Weekly update

Week of 2026-04-06

A full BFD engine, BGP route reflection and policy filters, a real REST/gRPC config editor, WireGuard support, and a talk at Net Manchester.

← All weekly updates

🔒 BFD liveness detection

A complete BFD implementation shipped end to end:

  • Transport hardening (GTSM, jitter, single-hop and multi-hop per RFC 5881/5883)
  • BGP peer opt-in, so a session can require BFD before it's considered up
  • Authentication (RFC 5880 keyed SHA1/MD5)
  • Echo mode
  • Operator visibility: show commands and Prometheus metrics

🛰️ BGP routing and policy

  • BMP (RFC 7854): wire format, receiver, sender, and Adj-RIB-Out support (RFC 8671)
  • Route reflection (RFC 4456), next-hop control, and multipath
  • A new policy filter chain: prefix-list, AS-path regex, community match, and route attribute modification (local-preference, MED, AS-path prepend)
  • The first piece of a broader policy framework, including loop-detection filtering
  • N-way best-path selection with a rib show best reason trace

🧩 Config editor and API

A real REST and gRPC API landed on top of a shared transport engine, with TLS, a Swagger UI, and a working config editor with per-user auth.

🔌 Interfaces

  • WireGuard support: configure, reconcile, and tear down interfaces
  • GRE, IPIP, SIT, and IP6TNL tunnel interfaces
  • DHCP client wiring for routes, DNS, and NTP discovery on every ethernet interface
  • An NTP client plugin for system clock sync

💿 Appliance

A gokrazy VM appliance build for x86_64.

📣 Presentation: Net Manchester

Presented "Ze: Redoing and improving on ExaBGP" at Net Manchester this week, walking through why Ze exists and what it does differently from ExaBGP. Good session, and a good crowd to have that conversation with in person.