Stratum v1.0.0-rc.26

Release candidate. Continues the Stratum 1.0 preview — recommended for evaluation and staging. Hold production rollouts for the stable v1.0.0 release.

Highlights

Prometheus metrics. Each node now exposes a Prometheus-compatible scrape at GET /api/v1/metrics (authenticated with your management API token), covering interfaces, firewall, datapath, load balancer, BGP, and cluster counters — point your existing monitoring at it directly.

Event webhooks + bulk API. Subscribe an HTTPS endpoint to node events and receive HMAC-SHA256-signed, out-of-band deliveries that never block the datapath. Provision faster with new bulk endpoints for creating firewall rules and DNS records in one call.

RPKI route-origin validation (BGP). Guard your BGP sessions against route hijacks: validate received routes against an RPKI-to-Router cache (RFC 6811/8210). Off by default and fail-safe — a cache outage can never reject a route — with a mark-only or reject-invalid policy. Manage it with bgp rpki.

Firewall: time-based rules + connection limits. Give any firewall rule a schedule (days + UTC window) so it activates only when you want, and cap concurrent connections per source IP with an automatic, self-expiring cooldown. Manage with firewall schedule and firewall connlimit.

Layer-7 load balancer + TLS termination. A new userspace HTTP/HTTPS load balancer complements the in-kernel L4 balancer: host/path routing, round-robin and least-connections, active health checks, and TLS termination (operator or node-managed certificates). Manage with l7lb.

Feedback on this release candidate is welcome — report issues through your account before the stable v1.0.0 cut.