v034FinishIfMissing handles the type-detected tables when they don't exist at all: either a previous run crashed between DROP and RENAME (finish the r

validateNetworksNormalized rejects a networks list that isn't already the minimal, masked, deduplicated, fully-merged form store.AggregateNetworks wou

validateNonEmptySecret rejects an empty value for the admin_password/ session_secret settings. Their underlying Setting has no validate hook of its ow

validatePeerUniqueness validates a user's BGP peer configuration against existing peers. skipUserID is the user's own ID (0 for new users). Step A: Sa

Accept handles a passive BGP connection. Reads the OPEN, validates, then delegates to AcceptWithOpen.

AnnounceRoutes stores routes and triggers an update if the session is established.

AutoCommunity returns the auto-generated community number for a given service position within a group. This is a positional estimate used for UI displ

AutoGroupCommunity returns the auto-generated community number for a category's own group-level entry — the group base itself (e.g. 10000 for the firs

CategoryPrefixCounts returns the number of distinct IPv4 and IPv6 CIDRs per category.

Configure configures the default logger based on configuration

Helper functions for common log operations

DeleteCommunity removes a manual community override. After deletion, GenerateCommunities fills the auto value.

DistFS returns an fs.FS rooted at webgui/dist for use with http.FileServerFS.

The refactored schema stores IP data in binary form: an address is a 4- or 16-byte BLOB (family implicit in the length), a prefix is such a BLOB plus

EncodeAddrString parses and encodes a textual address in one step, for use as a query argument against BLOB address columns.

FeedModes returns the mode IDs associated with a feed.

Get returns an existing circuit breaker or nil.

GetAllSettings returns all rows from app_settings as a map[key]value.

HTTPMiddleware creates middleware that adds request ID and logger to context

HTTPTransientError returns true for HTTP errors that are likely transient.

New creates a new structured error.

PurgeFeedSnapshots deletes feed snapshots older than N days, keeping the newest record just outside the window.

RequestIDFromContext extracts request ID from context

Reset resets the circuit breaker to closed state.

ResetAll resets all circuit breakers.

Status reports whether a BGP speaker is currently running, and the error from the last failed Start/ReloadPeers attempt (nil when running is true).

Validate reports whether v would be accepted by Set, without persisting or mutating anything.

Validate reports whether v would be accepted by Set, without persisting or mutating anything.

ValidateHost checks that a listen-address host doesn't have a port accidentally embedded in it (a common typo: WDBGP_HOST=0.0.0.0:8080 instead of sett

WithdrawRoutes sends withdrawals for the given prefixes over an established session.

acceptLoop accepts incoming connections.

adminRateLimitMiddleware applies rate limiting to admin endpoints

allUserRouteFilters fetches all user route filters in a single query

apiModeCommunitiesPut handles PUT /api/admin/modes/{id}/communities.

apiModeCommunitiesReset handles POST /api/admin/modes/{id}/communities/reset.

apiUserCredentialsDelete handles DELETE /api/admin/users/{id}/credentials. Uses request body {login: "..."} to identify the credential to delete.

apiUserLogin handles POST /api/user/login. Authenticates a user by login credentials and sets a session cookie.

apiUserLogout handles POST /api/user/logout. Clears the user session cookie.

apiUserStatuses handles GET /api/admin/users/statuses. Returns raw BGP peer states keyed by "ip:asn" for the frontend to match against user data.

autoGenerateCommunities fills communities for all existing catalog data.

buildVersion32DB creates a database migrated through version 32 (users still text-based) with representative user data, and returns its path.

clearListenerMD5 removes TCP MD5 keys from the listener socket for the given peers (those with passwords set). Used when peer configs change to remove

clearTCPMD5OnFd removes a TCP MD5 signature for the given address from a socket. On Linux, calling SetsockoptTCPMD5Sig with a zero-length key deletes

contains checks if string contains substring (case-insensitive).

decodeASPath decodes an AS_PATH attribute value. Parses AS_SEQUENCE segments (type 1 = 2-byte, type 2 = 4-byte). Returns the first ASN from the first

decodeHeader parses a BGP message header from wire format.

decodeMpReachNLRI decodes an MP_REACH_NLRI attribute value.

decodeMpUnreachNLRI decodes an MP_UNREACH_NLRI attribute value. Format: AFI(2) + SAFI(1) + NLRI (no next hop, no SNP).

decodeNLRIFromAttr extracts NLRI from path attributes, collecting both legacy UPDATE.NLRI and NLRI from MP_REACH attributes (RFC 4760).

decodeNotification parses a NOTIFICATION message body.

decodeOpen parses an OPEN message body.

decodePathAttribute decodes a single path attribute value by type. Returns (nil, nil) for unknown optional attributes, which are skipped.

decodeUpdate parses an UPDATE message body.