v1.0.0-beta.4

Fourth beta. Multi-host scale-out, routing, intrusion detection, and IPv6 NAT.

Added

• Multi-host clustering: Raft-backed control-plane membership with automatic leader election.
• BGP route reflection between cluster members, so the fleet converges without a full peer mesh.
• Intrusion detection: opt-in per-source scan/flood counters on ingress, surfaced to the control plane.
• NAT66 on the gateway: IPv6 SNAT/masquerade + DNAT, sharing the dual-stack NAT logic with IPv4.

Fixed

• Clustering: a node rejoining after a network partition no longer double-applies queued config deltas.
• Tail-call split of the gateway program to stay clear of the BPF verifier instruction ceiling.

Performance

• Faster Raft snapshot restore on cold start for large interface tables.