/architecture/api/commands.md — RIB CLI proxy handlers
component/bgp/plugins/cmd/rib/yang
Package yang embeds and registers the YANG schema modules for the rib command.
Package yang embeds and registers the YANG schema modules for the rib command.
component/bgp/plugins/cmd/update
Design: docs/architecture/bgp/replay-cursor.md -- stateful cursor for replay batching Overview: update_text.go — handleUpdate dispatch, parsedAttrs, snapshot, parseCommonAttributeText Related: update_text_nlri.go — parseNLRISection (reused unchanged)
Design: docs/architecture/bgp/replay-cursor.md -- stateful cursor for replay batching Overview: update_text.go — handleUpdate dispatch, parsedAttrs, snapshot, parseCommonAttributeText Related: update_text_nlri.go — parseNLRISection (reused unchanged)
component/bgp/plugins/cmd/update/yang
Package yang embeds and registers the YANG schema modules for the update command.
Package yang embeds and registers the YANG schema modules for the update command.
component/bgp/plugins/filter_aspath
Design: docs/architecture/core-design.md -- AS-path filter config parsing Related: match.go -- AS-path regex matching algorithm Related: filter_aspath.go -- SDK entry point and handleFilterUpdate
Design: docs/architecture/core-design.md -- AS-path filter config parsing Related: match.go -- AS-path regex matching algorithm Related: filter_aspath.go -- SDK entry point and handleFilterUpdate
component/bgp/plugins/filter_aspath/yang
Package yang embeds and registers the YANG schema module for the aspath filter.
Package yang embeds and registers the YANG schema module for the aspath filter.
component/bgp/plugins/filter_aspath_length/yang
Package yang embeds and registers the YANG schema module for the aspath-length filter.
Package yang embeds and registers the YANG schema module for the aspath-length filter.
component/bgp/plugins/filter_community
Package filter_community implements the bgp-filter-community plugin.
Package filter_community implements the bgp-filter-community plugin.
component/bgp/plugins/filter_community/yang
Package yang embeds and registers the community-filter plugin's YANG configuration schema module.
Package yang embeds and registers the community-filter plugin's YANG configuration schema module.
component/bgp/plugins/filter_community_match
Design: docs/architecture/core-design.md -- community match filter config parsing Related: match.go -- community matching algorithm Related: filter_community_match.go -- SDK entry point and handleFilterUpdate
Design: docs/architecture/core-design.md -- community match filter config parsing Related: match.go -- community matching algorithm Related: filter_community_match.go -- SDK entry point and handleFilterUpdate
component/bgp/plugins/filter_community_match/yang
Package yang embeds and registers the YANG schema module for the community-match filter.
Package yang embeds and registers the YANG schema module for the community-match filter.
component/bgp/plugins/filter_family
Design: docs/architecture/core-design.md -- address-family policy filter Related: config.go -- bgp/policy/family-filter config parsing + tear-down-in-export guard Related: match.go -- family extraction from the raw UPDATE body Related: handler.go -- per-update remove / tear-down decision RFC: rfc/short/rfc4760.md -- multiprotocol families (Section 6) RFC: rfc/short/rfc4271.md -- NOTIFICATION + session close (Section 6)
Design: docs/architecture/core-design.md -- address-family policy filter Related: config.go -- bgp/policy/family-filter config parsing + tear-down-in-export guard Related: match.go -- family extraction from the raw UPDATE body Related: handler.go -- per-update remove / tear-down decision RFC: rfc/short/rfc4760.md -- multiprotocol families (Section 6) RFC: rfc/short/rfc4271.md -- NOTIFICATION + session close (Section 6)
component/bgp/plugins/filter_family/yang
Package yang embeds and registers the family-filter plugin's YANG configuration schema module.
Package yang embeds and registers the family-filter plugin's YANG configuration schema module.
component/bgp/plugins/filter_irr/yang
Package yang embeds and registers the IRR-filter plugin's YANG configuration schema modules.
Package yang embeds and registers the IRR-filter plugin's YANG configuration schema modules.
component/bgp/plugins/filter_modify
Design: docs/architecture/core-design.md -- route modify filter config parsing Related: modify.go -- delta building and attribute encoding Related: filter_modify.go -- SDK entry point and handleFilterUpdate
Design: docs/architecture/core-design.md -- route modify filter config parsing Related: modify.go -- delta building and attribute encoding Related: filter_modify.go -- SDK entry point and handleFilterUpdate
component/bgp/plugins/filter_modify/yang
Package yang embeds and registers the modify-filter plugin's YANG configuration schema module.
Package yang embeds and registers the modify-filter plugin's YANG configuration schema module.
component/bgp/plugins/filter_path_asn
Design: docs/architecture/bgp/filter-path-asn.md -- the reject-asn filter plugin Detail: register_command.go -- the YANG command nodes and the in-core forwarders Detail: curated.go -- the annotation table and the transit-free set Related: filter_path_asn.go -- the SDK entry point that installs handleCommand
Design: docs/architecture/bgp/filter-path-asn.md -- the reject-asn filter plugin Detail: register_command.go -- the YANG command nodes and the in-core forwarders Detail: curated.go -- the annotation table and the transit-free set Related: filter_path_asn.go -- the SDK entry point that installs handleCommand
component/bgp/plugins/filter_path_asn/yang
Package yang embeds and registers the YANG schema module for the reject-asn filter.
Package yang embeds and registers the YANG schema module for the reject-asn filter.
component/bgp/plugins/filter_prefix
Design: docs/architecture/core-design.md -- prefix-list filter plugin Detail: match.go -- prefix matching algorithm and update evaluator Detail: config.go -- bgp/policy/prefix-list config parsing
Design: docs/architecture/core-design.md -- prefix-list filter plugin Detail: match.go -- prefix matching algorithm and update evaluator Detail: config.go -- bgp/policy/prefix-list config parsing
component/bgp/plugins/filter_prefix/yang
Package yang embeds and registers the prefix-filter plugin's YANG configuration schema module.
Package yang embeds and registers the prefix-filter plugin's YANG configuration schema module.
component/bgp/plugins/filter_remove_private_as/yang
Package yang embeds and registers the remove-private-AS filter plugin's YANG configuration schema module.
Package yang embeds and registers the remove-private-AS filter plugin's YANG configuration schema module.
component/bgp/plugins/gr
Design: docs/architecture/core-design.md — graceful restart plugin RFC: rfc/short/rfc4724.md RFC: rfc/short/rfc9494.md Detail: gr_state.go — GR state machine (per-peer timers, stale family tracking) Detail: gr_llgr.go — LLGR capability decode, config extraction, CLI decode (RFC 9494)
Design: docs/architecture/core-design.md — graceful restart plugin RFC: rfc/short/rfc4724.md RFC: rfc/short/rfc9494.md Detail: gr_state.go — GR state machine (per-peer timers, stale family tracking) Detail: gr_llgr.go — LLGR capability decode, config extraction, CLI decode (RFC 9494)
component/bgp/plugins/gr/yang
Package yang embeds and registers the graceful-restart plugin's YANG configuration schema module.
Package yang embeds and registers the graceful-restart plugin's YANG configuration schema module.
component/bgp/plugins/healthcheck
Design: docs/architecture/bgp/healthcheck-plugin.md -- healthcheck config parsing Overview: healthcheck.go -- plugin lifecycle and probe management
Design: docs/architecture/bgp/healthcheck-plugin.md -- healthcheck config parsing Overview: healthcheck.go -- plugin lifecycle and probe management
component/bgp/plugins/healthcheck/yang
Package yang embeds and registers the healthcheck plugin's YANG configuration schema module.
Package yang embeds and registers the healthcheck plugin's YANG configuration schema module.
component/bgp/plugins/hostname
Design: docs/architecture/core-design.md — hostname capability plugin
Design: docs/architecture/core-design.md — hostname capability plugin
component/bgp/plugins/hostname/yang
Package yang embeds and registers the hostname plugin's YANG configuration schema module.
Package yang embeds and registers the hostname plugin's YANG configuration schema module.
component/bgp/plugins/llnh
Design: docs/architecture/core-design.md — link-local next-hop plugin RFC: rfc/short/rfc5549.md
Design: docs/architecture/core-design.md — link-local next-hop plugin RFC: rfc/short/rfc5549.md
component/bgp/plugins/llnh/yang
Package yang embeds and registers the link-local-nexthop plugin's YANG configuration schema module.
Package yang embeds and registers the link-local-nexthop plugin's YANG configuration schema module.
component/bgp/plugins/nlri/evpn
Design: docs/architecture/wire/nlri-evpn.md — EVPN NLRI plugin RFC: rfc/short/rfc7432.md
Design: docs/architecture/wire/nlri-evpn.md — EVPN NLRI plugin RFC: rfc/short/rfc7432.md
component/bgp/plugins/nlri/flowspec
Design: docs/architecture/wire/nlri-flowspec.md — FlowSpec NLRI plugin RFC: rfc/short/rfc5575.md Detail: plugin_decode.go — wire-to-JSON decoding and formatting Detail: plugin_encode_text.go — text-to-wire encoding Detail: plugin_protocol.go — stdin/stdout protocol dispatch
Design: docs/architecture/wire/nlri-flowspec.md — FlowSpec NLRI plugin RFC: rfc/short/rfc5575.md Detail: plugin_decode.go — wire-to-JSON decoding and formatting Detail: plugin_encode_text.go — text-to-wire encoding Detail: plugin_protocol.go — stdin/stdout protocol dispatch
component/bgp/plugins/nlri/flowspec/yang
Package yang embeds and registers the FlowSpec match components that augment the announce command tree.
Package yang embeds and registers the FlowSpec match components that augment the announce command tree.
component/bgp/plugins/nlri/labeled
Design: docs/architecture/wire/nlri.md — labeled unicast NLRI plugin RFC: rfc/short/rfc8277.md
Design: docs/architecture/wire/nlri.md — labeled unicast NLRI plugin RFC: rfc/short/rfc8277.md
component/bgp/plugins/nlri/ls
Design: docs/architecture/wire/nlri-bgpls.md — BGP-LS attribute TLV framework RFC: rfc/short/rfc7752.md — BGP-LS attribute type 29 TLV format Overview: types.go — core types, TLV constants, and helper functions Detail: attr_node.go — node attribute TLV types Detail: attr_link.go — link attribute TLV types Detail: attr_prefix.go — prefix attribute TLV types Detail: attr_srv6.go — SRv6 attribute TLV types Detail: register_attr.go — attribute TLV registration
Design: docs/architecture/wire/nlri-bgpls.md — BGP-LS attribute TLV framework RFC: rfc/short/rfc7752.md — BGP-LS attribute type 29 TLV format Overview: types.go — core types, TLV constants, and helper functions Detail: attr_node.go — node attribute TLV types Detail: attr_link.go — link attribute TLV types Detail: attr_prefix.go — prefix attribute TLV types Detail: attr_srv6.go — SRv6 attribute TLV types Detail: register_attr.go — attribute TLV registration
component/bgp/plugins/nlri/mup
Design: docs/architecture/wire/nlri.md — MUP NLRI prefix encoding helpers RFC: rfc/short/draft-ietf-bess-mup-safi.md — MUP SAFI encoding
Design: docs/architecture/wire/nlri.md — MUP NLRI prefix encoding helpers RFC: rfc/short/draft-ietf-bess-mup-safi.md — MUP SAFI encoding
component/bgp/plugins/nlri/mvpn
Design: docs/architecture/wire/nlri.md — MVPN NLRI plugin
Design: docs/architecture/wire/nlri.md — MVPN NLRI plugin
component/bgp/plugins/nlri/rtc
Design: docs/architecture/wire/nlri.md — route target constraint plugin RFC: rfc/short/rfc4684.md
Design: docs/architecture/wire/nlri.md — route target constraint plugin RFC: rfc/short/rfc4684.md
component/bgp/plugins/nlri/srpolicy
Design: docs/architecture/wire/nlri.md -- SR-Policy NLRI plugin RFC: rfc/short/rfc9830.md -- SR-Policy NLRI wire format (SAFI 73)
Design: docs/architecture/wire/nlri.md -- SR-Policy NLRI plugin RFC: rfc/short/rfc9830.md -- SR-Policy NLRI wire format (SAFI 73)
component/bgp/plugins/nlri/vpls
Design: docs/architecture/wire/nlri.md — VPLS NLRI plugin RFC: rfc/short/rfc4761.md
Design: docs/architecture/wire/nlri.md — VPLS NLRI plugin RFC: rfc/short/rfc4761.md
component/bgp/plugins/nlri/vpn
Design: docs/architecture/wire/nlri.md — VPN NLRI plugin RFC: rfc/short/rfc4364.md
Design: docs/architecture/wire/nlri.md — VPN NLRI plugin RFC: rfc/short/rfc4364.md
component/bgp/plugins/rib
Design: docs/architecture/plugin/rib-storage-design.md — best-path selection Overview: rib.go — RIB plugin core types and event handlers Related: rib_attr_format.go — attribute formatting (asPathLength, firstASInPath shared concern) Related: rib_commands.go — extractCandidate, gatherCandidates Related: rib_pipeline_best.go — best-path pipeline for show bgp rib best commands Related: rib_bestchange.go — best-path change tracking and Bus publishing
Design: docs/architecture/plugin/rib-storage-design.md — best-path selection Overview: rib.go — RIB plugin core types and event handlers Related: rib_attr_format.go — attribute formatting (asPathLength, firstASInPath shared concern) Related: rib_commands.go — extractCandidate, gatherCandidates Related: rib_pipeline_best.go — best-path pipeline for show bgp rib best commands Related: rib_bestchange.go — best-path change tracking and Bus publishing
component/bgp/plugins/rib/pool
Package pool holds the per-attribute-type BGP path-attribute pools used for fine-grained RIB deduplication.
Package pool holds the per-attribute-type BGP path-attribute pools used for fine-grained RIB deduplication.
component/bgp/plugins/rib/storage
Package storage implements the per-peer, per-family RIB storage with per-attribute-type deduplication.
Package storage implements the per-peer, per-family RIB storage with per-attribute-type deduplication.
component/bgp/plugins/rib/yang
Package yang embeds and registers the BGP RIB YANG schema modules.
Package yang embeds and registers the BGP RIB YANG schema modules.
component/bgp/plugins/role
Design: docs/architecture/core-design.md — BGP role plugin RFC: rfc/short/rfc9234.md Detail: otc.go — OTC attribute processing (ingress/egress) Detail: config.go — per-peer role config parsing (import/export)
Design: docs/architecture/core-design.md — BGP role plugin RFC: rfc/short/rfc9234.md Detail: otc.go — OTC attribute processing (ingress/egress) Detail: config.go — per-peer role config parsing (import/export)
component/bgp/plugins/role/yang
Package yang embeds and registers the BGP role YANG schema module.
Package yang embeds and registers the BGP role YANG schema module.
component/bgp/plugins/route_refresh
Design: docs/architecture/core-design.md — route refresh capability plugin RFC: rfc/short/rfc2918.md — route refresh capability RFC: rfc/short/rfc7313.md — enhanced route refresh
Design: docs/architecture/core-design.md — route refresh capability plugin RFC: rfc/short/rfc2918.md — route refresh capability RFC: rfc/short/rfc7313.md — enhanced route refresh
component/bgp/plugins/route_refresh/handler
Design: docs/architecture/api/commands.md — BGP route refresh command handlers Overview: ../register.go — bgp-route-refresh SDK plugin registration
Design: docs/architecture/api/commands.md — BGP route refresh command handlers Overview: ../register.go — bgp-route-refresh SDK plugin registration
component/bgp/plugins/route_refresh/yang
Package yang embeds and registers the BGP route-refresh YANG schema modules.
Package yang embeds and registers the BGP route-refresh YANG schema modules.
component/bgp/plugins/rpki
Design: docs/architecture/plugin/rib-storage-design.md -- ASPA record cache Overview: rpki.go -- plugin using this cache for ASPA path verification Related: roa_cache.go -- ROA cache following the same pattern
Design: docs/architecture/plugin/rib-storage-design.md -- ASPA record cache Overview: rpki.go -- plugin using this cache for ASPA path verification Related: roa_cache.go -- ROA cache following the same pattern
component/bgp/plugins/rpki/yang
Package yang embeds and registers the RPKI YANG schema module.
Package yang embeds and registers the RPKI YANG schema module.
component/bgp/plugins/rpki_decorator
Package rpki_decorator provides the bgp-rpki-decorator plugin.
Package rpki_decorator provides the bgp-rpki-decorator plugin.
component/bgp/plugins/rpki_decorator/yang
Package yang embeds and registers the RPKI decorator YANG schema module.
Package yang embeds and registers the RPKI decorator YANG schema module.
component/bgp/plugins/rr/yang
Package yang embeds and registers the BGP route-reflector command YANG schema module.
Package yang embeds and registers the BGP route-reflector command YANG schema module.
component/bgp/plugins/rs/yang
Package yang embeds and registers the BGP route-server configuration YANG schema module.
Package yang embeds and registers the BGP route-server configuration YANG schema module.
component/bgp/plugins/softver
Design: docs/architecture/core-design.md — software-version capability plugin
Design: docs/architecture/core-design.md — software-version capability plugin
component/bgp/plugins/softver/yang
Package yang embeds and registers the BGP software-version capability YANG schema module.
Package yang embeds and registers the BGP software-version capability YANG schema module.
component/bgp/plugins/watchdog
Design: docs/architecture/rib-transition.md — watchdog plugin extraction Detail: server.go — command dispatch and state management Detail: config.go — config tree parser Detail: pool.go — route pool management
Design: docs/architecture/rib-transition.md — watchdog plugin extraction Detail: server.go — command dispatch and state management Detail: config.go — config tree parser Detail: pool.go — route pool management
component/bgp/reactor
RFC: rfc/short/rfc4271.md -- Adj-RIB-Out (Section 3.2) and the Update-Send Process (Section 9.2) Design: docs/architecture/update-building.md -- the API origination rail this table guards Overview: reactor_api_batch.go -- announceBatchToPeers and withdrawBatchFromPeers, the only writers Related: forward_dedup.go -- the fan-out's per-call dedup, which shares a BUILD rather than suppressing a SEND
RFC: rfc/short/rfc4271.md -- Adj-RIB-Out (Section 3.2) and the Update-Send Process (Section 9.2) Design: docs/architecture/update-building.md -- the API origination rail this table guards Overview: reactor_api_batch.go -- announceBatchToPeers and withdrawBatchFromPeers, the only writers Related: forward_dedup.go -- the fan-out's per-call dedup, which shares a BUILD rather than suppressing a SEND
component/bgp/reactor/filter
Design: docs/architecture/core-design.md — route loop detection ingress filter RFC: rfc/short/rfc4271.md RFC: rfc/short/rfc4456.md
Design: docs/architecture/core-design.md — route loop detection ingress filter RFC: rfc/short/rfc4271.md RFC: rfc/short/rfc4456.md
component/bgp/reactor/filter/yang
Package yang embeds and registers the BGP loop-detection filter YANG schema module.
Package yang embeds and registers the BGP loop-detection filter YANG schema module.
component/bgp/redistribute
Package redistribute bridges BGP RIB best-path changes into the generic redistribution subsystem and injects redistributed routes back as BGP updates.
Package redistribute bridges BGP RIB best-path changes into the generic redistribution subsystem and injects redistributed routes back as BGP updates.
component/bgp/rib
Package rib implements the BGP Routing Information Base with per-attribute-type deduplication.
Package rib implements the BGP Routing Information Base with per-attribute-type deduplication.
component/bgp/route
Package route parses text-format BGP route definitions into wire-ready attributes and NLRI.
Package route parses text-format BGP route definitions into wire-ready attributes and NLRI.
component/bgp/server
Package server provides BGP-specific event delivery and dispatch for the plugin server.
Package server provides BGP-specific event delivery and dispatch for the plugin server.
component/bgp/textparse
Package textparse provides a zero-allocation tokenizer and keyword resolution for BGP text commands.
Package textparse provides a zero-allocation tokenizer and keyword resolution for BGP text commands.
component/bgp/transaction
Package transaction manages named BGP commits that queue route announcements and withdrawals until they are ended or rolled back.
Package transaction manages named BGP commits that queue route announcements and withdrawals until they are ended or rolled back.
component/bgp/types
Package types defines shared BGP-specific types for routes, next-hops, and reactor interfaces.
Package types defines shared BGP-specific types for routes, next-hops, and reactor interfaces.
component/bgp/wireu
Package wireu ("wire UPDATE") implements lazy-parsed BGP UPDATE messages with zero-copy iterators over wire bytes.
Package wireu ("wire UPDATE") implements lazy-parsed BGP UPDATE messages with zero-copy iterators over wire bytes.
component/bgp/yang
Package schema embeds the YANG schemas for BGP configuration and API.
Package schema embeds the YANG schemas for BGP configuration and API.
component/cli
Package cli provides a unified interactive TUI for config editing, CLI, and SSH sessions.
Package cli provides a unified interactive TUI for config editing, CLI, and SSH sessions.
component/cli/client
Design: docs/architecture/core-design.md — interactive CLI Related: ../../../../cmd/ze/internal/cmdutil/cmdutil.go — shared command utilities (uses BuildCommandTree)
Design: docs/architecture/core-design.md — interactive CLI Related: ../../../../cmd/ze/internal/cmdutil/cmdutil.go — shared command utilities (uses BuildCommandTree)
component/cli/contract
Design: docs/architecture/core-design.md -- component boundaries (cli/contract)
Design: docs/architecture/core-design.md -- component boundaries (cli/contract)
component/cli/testing
Design: docs/architecture/config/yang-config-design.md — editor test infrastructure
Design: docs/architecture/config/yang-config-design.md — editor test infrastructure
component/cmd/clear
Design: docs/architecture/api/commands.md -- clear verb (generic verb shell)
Design: docs/architecture/api/commands.md -- clear verb (generic verb shell)
component/cmd/clear/yang
Package yang embeds and registers the CLI clear command YANG schema modules.
Package yang embeds and registers the CLI clear command YANG schema modules.
component/cmd/delete
Design: docs/architecture/api/commands.md — delete verb command handlers
Design: docs/architecture/api/commands.md — delete verb command handlers
component/cmd/delete/yang
Package yang embeds and registers the CLI delete command YANG schema modules.
Package yang embeds and registers the CLI delete command YANG schema modules.
component/cmd/log
Design: docs/architecture/api/commands.md — BGP log level command handlers
Design: docs/architecture/api/commands.md — BGP log level command handlers
component/cmd/log/yang
Package yang embeds and registers the BGP log command YANG schema modules.
Package yang embeds and registers the BGP log command YANG schema modules.
component/cmd/meta
Design: docs/architecture/api/commands.md — BGP command discovery and plugin configuration
Design: docs/architecture/api/commands.md — BGP command discovery and plugin configuration
component/cmd/meta/yang
Package yang embeds and registers the BGP meta command YANG schema modules.
Package yang embeds and registers the BGP meta command YANG schema modules.
component/cmd/metrics
Design: docs/architecture/api/commands.md — BGP metrics command handlers
Design: docs/architecture/api/commands.md — BGP metrics command handlers
component/cmd/metrics/yang
Package yang embeds and registers the BGP metrics command YANG schema modules.
Package yang embeds and registers the BGP metrics command YANG schema modules.
component/cmd/monitor
Design: docs/architecture/api/commands.md — monitor verb root (unowned)
Design: docs/architecture/api/commands.md — monitor verb root (unowned)
component/cmd/monitor/yang
Package yang embeds and registers the CLI monitor command YANG module.
Package yang embeds and registers the CLI monitor command YANG module.
component/cmd/set
Design: docs/architecture/api/commands.md — set verb command handlers
Design: docs/architecture/api/commands.md — set verb command handlers
component/cmd/set/yang
Package yang embeds and registers the CLI set command and API YANG modules.
Package yang embeds and registers the CLI set command and API YANG modules.
component/cmd/show
Design: docs/architecture/api/commands.md -- show verb command handlers
Design: docs/architecture/api/commands.md -- show verb command handlers
component/cmd/show/yang
Package yang embeds and registers the CLI show command and API YANG modules.
Package yang embeds and registers the CLI show command and API YANG modules.
component/cmd/subscribe
Design: docs/architecture/api/commands.md — BGP event subscription handlers
Design: docs/architecture/api/commands.md — BGP event subscription handlers
component/cmd/subscribe/yang
Package yang embeds and registers the CLI subscribe command and API YANG modules.
Package yang embeds and registers the CLI subscribe command and API YANG modules.
component/cmd/update
Design: docs/architecture/api/commands.md — update verb command handlers
Design: docs/architecture/api/commands.md — update verb command handlers
component/cmd/update/yang
Package yang embeds and registers the CLI update command and API YANG modules.
Package yang embeds and registers the CLI update command and API YANG modules.
component/command
Package command provides shared types and logic for operational command execution.
Package command provides shared types and logic for operational command execution.
component/command/grammar
Design: docs/architecture/cli/command-namespacing.md -- CLI command grammar
Design: docs/architecture/cli/command-namespacing.md -- CLI command grammar
component/command/registry
Package registry holds the process-wide registries for ze's command-line surface: offline local handlers, top-level root commands, and owner-backed root command handlers.
Package registry holds the process-wide registries for ze's command-line surface: offline local handlers, top-level root commands, and owner-backed root command handlers.
component/config
Design: docs/architecture/config/syntax.md — config parsing and loading
Design: docs/architecture/config/syntax.md — config parsing and loading
component/config/archive
Package archive saves committed configuration to file and HTTP locations on commit, manual, and scheduled triggers.
Package archive saves committed configuration to file and HTTP locations on commit, manual, and scheduled triggers.
component/config/archive/cmd
Package cmd handles the config archive trigger command that archives the running configuration.
Package cmd handles the config archive trigger command that archives the running configuration.
component/config/archive/yang
Package yang embeds and registers the config archive API YANG module.
Package yang embeds and registers the config archive API YANG module.
component/config/claims
Design: docs/architecture/config/yang-config-design.md — config claim model Related: schema.go -- builds the merged config-schema tree Audit walks Related: allowlist.json -- recorded exceptions, one reason and one owner each
Design: docs/architecture/config/yang-config-design.md — config claim model Related: schema.go -- builds the merged config-schema tree Audit walks Related: allowlist.json -- recorded exceptions, one reason and one owner each
component/config/cli
Design: docs/architecture/config/syntax.md — stdin ("-") wiring for config editor commands Overview: main.go — dispatch and exit codes
Design: docs/architecture/config/syntax.md — stdin ("-") wiring for config editor commands Overview: main.go — dispatch and exit codes
component/config/env
Design: docs/architecture/config/environment.md — environment variable handling
Design: docs/architecture/config/environment.md — environment variable handling
component/config/infra
Package infra holds the always-on daemon-startup contract between the hub and whichever routing engine constructs a reactor.
Package infra holds the always-on daemon-startup contract between the hub and whichever routing engine constructs a reactor.
component/config/migration
Package migration rewrites deprecated configuration syntax into its current equivalent.
Package migration rewrites deprecated configuration syntax into its current equivalent.
component/config/redistribute
Package redistribute moves routes between routing protocols with origin-based loop prevention.
Package redistribute moves routes between routing protocols with origin-based loop prevention.
component/config/redistribute/yang
Package yang embeds and registers the redistribute configuration YANG module.
Package yang embeds and registers the redistribute configuration YANG module.
component/config/schema/cli
Design: docs/architecture/config/yang-config-design.md — schema CLI
Design: docs/architecture/config/yang-config-design.md — schema CLI
component/config/secret
Design: docs/architecture/config/syntax.md — sensitive value encoding
Design: docs/architecture/config/syntax.md — sensitive value encoding
component/config/storage
Design: docs/architecture/zefs-format.md -- config storage abstraction Detail: blob.go -- blob storage implementation wrapping zefs
Design: docs/architecture/zefs-format.md -- config storage abstraction Detail: blob.go -- blob storage implementation wrapping zefs
component/config/storage/cli
Design: docs/architecture/zefs-format.md -- ZeFS blob store CLI
Design: docs/architecture/zefs-format.md -- ZeFS blob store CLI
component/config/system
Package system manages system-wide configuration including identity, DNS, console, connection tracking, and self-update.
Package system manages system-wide configuration including identity, DNS, console, connection tracking, and self-update.
component/config/system/yang
Package yang embeds and registers the system configuration YANG module.
Package yang embeds and registers the system configuration YANG module.
component/config/transaction
Package transaction implements the stream-based config transaction protocol.
Package transaction implements the stream-based config transaction protocol.
component/config/transaction/events
Package events defines event constants for config transactions.
Package events defines event constants for config transactions.
component/config/yang
Design: docs/architecture/config/yang-config-design.md — YANG schema handling
Design: docs/architecture/config/yang-config-design.md — YANG schema handling
component/config/yang/cli
Design: docs/architecture/config/yang-config-design.md -- YANG analysis tool Related: tree.go -- unified analysis tree builder Related: format.go -- output formatting for collisions and trees
Design: docs/architecture/config/yang-config-design.md -- YANG analysis tool Related: tree.go -- unified analysis tree builder Related: format.go -- output formatting for collisions and trees
component/debug/yang
Package yang registers debug YANG modules and validates debug flag and scope names against them.
Package yang registers debug YANG modules and validates debug flag and scope names against them.
component/doctor/cmd
Package cmd handles the show doctor command that runs system and plugin diagnostic checks.
Package cmd handles the show doctor command that runs system and plugin diagnostic checks.
component/doctor/yang
Package yang embeds and registers the doctor command YANG module.
Package yang embeds and registers the doctor command YANG module.
component/engine
Package engine implements the top-level supervisor that composes Bus, ConfigProvider, and PluginManager.
Package engine implements the top-level supervisor that composes Bus, ConfigProvider, and PluginManager.
component/firewall
Package firewall defines the abstract data model for ze-managed nftables firewall tables.
Package firewall defines the abstract data model for ze-managed nftables firewall tables.
component/firewall/cli
Package firewall provides the ze firewall subcommand for viewing nftables firewall state (tables, chains, rules, counters).
Package firewall provides the ze firewall subcommand for viewing nftables firewall state (tables, chains, rules, counters).
component/firewall/cmd
Package cmd provides formatting functions for firewall CLI output.
Package cmd provides formatting functions for firewall CLI output.
component/firewall/plugins/domain/yang
Package yang embeds and registers the firewall domain-group command and schema YANG modules.
Package yang embeds and registers the firewall domain-group command and schema YANG modules.
component/firewall/plugins/irr
Design: docs/architecture/firewall/firewall-irr.md -- firewall IRR plugin entry point Related: doctor.go -- the ze doctor check over the same references verifyRefs guards
Design: docs/architecture/firewall/firewall-irr.md -- firewall IRR plugin entry point Related: doctor.go -- the ze doctor check over the same references verifyRefs guards
component/firewall/plugins/irr/yang
Package yang embeds and registers the firewall IRR command and schema YANG modules.
Package yang embeds and registers the firewall IRR command and schema YANG modules.
component/firewall/yang
Package yang embeds and registers the firewall component's YANG schema modules.
Package yang embeds and registers the firewall component's YANG schema modules.
component/gnmi
Package gnmi implements a gNMI server exposing Ze's YANG-modeled configuration over gRPC.
Package gnmi implements a gNMI server exposing Ze's YANG-modeled configuration over gRPC.
component/gnmi/yang
Package yang embeds and registers the gNMI component's YANG schema module.
Package yang embeds and registers the gNMI component's YANG schema module.
component/gokrazy
Design: (none — new component for gokrazy management proxy)
Design: (none — new component for gokrazy management proxy)
component/gtsm
Design: rfc/short/rfc5082.md -- GTSM, the TTL 255 rule for related ICMP messages Overview: route_linux.go -- the RTAX_HOPLIMIT host route this package installs Related: internal/core/network/ttl_linux.go -- the socket options that carry GTSM for the main protocol packets
Design: rfc/short/rfc5082.md -- GTSM, the TTL 255 rule for related ICMP messages Overview: route_linux.go -- the RTAX_HOPLIMIT host route this package installs Related: internal/core/network/ttl_linux.go -- the socket options that carry GTSM for the main protocol packets
component/host
Design: docs/architecture/host/inventory.md -- hardware inventory detection
Design: docs/architecture/host/inventory.md -- hardware inventory detection
component/hub/yang
Package yang embeds and registers the hub component's YANG schema module.
Package yang embeds and registers the hub component's YANG schema module.
component/iface
Package iface implements the interface monitoring and management plugin.
Package iface implements the interface monitoring and management plugin.
component/iface/cli
Design: docs/architecture/iface/management.md -- Interface CLI commands
Design: docs/architecture/iface/management.md -- Interface CLI commands
component/iface/cmd
Design: docs/features/interfaces.md — Interface RPC handlers for daemon dispatch Related: manage.go — command registration and server wiring for this package
Design: docs/features/interfaces.md — Interface RPC handlers for daemon dispatch Related: manage.go — command registration and server wiring for this package
component/iface/yang
Package yang embeds and registers the interface component's YANG schema modules.
Package yang embeds and registers the interface component's YANG schema modules.
component/ike/cmd
Package cmd registers the IPsec VPN operational command handlers.
Package cmd registers the IPsec VPN operational command handlers.
component/ike/crypto
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation.
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation.
component/ike/dataplane
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends.
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends.
component/ike/engine
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14
component/ike/ipsec
Package ipsec defines the IPsec data model types and parses their configuration.
Package ipsec defines the IPsec data model types and parses their configuration.
component/ike/ipsec/yang
Package yang embeds and registers the IPsec configuration YANG schema module.
Package yang embeds and registers the IPsec configuration YANG schema module.
component/ike/transport
Package transport implements the IKE UDP transport with NAT detection and keepalive handling.
Package transport implements the IKE UDP transport with NAT detection and keepalive handling.
component/ike/wire
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14)
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14)
component/ike/yang
Package yang embeds and registers the IPsec operational command YANG schema module.
Package yang embeds and registers the IPsec operational command YANG schema module.
component/kernelcap
Package kernelcap enrolls the kernel features a configured subsystem cannot work without, so ze doctor reports a missing one, the daemon refuses to start, a reload is refused and ze config validate fails, all from one verdict.
Package kernelcap enrolls the kernel features a configured subsystem cannot work without, so ze doctor reports a missing one, the daemon refuses to start, a reload is refused and ze config validate fails, all from one verdict.
component/l2tp
Package l2tp implements L2TPv2 (RFC 2661) wire format parsing and serialization for ze's L2TP subsystem.
Package l2tp implements L2TPv2 (RFC 2661) wire format parsing and serialization for ze's L2TP subsystem.
component/l2tp/cli
Design: docs/architecture/core-design.md -- l2tp offline CLI
Design: docs/architecture/core-design.md -- l2tp offline CLI
component/l2tp/cmd
Design: docs/guide/l2tp.md -- L2TP CLI handlers
Design: docs/guide/l2tp.md -- L2TP CLI handlers
component/l2tp/cmd/yang
Package yang embeds and registers the L2TP operational command YANG schema module.
Package yang embeds and registers the L2TP operational command YANG schema module.
component/l2tp/events
Package events defines the typed EventBus handle for L2TP subscriber route-change events.
Package events defines the typed EventBus handle for L2TP subscriber route-change events.
component/l2tp/plugins/authlocal/yang
Package yang embeds and registers the L2TP local authentication YANG schema module.
Package yang embeds and registers the L2TP local authentication YANG schema module.
component/l2tp/plugins/authradius/yang
Package yang embeds and registers the L2TP RADIUS authentication YANG schema module.
Package yang embeds and registers the L2TP RADIUS authentication YANG schema module.
component/l2tp/plugins/pool/yang
Package yang embeds and registers the L2TP address pool YANG schema module.
Package yang embeds and registers the L2TP address pool YANG schema module.
component/l2tp/plugins/shaper/yang
Package yang embeds and registers the L2TP shaper configuration YANG module.
Package yang embeds and registers the L2TP shaper configuration YANG module.
component/l2tp/ppp
Package ppp implements the PPP control plane (LCP, authentication, IPCP, IPv6CP) over chan/unit file descriptors obtained from /dev/ppp.
Package ppp implements the PPP control plane (LCP, authentication, IPCP, IPv6CP) over chan/unit file descriptors obtained from /dev/ppp.
component/l2tp/pppoe
Package pppoe implements the PPPoE (RFC 2516) access concentrator for subscriber session management over Ethernet.
Package pppoe implements the PPPoE (RFC 2516) access concentrator for subscriber session management over Ethernet.
component/l2tp/pppoe/cmd
Design: docs/architecture/l2tp/bng-5-pppoe.md -- PPPoE CLI handlers
Design: docs/architecture/l2tp/bng-5-pppoe.md -- PPPoE CLI handlers
component/l2tp/pppoe/cmd/yang
Package yang embeds and registers the PPPoE command YANG module.
Package yang embeds and registers the PPPoE command YANG module.
component/l2tp/pppoe/yang
Package yang embeds and registers the PPPoE API and configuration YANG modules.
Package yang embeds and registers the PPPoE API and configuration YANG modules.
component/l2tp/pppoeclient
Package pppoeclient implements a PPPoE client dialer that performs RFC 2516 discovery and kernel session setup.
Package pppoeclient implements a PPPoE client dialer that performs RFC 2516 discovery and kernel session setup.
component/l2tp/subscriber
Package subscriber provides the shared subscriber session model, registry, and metrics for PPPoE and L2TP access.
Package subscriber provides the shared subscriber session model, registry, and metrics for PPPoE and L2TP access.
component/l2tp/subscriber/cmd
Package cmd registers the show subscriber CLI RPC handlers.
Package cmd registers the show subscriber CLI RPC handlers.
component/l2tp/subscriber/cmd/yang
Package yang embeds and registers the subscriber command YANG module.
Package yang embeds and registers the subscriber command YANG module.
component/l2tp/subscriber/events
Package events defines the subscriber session event namespace and payloads.
Package events defines the subscriber session event namespace and payloads.
component/l2tp/yang
Package yang embeds and registers the L2TP API and configuration YANG modules.
Package yang embeds and registers the L2TP API and configuration YANG modules.
component/lg
Package lg provides the looking glass HTTP server for Ze.
Package lg provides the looking glass HTTP server for Ze.
component/lg/yang
Package yang embeds and registers the looking-glass configuration YANG module.
Package yang embeds and registers the looking-glass configuration YANG module.
component/managed
Design: docs/architecture/fleet-config.md — managed client component
Design: docs/architecture/fleet-config.md — managed client component
component/mcp
Package mcp implements the MCP (Model Context Protocol) server surface: JSON-RPC tool dispatch wrapping Ze's command dispatcher, served over the Streamable HTTP transport (streamable.go).
Package mcp implements the MCP (Model Context Protocol) server surface: JSON-RPC tool dispatch wrapping Ze's command dispatcher, served over the Streamable HTTP transport (streamable.go).
component/mcp/yang
Package yang embeds and registers the MCP configuration YANG module.
Package yang embeds and registers the MCP configuration YANG module.
component/mpls
Package mpls reads the kernel MPLS forwarding table and serves the show mpls forwarding command.
Package mpls reads the kernel MPLS forwarding table and serves the show mpls forwarding command.
component/ping/cmd
Package cmd owns the entire ping feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
Package cmd owns the entire ping feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
component/pki
Package pki parses, validates, and stores X.509 certificates with show commands and expiry health checks.
Package pki parses, validates, and stores X.509 certificates with show commands and expiry health checks.
component/pki/yang
Package yang embeds and registers the PKI API and configuration YANG modules.
Package yang embeds and registers the PKI API and configuration YANG modules.
component/plugin
Package plugin provides the plugin infrastructure for ze, including registry management, process lifecycle, hub-based message routing, and event dispatch.
Package plugin provides the plugin infrastructure for ze, including registry management, process lifecycle, hub-based message routing, and event dispatch.
component/plugin/all
Package all imports all internal plugins and schema packages, triggering their init() registration.
Package all imports all internal plugins and schema packages, triggering their init() registration.
component/plugin/cli
Design: docs/architecture/cli/plugin-modes.md — plugin CLI framework
Design: docs/architecture/cli/plugin-modes.md — plugin CLI framework
component/plugin/doctor
Package doctor registers a diagnostic check that verifies configured plugin binaries are present.
Package doctor registers a diagnostic check that verifies configured plugin binaries are present.
component/plugin/ipc
Package ipc provides Unix socket pairs and typed RPC for engine-plugin communication.
Package ipc provides Unix socket pairs and typed RPC for engine-plugin communication.
component/plugin/manager
Package plugin implements the PluginManager for plugin registration, lifecycle, and capabilities.
Package plugin implements the PluginManager for plugin registration, lifecycle, and capabilities.
component/plugin/process
Package process manages plugin process lifecycle, respawn, and event delivery pipelines.
Package process manages plugin process lifecycle, respawn, and event delivery pipelines.
component/plugin/registry
Package registry provides compile-time plugin registration and query for CLI dispatch, engine startup, and decode routing.
Package registry provides compile-time plugin registration and query for CLI dispatch, engine startup, and decode routing.
component/plugin/server
Package server manages plugin process connections, the 5-stage startup protocol, and command dispatch.
Package server manages plugin process connections, the 5-stage startup protocol, and command dispatch.
component/plugin/yang
Package schema embeds the YANG schema for plugin configuration.
Package schema embeds the YANG schema for plugin configuration.
component/radius
radiusAuthenticator bridges the RADIUS client to aaa.Authenticator for operator/admin login (SSH, web, MCP).
radiusAuthenticator bridges the RADIUS client to aaa.Authenticator for operator/admin login (SSH, web, MCP).
component/radius/yang
Package yang embeds the radius component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the radius component's YANG configuration schema and registers it with the config module registry.
component/resolve
Design: docs/architecture/resolve.md -- Resolution component container
Design: docs/architecture/resolve.md -- Resolution component container
component/resolve/cache
Design: docs/architecture/resolve.md -- Shared TTL cache for resolution components
Design: docs/architecture/resolve.md -- Shared TTL cache for resolution components
component/resolve/cli
Design: docs/architecture/resolve.md -- Team Cymru ASN resolution CLI
Design: docs/architecture/resolve.md -- Team Cymru ASN resolution CLI
component/resolve/cmd
Design: docs/architecture/resolve.md -- resolve command handlers for dispatcher
Design: docs/architecture/resolve.md -- resolve command handlers for dispatcher
component/resolve/cymru
Design: docs/architecture/resolve.md -- Team Cymru ASN name resolution Related: ../dns/resolver.go -- DNS resolver used for TXT queries
Design: docs/architecture/resolve.md -- Team Cymru ASN name resolution Related: ../dns/resolver.go -- DNS resolver used for TXT queries
component/resolve/dns
Package dns provides a DNS resolver component for Ze.
Package dns provides a DNS resolver component for Ze.
component/resolve/irr
Design: (none -- predates documentation)
Design: (none -- predates documentation)
component/resolve/irr/store
Design: docs/architecture/resolve.md -- shared IRR prefix resolution + persistence
Design: docs/architecture/resolve.md -- shared IRR prefix resolution + persistence
component/resolve/peeringdb
Design: docs/architecture/resolve.md -- PeeringDB client for prefix update
Design: docs/architecture/resolve.md -- PeeringDB client for prefix update
component/resolve/yang
Package yang embeds and registers the resolver API YANG module.
Package yang embeds and registers the resolver API YANG module.
component/ssh
Package ssh implements the SSH server that serves the interactive CLI over public-key-authenticated sessions.
Package ssh implements the SSH server that serves the interactive CLI over public-key-authenticated sessions.
component/ssh/yang
Package yang embeds and registers the SSH configuration YANG module.
Package yang embeds and registers the SSH configuration YANG module.
component/storage
Package storage runs periodic SMART disk health checks and self-test scheduling for block devices.
Package storage runs periodic SMART disk health checks and self-test scheduling for block devices.
component/storage/yang
Package yang embeds the storage component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the storage component's YANG configuration schema and registers it with the config module registry.
component/support
Package support collects host and configuration diagnostics into a sanitized tech-support archive.
Package support collects host and configuration diagnostics into a sanitized tech-support archive.
component/sysctl
Design: docs/architecture/core-design.md -- sysctl plugin Detail: backend.go -- platform-specific read/write Detail: register.go -- plugin registration and EventBus wiring
Design: docs/architecture/core-design.md -- sysctl plugin Detail: backend.go -- platform-specific read/write Detail: register.go -- plugin registration and EventBus wiring
component/sysctl/cli
Design: docs/architecture/core-design.md -- sysctl offline CLI
Design: docs/architecture/core-design.md -- sysctl offline CLI
component/sysctl/events
Package events defines event constants for the sysctl plugin.
Package events defines event constants for the sysctl plugin.
component/sysctl/yang
Package yang embeds the sysctl component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the sysctl component's YANG configuration schema and registers it with the config module registry.
component/sysrib
Design: docs/architecture/core-design.md -- System RIB plugin Related: nhresolver.go -- recursive next-hop resolution using Loc-RIB LPM Related: ecmp.go -- ECMP path collection from equal-cost protocol routes
Design: docs/architecture/core-design.md -- System RIB plugin Related: nhresolver.go -- recursive next-hop resolution using Loc-RIB LPM Related: ecmp.go -- ECMP path collection from equal-cost protocol routes
component/sysrib/events
Package events defines event constants and typed event handles for the system RIB plugin.
Package events defines event constants and typed event handles for the system RIB plugin.
component/sysrib/yang
Package yang embeds the sysrib component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the sysrib component's YANG configuration schema and registers it with the config module registry.
component/tacacs
TacacsAccountant implements aaa.Accountant for TACACS+ accounting.
TacacsAccountant implements aaa.Accountant for TACACS+ accounting.
component/tacacs/cli
Design: docs/architecture/aaa-tacacs.md -- TACACS+ AAA operational CLI
Design: docs/architecture/aaa-tacacs.md -- TACACS+ AAA operational CLI
component/tacacs/yang
Package yang embeds the tacacs component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the tacacs component's YANG configuration schema and registers it with the config module registry.
component/telemetry/collector
Package collector reads Netdata-compatible OS metrics from procfs and sysfs and feeds them into the shared metrics registry.
Package collector reads Netdata-compatible OS metrics from procfs and sysfs and feeds them into the shared metrics registry.
component/telemetry/exporter/yang
Package yang embeds the telemetry exporter's YANG configuration schema and registers it with the config module registry.
Package yang embeds the telemetry exporter's YANG configuration schema and registers it with the config module registry.
component/traceroute/cmd
Package cmd owns the entire traceroute feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
Package cmd owns the entire traceroute feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").
component/traffic
Package traffic defines the data model for ze-managed tc (traffic control) qdiscs, classes, and filters.
Package traffic defines the data model for ze-managed tc (traffic control) qdiscs, classes, and filters.
component/traffic/cli
Package tc provides the ze traffic control subcommand for viewing tc qdisc, class, and filter state on network interfaces.
Package tc provides the ze traffic control subcommand for viewing tc qdisc, class, and filter state on network interfaces.
component/traffic/cmd
Package cmd provides formatting functions for traffic control CLI output.
Package cmd provides formatting functions for traffic control CLI output.
component/traffic/yang
Package yang embeds the traffic component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the traffic component's YANG configuration schema and registers it with the config module registry.
component/trafficfeature
Package trafficfeature derives neutral per-source traffic feature signals from the observation feed for detection plugins.
Package trafficfeature derives neutral per-source traffic feature signals from the observation feed for detection plugins.
component/trafficfeature/cmd
Package cmd registers the show traffic feature CLI handler that surfaces neutral per-source feature signals.
Package cmd registers the show traffic feature CLI handler that surfaces neutral per-source feature signals.
component/trafficfeature/cmd/yang
Package yang embeds the traffic-feature command's YANG schema and registers it with the config module registry.
Package yang embeds the traffic-feature command's YANG schema and registers it with the config module registry.
component/trafficstat
Package trafficstat aggregates the observation feed into a lazy, consumer-refcounted snapshot of top talkers, ports, and protocols.
Package trafficstat aggregates the observation feed into a lazy, consumer-refcounted snapshot of top talkers, ports, and protocols.
component/trafficstat/cmd
Package cmd registers the show and monitor traffic stat CLI handlers.
Package cmd registers the show and monitor traffic stat CLI handlers.
component/trafficstat/cmd/yang
Package yang embeds the traffic-stat command's YANG schema and registers it with the config module registry.
Package yang embeds the traffic-stat command's YANG schema and registers it with the config module registry.
component/vpp/yang
Package yang embeds the vpp component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the vpp component's YANG configuration schema and registers it with the config module registry.
component/web
Package web provides the ze web interface, including session-based authentication middleware and security headers for all HTTP responses.
Package web provides the ze web interface, including session-based authentication middleware and security headers for all HTTP responses.
component/web/testing
Design: docs/architecture/testing/ci-format.md -- web browser test parser Related: runner.go -- .wb test execution and browser control Related: expect.go -- expectation checking
Design: docs/architecture/testing/ci-format.md -- web browser test parser Related: runner.go -- .wb test execution and browser control Related: expect.go -- expectation checking
component/web/yang
Package yang embeds the web component's YANG configuration schema and registers it with the config module registry.
Package yang embeds the web component's YANG configuration schema and registers it with the config module registry.
core/anomalyevent
Package anomalyevent defines the source-oriented behavioral anomaly detection event contract.
Package anomalyevent defines the source-oriented behavioral anomaly detection event contract.
core/audit
Package audit provides Ze's local, append-only structured audit log.
Package audit provides Ze's local, append-only structured audit log.
core/bgp/asn
Design: docs/architecture/config/syntax.md — the config tokens an operator types Related: internal/core/bgp/attribute/text.go — AS-path text parsing that calls Parse Related: internal/core/bgp/attribute/text_append.go — AS-path text rendering that calls Append
Design: docs/architecture/config/syntax.md — the config tokens an operator types Related: internal/core/bgp/attribute/text.go — AS-path text parsing that calls Parse Related: internal/core/bgp/attribute/text_append.go — AS-path text rendering that calls Append
core/bgp/attribute
Design: docs/architecture/wire/attributes.md — path attribute encoding RFC: rfc/short/rfc4271.md — AS_PATH attribute (Section 5.1.2) RFC: rfc/short/rfc6793.md — 4-byte ASN support in AS_PATH
Design: docs/architecture/wire/attributes.md — path attribute encoding RFC: rfc/short/rfc4271.md — AS_PATH attribute (Section 5.1.2) RFC: rfc/short/rfc6793.md — 4-byte ASN support in AS_PATH
core/bgp/capability
Design: docs/architecture/wire/capabilities.md — capability negotiation RFC: rfc/short/rfc5492.md — BGP capability advertisement
Design: docs/architecture/wire/capabilities.md — capability negotiation RFC: rfc/short/rfc5492.md — BGP capability advertisement
core/bgp/configop
Package configop defines the config operation labels of the BGP root.
Package configop defines the config operation labels of the BGP root.
core/bgp/context
Design: docs/architecture/encoding-context.md — encoding context
Design: docs/architecture/encoding-context.md — encoding context
core/bgp/events
Package events defines event constants for the BGP component.
Package events defines event constants for the BGP component.
core/bgp/msgtype
Package msgtype owns the BGP message-type code (the 1-octet Type field of the RFC 4271 header) and its RFC-defined values.
Package msgtype owns the BGP message-type code (the 1-octet Type field of the RFC 4271 header) and its RFC-defined values.
core/bgp/nlri
Design: docs/architecture/wire/nlri.md — NLRI encoding and decoding RFC: rfc/short/rfc4271.md — IPv4 unicast NLRI (Section 4.3) RFC: rfc/short/rfc4760.md — multiprotocol NLRI extensions
Design: docs/architecture/wire/nlri.md — NLRI encoding and decoding RFC: rfc/short/rfc4271.md — IPv4 unicast NLRI (Section 4.3) RFC: rfc/short/rfc4760.md — multiprotocol NLRI extensions
core/bgp/nlri/nlrisplit
Design: docs/architecture/rib/unified-locrib.md -- per-family NLRI split
Design: docs/architecture/rib/unified-locrib.md -- per-family NLRI split
core/bgp/nlri/nlritype
Design: rfc/short/rfc7606.md -- Section 5.4, typed NLRI RFC: rfc/short/rfc7606.md -- Section 5.4 discard of unrecognized NLRI types Related: ../nlrisplit/nlrisplit.go -- the per-family framing this registry carves with
Design: rfc/short/rfc7606.md -- Section 5.4, typed NLRI RFC: rfc/short/rfc7606.md -- Section 5.4 discard of unrecognized NLRI types Related: ../nlrisplit/nlrisplit.go -- the per-family framing this registry carves with
core/bgp/ribevents
Package ribevents defines the (bgp-rib, ...) event constants and typed event handles: the best-path change contract between the BGP RIB and everything downstream of it.
Package ribevents defines the (bgp-rib, ...) event constants and typed event handles: the best-path change contract between the BGP RIB and everything downstream of it.
core/bgp/routeaction
Package routeaction owns the typed route-action vocabulary shared by the BGP engine and the always-on route consumers (sysrib, the FIB backends, the best-change event contract).
Package routeaction owns the typed route-action vocabulary shared by the BGP engine and the always-on route consumers (sysrib, the FIB backends, the best-change event contract).
core/bgp/wire
Package wire provides zero-allocation buffer writing for BGP message encoding.
Package wire provides zero-allocation buffer writing for BGP message encoding.
core/bufpool
Package bufpool provides a sync.Pool-seeded-for-peak byte-slice pool for protocol subsystems that share a buffer path across multiple goroutines (TACACS+ AAA, plugin-rpc framing, BGP BMP sender, etc.).
Package bufpool provides a sync.Pool-seeded-for-peak byte-slice pool for protocol subsystems that share a buffer path across multiple goroutines (TACACS+ AAA, plugin-rpc framing, BGP BMP sender, etc.).
core/callsink
Package callsink is the neutral registration seam between the PPPoE access concentrator and the L2TP tunnel engine, letting a PADS-completed PPPoE subscriber be relayed into an L2TP incoming call (the LAC role, RFC 2661) WITHOUT the pppoe package importing the l2tp package.
Package callsink is the neutral registration seam between the PPPoE access concentrator and the L2TP tunnel engine, letting a PADS-completed PPPoE subscriber be relayed into an L2TP incoming call (the LAC role, RFC 2661) WITHOUT the pppoe package importing the l2tp package.
core/capture
Package capture defines the on-disk format of a Ze protocol event capture: a JSONL stream whose first line is a version header and whose every later line is one event.
Package capture defines the on-disk format of a Ze protocol event capture: a JSONL stream whose first line is a version header and whose every later line is one event.
core/ccm
Package ccm implements Counter with CBC-MAC, the authenticated encryption block cipher mode of RFC 3610 and NIST SP 800-38C.
Package ccm implements Counter with CBC-MAC, the authenticated encryption block cipher mode of RFC 3610 and NIST SP 800-38C.
core/cliio
Design: ai/rules/cli.md -- "-" means stdin/stdout across every command
Design: ai/rules/cli.md -- "-" means stdin/stdout across every command
core/clock
Package clock provides injectable abstractions for time operations.
Package clock provides injectable abstractions for time operations.
core/configorder
Design: docs/architecture/config/syntax.md -- the entry order of a YANG list on the plugin config path RFC: rfc/short/rfc7950.md -- Section 6.2, what a YANG identifier can start with
Design: docs/architecture/config/syntax.md -- the entry order of a YANG list on the plugin config path RFC: rfc/short/rfc7950.md -- Section 6.2, what a YANG identifier can start with
core/configvalue
Design: docs/architecture/config/syntax.md -- the shapes a delivered config value takes
Design: docs/architecture/config/syntax.md -- the shapes a delivered config value takes
core/cos
Package cos holds the shared registry of named class-of-service QoS profiles and their resolver.
Package cos holds the shared registry of named class-of-service QoS profiles and their resolver.
core/ddosevent
Package ddosevent defines the destination-oriented DDoS attack detection event contract.
Package ddosevent defines the destination-oriented DDoS attack detection event contract.
core/diagnostic
Package diagnostic provides stable diagnostic records, codes, and explanations for Ze's agent-facing tooling surface.
Package diagnostic provides stable diagnostic records, codes, and explanations for Ze's agent-facing tooling surface.
core/diskspace
Package diskspace answers how much room a filesystem has left.
Package diskspace answers how much room a filesystem has left.
core/dnsserver
Design: docs/architecture/dns/server-harness.md -- generic DNS listener lifecycle shared by two or more authoritative-only DNS plugins.
Design: docs/architecture/dns/server-harness.md -- generic DNS listener lifecycle shared by two or more authoritative-only DNS plugins.
core/dscp
Package dscp parses DSCP class names (e.g.
Package dscp parses DSCP class names (e.g.
core/duration
Package duration parses CLI duration strings with explicit unit suffixes into minutes.
Package duration parses CLI duration strings with explicit unit suffixes into minutes.
core/eap
Package eap implements the EAP authentication framework and its MD5-Challenge, MSCHAPv2 and TLS methods for IKEv2.
Package eap implements the EAP authentication framework and its MD5-Challenge, MSCHAPv2 and TLS methods for IKEv2.
core/env
Design: docs/architecture/config/environment.md — centralized env var lookup Detail: registry.go — env var registration and entry listing
Design: docs/architecture/config/environment.md — centralized env var lookup Detail: registry.go — env var registration and entry listing
core/envcatalog
Package envcatalog assembles the catalog of visible environment configuration keys, expanding per-subsystem log-level entries.
Package envcatalog assembles the catalog of visible environment configuration keys, expanding per-subsystem log-level entries.
core/errorfragment
Package errorfragment answers a refused htmx request with markup the browser can swap into the target the request named.
Package errorfragment answers a refused htmx request with markup the browser can swap into the target the request named.
core/events
Design: docs/architecture/api/process-protocol.md -- event bus namespace and type registry Related: ids.go -- typed NamespaceID/EventTypeID/Direction populated by registration here Related: typed.go -- Event[T]/SignalEvent generic handles that call RegisterNamespace
Design: docs/architecture/api/process-protocol.md -- event bus namespace and type registry Related: ids.go -- typed NamespaceID/EventTypeID/Direction populated by registration here Related: typed.go -- Event[T]/SignalEvent generic handles that call RegisterNamespace
core/family
Design: docs/architecture/wire/nlri.md -- BGP address family types RFC: rfc/short/rfc4760.md -- Multiprotocol Extensions (AFI/SAFI wire format) Detail: registry.go -- runtime registration and string cache
Design: docs/architecture/wire/nlri.md -- BGP address family types RFC: rfc/short/rfc4760.md -- Multiprotocol Extensions (AFI/SAFI wire format) Detail: registry.go -- runtime registration and string cache
core/gokrazyutil
Package gokrazyutil provides helpers for authenticating to gokrazy's HTTP management interface.
Package gokrazyutil provides helpers for authenticating to gokrazy's HTTP management interface.
core/health
Package health registers named component health checks and aggregates them into a JSON status report.
Package health registers named component health checks and aggregates them into a JSON status report.
core/helpfmt
Design: docs/architecture/core-design.md — CLI help formatting
Design: docs/architecture/core-design.md — CLI help formatting
core/hostload
Package hostload samples system load to classify whether a test run was CPU-contended.
Package hostload samples system load to classify whether a test run was CPU-contended.
core/identity
Package identity resolves a stable machine identity and persists it to the blob store.
Package identity resolves a stable machine identity and persists it to the blob store.
core/iface/events
Package events defines event constants for the interface component.
Package events defines event constants for the interface component.
core/ipc
Package ipc routes and serializes plugin RPC method calls for the IPC wire protocol.
Package ipc routes and serializes plugin RPC method calls for the IPC wire protocol.
core/ipc/yang
Package yang embeds the ze plugin and system YANG modules and registers them with the config loader.
Package yang embeds the ze plugin and system YANG modules and registers them with the config loader.
core/memguard
Design: docs/architecture/memory/lifetime-contracts.md — shared "held past boundary" vocabulary
Design: docs/architecture/memory/lifetime-contracts.md — shared "held past boundary" vocabulary
core/metrics
Design: docs/architecture/core-design.md — metric collection interfaces Detail: prometheus.go — Prometheus backend implementing Registry Detail: nop.go — no-op backend for tests and disabled state Detail: server.go — HTTP server for metrics endpoint
Design: docs/architecture/core-design.md — metric collection interfaces Detail: prometheus.go — Prometheus backend implementing Registry Detail: nop.go — no-op backend for tests and disabled state Detail: server.go — HTTP server for metrics endpoint
core/mplsfib
Package mplsfib defines the event channel carrying MPLS forwarding entries from label-distribution sources to the kernel FIB.
Package mplsfib defines the event channel carrying MPLS forwarding entries from label-distribution sources to the kernel FIB.
core/naming
Package naming validates configuration node names against the shared node-name pattern.
Package naming validates configuration node names against the shared node-name pattern.
core/ndp
Design: docs/architecture/core-design.md -- shared IPv6 Neighbor Discovery encoding
Design: docs/architecture/core-design.md -- shared IPv6 Neighbor Discovery encoding
core/network
Package network provides injectable abstractions for network operations.
Package network provides injectable abstractions for network operations.
core/observation
Package observation provides an in-process, multi-subscriber feed for traffic observations.
Package observation provides an in-process, multi-subscriber feed for traffic observations.
core/pacer
Package pacer paces the retries of a goroutine whose read keeps failing.
Package pacer paces the retries of a goroutine whose read keeps failing.
core/parse
Design: docs/architecture/config/syntax.md — parsing helpers
Design: docs/architecture/config/syntax.md — parsing helpers
core/paths
Package paths resolves the ze configuration directory from the running binary's location.
Package paths resolves the ze configuration directory from the running binary's location.
core/pcap
Design: docs/architecture/diagnostics/packet-capture.md -- the one owner of the pcap file format Detail: frame.go -- synthetic IP and TCP headers around a payload Detail: reader.go -- reading a pcap file back, either endianness Detail: reassemble.go -- TCP stream reassembly across records
Design: docs/architecture/diagnostics/packet-capture.md -- the one owner of the pcap file format Detail: frame.go -- synthetic IP and TCP headers around a payload Detail: reader.go -- reading a pcap file back, either endianness Detail: reassemble.go -- TCP stream reassembly across records
core/portname
Package portname resolves transport port numbers to service names and amplification-vector labels.
Package portname resolves transport port numbers to service names and amplification-vector labels.
core/privilege
Design: docs/architecture/system-architecture.md — daemon privilege dropping Detail: drop_unix.go — Unix setuid/setgid implementation Detail: drop_other.go — no-op for non-Unix platforms
Design: docs/architecture/system-architecture.md — daemon privilege dropping Detail: drop_unix.go — Unix setuid/setgid implementation Detail: drop_other.go — no-op for non-Unix platforms
core/probe
Design: docs/architecture/api/commands.md — shared ICMP probe primitives
Design: docs/architecture/api/commands.md — shared ICMP probe primitives
core/procfs
Package procfs provides helpers for reading and decoding Linux /proc network state.
Package procfs provides helpers for reading and decoding Linux /proc network state.
core/redact
Package redact scrubs credential-bearing tokens from strings before they are logged.
Package redact scrubs credential-bearing tokens from strings before they are logged.
core/redistevents
Design: docs/architecture/core-design.md -- cross-protocol route-change events Detail: pool.go -- batch pool allocation Detail: registry.go -- protocol ID registration
Design: docs/architecture/core-design.md -- cross-protocol route-change events Detail: pool.go -- batch pool allocation Detail: registry.go -- protocol ID registration
core/replay
Design: docs/architecture/core-design.md -- shared late-join replay vocabulary (Redistribute Late-Join Replay)
Design: docs/architecture/core-design.md -- shared late-join replay vocabulary (Redistribute Late-Join Replay)
core/rescueauth
Package rescueauth encodes and verifies the installer's rescue-shell credential.
Package rescueauth encodes and verifies the installer's rescue-shell credential.
core/resolve
Package resolve selects the storage backend and default config filename for ze.
Package resolve selects the storage backend and default config filename for ze.
core/rib/distance
Package distance carries every protocol's administrative distance from the one place it is declared to the producers that stamp it on a route.
Package distance carries every protocol's administrative distance from the one place it is declared to the producers that stamp it on a route.
core/rib/igpcost
Package igpcost carries the IGP metric of a resolved next-hop from whoever computes it to whoever ranks paths by it.
Package igpcost carries the IGP metric of a resolved next-hop from whoever computes it to whoever ranks paths by it.
core/rib/locrib
Package locrib implements the unified, sharded Loc-RIB that arbitrates best paths across routing protocols.
Package locrib implements the unified, sharded Loc-RIB that arbitrates best paths across routing protocols.
core/rib/nexthop
Package nexthop carries the one description of a forwarding target that crosses every RIB boundary: the Loc-RIB Path, the best-change event the BGP RIB emits, and the multipath group sysrib hands the FIB plugins.
Package nexthop carries the one description of a forwarding target that crosses every RIB boundary: the Loc-RIB Path, the best-change event the BGP RIB emits, and the multipath group sysrib hands the FIB plugins.
core/rib/routeinstall
Design: docs/architecture/forked-route-install.md -- forked route install via Loc-RIB RPC
Design: docs/architecture/forked-route-install.md -- forked route install via Loc-RIB RPC
core/rib/routetype
Package routetype holds the forwarding action a FIB entry takes.
Package routetype holds the forwarding action a FIB entry takes.
core/rib/store
Package store provides a generic prefix-keyed route store backed by a BART trie.
Package store provides a generic prefix-keyed route store backed by a BART trie.
core/routewatch
Package routewatch subscribes to kernel route changes via netlink and fans them out to handlers.
Package routewatch subscribes to kernel route changes via netlink and fans them out to handlers.
core/routingtable
Package routingtable maps routing-table names to kernel table IDs.
Package routingtable maps routing-table names to kernel table IDs.
core/rtproto
Design: docs/architecture/core-design.md -- Linux route protocol IDs
Design: docs/architecture/core-design.md -- Linux route protocol IDs
core/selector
Design: docs/architecture/core-design.md — peer selector
Design: docs/architecture/core-design.md — peer selector
core/selfcert
Package selfcert generates and persists self-signed HTTPS certificates for local Ze services.
Package selfcert generates and persists self-signed HTTPS certificates for local Ze services.
core/seqmap
Design: (none — internal utility, no architecture doc) — generic sequence-indexed map
Design: (none — internal utility, no architecture doc) — generic sequence-indexed map
core/show
Package show registers enrichers that augment show-command output with plugin-provided fields.
Package show registers enrichers that augment show-command output with plugin-provided fields.
core/slogutil
Design: docs/architecture/config/environment.md — structured logging utilities Detail: color.go — ANSI color formatting for terminal output
Design: docs/architecture/config/environment.md — structured logging utilities Detail: color.go — ANSI color formatting for terminal output
core/smart
Package smart reads disk SMART health data via direct ATA and NVMe ioctls.
Package smart reads disk SMART health data via direct ATA and NVMe ioctls.
core/source
Design: docs/architecture/core-design.md — source registry
Design: docs/architecture/core-design.md — source registry
core/ssh/client
Package client provides SSH client connectivity for ze CLI tools.
Package client provides SSH client connectivity for ze CLI tools.
core/statestore
Design: ai/rules/architecture.md -- runtime state persists in the managed zefs store, never as loose files.
Design: ai/rules/architecture.md -- runtime state persists in the managed zefs store, never as loose files.
core/stats
Design: docs/architecture/traffic/traffic-analysis-layers.md -- shared traffic-analysis stats primitives
Design: docs/architecture/traffic/traffic-analysis-layers.md -- shared traffic-analysis stats primitives
core/stringsx
Package stringsx provides string-splitting helpers that also report the resulting count.
Package stringsx provides string-splitting helpers that also report the resulting count.
core/subdispatch
Package subdispatch routes action-first CLI subcommands to registered handlers.
Package subdispatch routes action-first CLI subcommands to registered handlers.
core/suggest
Design: (none — utility package)
Design: (none — utility package)
core/syncutil
Package syncutil provides concurrency helpers.
Package syncutil provides concurrency helpers.
core/sysctl
Design: docs/architecture/core-design.md -- sysctl known-keys registry Detail: known_linux.go -- Linux sysctl key registrations
Design: docs/architecture/core-design.md -- sysctl known-keys registry Detail: known_linux.go -- Linux sysctl key registrations
core/textbuf
Package textbuf provides allocation-free string building and formatting helpers.
Package textbuf provides allocation-free string building and formatting helpers.
core/version
Package version provides build and VCS version information for ze.
Package version provides build and VCS version information for ze.
core/vpp/events
Package events defines event constants for the VPP component.
Package events defines event constants for the VPP component.
exabgp/bridge
Design: docs/architecture/core-design.md — startup protocol and bridge runtime Detail: bridge_event.go — ZeBGP to ExaBGP JSON event translation Detail: bridge_command.go — ExaBGP text command translation Detail: bridge_muxconn.go — MuxConn wire format parsing for post-startup I/O
Design: docs/architecture/core-design.md — startup protocol and bridge runtime Detail: bridge_event.go — ZeBGP to ExaBGP JSON event translation Detail: bridge_command.go — ExaBGP text command translation Detail: bridge_muxconn.go — MuxConn wire format parsing for post-startup I/O
exabgp/migration
Package migration converts ExaBGP configuration to Ze format.
Package migration converts ExaBGP configuration to Ze format.
exabgp/topics
Package topics provides the canonical mapping from ExaBGP log topic names to Ze subsystem paths.
Package topics provides the canonical mapping from ExaBGP log topic names to Ze subsystem paths.
graph
Package graph models AS-path topology graphs and renders them as layered text diagrams.
Package graph models AS-path topology graphs and renders them as layered text diagrams.
install/disk
Package disk implements the ze install disk workflow that writes a disk image and injects the database.
Package disk implements the ze install disk workflow that writes a disk image and injects the database.
iter
Package iter provides generic zero-allocation iterators for walking variable-length records in byte slices.
Package iter provides generic zero-allocation iterators for walking variable-length records in byte slices.
le
Design: docs/architecture/core-design.md -- the development-tool composition root
Design: docs/architecture/core-design.md -- the development-tool composition root
le/ai
Design: ai/rules/repo-maintenance.md -- one canonical source, several tool mirrors Related: actions.go -- the verbs that reach this mirror Related: report.go -- what a run answers
Design: ai/rules/repo-maintenance.md -- one canonical source, several tool mirrors Related: actions.go -- the verbs that reach this mirror Related: report.go -- what a run answers
le/archmap
Design: docs/architecture/core-design.md -- the architecture lists, generated
Design: docs/architecture/core-design.md -- the architecture lists, generated
le/changed
Design: docs/architecture/testing/verify-freshness-scope.md -- what a scoped run covers Related: actions.go -- the verbs that reach this selection Related: scope.go -- the scoped-verify question this area also answers Related: report.go -- the two renderings of one selection
Design: docs/architecture/testing/verify-freshness-scope.md -- what a scoped run covers Related: actions.go -- the verbs that reach this selection Related: scope.go -- the scoped-verify question this area also answers Related: report.go -- the two renderings of one selection
le/commit
Design: docs/architecture/core-design.md -- one structured commit workflow command
Design: docs/architecture/core-design.md -- one structured commit workflow command
le/deployment
Design: docs/architecture/testing/interop.md -- ze against a real peer Related: l2tp.go -- the first proof built on what this file holds Related: vppiface.go -- the second Related: daemonbuild.go -- the daemon both of them drive Related: gokrazykernel.go -- the kernel gate an appliance proof goes through Detail: netns.go -- the namespaces the on-host proofs keep their daemons apart in
Design: docs/architecture/testing/interop.md -- ze against a real peer Related: l2tp.go -- the first proof built on what this file holds Related: vppiface.go -- the second Related: daemonbuild.go -- the daemon both of them drive Related: gokrazykernel.go -- the kernel gate an appliance proof goes through Detail: netns.go -- the namespaces the on-host proofs keep their daemons apart in
le/derived
Design: docs/architecture/core-design.md -- a derived artifact declares its inputs and its rebuild
Design: docs/architecture/core-design.md -- a derived artifact declares its inputs and its rebuild
le/digest
Design: docs/contributing/documentation-testing.md -- the digest anchor check
Design: docs/contributing/documentation-testing.md -- the digest anchor check
le/discoveryindex
Design: docs/architecture/core-design.md -- the generated package map Detail: report.go -- what the command answers and the two halves that write it Detail: sources.go -- which changed file can drift the index
Design: docs/architecture/core-design.md -- the generated package map Detail: report.go -- what the command answers and the two halves that write it Detail: sources.go -- which changed file can drift the index
le/doc/wiring
Design: docs/architecture/core-design.md -- changed-file wiring and docs router.
Design: docs/architecture/core-design.md -- changed-file wiring and docs router.
le/dockerhost
Package dockerhost names the Docker daemon socket a development command must talk to when nothing else can name one.
Package dockerhost names the Docker daemon socket a development command must talk to when nothing else can name one.
le/docstocode
Design: docs/architecture/core-design.md -- the generated docs-to-code index Detail: report.go -- what the command answers, and the rendering of the file Detail: codetodocs.go -- the MIRROR index, from the anchors inside docs/
Design: docs/architecture/core-design.md -- the generated docs-to-code index Detail: report.go -- what the command answers, and the rendering of the file Detail: codetodocs.go -- the MIRROR index, from the anchors inside docs/
le/docvalid
Design: docs/architecture/core-design.md -- published command surfaces come from the live catalog
Design: docs/architecture/core-design.md -- published command surfaces come from the live catalog
le/evidence
Design: docs/architecture/testing/ci-format.md -- the release-candidate gate Detail: report.go -- the payload this run answers Related: actions.go -- the area table that reaches this run
Design: docs/architecture/testing/ci-format.md -- the release-candidate gate Detail: report.go -- the payload this run answers Related: actions.go -- the area table that reaches this run
le/featuretags
Design: ai/rules/plugins.md -- static consumers are GENERATED, not hand-maintained Related: daemontags.go -- the second consumer of the same manifest
Design: ai/rules/plugins.md -- static consumers are GENERATED, not hand-maintained Related: daemontags.go -- the second consumer of the same manifest
le/gaterun
Design: docs/architecture/core-design.md -- how le runs a gate's command Detail: ../gotoolchain/gotoolchain.go -- the environment that command runs under
Design: docs/architecture/core-design.md -- how le runs a gate's command Detail: ../gotoolchain/gotoolchain.go -- the environment that command runs under
le/goextract
Design: docs/architecture/core-design.md -- moving Go declarations between files
Design: docs/architecture/core-design.md -- moving Go declarations between files
le/gokrazygosum
Design: docs/architecture/appliance/gokrazy-build-pins.md -- the packed go.sum gate
Design: docs/architecture/appliance/gokrazy-build-pins.md -- the packed go.sum gate
le/goversion
Design: docs/architecture/core-design.md -- one declaration of the Go version, and the carriers that copy it Detail: dockerfile.go -- how a build stage is read out of a Dockerfile Detail: report.go -- what `le go-version check` answers
Design: docs/architecture/core-design.md -- one declaration of the Go version, and the carriers that copy it Detail: dockerfile.go -- how a build stage is read out of a Dockerfile Detail: report.go -- what `le go-version check` answers
le/hookcheck
Design: docs/architecture/core-design.md -- hook selftests and runtime are one le action area Overview: hookcheck.go -- native selftest implementation
Design: docs/architecture/core-design.md -- hook selftests and runtime are one le action area Overview: hookcheck.go -- native selftest implementation
le/hookruntime
Design: docs/architecture/core-design.md -- native delegation hook policy
Design: docs/architecture/core-design.md -- native delegation hook policy
le/ianaasn
Design: docs/architecture/resolve.md -- the shipped RIR delegation seed
Design: docs/architecture/resolve.md -- the shipped RIR delegation seed
le/integration
Design: docs/architecture/testing/interop.md -- what an integration gate needs Detail: actions.go -- the dispatch every row here is turned into
Design: docs/architecture/testing/interop.md -- what an integration gate needs Detail: actions.go -- the dispatch every row here is turned into
le/interoplab
Design: docs/architecture/testing/interop.md -- scenario discovery and selector contract Related: lab.go -- discovered scenarios become lifecycle plans.
Design: docs/architecture/testing/interop.md -- scenario discovery and selector contract Related: lab.go -- discovered scenarios become lifecycle plans.
le/interoplab/bgp
Design: docs/architecture/testing/interop.md -- fail-closed peer assertions.
Design: docs/architecture/testing/interop.md -- fail-closed peer assertions.
le/interoplab/ipsec
Design: docs/architecture/testing/interop.md -- complete typed assertions for every checked-in strongSwan scenario.
Design: docs/architecture/testing/interop.md -- complete typed assertions for every checked-in strongSwan scenario.
le/interoplab/l2tp
Design: docs/architecture/testing/interop.md -- typed L2TP scenario assertions.
Design: docs/architecture/testing/interop.md -- typed L2TP scenario assertions.
le/interoplab/l2tp/radiusmock command
Design: docs/architecture/testing/interop.md -- independent RADIUS wire peer for the L2TP accounting scenario.
Design: docs/architecture/testing/interop.md -- independent RADIUS wire peer for the L2TP accounting scenario.
le/interoplab/pppoe
Design: docs/architecture/testing/interop.md -- typed Ze access-concentrator checks against an independent pppd client.
Design: docs/architecture/testing/interop.md -- typed Ze access-concentrator checks against an independent pppd client.
le/interoplab/radius
Design: docs/architecture/testing/interop.md -- what a checker owes, and the five vacuity traps.
Design: docs/architecture/testing/interop.md -- what a checker owes, and the five vacuity traps.
le/job
Design: docs/architecture/core-design.md -- admission for heavy jobs in a shared checkout Detail: registry.go -- the entry that IS the claim, and the scan that reads every one of them Detail: attach.go -- what a second asker does instead of running the same job twice Detail: treehash.go -- the fingerprint of the tree a job judges Detail: jobkey.go -- the fingerprint of the work a job does
Design: docs/architecture/core-design.md -- admission for heavy jobs in a shared checkout Detail: registry.go -- the entry that IS the claim, and the scan that reads every one of them Detail: attach.go -- what a second asker does instead of running the same job twice Detail: treehash.go -- the fingerprint of the tree a job judges Detail: jobkey.go -- the fingerprint of the work a job does
le/journal
Design: docs/architecture/core-design.md -- the journal area, as one command
Design: docs/architecture/core-design.md -- the journal area, as one command
le/leaction
Design: docs/architecture/core-design.md -- an le area, as one command
Design: docs/architecture/core-design.md -- an le area, as one command
le/lepath
Design: docs/features/ai-first.md -- per-harness commit-session identity
Design: docs/features/ai-first.md -- per-harness commit-session identity
le/leroot
Design: docs/architecture/core-design.md -- le's registration adapter Detail: dispatch.go -- the loop that runs the commands registered here Detail: group.go -- the five groups a registration names, and their order
Design: docs/architecture/core-design.md -- le's registration adapter Detail: dispatch.go -- the loop that runs the commands registered here Detail: group.go -- the five groups a registration names, and their order
le/module
Design: docs/architecture/core-design.md -- module migration workflows
Design: docs/architecture/core-design.md -- module migration workflows
le/mutation
Design: docs/architecture/core-design.md -- native developer-tool actions
Design: docs/architecture/core-design.md -- native developer-tool actions
le/netlab
actions.go exposes the native netlab render check and golden rewrite through leaction.
actions.go exposes the native netlab render check and golden rewrite through leaction.
le/perfbench
Design: docs/architecture/core-design.md -- the perf benchmark, as three actions Detail: ../../test/perfrunner/run.go -- the multi-DUT Docker run these verbs drive Overview: actions.go -- the table these three verbs are declared in
Design: docs/architecture/core-design.md -- the perf benchmark, as three actions Detail: ../../test/perfrunner/run.go -- the multi-DUT Docker run these verbs drive Overview: actions.go -- the table these three verbs are declared in
le/platformvet
Design: docs/architecture/core-design.md -- the platform-vet area, as one command Overview: platformvet.go -- the shared runner for both cross-target actions
Design: docs/architecture/core-design.md -- the platform-vet area, as one command Overview: platformvet.go -- the shared runner for both cross-target actions
le/plugin/imports
Design: docs/architecture/command-ownership.md -- the generated composition root
Design: docs/architecture/command-ownership.md -- the generated composition root
le/population
Design: docs/contributing/testing.md -- a gate accounts for every member it does not walk Related: ../verify/lint/verifylint.go -- the first gate that carried this accounting
Design: docs/contributing/testing.md -- a gate accounts for every member it does not walk Related: ../verify/lint/verifylint.go -- the first gate that carried this accounting
le/protocolskeleton
Design: ai/rules/protocol.md -- the protocol skeleton, as a lens
Design: ai/rules/protocol.md -- the protocol skeleton, as a lens
le/qemu
Design: docs/architecture/testing/qemu-integration.md -- what the VM proves Related: alltests_report.go -- what one whole run answers Related: alltests_tally.go -- how many tests a suite actually executed Related: netns.go -- which suites run outside the transport's namespace Related: actions.go -- the verb that reaches this run
Design: docs/architecture/testing/qemu-integration.md -- what the VM proves Related: alltests_report.go -- what one whole run answers Related: alltests_tally.go -- how many tests a suite actually executed Related: netns.go -- which suites run outside the transport's namespace Related: actions.go -- the verb that reaches this run
le/repository
Design: docs/architecture/core-design.md -- what the repository gate answers
Design: docs/architecture/core-design.md -- what the repository gate answers
le/rfc
Design: docs/architecture/core-design.md -- the rfc area, as one command Overview: rfc.go -- the types, the paths and the closed sets every reader here shares
Design: docs/architecture/core-design.md -- the rfc area, as one command Overview: rfc.go -- the types, the paths and the closed sets every reader here shares
le/rules
Design: docs/architecture/core-design.md -- measure whether routed rules were read Overview: actions.go -- the rules command surface Related: rules.go -- the shared rule corpus predicate
Design: docs/architecture/core-design.md -- measure whether routed rules were read Overview: actions.go -- the rules command surface Related: rules.go -- the shared rule corpus predicate
le/runlog
Design: docs/contributing/running-commands.md -- the lines of a run log a reader needs first Related: ../verify/engine/summary.go -- the verification failure index built from these lines Related: ../job/quiet.go -- the same lines, answered by one job
Design: docs/contributing/running-commands.md -- the lines of a run log a reader needs first Related: ../verify/engine/summary.go -- the verification failure index built from these lines Related: ../job/quiet.go -- the same lines, answered by one job
le/scratch
Design: docs/architecture/core-design.md -- le action packages Overview: scratch.go -- filesystem policy and implementation
Design: docs/architecture/core-design.md -- le action packages Overview: scratch.go -- filesystem policy and implementation
le/session
Design: docs/architecture/core-design.md -- native session lifecycle command Related: seed.go -- session store seeding Related: summary.go -- session recovery snapshot
Design: docs/architecture/core-design.md -- native session lifecycle command Related: seed.go -- session store seeding Related: summary.go -- session recovery snapshot
le/setup
Design: docs/guide/developer-setup.md -- the supported Ubuntu server bootstrap
Design: docs/guide/developer-setup.md -- the supported Ubuntu server bootstrap
le/site
Design: website/AI.md -- one native command surface owns site build tools
Design: website/AI.md -- one native command surface owns site build tools
le/site/facts
Design: docs/architecture/core-design.md -- the published repository facts, as one command
Design: docs/architecture/core-design.md -- the published repository facts, as one command
le/site/wiki
Design: docs/architecture/core-design.md -- the wiki-index area, as one command
Design: docs/architecture/core-design.md -- the wiki-index area, as one command
le/sourcerewrite
Design: docs/architecture/core-design.md -- one command area, separate native actions
Design: docs/architecture/core-design.md -- one command area, separate native actions
le/spec/citation
Design: docs/architecture/core-design.md -- le's native development gates Related: report.go -- structured findings and the legacy text rendering
Design: docs/architecture/core-design.md -- le's native development gates Related: report.go -- structured findings and the legacy text rendering
le/spec/session
Package specsession owns spec claims, state paths, review artifacts, and the transcript facts those contracts use.
Package specsession owns spec claims, state paths, review artifacts, and the transcript facts those contracts use.
le/spec/specpath
Design: docs/architecture/core-design.md -- le's one declaration of the spec layout
Design: docs/architecture/core-design.md -- le's one declaration of the spec layout
le/spec/status
Design: docs/architecture/core-design.md -- le's spec inventory
Design: docs/architecture/core-design.md -- le's spec inventory
le/ste
Design: docs/architecture/core-design.md -- the ste area Overview: ste.go -- the checker behind each action
Design: docs/architecture/core-design.md -- the ste area Overview: ste.go -- the checker behind each action
le/terminaldemo
Design: docs/architecture/core-design.md -- one definition of the demo manifest contract Overview: manifest.go -- the contracts a render writes and verifies Related: types.go -- Manifest, Demo and ArtifactEntry, which this answers
Design: docs/architecture/core-design.md -- one definition of the demo manifest contract Overview: manifest.go -- the contracts a render writes and verifies Related: types.go -- Manifest, Demo and ArtifactEntry, which this answers
le/testchaos
Design: docs/architecture/core-design.md -- the chaos test area.
Design: docs/architecture/core-design.md -- the chaos test area.
le/testhealth
Design: docs/architecture/testing/test-health.md -- native health actions
Design: docs/architecture/testing/test-health.md -- native health actions
le/testhelper
Design: docs/architecture/core-design.md -- native development command composition
Design: docs/architecture/core-design.md -- native development command composition
le/testunit
Design: docs/architecture/core-design.md -- the unit-test area as one command Overview: groups.go -- the named package groups, and what `all` sweeps
Design: docs/architecture/core-design.md -- the unit-test area as one command Overview: groups.go -- the named package groups, and what `all` sweeps
le/testweakened
Design: docs/architecture/testing/test-health.md -- weakened-test gate declarations Related: testweakened.go -- the live check; selftest.go -- the fixture proof.
Design: docs/architecture/testing/test-health.md -- weakened-test gate declarations Related: testweakened.go -- the live check; selftest.go -- the fixture proof.
le/textrepr
Design: docs/architecture/core-design.md -- stable quoted diagnostic values.
Design: docs/architecture/core-design.md -- stable quoted diagnostic values.
le/tier
Design: ai/rules/architecture.md -- the tier area, as one command
Design: ai/rules/architecture.md -- the tier area, as one command
le/tokeneconomy
Design: ai/rules/context-economy.md -- where a session's tokens go Detail: aggregate.go -- the figures derived from what this file reads Detail: run.go -- the command that resolves a store and fills the report
Design: ai/rules/context-economy.md -- where a session's tokens go Detail: aggregate.go -- the figures derived from what this file reads Detail: run.go -- the command that resolves a store and fills the report
le/vendorweb
Design: docs/architecture/core-design.md -- the vendored-web tools, as commands
Design: docs/architecture/core-design.md -- the vendored-web tools, as commands
le/verify
Design: docs/architecture/testing/verify-freshness-scope.md -- detached-worktree verification command
Design: docs/architecture/testing/verify-freshness-scope.md -- detached-worktree verification command
le/verify/deps
Design: docs/architecture/core-design.md -- verifier dependencies as one command Overview: verifydeps.go -- plans, execution, and structured reports
Design: docs/architecture/core-design.md -- verifier dependencies as one command Overview: verifydeps.go -- plans, execution, and structured reports
le/verify/dispatch
Design: docs/architecture/core-design.md -- registered in-process verification dispatch
Design: docs/architecture/core-design.md -- registered in-process verification dispatch
le/verify/engine
Design: docs/functional-tests.md -- published verification failure protocol
Design: docs/functional-tests.md -- published verification failure protocol
le/verify/failuregroup
Design: docs/architecture/testing/verify-freshness-scope.md -- failure attribution Related: ../engine/artifacts.go -- DeclaredGroups, which reads what Declare writes Related: ../../commit/verification.go -- structuralGateReds, which charges the red
Design: docs/architecture/testing/verify-freshness-scope.md -- failure attribution Related: ../engine/artifacts.go -- DeclaredGroups, which reads what Declare writes Related: ../../commit/verification.go -- structuralGateReds, which charges the red
le/verify/lint
Design: docs/architecture/core-design.md -- native verifier work is callable through le Detail: verifylint.go -- the full lint plan and direct process execution
Design: docs/architecture/core-design.md -- native verifier work is callable through le Detail: verifylint.go -- the full lint plan and direct process execution
le/verify/lock
Design: docs/architecture/core-design.md -- verify-class admission through the shared job registry Related: ../job/job.go -- the single admission, locking, and process implementation
Design: docs/architecture/core-design.md -- verify-class admission through the shared job registry Related: ../job/job.go -- the single admission, locking, and process implementation
le/verify/status
Design: docs/architecture/testing/verify-freshness-scope.md -- verification status command
Design: docs/architecture/testing/verify-freshness-scope.md -- verification status command
le/verify/summary
Design: docs/architecture/testing/verify-freshness-scope.md -- verification failure summary command
Design: docs/architecture/testing/verify-freshness-scope.md -- verification failure summary command
le/webassets
Design: docs/architecture/web-interface.md -- per-page web asset sets
Design: docs/architecture/web-interface.md -- per-page web asset sets
le/weekly
Design: docs/architecture/core-design.md -- the weekly update's command Detail: poster.go -- what the parsed options drive
Design: docs/architecture/core-design.md -- the weekly update's command Detail: poster.go -- what the parsed options drive
le/wikicatalog
Design: docs/architecture/core-design.md -- one closed le action area
Design: docs/architecture/core-design.md -- one closed le action area
le/workingtree
Design: ai/rules/git-safety.md -- how wide the uncommitted tree is
Design: ai/rules/git-safety.md -- how wide the uncommitted tree is
le/worktree
Design: ai/rules/git-safety.md -- what may rewrite a checkout, and what may not Related: report.go -- what an update answers Related: actions.go -- the verb that reaches this updater
Design: ai/rules/git-safety.md -- what may rewrite a checkout, and what may not Related: report.go -- what an update answers Related: actions.go -- the verb that reaches this updater
le/yang/glue
Design: docs/architecture/command-ownership.md -- YANG as data, generated glue wires it in
Design: docs/architecture/command-ownership.md -- YANG as data, generated glue wires it in
le/yang/migration
Design: docs/architecture/core-design.md -- three native YANG migration actions
Design: docs/architecture/core-design.md -- three native YANG migration actions
mrt
Package mrt reads, decodes, and encodes MRT routing-information records (RFC 6396).
Package mrt reads, decodes, and encodes MRT routing-information records (RFC 6396).
perf
Design: docs/functional-tests.md -- allocation-ceiling verification
Design: docs/functional-tests.md -- allocation-ceiling verification
perf/report
Design: (none -- new tool, predates documentation)
Design: (none -- new tool, predates documentation)
plugins/aaa-cmd/yang
Package yang embeds and registers the AAA command YANG schema module.
Package yang embeds and registers the AAA command YANG schema module.
plugins/anomaly/detect
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
plugins/anomaly/detect/cmd/yang
Package yang embeds and registers the anomaly-detection command YANG schema module.
Package yang embeds and registers the anomaly-detection command YANG schema module.
plugins/anomaly/detect/yang
Package yang embeds and registers the anomaly-detection configuration YANG schema module.
Package yang embeds and registers the anomaly-detection configuration YANG schema module.
plugins/anomaly/observe/cmd/yang
Package yang embeds and registers the ze-anomaly-observe-cmd YANG command schema for the behavioral anomaly observe plugin.
Package yang embeds and registers the ze-anomaly-observe-cmd YANG command schema for the behavioral anomaly observe plugin.
plugins/anomaly/observe/yang
Package yang embeds and registers the ze-anomaly-observe-conf YANG configuration schema for the behavioral anomaly observe plugin.
Package yang embeds and registers the ze-anomaly-observe-conf YANG configuration schema for the behavioral anomaly observe plugin.
plugins/anomaly/shape
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.
plugins/anomaly/shape/cmd/yang
Package yang embeds and registers the anomaly-shaping command YANG schema module.
Package yang embeds and registers the anomaly-shaping command YANG schema module.
plugins/anomaly/shape/yang
Package yang embeds and registers the anomaly-shaping configuration YANG schema module.
Package yang embeds and registers the anomaly-shaping configuration YANG schema module.
plugins/as112/events
Package as112events holds the as112 plugin's redistribute producer identity: its numeric ProtocolID and the LOCAL typed EventBus handle for (as112, route-change).
Package as112events holds the as112 plugin's redistribute producer identity: its numeric ProtocolID and the LOCAL typed EventBus handle for (as112, route-change).
plugins/as112/yang
Package yang embeds and registers the AS112 command and configuration YANG schema modules.
Package yang embeds and registers the AS112 command and configuration YANG schema modules.
plugins/completion
Design: (none -- new feature, shell completion generation) Detail: bash.go -- bash completion script generation Detail: zsh.go -- zsh completion script generation Detail: fish.go -- fish completion script generation Detail: nushell.go -- nushell completion script generation Detail: words.go -- dynamic completion data source for shell scripts Detail: peers.go -- dynamic peer selector completion from running daemon
Design: (none -- new feature, shell completion generation) Detail: bash.go -- bash completion script generation Detail: zsh.go -- zsh completion script generation Detail: fish.go -- fish completion script generation Detail: nushell.go -- nushell completion script generation Detail: words.go -- dynamic completion data source for shell scripts Detail: peers.go -- dynamic peer selector completion from running daemon
plugins/config-archive-cmd/yang
Package yang embeds and registers the configuration-archive command YANG schema module.
Package yang embeds and registers the configuration-archive command YANG schema module.
plugins/config-cli/yang
Package yang embeds and registers the config CLI command YANG schema module.
Package yang embeds and registers the config CLI command YANG schema module.
plugins/config-schema/yang
Package yang embeds and registers the schema CLI command YANG schema module.
Package yang embeds and registers the schema CLI command YANG schema module.
plugins/config-storage/yang
Package yang embeds and registers the storage CLI command YANG schema module.
Package yang embeds and registers the storage CLI command YANG schema module.
plugins/config-yang/yang
Package yang embeds and registers the YANG CLI command YANG schema module.
Package yang embeds and registers the YANG CLI command YANG schema module.
plugins/connected/events
Package connectedevents registers the connected-routes redistribution producer and route-change event.
Package connectedevents registers the connected-routes redistribution producer and route-change event.
plugins/connected/yang
Package yang embeds and registers the connected-routes configuration YANG schema module.
Package yang embeds and registers the connected-routes configuration YANG schema module.
plugins/copp/yang
Package yang embeds and registers the control-plane policing (CoPP) configuration YANG schema module.
Package yang embeds and registers the control-plane policing (CoPP) configuration YANG schema module.
plugins/cos/yang
Package yang embeds and registers the class-of-service (CoS) configuration YANG schema module.
Package yang embeds and registers the class-of-service (CoS) configuration YANG schema module.
plugins/crashes/cmd
Package cmd registers the show-crashes RPC handler that lists and displays recorded crash reports.
Package cmd registers the show-crashes RPC handler that lists and displays recorded crash reports.
plugins/crashes/yang
Package yang embeds and registers the crashes command YANG schema module.
Package yang embeds and registers the crashes command YANG schema module.
plugins/ddos/detect
Design: docs/architecture/ddos/cp-survival-5-detect-5-characterization.md -- flow-source readiness.
Design: docs/architecture/ddos/cp-survival-5-detect-5-characterization.md -- flow-source readiness.
plugins/ddos/detect/yang
Package yang embeds and registers the DDoS-detection configuration YANG schema module.
Package yang embeds and registers the DDoS-detection configuration YANG schema module.
plugins/ddos/flowspec/cmd/yang
Package yang embeds and registers the ze-ddos-flowspec-cmd YANG command schema for the DDoS FlowSpec plugin.
Package yang embeds and registers the ze-ddos-flowspec-cmd YANG command schema for the DDoS FlowSpec plugin.
plugins/ddos/flowspec/yang
Package yang embeds and registers the ze-ddos-flowspec-conf YANG configuration schema for the DDoS FlowSpec plugin.
Package yang embeds and registers the ze-ddos-flowspec-conf YANG configuration schema for the DDoS FlowSpec plugin.
plugins/ddos/flowtriq/yang
Package yang embeds and registers the ze-ddos-flowtriq-conf YANG configuration schema for the DDoS flowtriq plugin.
Package yang embeds and registers the ze-ddos-flowtriq-conf YANG configuration schema for the DDoS flowtriq plugin.
plugins/ddos/local/cmd/yang
Package yang embeds and registers the ze-ddos-local-cmd YANG command schema for the DDoS local plugin.
Package yang embeds and registers the ze-ddos-local-cmd YANG command schema for the DDoS local plugin.
plugins/ddos/local/yang
Package yang embeds and registers the ze-ddos-local-conf YANG configuration schema for the DDoS local plugin.
Package yang embeds and registers the ze-ddos-local-conf YANG configuration schema for the DDoS local plugin.
plugins/ddos/observe/cmd/yang
Package yang embeds and registers the ze-ddos-cmd YANG command schema for the DDoS observe plugin.
Package yang embeds and registers the ze-ddos-cmd YANG command schema for the DDoS observe plugin.
plugins/ddos/observe/yang
Package yang embeds and registers the ze-ddos-observe-conf YANG configuration schema for the DDoS observe plugin.
Package yang embeds and registers the ze-ddos-observe-conf YANG configuration schema for the DDoS observe plugin.
plugins/debug/cmd
Package cmd registers RPC handlers that report live debug logging state for the debug plugin.
Package cmd registers RPC handlers that report live debug logging state for the debug plugin.
plugins/debug/yang
Package yang embeds and registers the ze-debug-cmd YANG command schema for the debug plugin.
Package yang embeds and registers the ze-debug-cmd YANG command schema for the debug plugin.
plugins/dhcpserver/yang
Package yang embeds and registers the ze-dhcp-server-conf YANG configuration schema for the DHCP server plugin.
Package yang embeds and registers the ze-dhcp-server-conf YANG configuration schema for the DHCP server plugin.
plugins/diag/cmd
Package cmd registers RPC handlers for diagnostic show commands including TCP reachability checks and control-plane packet capture.
Package cmd registers RPC handlers for diagnostic show commands including TCP reachability checks and control-plane packet capture.
plugins/diag/yang
Package yang embeds and registers the ze-diag-cmd YANG command schema for the diag plugin.
Package yang embeds and registers the ze-diag-cmd YANG command schema for the diag plugin.
plugins/env/yang
Package yang embeds and registers the ze-env-cmd YANG command schema for the env plugin.
Package yang embeds and registers the ze-env-cmd YANG command schema for the env plugin.
plugins/exabgp
Design: docs/architecture/core-design.md — external format bridge CLI Detail: main_sdk.go — SDK/TLS connect-back mode for engine-launched bridge
Design: docs/architecture/core-design.md — external format bridge CLI Detail: main_sdk.go — SDK/TLS connect-back mode for engine-launched bridge
plugins/fib/kernel
Design: docs/architecture/core-design.md -- FIB backend abstraction Overview: fibkernel.go -- FIB kernel plugin Related: backend_linux.go -- Linux netlink backend Related: backend_other.go -- noop backend for non-Linux platforms Related: monitor.go -- external route change handling
Design: docs/architecture/core-design.md -- FIB backend abstraction Overview: fibkernel.go -- FIB kernel plugin Related: backend_linux.go -- Linux netlink backend Related: backend_other.go -- noop backend for non-Linux platforms Related: monitor.go -- external route change handling
plugins/fib/kernel/events
Package events defines event constants for the FIB kernel plugin.
Package events defines event constants for the FIB kernel plugin.
plugins/fib/kernel/yang
Package yang embeds and registers the ze-fib-conf YANG configuration schema for the kernel FIB plugin.
Package yang embeds and registers the ze-fib-conf YANG configuration schema for the kernel FIB plugin.
plugins/fib/p4
Design: docs/architecture/core-design.md -- FIB P4 backend Overview: fibp4.go -- FIB P4 plugin
Design: docs/architecture/core-design.md -- FIB P4 backend Overview: fibp4.go -- FIB P4 plugin
plugins/fib/p4/yang
Package yang embeds and registers the ze-fib-p4-conf YANG configuration schema for the P4 FIB plugin.
Package yang embeds and registers the ze-fib-p4-conf YANG configuration schema for the P4 FIB plugin.
plugins/fib/vpp
Design: docs/research/vpp-deployment-reference.md -- VPP FIB route programming Detail: backend.go -- GoVPP backend and mock for testing
Design: docs/research/vpp-deployment-reference.md -- VPP FIB route programming Detail: backend.go -- GoVPP backend and mock for testing
plugins/fib/vpp/yang
Package yang embeds and registers the ze-fib-vpp-conf YANG configuration schema for the VPP FIB plugin.
Package yang embeds and registers the ze-fib-vpp-conf YANG configuration schema for the VPP FIB plugin.
plugins/firewall/nft
Package firewallnft implements the firewall backend using google/nftables.
Package firewallnft implements the firewall backend using google/nftables.
plugins/firewall/vpp
Package firewallvpp implements the ze firewall Backend interface on top of VPP's ACL plugin binary API via GoVPP.
Package firewallvpp implements the ze firewall Backend interface on top of VPP's ACL plugin binary API via GoVPP.
plugins/flowexport-cmd/yang
Package yang embeds and registers the ze-flowexport-cmd YANG command schema for the flow export plugin.
Package yang embeds and registers the ze-flowexport-cmd YANG command schema for the flow export plugin.
plugins/flowexport/conntrack
Package conntrack reads Linux conntrack flow entries via netlink and tracks per-flow byte and packet deltas for flow export.
Package conntrack reads Linux conntrack flow entries via netlink and tracks per-flow byte and packet deltas for flow export.
plugins/flowexport/enrich
Package enrich annotates exported flows with BGP-derived AS, next-hop, and local-pref metadata via longest-prefix-match lookups.
Package enrich annotates exported flows with BGP-derived AS, next-hop, and local-pref metadata via longest-prefix-match lookups.
plugins/flowexport/ipfix
Package ipfix encodes flow and interface-counter records into IPFIX export messages.
Package ipfix encodes flow and interface-counter records into IPFIX export messages.
plugins/flowexport/netflow9
Package netflow9 encodes flow and interface-counter records into NetFlow v9 export packets.
Package netflow9 encodes flow and interface-counter records into NetFlow v9 export packets.
plugins/flowexport/sampling
Package sampling captures sampled packets using the Linux tc sample action and the psample generic netlink reader.
Package sampling captures sampled packets using the Linux tc sample action and the psample generic netlink reader.
plugins/flowexport/sflow
Package sflow encodes interface counters and sampled packets into sFlow v5 export datagrams.
Package sflow encodes interface counters and sampled packets into sFlow v5 export datagrams.
plugins/flowexport/yang
Package yang embeds and registers the flow export configuration YANG schema module.
Package yang embeds and registers the flow export configuration YANG schema module.
plugins/flowspec-firewall
Design: docs/architecture/core-design.md -- FlowSpec-to-firewall bridge engine Related: register.go -- plugin registration that invokes runEngine
Design: docs/architecture/core-design.md -- FlowSpec-to-firewall bridge engine Related: register.go -- plugin registration that invokes runEngine
plugins/geodns
Design: docs/architecture/dns/geodns.md -- geodns listen-port bind-capability doctor check Related: register.go -- DoctorChecks registration (geodns-listen-capability)
Design: docs/architecture/dns/geodns.md -- geodns listen-port bind-capability doctor check Related: register.go -- DoctorChecks registration (geodns-listen-capability)
plugins/geodns/yang
Package yang embeds and registers the GeoDNS command and configuration YANG schema modules.
Package yang embeds and registers the GeoDNS command and configuration YANG schema modules.
plugins/gnmi-cmd/yang
Package yang embeds and registers the gNMI command YANG schema module.
Package yang embeds and registers the gNMI command YANG schema module.
plugins/host
Package host is the offline fallback for `show host [section]`.
Package host is the offline fallback for `show host [section]`.
plugins/host-cmd/cmd
Package cmd registers the host inventory, kernel-log, and file-descriptor command handlers.
Package cmd registers the host inventory, kernel-log, and file-descriptor command handlers.
plugins/host-cmd/yang
Package yang embeds and registers the host command YANG schema modules.
Package yang embeds and registers the host command YANG schema modules.
plugins/iface/dhcp
Package ifacedhcp implements DHCPv4/DHCPv6 client functionality as a separate plugin.
Package ifacedhcp implements DHCPv4/DHCPv6 client functionality as a separate plugin.
plugins/iface/netlink
Package ifacenetlink implements the netlink-based interface management backend for Linux.
Package ifacenetlink implements the netlink-based interface management backend for Linux.
plugins/iface/ra
Design: docs/features/interfaces.md -- Router Advertisement sender for a LAN unit Related: register.go -- the factory that binds the counters declared here
Design: docs/features/interfaces.md -- Router Advertisement sender for a LAN unit Related: register.go -- the factory that binds the counters declared here
plugins/iface/vpp
Package ifacevpp implements the iface backend for VPP via the GoVPP binary API.
Package ifacevpp implements the iface backend for VPP via the GoVPP binary API.
plugins/iface/vpp/yang
Package yang embeds and registers the VPP interface command YANG schema module.
Package yang embeds and registers the VPP interface command YANG schema module.
plugins/imageserver/yang
Package yang embeds and registers the image server configuration YANG schema module.
Package yang embeds and registers the image server configuration YANG schema module.
plugins/init
Package init provides the `ze init` command that bootstraps the zefs database with SSH credentials before any other ze command can work.
Package init provides the `ze init` command that bootstraps the zefs database with SSH credentials before any other ze command can work.
plugins/isis
Design: docs/architecture/isis/isis-4-component-config.md -- IS-IS component registration Related: config.go -- typed config resolution Related: server.go -- engine orchestration + PDU dispatcher Related: events.go -- event namespace + typed handles
Design: docs/architecture/isis/isis-4-component-config.md -- IS-IS component registration Related: config.go -- typed config resolution Related: server.go -- engine orchestration + PDU dispatcher Related: events.go -- event namespace + typed handles
plugins/isis/adjacency
Package adjacency implements the IS-IS adjacency finite state machine and per-circuit neighbor table.
Package adjacency implements the IS-IS adjacency finite state machine and per-circuit neighbor table.
plugins/isis/circuit
Package circuit implements the per-interface IS-IS circuit runtime that drives Hello exchange and the adjacency table.
Package circuit implements the per-interface IS-IS circuit runtime that drives Hello exchange and the adjacency table.
plugins/isis/lsdb
Package lsdb implements the per-level IS-IS link-state database store.
Package lsdb implements the per-level IS-IS link-state database store.
plugins/isis/packet
Package packet is the IS-IS PDU and TLV wire codec: the protocol's serialization boundary.
Package packet is the IS-IS PDU and TLV wire codec: the protocol's serialization boundary.
plugins/isis/redistribute/events
Design: docs/architecture/isis/isis-11-redistribution.md -- IS-IS redistevents producer wiring.
Design: docs/architecture/isis/isis-11-redistribution.md -- IS-IS redistevents producer wiring.
plugins/isis/spf
Package spf computes IS-IS shortest paths via Dijkstra over the LSDB graph and installs the resulting routes.
Package spf computes IS-IS shortest paths via Dijkstra over the LSDB graph and installs the resulting routes.
plugins/isis/transport
Package transport implements the raw L2 transport that carries IS-IS PDUs between the socket and the engine.
Package transport implements the raw L2 transport that carries IS-IS PDUs between the socket and the engine.
plugins/isis/types
Package types defines the pure IS-IS domain value types: SystemID, SourceID, LSPID, NET, AreaID, the two wide metric widths (Metric and PrefixMetric), SequenceNumber, RemainingLifetime and HoldingTime.
Package types defines the pure IS-IS domain value types: SystemID, SourceID, LSPID, NET, AreaID, the two wide metric widths (Metric and PrefixMetric), SequenceNumber, RemainingLifetime and HoldingTime.
plugins/isis/yang
Package yang embeds and registers the IS-IS command and configuration YANG schema modules.
Package yang embeds and registers the IS-IS command and configuration YANG schema modules.
plugins/kernel/events
Package kernelevents registers the kernel redistribution protocol and its route-change events.
Package kernelevents registers the kernel redistribution protocol and its route-change events.
plugins/kernel/yang
Package yang embeds and registers the kernel plugin's YANG configuration schema.
Package yang embeds and registers the kernel plugin's YANG configuration schema.
plugins/ldp
RFC: rfc/short/rfc5036.md -- Section 3.5.2 Hello Hold Time defaults Design: docs/architecture/ldp/mpls-ldp.md -- LDP discovery (UDP hello) Related: wire.go -- HelloMessage encoding/decoding
RFC: rfc/short/rfc5036.md -- Section 3.5.2 Hello Hold Time defaults Design: docs/architecture/ldp/mpls-ldp.md -- LDP discovery (UDP hello) Related: wire.go -- HelloMessage encoding/decoding
plugins/ldp/yang
Package yang embeds and registers the LDP plugin's YANG command and configuration schemas.
Package yang embeds and registers the LDP plugin's YANG command and configuration schemas.
plugins/local
Package local implements the ze install and uninstall local-mode commands that copy the binary and scaffold its config directory.
Package local implements the ze install and uninstall local-mode commands that copy the binary and scaffold its config directory.
plugins/log/cmd
Package cmd implements the log plugin's command handlers for listing, setting, and reading runtime log levels.
Package cmd implements the log plugin's command handlers for listing, setting, and reading runtime log levels.
plugins/log/yang
Package yang embeds and registers the log plugin's YANG command schema.
Package yang embeds and registers the log plugin's YANG command schema.
plugins/memlock
Design: docs/architecture/plugin/plugin-system.md -- plugin registration Detail: memlock_linux.go -- the init() that takes the lock Detail: register.go -- registration, the engine run, and the doctor check
Design: docs/architecture/plugin/plugin-system.md -- plugin registration Detail: memlock_linux.go -- the init() that takes the lock Detail: register.go -- registration, the engine run, and the doctor check
plugins/meta/cmd
Package cmd implements the meta plugin's command discovery, help, event-monitor, and plugin-configuration handlers.
Package cmd implements the meta plugin's command discovery, help, event-monitor, and plugin-configuration handlers.
plugins/meta/yang
Package yang embeds and registers the command-meta plugin's YANG API, command, and monitor schemas.
Package yang embeds and registers the command-meta plugin's YANG API, command, and monitor schemas.
plugins/mpls-cmd/yang
Package yang embeds and registers the MPLS command plugin's YANG schema.
Package yang embeds and registers the MPLS command plugin's YANG schema.
plugins/mrt/yang
Package yang embeds and registers the MRT plugin's YANG configuration schema.
Package yang embeds and registers the MRT plugin's YANG configuration schema.
plugins/ntp
Package ntp implements a lightweight NTP client plugin for ze.
Package ntp implements a lightweight NTP client plugin for ze.
plugins/ntp/events
Package events defines event constants for the "system" event namespace.
Package events defines event constants for the "system" event namespace.
plugins/ntp/yang
Package yang embeds and registers the NTP plugin's YANG command and configuration schemas.
Package yang embeds and registers the NTP plugin's YANG command and configuration schemas.
plugins/ospf
Design: docs/architecture/ospf/ospf-4-component-config.md -- per-area state scaffolding Related: config.go -- areaConfig and interfaceConfig inputs
Design: docs/architecture/ospf/ospf-4-component-config.md -- per-area state scaffolding Related: config.go -- areaConfig and interfaceConfig inputs
plugins/ospf/iface
Package iface implements the per-interface OSPF runtime, including the interface state machine, Hello exchange, DR election, and neighbor management.
Package iface implements the per-interface OSPF runtime, including the interface state machine, Hello exchange, DR election, and neighbor management.
plugins/ospf/lsdb
Package lsdb implements the per-area OSPF link-state database with LSA flooding, origination, and aging.
Package lsdb implements the per-area OSPF link-state database with LSA flooding, origination, and aging.
plugins/ospf/neighbor
Package neighbor implements the OSPFv2 Neighbor State Machine and database-exchange scaffolding.
Package neighbor implements the OSPFv2 Neighbor State Machine and database-exchange scaffolding.
plugins/ospf/packet
Package packet is the OSPFv2 packet and LSA wire codec: the protocol's serialization boundary.
Package packet is the OSPFv2 packet and LSA wire codec: the protocol's serialization boundary.
plugins/ospf/redistribute/events
Design: docs/architecture/ospf/ospf-10-as-external-asbr.md -- OSPF redistevents producer wiring.
Design: docs/architecture/ospf/ospf-10-as-external-asbr.md -- OSPF redistevents producer wiring.
plugins/ospf/spf
Package spf implements OSPF shortest-path-first computation, route selection, and loop-free-alternate backup calculation.
Package spf implements OSPF shortest-path-first computation, route selection, and loop-free-alternate backup calculation.
plugins/ospf/sr
Package sr holds the address-family-neutral control plane for OSPF Segment Routing (RFC 8665 for the IPv4 family, RFC 8666 for the IPv6 family).
Package sr holds the address-family-neutral control plane for OSPF Segment Routing (RFC 8665 for the IPv4 family, RFC 8666 for the IPv6 family).
plugins/ospf/transport
Package transport is the OSPFv2 raw IPv4 transport byte pipe.
Package transport is the OSPFv2 raw IPv4 transport byte pipe.
plugins/ospf/types
Package types contains pure OSPFv2 value types and checksum algorithms.
Package types contains pure OSPFv2 value types and checksum algorithms.
plugins/ospf/v3/packet
Package packet is the OSPFv3 (RFC 5340) packet and LSA wire codec: the protocol's serialization boundary.
Package packet is the OSPFv3 (RFC 5340) packet and LSA wire codec: the protocol's serialization boundary.
plugins/ospf/v3/transport
Package transport implements the OSPFv3 raw IPv6 socket transport that sends and receives OSPF datagrams per interface.
Package transport implements the OSPFv3 raw IPv6 socket transport that sends and receives OSPF datagrams per interface.
plugins/ospf/v3/types
Package types holds the OSPFv3 (RFC 5340) leaf value types shared by every later OSPFv3 child spec: Router ID, Area ID, Instance ID, Interface ID, Link State ID, the 16-bit LS Type with embedded flooding scope, the comparable LSA key, sequence numbers, ages, the 24-bit Options field, IPv6 prefix length/options, and metrics.
Package types holds the OSPFv3 (RFC 5340) leaf value types shared by every later OSPFv3 child spec: Router ID, Area ID, Instance ID, Interface ID, Link State ID, the 16-bit LS Type with embedded flooding scope, the comparable LSA key, sequence numbers, ages, the 24-bit Options field, IPv6 prefix length/options, and metrics.
plugins/ospf/wire
Package wire defines the address-family-neutral RawPacket handed from an OSPF transport up to the shared engine.
Package wire defines the address-family-neutral RawPacket handed from an OSPF transport up to the shared engine.
plugins/ospf/yang
Package yang embeds and registers the OSPF plugin's YANG command and configuration schemas.
Package yang embeds and registers the OSPF plugin's YANG command and configuration schemas.
plugins/passwd
Package passwd implements the `ze passwd` subcommand.
Package passwd implements the `ze passwd` subcommand.
plugins/ping-cmd/yang
Package yang embeds and registers the ping command plugin's YANG schema.
Package yang embeds and registers the ping command plugin's YANG schema.
plugins/pki-cmd/yang
Package yang embeds and registers the PKI command plugin's YANG schema.
Package yang embeds and registers the PKI command plugin's YANG schema.
plugins/policyroute/yang
Package yang embeds and registers the policy-route plugin's YANG command and configuration schemas.
Package yang embeds and registers the policy-route plugin's YANG command and configuration schemas.
plugins/provision
Package provision implements the ze provision command that runs DHCP, PXE, and TFTP servers for remote device installation.
Package provision implements the ze provision command that runs DHCP, PXE, and TFTP servers for remote device installation.
plugins/resolve-cmd/yang
Package yang embeds and registers the resolve command plugin's YANG schema.
Package yang embeds and registers the resolve command plugin's YANG schema.
plugins/routingtable/yang
Package yang embeds and registers the routing-table plugin's YANG configuration schema.
Package yang embeds and registers the routing-table plugin's YANG configuration schema.
plugins/rsvpte
Design: docs/architecture/rsvpte/mpls-rsvp-te.md -- RSVP-TE bandwidth admission control Related: wire.go -- FlowSpec carries bandwidth parameters Related: fsm.go -- LSP tracks bandwidth reservation
Design: docs/architecture/rsvpte/mpls-rsvp-te.md -- RSVP-TE bandwidth admission control Related: wire.go -- FlowSpec carries bandwidth parameters Related: fsm.go -- LSP tracks bandwidth reservation
plugins/rsvpte/yang
Package yang embeds and registers the RSVP-TE plugin's YANG schema modules.
Package yang embeds and registers the RSVP-TE plugin's YANG schema modules.
plugins/signal
Design: docs/architecture/behavior/signals.md — signal handling CLI
Design: docs/architecture/behavior/signals.md — signal handling CLI
plugins/static/events
Package staticevents registers the static route protocol's redistribution event types.
Package staticevents registers the static route protocol's redistribution event types.
plugins/static/vpp
Package staticvpp programs static routes into the VPP FIB via GoVPP.
Package staticvpp programs static routes into the VPP FIB via GoVPP.
plugins/static/yang
Package yang embeds and registers the static route plugin's YANG schema modules.
Package yang embeds and registers the static route plugin's YANG schema modules.
plugins/storage-cmd/yang
Package yang embeds and registers the storage command plugin's YANG schema module.
Package yang embeds and registers the storage command plugin's YANG schema module.
plugins/systemd
Package systemd installs and uninstalls ze as a systemd service.
Package systemd installs and uninstalls ze as a systemd service.
plugins/tftpserver/yang
Package yang embeds and registers the TFTP server plugin's YANG schema module.
Package yang embeds and registers the TFTP server plugin's YANG schema module.
plugins/traceroute-cmd/yang
Package yang embeds and registers the traceroute command plugin's YANG schema module.
Package yang embeds and registers the traceroute command plugin's YANG schema module.
plugins/traffic-cmd/yang
Package yang embeds and registers the traffic command plugin's YANG schema module.
Package yang embeds and registers the traffic command plugin's YANG schema module.
plugins/traffic/netlink
Package trafficnetlink implements the traffic control backend using vishvananda/netlink.
Package trafficnetlink implements the traffic control backend using vishvananda/netlink.
plugins/traffic/vpp
Package trafficvpp implements the ze traffic-control Backend interface on top of VPP's binary API via GoVPP.
Package trafficvpp implements the ze traffic-control Backend interface on top of VPP's binary API via GoVPP.
plugins/trafficusage
Package trafficusage implements the `traffic-usage` system plugin: eBPF TCX per-(port,protocol) and (opt-in) per-IP byte accounting on operator-selected interfaces, exported as Prometheus metrics and viewable via `show traffic-usage`.
Package trafficusage implements the `traffic-usage` system plugin: eBPF TCX per-(port,protocol) and (opt-in) per-IP byte accounting on operator-selected interfaces, exported as Prometheus metrics and viewable via `show traffic-usage`.
plugins/trafficusage/yang
Package yang embeds and registers the traffic-usage plugin's YANG schema modules.
Package yang embeds and registers the traffic-usage plugin's YANG schema modules.
plugins/update-cmd/cmd
Package cmd handles the system update and firmware show/update RPC commands.
Package cmd handles the system update and firmware show/update RPC commands.
plugins/update-cmd/yang
Package yang embeds and registers the update command plugin's YANG schema modules.
Package yang embeds and registers the update command plugin's YANG schema modules.
plugins/vrrp
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- Accept_Mode dataplane enforcement RFC: rfc/short/rfc9568.md (VRRPv3) -- Section 6.1 Accept_Mode, Section 6.4.3 Active Related: instance.go -- doInstallVIPs and doRemoveVIPs own this filter's lifetime
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- Accept_Mode dataplane enforcement RFC: rfc/short/rfc9568.md (VRRPv3) -- Section 6.1 Accept_Mode, Section 6.4.3 Active Related: instance.go -- doInstallVIPs and doRemoveVIPs own this filter's lifetime
plugins/vrrp/fsm
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- VRRP FSM output actions (closed set) RFC: rfc/short/rfc9568.md (VRRPv3) and rfc/short/rfc3768.md (VRRPv2)
Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- VRRP FSM output actions (closed set) RFC: rfc/short/rfc9568.md (VRRPv3) and rfc/short/rfc3768.md (VRRPv2)
plugins/vrrp/packet
RFC: rfc/short/rfc9568.md -- Section 5.2.8 (v3 checksum, IPv4 message-only) + rx RFC 5798 dual-accept RFC: rfc/short/rfc3768.md -- Section 5.3.7 (v2 checksum, no pseudo-header) Design: (RFC 8200 Section 8.1 -- IPv6 upper-layer checksum pseudo-header)
RFC: rfc/short/rfc9568.md -- Section 5.2.8 (v3 checksum, IPv4 message-only) + rx RFC 5798 dual-accept RFC: rfc/short/rfc3768.md -- Section 5.3.7 (v2 checksum, no pseudo-header) Design: (RFC 8200 Section 8.1 -- IPv6 upper-layer checksum pseudo-header)
test/ci
Design: docs/architecture/testing/ci-format.md — CI test format parsing
Design: docs/architecture/testing/ci-format.md — CI test format parsing
test/cli
Package cli registers the ze-test command's functional-test and mock-server handlers.
Package cli registers the ze-test command's functional-test and mock-server handlers.
test/decode
Design: docs/architecture/testing/ci-format.md — decode test helpers
Design: docs/architecture/testing/ci-format.md — decode test helpers
test/failsyscall
Package failsyscall fails one named syscall for one launched process, through a seccomp filter rather than a tracer.
Package failsyscall fails one named syscall for one launched process, through a seccomp filter rather than a tracer.
test/fixture
Package fixture provides compiled helper processes for .ci scenarios.
Package fixture provides compiled helper processes for .ci scenarios.
test/golden
Package golden compares captured bytes against fixtures committed beside the package under test.
Package golden compares captured bytes against fixtures committed beside the package under test.
test/markupcheck
Package markupcheck holds the static checks over a package that renders markup.
Package markupcheck holds the static checks over a package that renders markup.
test/mock/cymru
Package cymru implements a deterministic Team Cymru DNS mock server for tests.
Package cymru implements a deterministic Team Cymru DNS mock server for tests.
test/mock/dns
Package dns implements a deterministic DNS mock server for functional tests.
Package dns implements a deterministic DNS mock server for functional tests.
test/mock/irr
Package irr implements a deterministic IRR whois mock server for tests.
Package irr implements a deterministic IRR whois mock server for tests.
test/mock/peeringdb
Package peeringdb implements a deterministic PeeringDB HTTP mock server for tests.
Package peeringdb implements a deterministic PeeringDB HTTP mock server for tests.
test/mock/radius
Package radius implements a mock RADIUS server (RFC 2865) for AAA testing.
Package radius implements a mock RADIUS server (RFC 2865) for AAA testing.
test/mock/rpki
Package rpki implements a deterministic RPKI/RTR mock server for tests.
Package rpki implements a deterministic RPKI/RTR mock server for tests.
test/mock/rtr
Package rtr implements a mock RTR cache server for RPKI testing.
Package rtr implements a mock RTR cache server for RPKI testing.
test/mock/tacacs
Package tacacs implements a mock TACACS+ server for AAA testing.
Package tacacs implements a mock TACACS+ server for AAA testing.
test/peer
Design: docs/architecture/testing/ci-format.md — test BGP peer Detail: message.go — BGP message types, wire helpers, and Message struct Detail: checker.go — message validation against expected patterns Detail: expect.go — .ci file loading and option parsing RFC: rfc/short/rfc4724.md — the Graceful Restart capability a .ci declares here RFC: rfc/short/rfc9494.md — the Long-Lived Graceful Restart stale time RFC: rfc/short/draft-abraitis-idr-addpath-paths-limit.md — the PATHS-LIMIT entry
Design: docs/architecture/testing/ci-format.md — test BGP peer Detail: message.go — BGP message types, wire helpers, and Message struct Detail: checker.go — message validation against expected patterns Detail: expect.go — .ci file loading and option parsing RFC: rfc/short/rfc4724.md — the Graceful Restart capability a .ci declares here RFC: rfc/short/rfc9494.md — the Long-Lived Graceful Restart stale time RFC: rfc/short/draft-abraitis-idr-addpath-paths-limit.md — the PATHS-LIMIT entry
test/plugins/fakeas112
Design: docs/architecture/core-design.md -- in-process test producer for the AS112 redistribute source
Design: docs/architecture/core-design.md -- in-process test producer for the AS112 redistribute source
test/plugins/fakeas112/yang
Package yang provides the YANG schema for the fakeas112 test plugin.
Package yang provides the YANG schema for the fakeas112 test plugin.
test/plugins/fakeddos
Package fakeddos is a test-only plugin that drives the ddos-local responder end-to-end against a REAL nft backend.
Package fakeddos is a test-only plugin that drives the ddos-local responder end-to-end against a REAL nft backend.
test/plugins/fakeddos/yang
Package yang provides the YANG schema for the fakeddos test plugin.
Package yang provides the YANG schema for the fakeddos test plugin.
test/plugins/fakel2tp
Design: docs/architecture/core-design.md -- in-process test producer for L2TP route-change events
Design: docs/architecture/core-design.md -- in-process test producer for L2TP route-change events
test/plugins/fakel2tp/yang
Package yang provides the YANG schema for the fakel2tp test plugin.
Package yang provides the YANG schema for the fakel2tp test plugin.
test/plugins/fakeredist/yang
Package yang provides the YANG schema for the fakeredist test plugin.
Package yang provides the YANG schema for the fakeredist test plugin.
test/runner
Design: docs/architecture/testing/ci-format.md — test runner framework
Design: docs/architecture/testing/ci-format.md — test runner framework
test/sessionpath
Package sessionpath answers one question: where do THIS AI session's build and test artifacts go?
Package sessionpath answers one question: where do THIS AI session's build and test artifacts go?
test/sim
Package sim provides fake implementations of clock and network interfaces for use in unit tests.
Package sim provides fake implementations of clock and network interfaces for use in unit tests.
test/syslog
Design: docs/architecture/testing/ci-format.md — syslog test helpers
Design: docs/architecture/testing/ci-format.md — syslog test helpers
test/templcheck
Package templcheck reads the components templ generates and requires every parameter to be a type the compiler checks a field name against.
Package templcheck reads the components templ generates and requires every parameter to be a type the compiler checks a field name against.
test/testcond
Package testcond provides conditional test-skipping helpers.
Package testcond provides conditional test-skipping helpers.
test/tmpfs
Design: docs/architecture/system-architecture.md — temporary filesystem management
Design: docs/architecture/system-architecture.md — temporary filesystem management
test/trace
Package trace formats per-step functional-test trace output.
Package trace formats per-step functional-test trace output.
thirdparty/fat
Package fat implements writing FAT16B file system images, which is useful when generating images for embedded devices such as the Raspberry Pi.
Package fat implements writing FAT16B file system images, which is useful when generating images for embedded devices such as the Raspberry Pi.
pkg
fleet
Design: docs/architecture/fleet-config.md — managed config shared types
Design: docs/architecture/fleet-config.md — managed config shared types
plugin
Design: docs/architecture/api/process-protocol.md — plugin package
Design: docs/architecture/api/process-protocol.md — plugin package
plugin/rpc
Design: docs/architecture/api/ipc_protocol.md — plugin RPC connection Related: message.go — Request type, line parsing/formatting Related: framing.go — newline-delimited FrameReader/FrameWriter Related: mux.go — MuxConn multiplexer (consumes readFrame) Related: bridge.go — DirectBridge for internal plugins
Design: docs/architecture/api/ipc_protocol.md — plugin RPC connection Related: message.go — Request type, line parsing/formatting Related: framing.go — newline-delimited FrameReader/FrameWriter Related: mux.go — MuxConn multiplexer (consumes readFrame) Related: bridge.go — DirectBridge for internal plugins
plugin/sdk
Design: docs/architecture/api/process-protocol.md — plugin SDK Detail: sdk_callbacks.go — On*/Set* callback registration methods Detail: sdk_engine.go — plugin-to-engine RPC methods Detail: sdk_dispatch.go — event loop and callback dispatch Detail: sdk_types.go — re-exported RPC type aliases Detail: union.go — event stream correlation Related: ../../../internal/component/plugin/ipc/tls.go — TLS transport and auth (SendAuth, PluginAcceptor) Related: ../../../internal/component/plugin/process/process.go — engine-side process lifecycle (startExternal forks + WaitForPlugin)
Design: docs/architecture/api/process-protocol.md — plugin SDK Detail: sdk_callbacks.go — On*/Set* callback registration methods Detail: sdk_engine.go — plugin-to-engine RPC methods Detail: sdk_dispatch.go — event loop and callback dispatch Detail: sdk_types.go — re-exported RPC type aliases Detail: union.go — event stream correlation Related: ../../../internal/component/plugin/ipc/tls.go — TLS transport and auth (SendAuth, PluginAcceptor) Related: ../../../internal/component/plugin/process/process.go — engine-side process lifecycle (startExternal forks + WaitForPlugin)
ze
Package ze defines the public interfaces for the Ze engine, plugins, subsystems, config, and event bus.
Package ze defines the public interfaces for the Ze engine, plugins, subsystems, config, and event bus.
zefs
Package zefs provides a netcapstring-framed blob store with hierarchical keys.
Package zefs provides a netcapstring-framed blob store with hierarchical keys.
tools
freertr-entrypoint command
Package main starts freeRtr and its raw Ethernet bridge inside the interop image.
Package main starts freeRtr and its raw Ethernet bridge inside the interop image.
kernel-builder command

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL