Runs a real VPP (FD.io Vector Packet Processor) daemon in Docker and proves Ze's fib-vpp plugin programs routes from Ze's system RIB directly into VPP's FIB via the GoVPP binary API, that per-interface and system-wide stats come back through the VPP stats segment, and that firewall state applies correctly.

This is the evidence behind the numbers already published in the VPP guide: on the reference hardware IPng Networks runs in production on AS8298, VPP forwards at roughly 35 Mpps on a 4-core Xeon D-1518 -- line rate where the default kernel-FIB path would be dropping packets.