Week of 2026-06-25
Shipped across security, the appliance, routing, and observability this week.
Read the updateZe weekly updates.
29 weeks of shipped work, in Zeledon's voice, mined from git history. New weeks are also posted to Discord's ze-news. Subscribe by RSS, or scan the terser changelog.
Week of 2026-06-22
Focused on trimming attack surface and rounding out OSPF.
Read the updateWeek of 2026-06-15
Native IS-IS landed, MPLS gained fast reroute, and firewall rules can now pull straight from the IRR.
Read the updateWeek of 2026-06-08
A week of operator-facing polish: a real Web Workbench UI, SR-Policy and IRR-based filtering in BGP, per-subscriber CoS, and a talk at LINX.
Read the updateWeek of 2026-06-01
The CLI grammar rollout finished, MRT tooling arrived, and a handful of quiet-but-important reliability bugs got fixed.
Read the updateWeek of 2026-05-25
MPLS grew a full label-switching stack, flow export and gNMI landed, and config commits became transactional.
Read the updateWeek of 2026-05-18
A full native IPsec/IKEv2 VPN stack, a route server for IXPs, and a big allocation-hunting pass across the BGP hot path.
Read the updateWeek of 2026-05-11
CPE features round out, interface config gets restructured, and RPKI gains ASPA path verification.
Read the updateWeek of 2026-05-04
Two major subsystems landed this week: a fleet management tool for appliances, and a PPPoE access concentrator alongside VPP-backed NAT and ACLs.
Read the updateWeek of 2026-04-27
Interface configuration now rolls back cleanly on failure, the web UI got a dedicated CLI page, and traffic-control state survives more edge cases.
Read the updateWeek of 2026-04-20
Security hardening, a new diagnostics subsystem, and a redesigned operator web UI headline this week.
Read the updateWeek of 2026-04-13
A complete L2TP/PPP access stack, TACACS+ and pluggable AAA, a VPP dataplane, and new nftables/tc firewall backends.
Read the updateWeek of 2026-04-06
A full BFD engine, BGP route reflection and policy filters, a real REST/gRPC config editor, WireGuard support, and a talk at Net Manchester.
Read the updateWeek of 2026-03-30
A full interface management subsystem, offline DNS/RIR resolution tooling, config-driven plugin loading, BGP healthcheck and long-lived graceful restart support, and a Looking Glass overhaul.
Read the updateWeek of 2026-03-23
A full web interface, fleet management, redistribution filtering, and a stack of routing-protocol correctness work all landed together.
Read the updateWeek of 2026-03-16
RPKI route origin validation landed in full, alongside a wave of BGP RFC compliance work, CLI polish, and daemon security hardening.
Read the updateWeek of 2026-03-09
A big week for access, config safety, and BGP session security.
Read the updateWeek of 2026-03-02
Real best-path selection landed, along with outbound route tracking and a round of CLI/editor polish.
Read the updateWeek of 2026-02-23
A route-server-focused week: reliability fixes for BGP Route Server under load, a new external plugin protocol option, and systematic config validation.
Read the updateWeek of 2026-02-16
A hard round of route reflector hardening, a live web dashboard for the chaos tool, and a batch of BGP protocol and config improvements.
Read the updateWeek of 2026-02-09
A new chaos-testing tool, matured config reload, RFC 7606 enforcement, and a hot-path allocation cleanup.
Read the updateWeek of 2026-02-02
Mostly spent on the config editor, a new capability, and a round of decode/RIB bug fixes.
Read the updateWeek of 2026-01-26
Config work, the ExaBGP migration path, and correctness fixes across the wire.
Read the updateWeek of 2026-01-19
A big architecture week: Ze split into a hub process and a BGP child process, gained live config reload, and got a documented plugin SDK.
Read the updateWeek of 2026-01-12
A week focused on Graceful Restart, ExaBGP migration tooling, and logging.
Read the updateWeek of 2026-01-05
This week rounded out route-refresh, ADD-PATH and VPN/labeled-unicast support in the plugin API, alongside a batch of BGP correctness fixes.
Read the updateWeek of 2025-12-29
Route-family coverage rounded out (labeled-unicast, MPLS VPN, MUP, route reflection), a batch of protocol-correctness fixes, and a security-relevant change to how Ze listens for BGP sessions.
Read the updateWeek of 2025-12-22
Work on the BGP engine itself: route encoding correctness, session robustness, and a first real API surface for driving peers programmatically.
Read the updateWeek of 2025-12-15
The first tracked week of development on Ze. In seven days the BGP engine went from nothing to a config-driven daemon that speaks the wire protocol, holds a RIB, and tests itself against ExaBGP.
Read the update